AS47904 - ARCTURPIRFC 4890 ✓RPKI ✓ 1/1ASPA -

AS overview

Test target: 2001:67c:2324:14::153 · www.arctur.si · address space: PI · prefixes announced: 1

prefix(es): 2001:67c:2324::/48

Random-IP probe (yarrp) into the AS' prefixes

We probed 35 arbitrary IPv6 address(es) inside AS47904's announced prefix(es). No router inside the prefix responded. The deepest visible hop was 2a01:260:1:1::35 at hop 14 - that router answers ICMPv6 Echo. This is not in AS47904's announced prefix; operationally it's the AS-edge / peering interface (often on a SIX peering address or an upstream's /127 link). The traceroute boundary is the AS edge: ICMPv6 Time-Exceeded responses from anything inside this AS are filtered.

ICMPv6 Type 2 (Packet Too Big) acceptance - active test

Vantage points disagree about Type 2 acceptance - transit ASes on one path may be filtering Type 2 even though the destination's stack accepts it on another path:

• SRB host (SOX, Belgrade): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• DE host (Berlin): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• DE host (Düsseldorf): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• NL host (go6lab): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• ITA host (Karsolink): Type 2 partial. Some shrinkage but not down to 1280 bytes. (TLS handshake + forged PTB)
• SLO host (6connect): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)
• SLO host (T-2): Type 2 honored. Forged PTB accepted; next response shrunk. (ICMPv6 Echo + forged PTB)

Why they disagree - different probe methods: These vantages picked different probe methods, so their verdicts are not directly comparable. The active test tries methods in order (icmp6-echo → dns-tcp → tls → http) and stops at the first that produces a definitive verdict; if the chosen method differs, the underlying evidence differs too. Most often this is because the path PMTU on one vantage is below 1500 B, so the natural Echo Reply is already fragmented and the icmp6-echo method falls through to a TCP-based one. This is largely a measurement artifact, not a destination-behaviour difference.

sudo tcpdump -i any -n -e 'icmp6 and ip6[40] = 2 and (src host 2607:fae0:a000::42 or src host 2a00:8642:42::75 or src host 2a01:261:313:b814:2a0:98ff:fe5b:13e4 or src host 2a06:d1c1:10b::cccc or src host 2a06:d1c1:10d::aaaa or src host 2a09:ab81::91 or src host 2a12:d8c0:105a:9001::a154)'

Multi-vantage path map

Every hop of all vantages’ traceroutes toward the target, drawn left→right, grouped into per-AS bubbles (a hop seen from several vantages is one shared bubble, so converging paths merge). It answers two questions per vantage — shown on each source bubble as echo ✓/⚠/✗ · trace ✓/✗: did the destination reply to ICMPv6 Echo (✓ honored, ⚠ replied but PTB not honored, ✗ no reply), and did the traceroute reach it. A line to the target is drawn only when that vantage got an echo reply — solid if the PTB was honored, dashed if not (reachable but a broken-PMTUD / RFC 4890 violation). The path depth still shows how far the traceroute itself got, and runs of unanswered (* *) hops collapse into one dashed “silent” bubble. Open full size ↗

• ● SRB host (SOX, Belgrade)
• ● DE host (Berlin)
• ● DE host (Düsseldorf)
• ● NL host (go6lab)
• ● ITA host (Karsolink)
• ● SLO host (6connect)
• ● SLO host (T-2)
• ── solid line = echo reply, PTB honored (clean reach)
• — — dashed line = echo reply but PTB not honored (RFC 4890 violation)
• no line = no echo reply (never reached)
• ◉ target: green = clean, amber = reachable-but-violation / unreachable
• ⚠ suspected drop AS
• ⋯ silent (unanswered) hops
• ● IXP hop

From SRB host (SOX, Belgrade)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.011ms pmtu 1500
 1:  _gateway                                              0.651ms 
 1:  _gateway                                              0.208ms 
 2:  sox-pn.sox.rs                                         0.329ms 
 3:  2001:7f8:1e:8::3d                                     0.385ms asymm  2 
 4:  ae8-930.RT.IRX.VIE.AT.retn.net                       13.058ms asymm  3 
 5:  ts6-vix-mb.telekom.si                                27.769ms asymm  6 
 6:  2a00:ee1:6700:1::11                                  30.197ms asymm  7 
 7:  2a00:ee1:6700:1::11                                  29.301ms 
 8:  fw.arctur.si                                         30.095ms 
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Berlin)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.028ms pmtu 1500
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.493ms 
 1:  xe-0-0-13-178.gw01.ber01.as59645.net                  0.618ms 
 2:  ae0-2453.cr10.ber01.lwlcom.net                        0.888ms 
 3:  ae3-90.cr10.ham01.lwlcom.net                          4.992ms 
 4:  ae0-50.cr11.ham01.lwlcom.net                          5.443ms 
 5:  2a00:c380:f000::4b                                    5.701ms asymm  4 
 6:  ae4-2087.dus10.core-backbone.com                     11.607ms asymm  5 
 7:  ae21-2071.fra10.core-backbone.com                    10.845ms asymm  5 
 8:  ae2-2021.fra20.core-backbone.com                     10.806ms asymm  4 
 9:  ae6-2003.nbg20.core-backbone.com                     12.320ms asymm  6 
10:  ae2-2032.muc20.core-backbone.com                     14.685ms asymm  7 
11:  ae1-2028.vie10.core-backbone.com                     20.466ms asymm  8 
12:  2a01:4a0:1338:115::2                                 32.269ms 
13:  2a01-260-1-1--d.core6.t-2.net                        32.577ms asymm 11 
14:  2a01-260-1-1--35.core6.t-2.net                       33.027ms asymm 13 
15:  2a01:260:1069::e                                     27.778ms asymm  9 
16:  fw.arctur.si                                         28.234ms asymm 10 
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From DE host (Düsseldorf)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.019ms pmtu 1500
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.422ms 
 1:  xe-0-0-12-142.gw01.dus01.as59645.net                  0.372ms 
 2:  2001:7f8:9e::151d:0:1                                 0.556ms asymm  3 
 3:  r4-fra2-de.as5405.net                                19.687ms asymm 12 
 4:  r7-fra1-de.as5405.net                                19.700ms asymm 11 
 5:  r5-fra1-de.as5405.net                                19.653ms asymm 10 
 6:  r2-vie1-at.as5405.net                                19.580ms asymm  9 
 7:  r1-lju1-si.as5405.net                                19.639ms asymm  8 
 8:  2a11:4142:2002::1                                    16.903ms asymm  6 
 9:  2a00:ee1:6700:1::11                                  19.378ms asymm  8 
10:  2a00:ee1:6700:1::11                                  19.131ms asymm  8 
11:  fw.arctur.si                                         19.208ms asymm  9 
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From NL host (go6lab)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.167ms pmtu 1500
 1:  2a00:8642:42::2                                       2.856ms 
 1:  2a00:8642:42::2                                       1.911ms 
 2:  no reply
 3:  2a00:1ca8:1::194                                      8.615ms 
 4:  2a03:3f40::10:41                                      5.419ms 
 5:  speed-ix.inter.link                                  11.932ms asymm  4 
 6:  r5-ams1-nl.as5405.net                                39.830ms asymm 15 
 7:  r7-ams1-nl.as5405.net                                40.850ms asymm 14 
 8:  r7-fra1-de.as5405.net                                31.744ms asymm 13 
 9:  r5-fra1-de.as5405.net                                33.011ms asymm 12 
10:  r2-vie1-at.as5405.net                                31.508ms asymm 11 
11:  r1-lju1-si.as5405.net                                33.135ms asymm 10 
12:  2a11:4142:2002::1                                    32.057ms asymm 10 
13:  2a00:ee1:6700:1::11                                  33.962ms asymm 12 
14:  2a00:ee1:6700:1::11                                  37.128ms asymm 12 
15:  fw.arctur.si                                         34.573ms asymm 13 
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From ITA host (Karsolink)   open

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

Rate-limited ICMPv6: hop 3 (loss between 5% and 95% across mtr cycles - the router replies but only sometimes).

tracepath -6

 1?: [LOCALHOST]                        0.047ms pmtu 1500
 1:  karsolink-01.net.karsolink.com                        0.437ms 
 2:  2a12:d8c0:109f:121::a1                                0.595ms 
 3:  2a12:d8c0:101f:103::1                                 8.540ms 
 4:  stelkom-v6.mix-it.net                                19.539ms 
 5:  2a02:d90:7000:a001::2                                24.566ms asymm  8 
 6:  fw.arctur.si                                         24.542ms asymm  9 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500 

From SLO host (6connect)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 9000

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.014ms pmtu 9000
 1:  fw1-lju.6connect.com                                  0.578ms 
 1:  fw1-lju.6connect.com                                  0.442ms 
 2:  no reply
 3:  2a00:ee1:800:9::1                                     2.459ms 
 4:  no reply
 5:  no reply
 6:  no reply
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 9000
     Resume: pmtu 9000 

From SLO host (T-2)   openRFC 4890 ✓

filter likely at: (none) · min PMTU on path: 1500

Path (traceroute + mtr + PTR)

tracepath -6

 1?: [LOCALHOST]                        0.027ms pmtu 1500
 1:  2a01:261:313:b814::1                                  0.801ms 
 2:  2a01:260:1::225                                       2.880ms 
 3:  2a01-260-1-1--9c.core6.t-2.net                        2.864ms 
 4:  2a01-260-1-1--49.core6.t-2.net                        2.247ms 
 5:  2a01:260:1069::e                                      4.802ms 
 6:  fw.arctur.si                                          4.735ms 
 7:  no reply
 8:  no reply
 9:  no reply
10:  no reply
11:  no reply
12:  no reply
13:  no reply
14:  no reply
15:  no reply
16:  no reply
17:  no reply
18:  no reply
19:  no reply
20:  no reply
21:  no reply
22:  no reply
     Too many hops: pmtu 1500
     Resume: pmtu 1500