Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-03-29 02:13:54 UTC

Analyzing DNSSEC problems for 240.41.196.in-addr.arpa

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
arpa
Found 1 DS records for arpa in the . zone
DS=42581/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=30903 and DNSKEY=30903 verifies the DS RRset
Found 3 DNSKEY records for arpa
DS=42581/SHA-256 verifies DNSKEY=42581/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
in-addr.arpa
Found 4 DS records for in-addr.arpa in the arpa zone
DS=47054/SHA-256 has algorithm RSASHA256
DS=53696/SHA-256 has algorithm RSASHA256
DS=54956/SHA-256 has algorithm RSASHA256
DS=63982/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=586 and DNSKEY=586 verifies the DS RRset
Found 3 DNSKEY records for in-addr.arpa
DS=54956/SHA-256 verifies DNSKEY=54956/SEP
DS=47054/SHA-256 verifies DNSKEY=47054/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=47054 and DNSKEY=47054/SEP verifies the DNSKEY RRset
196.in-addr.arpa
Found 2 DS records for 196.in-addr.arpa in the in-addr.arpa zone
DS=48389/SHA-256 has algorithm RSASHA256
DS=54334/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=49518 and DNSKEY=49518 verifies the DS RRset
Found 2 DNSKEY records for 196.in-addr.arpa
DS=48389/SHA-256 verifies DNSKEY=48389/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48389 and DNSKEY=48389/SEP verifies the DNSKEY RRset
240.41.196.in-addr.arpa
Found 2 DS records for 240.41.196.in-addr.arpa in the 196.in-addr.arpa zone
DS=54827/SHA-1 uses a deprecated digest algorithm
DS=54827/SHA-256 has algorithm RSASHA256
DS=54827/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=31236 and DNSKEY=31236 verifies the DS RRset
Found 5 DNSKEY records for 240.41.196.in-addr.arpa
DS=54827/SHA-256 verifies DNSKEY=54827/SEP
No RRSIGs found
dns2.icosnethosting.com is authoritative for 240.41.196.in-addr.arpa
No NSEC records in response
240.41.196.in-addr.arpa
dns1.icosnethosting.com is authoritative for 240.41.196.in-addr.arpa
NSEC3 type bitmap for 68v5kcje790tu96udc5d9do5muonkkf6.240.41.196.in-addr.arpa indicates DS record at zone apex
Found 1 RRSIGs over SOA RRset
RRSIG=36765 and DNSKEY=36765 verifies the SOA RRset
The SOA RRset was not signed by any trusted keys

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 240.41.196.in-addr.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options