More ASN collissions

Rene Wilhelm wilhelm at ripe.net
Thu Dec 10 20:42:52 CST 2009


Leo Bicknell wrote:
> In a message written on Thu, Dec 10, 2009 at 01:35:16PM -0500, Jared Mauch wrote:
>> As always, good research by renesys.
>>
>> http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml
> [...]
> I would be very interested to know if something similar happened 
> with AS3745.
>   
AS3745 is not a duplicate ASN assignment either. Like AS35868 the entry at
whois.ripe.net is a user created object in the RIPE routing registry, not
an assignment by RIPE NCC.

The record in the ARIN database states:


OrgName:    Perot Systems
OrgID:      PEROTS-16
Address:    3800 Hamlin Road
City:       Auburn Hills
StateProv:  MI
PostalCode: 48326
Country:    US

ASNumber:   3745  
ASName:     VWAG-AS
ASHandle:   AS3745
Comment:    
RegDate:    1994-08-01
Updated:    2001-03-29

RTechHandle: AP105-ARIN
RTechName:   Accounts Payable, Mr. E. Zeltzer
RTechPhone:  +1-248-754-5803
RTechEmail:  domainmaster at vw.com


Both the ASName and RTechEmail already point to Volkswagen (VW). Querying
whois.arin.net for AP105-ARIN shows the full contact info:

Name:       Accounts Payable, Mr. E. Zeltzer
Handle:     AP105-ARIN
Company:    Volkswagen of America
Address:    Volkswagen of America
Address:    3800 Hamlin Road
City:       Auburn Hills
StateProv:  MI
PostalCode: 48326
Country:    US
Comment:    
RegDate:    1998-11-25
Updated:    2001-03-29
Phone:      +1-248-754-5803  (Office)
Email:      domainmaster at vw.com


So Perot Systems seems to have received this AS in 1994 for Volkswagen 
America.


REX, RIPE NCC's prototype Resource EXplainer, shows AS3745 has been 
advertising
193.23.96.0/24 and 193.23.104.0/24 (both assigned to Volkswagen AG, 
Germany)
as long as we have routing history from RIS. In 2001 and later years 
parts of
194.114/17 followed.

See 
http://albatross.ripe.net/cgi-bin/rex.pl?res=AS3745&stime=2000-01-01&etime=2009-12-09&type=all


The RIPE DB lists AS3745 as "Volkswagen AG, Wolfsburg, Germany". 
Although not
consistent with the registration info in ARIN, you can at least see how, in
the 1990s, the German parent company started to use the assignment made 
to its
American subsidiary.

The odd one in the current set of prefixes advertised by AS3745 appears 
to be
148.9.64.0/18 If you click on this prefix in the REX listing for AS3745
you see this announcement is in the routing tables since June 2008.
The encompassing 148.9/16 was originated by AS5089 from January 2003 to
January 2004 and by AS1294 for some short periods in 2000 and 2001.

A next click on the "Resource Holder" (near the top of the page) shows
the matching record in the ARIN database to be 148.9.0.0 - 148.9.255.255
a direct assignment to Perot Systems, Plano, TX

Finally, a click on the "DNS and Reverse DNS" in REX removes any doubt 
the /18
is somehow related to Volkswagen: for November 2009 we found one reverse DNS
entry in the CAIDA IPv4 DNS-names dataset[*] pointing to a domain under .gov


In summary, AS3745 is indeed used by two different organizations, but 
it's the
users not the RIRs who created this situation.


-- Rene



[*] http://www.caida.org/data/active/ipv4_dnsnames_dataset.xml












More information about the NANOG mailing list