Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-28 23:34:36 UTC

Analyzing DNSSEC problems for 225.41.196.in-addr.arpa

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
arpa
Found 1 DS records for arpa in the . zone
DS=42581/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for arpa
DS=42581/SHA-256 verifies DNSKEY=42581/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
in-addr.arpa
Found 4 DS records for in-addr.arpa in the arpa zone
DS=47054/SHA-256 has algorithm RSASHA256
DS=53696/SHA-256 has algorithm RSASHA256
DS=54956/SHA-256 has algorithm RSASHA256
DS=63982/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=586 and DNSKEY=586 verifies the DS RRset
Found 3 DNSKEY records for in-addr.arpa
DS=54956/SHA-256 verifies DNSKEY=54956/SEP
DS=47054/SHA-256 verifies DNSKEY=47054/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=47054 and DNSKEY=47054/SEP verifies the DNSKEY RRset
196.in-addr.arpa
Found 2 DS records for 196.in-addr.arpa in the in-addr.arpa zone
DS=48389/SHA-256 has algorithm RSASHA256
DS=54334/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=49518 and DNSKEY=49518 verifies the DS RRset
Found 2 DNSKEY records for 196.in-addr.arpa
DS=48389/SHA-256 verifies DNSKEY=48389/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48389 and DNSKEY=48389/SEP verifies the DNSKEY RRset
225.41.196.in-addr.arpa
Found 2 DS records for 225.41.196.in-addr.arpa in the 196.in-addr.arpa zone
DS=19085/SHA-1 uses a deprecated digest algorithm
DS=19085/SHA-1 has algorithm RSASHA256
DS=19085/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=31236 and DNSKEY=31236 verifies the DS RRset
Found 5 DNSKEY records for 225.41.196.in-addr.arpa
DS=19085/SHA-1 verifies DNSKEY=19085/SEP
No RRSIGs found
dns1.icosnethosting.com is authoritative for 225.41.196.in-addr.arpa
Found 1 RRSIGs over SOA RRset
RRSIG=5731 and DNSKEY=5731 verifies the SOA RRset
The SOA RRset was not signed by any trusted keys
225.41.196.in-addr.arpa
dns2.icosnethosting.com is authoritative for 225.41.196.in-addr.arpa
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 225.41.196.in-addr.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options