<html><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class=""><br class=""><div><br class=""><blockquote type="cite" class=""><div class="">On Feb 2, 2021, at 4:29 AM, Noah <<a href="mailto:noah@neo.co.tz" class="">noah@neo.co.tz</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" data-smartmail="gmail_signature" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class="">Owen,</div><div dir="ltr" class=""><br class=""></div></div></div></div></div><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Mon, Jan 11, 2021 at 8:48 PM Owen DeLong <<a href="mailto:owen@delong.com" target="_blank" class="">owen@delong.com</a>> wrote:</div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div class=""><div class=""></div><div class=""><blockquote type="cite" class=""><div class=""><div dir="auto" class=""><div dir="auto" class="">What is more baffling is that its a lot of space and guess what, the members doesn't seem to have a known ASN.</div></div></div></blockquote><div class=""><br class=""></div>Please point me to the section of the CPM which requires a member holding IPv4 number resources to have an ASN.</div></div></blockquote><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">The CPM does not impose that a member holding IPv4<span class="gmail-Apple-converted-space"> </span>should have an ASN since there are<span class="gmail-Apple-converted-space"> </span>valid scenarios for not having an ASN.</div></div></div></div></div></blockquote><div><br class=""></div>Then I am confused by your above quoted statement that it is “baffling...that the members[sic] doesn’t seem to have a known ASN”.</div><div><br class=""></div><div>If you recognize that there are valid scenarios for having space and no ASN, how is this baffling?</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">FWIW, an LIR in Afrinic documentation means: “<b class="">Any Network Operator that provides Internet services to distinct end-users and end-sites.</b>” In the same context, LIRs are allocated<span class="gmail-Apple-converted-space"> </span>IPv4 space<span class="gmail-Apple-converted-space"> </span>of type<span class="gmail-Apple-converted-space"> </span>Provider Aggregatable “Allocated PA”.</div></div></div></div></div></blockquote><div><br class=""></div>Yes. It does not specify the type of internet services. Are you arguing that the leasing of address blocks is not an internet service? I think there are many lessees on the internet that would differ with you about that. There are many types of internet services that are not necessarily “internet connectivity services”. Surely if the intent were to specify only internet connectivity services, then the documentation would say specifically that, no?</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">While an LIR may not have the need to run BGP and express unique routing policy distinct from the ones of its providers, there is a requirement to operate a network and offer internet services which use the IP addresses assigned to the end-users. Such a scenario is easily traceable and<span class="gmail-Apple-converted-space"> </span>provable.</div></div></div></div></div></blockquote><div><br class=""></div>There is? Please show me where this requirement is codified. Please show me where the requirement to operate a network is tied to the offering of internet services.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">This is not the case here, where an LIR<span class="gmail-Apple-converted-space"> does </span>not run a network to serve the users to whom IP addresses are assigned to. We’ve seen LoA's and hijacking and misappropriation of the ASNs by those trying to use these "assignments". The evidence is publicly available.</div></div></div></div></div></blockquote><div><br class=""></div>No, sir, you have not. You have seen LOAs for a valid leasing of address space. You have seen erroneous origination from an ASN by one customer on one occasion. Hijacking is a deliberate act, not an erroneous misconfiguration.</div><div><br class=""><blockquote type="cite" class=""><div class=""><div dir="ltr" class=""><div class="gmail_quote"><div class=""><div style="margin: 0px; font-variant-numeric: normal; font-variant-east-asian: normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: "Helvetica Neue";" class="">Maybe the conversation to have is about the type of network and services this LIR is operating and offering, to determine if they need an ASN or not.</div></div></div></div></div></blockquote><div><br class=""></div></div>The failure here is yours. Your failure to recognize that there are internet services which are possible outside of the offering of internet connection services and that such services are not prohibited by current policy. If you wish to mandate that IP addresses may only be used in providing internet connectivity services, then feel free to submit a proposal to do so, but as the current CPM reads, no such requirement exists and it is inappropriate for you to hold others accountable to the assumptions you read into the policy which are not, in fact, contained in the wording of the policy.<div class=""><br class=""></div><div class="">Owen</div><div class=""><br class=""></div></body></html>