Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-18 10:59:41 UTC

Analyzing DNSSEC problems for 253.41.196.in-addr.arpa

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
arpa
Found 1 DS records for arpa in the . zone
DS=42581/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for arpa
DS=42581/SHA-256 verifies DNSKEY=42581/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
in-addr.arpa
Found 4 DS records for in-addr.arpa in the arpa zone
DS=53696/SHA-256 has algorithm RSASHA256
DS=54956/SHA-256 has algorithm RSASHA256
DS=63982/SHA-256 has algorithm RSASHA256
DS=47054/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=43060 and DNSKEY=43060 verifies the DS RRset
Found 3 DNSKEY records for in-addr.arpa
DS=54956/SHA-256 verifies DNSKEY=54956/SEP
DS=47054/SHA-256 verifies DNSKEY=47054/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=54956 and DNSKEY=54956/SEP verifies the DNSKEY RRset
196.in-addr.arpa
Found 2 DS records for 196.in-addr.arpa in the in-addr.arpa zone
DS=48389/SHA-256 has algorithm RSASHA256
DS=54334/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=37980 and DNSKEY=37980 verifies the DS RRset
Found 3 DNSKEY records for 196.in-addr.arpa
DS=48389/SHA-256 verifies DNSKEY=48389/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=48389 and DNSKEY=48389/SEP verifies the DNSKEY RRset
253.41.196.in-addr.arpa
Found 2 DS records for 253.41.196.in-addr.arpa in the 196.in-addr.arpa zone
DS=43076/SHA-1 uses a deprecated digest algorithm
DS=43076/SHA-256 has algorithm RSASHA256
DS=43076/SHA-1 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=15009 and DNSKEY=15009 verifies the DS RRset
Found 5 DNSKEY records for 253.41.196.in-addr.arpa
DS=43076/SHA-256 verifies DNSKEY=43076/SEP
No RRSIGs found
dns1.icosnethosting.com is authoritative for 253.41.196.in-addr.arpa
NSEC3 type bitmap for 3bvk69ebbpt22149u8j4s00limcrr339.253.41.196.in-addr.arpa indicates DS record at zone apex
Found 1 RRSIGs over SOA RRset
RRSIG=52365 and DNSKEY=52365 verifies the SOA RRset
The SOA RRset was not signed by any trusted keys
253.41.196.in-addr.arpa
dns2.icosnethosting.com is authoritative for 253.41.196.in-addr.arpa
No NSEC records in response
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 253.41.196.in-addr.arpa at dnsviz.net.

DNSSEC Debugger

↓ Advanced options