LACNIC's WHOIS

The WHOIS service is a distributed information system that allows querying Internet resources to obtain information on IP address or domain name holders.

LACNIC's WHOIS service allows querying information on Autonomous System Numbers and IP address blocks assigned by LACNIC. In addition, it allows obtaining information relating to these Internet resources, such as contact information for the organizations that hold them.

Introduction

The WHOIS system was originally described in RFC 812, which was later obsoleted by RFC 3912 – "WHOIS Protocol Specification." As described in these documents, the original WHOIS system was designed as a tool for querying the points of contact of the organizations that were connected to the ARPANET at the time. The system does not specify which format should be used in the answers to the queries it receives. This is why different WHOIS servers provide information in different formats.

How should queries be performed?

The server can be queried in two different ways:

  • From a computer where the WHOIS client software is installed, using a command line interface and the following syntax: whois -h
  • Through LACNIC's Web Site at whois.lacnic.net

The information provided by LACNIC's WHOIS service is organized as a list of values and attributes separated by a ":" character

When querying resources, either ASNs or IP address blocks, the answer returned includes, among others, the following attributes:

  • "owner:" Name of the organization holding the queried resource;
  • "ownerid:" The organization's handle in LACNIC's database;
  • "reponsable:" Name of the organization's point of contact (person or group);
  • "address:" The organization's postal address;
  • "country:" The organization's country code;
  • "phone:" The organization's telephone number;
  • "owner-c:" Database handle of the organization's point of contact;
  • "tech-c:" Handle of the IP block's technical point of contact;
  • "routing-c:" Handle of the ASN's technical point of contact;
  • "abuse-c:" Handle of the organization's abuse contact;
  • "created:" Date on which the Internet resource was assigned;
  • "changed:" Date on which the resource's data was last modified.

The point-of-contact information associated with this Internet resource is then presented. Returned attributes include:

  • "nic-hdl:" Point of contact's handle in LACNIC's database;
  • "person:" Name of the person or group representing this point of contact;
  • "e-mail:" Point of contact's email address;
  • "address:" Point of contact's postal address;
  • "country:" Point of contact's country code;
  • "phone:" Point of contact's telephone number;
  • "created:" Date when the record was created in LACNIC's database;
  • "changed:" Date when the point of contact's data was last modified.

When an IP block is queried, in addition to the attributes described above, there may also be DNS reverse delegation data available. Its attributes are as follows:

  • "inetrev:" Specifies the complete or partial block that was delegated;
  • "nserver:" DNS server name;
  • "nsstat:" Status of this DNS server;
  • "nslastaa:" Date when an "ok" status was last obtained for this server.

Even in the case of queries for IP address blocks that have been sub-assigned to other organizations, the data returned will refer to the sub-assignment's parent block, i.e., the original block from which the sub-assignment was made. In this case, "inetnum-up" is the attribute that is used.

In addition to ASN or IP address block queries, LACNIC's WHOIS system allows querying by point of contact handles. In this case the system will only return the point of contact's name, postal address, email and telephone number.

Finally, LACNIC's WHOIS system also allows querying by organization handles. In addition to the information mentioned above, the answer to this type of query will also include a list of all the Internet resources assigned to this organization. The attributes for this query are as follows:

  • "aut-num:" ASN assigned to the organization;
  • "inetnum" IPv4 or IPv6 address block assigned to the organization.

Joint Whois

Joint WHOIS is a project carried out by the five RIRs under the coordination of the NRO (Number Resource Organization) that aims at having a single entry point for all queries, regardless of the RIR holding the queried resources.

Currently, each RIR operates its own WHOIS query service which allows obtaining information regarding the Internet resources assigned by each RIR to organizations located in their own service regions.

This presents a problem for users: before querying for information about a resource they must first identify which RIR is responsible for the resource in question and then proceed to perform the WHOIS query against the corresponding RIR. In order to avoid this issue and make this procedure easier to use, working under NRO coordination, the Regional Registries have developed the Joint WHOIS service. This service provides a single point of entry for queries about any Internet resource regardless of the RIR to which the resources belong.

The Joint WHOIS system is basically a "proxy" that redirects the queries it receives towards the WHOIS server of the RIR holding the resource. When an RIR's server receives a query, it will identify the RIR responsible for the assignment and will immediately redirect the WHOIS query to that RIR. The answer will then be forwarded to the user.

Currently, the whois.lacnic.net server operates in this manner, i.e., as a Joint WHOIS proxy.

In Search of a Better WHOIS

For a long time, the technical Internet community has been working on trying to develop a modern substitute for the old WHOIS protocol. At LACNIC, we are working on a RESTful WHOIS prototype based on documents created by the IETF'S WEIRDS working group (WHOIS-based Extensible Internet Registration Data Service). LACNIC is actively participating both in the IETF as well as in the WEIRDS working group.

REST (Representational State Transfer) is a technique that proposes a way to create semantic web services directly layered on top of HTTP 1.1 using HTTP's own signaling for results delivery and error management.

LACNIC's RESTful WHOIS service provides the same information provided by the old WHOIS service, but in a friendlier way and using standard results formats such as XML and JSON.

How should queries be performed?

RESTful WHOIS is still in its testing phase, so there are currently no availability guarantees and response structure may vary.

The following are some query examples:

Querying for an IP prefix (IPv4 or IPv6)

Querying for an autonomous system

Querying for an organization's handle

Querying only for an organization's points of contact:

Querying for a reverse DNS (IPv4 or IPv6)

Default response format is XML. In order to receive responses in JSON, the following HTTP header must be included in the HTTP request: "Accept: application/json".

JSON is a format currently used for integrating web applications using AJAX or libraries such as JQuery to create dynamic user interfaces.

More Information and References

For more information on LACNIC's WHOIS and RESTful WHOIS services please check:

LACNIC FAQ

LACNIC's RESTful WHOIS

IETF WEIRDS WG