Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-28 08:55:35 UTC

Analyzing DNSSEC problems for 227.41.196.in-addr.arpa

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
arpa
Found 1 DS records for arpa in the . zone
DS=42581/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for arpa
DS=42581/SHA-256 verifies DNSKEY=42581/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
in-addr.arpa
Found 4 DS records for in-addr.arpa in the arpa zone
DS=53696/SHA-256 has algorithm RSASHA256
DS=54956/SHA-256 has algorithm RSASHA256
DS=63982/SHA-256 has algorithm RSASHA256
DS=47054/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=586 and DNSKEY=586 verifies the DS RRset
Found 3 DNSKEY records for in-addr.arpa
DS=54956/SHA-256 verifies DNSKEY=54956/SEP
DS=47054/SHA-256 verifies DNSKEY=47054/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=47054 and DNSKEY=47054/SEP verifies the DNSKEY RRset
196.in-addr.arpa
Found 2 DS records for 196.in-addr.arpa in the in-addr.arpa zone
DS=48389/SHA-256 has algorithm RSASHA256
DS=54334/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=49518 and DNSKEY=49518 verifies the DS RRset
Found 2 DNSKEY records for 196.in-addr.arpa
DS=48389/SHA-256 verifies DNSKEY=48389/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48389 and DNSKEY=48389/SEP verifies the DNSKEY RRset
227.41.196.in-addr.arpa
Found 2 DS records for 227.41.196.in-addr.arpa in the 196.in-addr.arpa zone
DS=26180/SHA-1 uses a deprecated digest algorithm
DS=26180/SHA-1 has algorithm RSASHA256
DS=26180/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=31236 and DNSKEY=31236 verifies the DS RRset
Found 5 DNSKEY records for 227.41.196.in-addr.arpa
DS=26180/SHA-1 verifies DNSKEY=26180/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=24766 and DNSKEY=24766 verifies the DNSKEY RRset
dns1.icosnethosting.com is authoritative for 227.41.196.in-addr.arpa
NSEC3 type bitmap for tj6kmavaj2kqe1oo48tt3rvc9ihdnql1.227.41.196.in-addr.arpa indicates DS record at zone apex
Found 1 RRSIGs over SOA RRset
RRSIG=24766 and DNSKEY=24766 verifies the SOA RRset
227.41.196.in-addr.arpa
dns2.icosnethosting.com is authoritative for 227.41.196.in-addr.arpa
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 227.41.196.in-addr.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options