Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2024-05-21 05:26:31 UTC

Analyzing DNSSEC problems for b.root-servers.net

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
a.root-servers.net is authoritative for b.root-servers.net
net
Found 1 DS records for net in the . zone
DS=37331/SHA-256 has algorithm ECDSAP256SHA256
Found 1 RRSIGs over DS RRset
RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
Found 2 DNSKEY records for net
DS=37331/SHA-256 verifies DNSKEY=37331/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
root-servers.net
No DS records found for root-servers.net in the net zone
No DNSKEY records found
h.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
i.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
f.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
d.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
j.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
b.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
g.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
e.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
c.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
l.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
k.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
a.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found
root-servers.net
m.root-servers.net is authoritative for b.root-servers.net
b.root-servers.net A RR has value 170.247.170.2
No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test b.root-servers.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options