CBS / Paramount+ geoloctaion contact

[George Toma]

We are getting Unauthorized location response headers from Irtdeto on
Paramount Plus content when accessed from some of our subnets (several
subnets within a particular /21).
{"code":130301,"message":"Content is not available in this location."}

Other subnets (different /22s) of ours work fine.

Irdeto says the geolocation acceptance is done by the customer, in this
case Paramount Plus / CBS.

Does anybody have a contact at CBS/Paramount+ with whom I could escalate
these issues?

Thank you.

George Toma
VISNETWORK SRL

Re: Your Input Needed: Can ROA Replace LOA? ? Short Survey (7 mins)

[George Toma]

There is IPV4 exhaustion and many ISPs lease IPV4 space from other
entities, such as brokers and other providers. One of the biggest IPv4
lessors is Cogent. By Cogent having legacy IP space from IANA which it
inherited when it acquired PSInet, Cogent was not required to sign a
contract when RIR ARIN was created.

Therefore, Cogent currently does not have and is not member of ARIN. It
refuses to sign contract with ARIN and currently Cogent is not bound by
this RUD rules and regulations.

There is one downfall to not being ARIN member, Cogent cannot currently
issue ROAs or RPKIs. They only update RIR in ROADB database for the leased
out IP addresses.

By implicitly requiring ROA or RPKI for IPv4 space leased from Covent,
about 70% of small ISPs that were created after IPv4 space exhaustion,
would not be able to route their IPV4 traffic, because currently they lease
IPv4 space from Cogent, and as we mentioned, by Cogent refusing to become
ARIN member, it cannot issue ROAs or RPKIs, and therefore ISPs using this
leased IPV4 space can only use LOAs for validation.

Anyone from Google Global Cache ?

[George Toma]

Hello,

Is there someone on this list from the Google Global Cache program (GGC)
who could contact me off-list? If so I would greatly appreciate that.

I would need a favor to get some information and look up a case because the
responses to the tickets in the ISP portal I am getting are not giving me
any meaningful answers.

Thank you

Regards
George Toma

Re: Spamhaus flags any IP announced by our ASN as a criminal network

[George Toma]

Well that's for end users. The company in question seems to be a Telecom
operator.
The RIPE model is a very strange and confusing one, where ISPs basically
become LIRs and they themselves assign ASNs and IPs, and there are 23000
LIRs in ARIN. Basically any ISP , webhosting company, datacenter or even a
trading company can become a LIR.

It's a very strange model which had just cost me 15 minutes of my time to
just dig into and get some basic understanding of it. I would not put my
hand in the fire that the OP is a LIR or not, but they are an ISP so I
would assume they are LIR and as such can reassign the IPs,a nd if they are
not LIR they can become one.

Anyway many of IP renting companies such as IPXO are RIPE-based, and those
who are ARIN or APNIC based also have subnets from RIPE region. If RIPE was
against subletting, the whole market would not exist with RIPE subnets.

Regards
George



On Tue, Mar 21, 2023 at 2:17 PM  wrote:

> RIPE NCC Requirements: End User Assignment Agreement states:
>
> “End User may not sub-assign resources to third parties.”
>
> Best regards,
> August Yang
>
> On 2023-03-21 13:12, George Toma wrote:
> > I do not believe ASN sharing is illegal or prohibited, it's not
> > prohibited in LACNIC and in APNIC policy I also could not find
> > anything about ASN sharing, only
> >
> > APNIC policy states:
> > "2.3. Autonomous System (AS)An Autonomous System (AS) is a connected
> > group of one or more IP prefixes run by one or more network operators
> > under a single and clearly defined routing policy.
> > 2.3.1. Autonomous System Number (ASN)
> > An Autonomous System Number (ASN) is a unique two- or four-byte number
> > associated with an AS. The ASN is used as an identifier to allow the
> > AS to exchange dynamic routing information with other Autonomous
> > Systems."
> >
> > Nothing prohibiting ASN sharing and 2.3 specifically states "run by
> > one or more network operators... single routing policy"
> >
> > Regards
> > George
> >
> > On Tue, Mar 21, 2023 at 8:00 AM  wrote:
> >
> >> Message: 19
> >> Date: Mon, 20 Mar 2023 16:24:09 -0400
> >> From: ay...@august.tw
> >> To: Collider 
> >> Cc: nanog@nanog.org
> >> Subject: Re: Spamhaus flags any IP announced by our ASN as a
> >> criminal
> >> network
> >> Message-ID: <5b7ed1b1fbff65dfc63d188c2e1f9...@august.tw>
> >> Content-Type: text/plain; charset=UTF-8; format=flowed
> >>
> >> Several Huize ASNs, e.g. AS47158 and AS141011, were revoked due to
> >> RIR
> >> policy violations, which include prohibited sharing of ASNs with
> >> third
> >> parties, IP hijacking, and malicious path prepending.
> >>
> >> Given this history, it is not surprising that Spamhaus would
> >> blacklist
> >> IP addresses associated with their ASN. In my opinion, such action
> >> is
> >> well-justified.
> >>
> >> Best regards,
> >> August Yang
>

Re: Spamhaus flags any IP announced by our ASN as a criminal network

[George Toma]

I do not believe ASN sharing is illegal or prohibited, it's not prohibited
in LACNIC and in APNIC policy I also could not find anything about ASN
sharing, only

APNIC policy states:
"2.3. Autonomous System (AS)
An Autonomous System (AS) is a connected group of one or more IP prefixes
run by one or more network operators under a single and clearly defined
routing policy.
2.3.1. Autonomous System Number (ASN)
An Autonomous System Number (ASN) is a unique two- or four-byte number
associated with an AS. The ASN is used as an identifier to allow the AS to
exchange dynamic routing information with other Autonomous Systems."

Nothing prohibiting ASN sharing and 2.3 specifically states "run by one or
more network operators... single routing policy"


Regards
George


On Tue, Mar 21, 2023 at 8:00 AM  wrote:

> Message: 19
> Date: Mon, 20 Mar 2023 16:24:09 -0400
> From: ay...@august.tw
> To: Collider 
> Cc: nanog@nanog.org
> Subject: Re: Spamhaus flags any IP announced by our ASN as a criminal
> network
> Message-ID: <5b7ed1b1fbff65dfc63d188c2e1f9...@august.tw>
> Content-Type: text/plain; charset=UTF-8; format=flowed
>
> Several Huize ASNs, e.g. AS47158 and AS141011, were revoked due to RIR
> policy violations, which include prohibited sharing of ASNs with third
> parties, IP hijacking, and malicious path prepending.
>
> Given this history, it is not surprising that Spamhaus would blacklist
> IP addresses associated with their ASN. In my opinion, such action is
> well-justified.
>
> Best regards,
> August Yang
>

Fwd: ARIN ORG ID for non-ARIN region company

[George Toma]

This was the reply I got from ARIN to my inquiry:

Hello George


Absolutely out of region organizations can establish an Organization ID and
record with ARIN. They should be asked if it is for reallocation purposes
and once that is answered affirmatively then ARIN will create the record.
At this time ARIN does require a $50 dollar fee as well as the organization
must sign an RSA. Please reach out if you or anyone else has other
questions.


Thanks,

John S.

ARIN CCO

On Thursday, October 13, 2022, Christopher Munz-Michielin via NANOG <
ad...@community.nanog.org> wrote:

> Christopher_Munz-Mic 
> October 13
>
> I would be interested in an answer here as well. We are a company based
> out of Canada and as such have resources allocated by ARIN. We have a
> number of customers who are not within the ARIN region that we would like
> to be able to SWIP IP space to. I would much rather do a re-allocation and
> have our customer maintain their own contact records rather then needing to
> do a simple re-assignment and having to get them to ticket us if email
> addresses or phone numbers change.
>
> Chris
> --
>
> Visit Topic
> 
> or reply to this email to respond.
>
> To unsubscribe from these emails, click here
> 
> .
>
>

ARIN ORG ID for non-ARIN region company

[George Toma]

Hello,

Does anybody know if it possible to create ARIN ORG ID for non-ARIN region
company?

We are LACNIC region based. In LACNIC as well as RIPE regions the RIRs
allow creation of ORG IDs for non-region companies for purposes of IP
reallocations, etc. (e.g. IPv4 lease, etc.).

I have gone to ARIN ORG ID registration page but it says only ARIN region
companies can register in ARIN. We need this for purposes of IPv4
reallocation of our IPv4 leased subnets so also the contact handles are
reallocated to us.

ARIN asks me to pay for creation of ORG ID, but I would lose the payment if
the request is denied.

We do not plan to request any resources, no ASN or IP resources will be
requested through that ORG ID, it's only to allow for full IPv4
reallocation (including contact handles).

Thank you for any input.

Regards,
George

Re: Akamai Contact/Issues

[George Toma]

Jared

I would be also interested in what you said in reply to Dustin Brooks about
Akamai contact as in the past we have experienced similar problem, and
trying to resolve it with the Akamai EdgeScape support we ran into a
stonewall of not being an Akamai client (I understand EdgeScape is the one
which in charge of geolocation DB at Akamai)

Unfortunately your reply was scrubbed by nanog and is blank.

Thanks.
Regards,
George
VSINETWORK SRL
AS 64134

--

Message: 1
Date: Mon, 26 Sep 2022 17:25:03 +
From: Dustin Brooks 
To: "nanog@nanog.org" 
Subject: Akamai Contact/Issues
Message-ID:
<
mwhpr1001mbc62a7d04a1ec9971fe97cb...@mwhpr1001mb.namprd10.prod.outlook.com
>

Content-Type: text/plain; charset="windows-1252"

Anyone having issues with sites hosted by Akamai?  We have several users
within a single /24 that are not able to access several (go.microsoft.com,
www.irs.gov, adobe.com, npr.org, just to name a few).
I?ve tried emailing Akamai but I get a canned response ?you don?t have an
account with us.

Anyone know how to get in touch with them?

--
Dustin Brooks
Sr. Network Engineer

[signature_1951109643]

2028 Highway 115, Mansura, LA 71350
318.597.0303 Office | 337.781.4506 Mobile |  www.Conterra.com

Re: 2 Byte ASNs??

[George Toma]

We have received 2-byte ASN from LACNIC last year no issues there

On 8/5/2022 10:16 AM, Justin Wilson (Lists) wrote:
> Whats the availability of two byte asns look like? Anyone able to
> obtain one recently? I have a network that is all Mikrotik and the
> route targets are messing with them. ?They can?t use communities with
> their 4 bytes asn. ?It?s one of those it really isn?t a big deal but I
> thought I would ask.
>
>
>
> Justin Wilson
> j...@mtin.net
>
> ?
> https://j2sw.com (AS399332)
> https://blog.j2sw.com - Podcast and?Blog
>

Re: Carrier Options in Bogota

[George Toma]

I am located  in the Spanish speaking Caribbean (DomRep) and it's all the
same across all Latin countries. Pick up a phone and call, don't rely on
emails. Even with companies that DO communicate by emails I frequently have
to pick up a phone to follow up on email to actually get them to reply me,
to the same email I had sent.

On Wednesday, July 6, 2022, Martijn Schmidt  wrote:

> On 7/6/22 03:36, George Toma wrote:
>
> You can connect directly to Bogota NAP and have all the local connectivity
> peering you require:
>
> www.nap.co
> <https://can01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.nap.co%2F=05%7C01%7Cmartijnschmidt%40i3d.net%7C8de176acaef440b3398d08da5f397204%7Ce01bd386fa514210a2a429e5ab6f7ab1%7C0%7C0%7C637926997732387780%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C2000%7C%7C%7C=OxiSNx3ev5zEdC7bi8dNiGcJq2J7zRYaLUIaCrkGiqM%3D=0>
>
> Just pay for your port, peer with all other members and you should be set.
>
> Claro, Movistar, ETB, Tigo, Internaxa, Azteca, C etc.
>
> Speaking of NAP Colombia, does anybody know why they are only listed at
> two datacenters in the Bogota metro according to PeeringDB? Doesn't it make
> sense for them to be at Equinix BG1 as well for example, as that's the
> facility listed on PeeringDB as having by far the largest amount of
> networks on-net in Colombia? I tried to mail NAP Colombia to ask about this
> at one point, but there was never any reply.
>
> Best regards,
> Martijn
>

Re: Carrier Options in Bogota

[George Toma]

You can connect directly to Bogota NAP and have all the local connectivity
peering you require:

www.nap.co

Just pay for your port, peer with all other members and you should be set.

Claro, Movistar, ETB, Tigo, Internaxa, Azteca, C etc.