[120154] in North American Network Operators' Group
Re: More ASN collissions
daemon@ATHENA.MIT.EDU (Rene Wilhelm)
Thu Dec 10 21:43:32 2009
Date: Fri, 11 Dec 2009 03:42:52 +0100
From: Rene Wilhelm <wilhelm@ripe.net>
To: NANOG list <nanog@nanog.org>
In-Reply-To: <20091210232119.GA9697@ussenterprise.ufp.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Leo Bicknell wrote:
> In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote:
>> As always, good research by renesys.
>>
>> http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml
> [...]
> I would be very interested to know if something similar happened
> with AS3745.
>
AS3745 is not a duplicate ASN assignment either. Like AS35868 the entry at
whois.ripe.net is a user created object in the RIPE routing registry, not
an assignment by RIPE NCC.
The record in the ARIN database states:
OrgName: Perot Systems
OrgID: PEROTS-16
Address: 3800 Hamlin Road
City: Auburn Hills
StateProv: MI
PostalCode: 48326
Country: US
ASNumber: 3745
ASName: VWAG-AS
ASHandle: AS3745
Comment:
RegDate: 1994-08-01
Updated: 2001-03-29
RTechHandle: AP105-ARIN
RTechName: Accounts Payable, Mr. E. Zeltzer
RTechPhone: +1-248-754-5803
RTechEmail: domainmaster@vw.com
Both the ASName and RTechEmail already point to Volkswagen (VW). Querying
whois.arin.net for AP105-ARIN shows the full contact info:
Name: Accounts Payable, Mr. E. Zeltzer
Handle: AP105-ARIN
Company: Volkswagen of America
Address: Volkswagen of America
Address: 3800 Hamlin Road
City: Auburn Hills
StateProv: MI
PostalCode: 48326
Country: US
Comment:
RegDate: 1998-11-25
Updated: 2001-03-29
Phone: +1-248-754-5803 (Office)
Email: domainmaster@vw.com
So Perot Systems seems to have received this AS in 1994 for Volkswagen
America.
REX, RIPE NCC's prototype Resource EXplainer, shows AS3745 has been
advertising
193.23.96.0/24 and 193.23.104.0/24 (both assigned to Volkswagen AG,
Germany)
as long as we have routing history from RIS. In 2001 and later years
parts of
194.114/17 followed.
See
http://albatross.ripe.net/cgi-bin/rex.pl?res=AS3745&stime=2000-01-01&etime=2009-12-09&type=all
The RIPE DB lists AS3745 as "Volkswagen AG, Wolfsburg, Germany".
Although not
consistent with the registration info in ARIN, you can at least see how, in
the 1990s, the German parent company started to use the assignment made
to its
American subsidiary.
The odd one in the current set of prefixes advertised by AS3745 appears
to be
148.9.64.0/18 If you click on this prefix in the REX listing for AS3745
you see this announcement is in the routing tables since June 2008.
The encompassing 148.9/16 was originated by AS5089 from January 2003 to
January 2004 and by AS1294 for some short periods in 2000 and 2001.
A next click on the "Resource Holder" (near the top of the page) shows
the matching record in the ARIN database to be 148.9.0.0 - 148.9.255.255
a direct assignment to Perot Systems, Plano, TX
Finally, a click on the "DNS and Reverse DNS" in REX removes any doubt
the /18
is somehow related to Volkswagen: for November 2009 we found one reverse DNS
entry in the CAIDA IPv4 DNS-names dataset[*] pointing to a domain under .gov
In summary, AS3745 is indeed used by two different organizations, but
it's the
users not the RIRs who created this situation.
-- Rene
[*] http://www.caida.org/data/active/ipv4_dnsnames_dataset.xml
