DNSSEC Analyzer - dnssec-test-gd.net

Domain Name:

Time: 2021-07-31 14:52:58 UTC, NTP stratum 16

Analyzing DNSSEC problems for dnssec-test-gd.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 43656 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to i.root-servers.net for dnssec-test-gd.net/A
	Received 1178 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (1178 octets) ;; HEADER SECTION ;; id = 14559 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec-test-gd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . UWONEXzXoLyxq/7q5v3QBL0q9pjQEXcRFX0e3PvAs6S5JLJ1GM/3lgreiszEmXsGtCYi7o5dbDWJ 6BzQvx8mmFnFTQahvx7Aij/N9dqMzw28N+a0DOf/39RJl8J+3yLAfLLByap5tizAocaQc+xpqbK/ S6KXBVWHK8/yDw1sXyt1cNAxzqc6gPiBuS2FsheeDSH7lcsL4xV/fkZJMsmX7aizc2476sqbYb8g K8w2V1Uu+fL7IrCXg4fF/6oucTLYSJO0axMXF0VARYVNVN9JMZd8YGjodWAyV+e8xuXj21L4TyJR eSZUh75YzgEpkpjkbRgGorWR15s7K9q6n5xP9g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (1160 octets) ;; HEADER SECTION ;; id = 19417 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . UWONEXzXoLyxq/7q5v3QBL0q9pjQEXcRFX0e3PvAs6S5JLJ1GM/3lgreiszEmXsGtCYi7o5dbDWJ 6BzQvx8mmFnFTQahvx7Aij/N9dqMzw28N+a0DOf/39RJl8J+3yLAfLLByap5tizAocaQc+xpqbK/ S6KXBVWHK8/yDw1sXyt1cNAxzqc6gPiBuS2FsheeDSH7lcsL4xV/fkZJMsmX7aizc2476sqbYb8g K8w2V1Uu+fL7IrCXg4fF/6oucTLYSJO0axMXF0VARYVNVN9JMZd8YGjodWAyV+e8xuXj21L4TyJR eSZUh75YzgEpkpjkbRgGorWR15s7K9q6n5xP9g== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to m.root-servers.net for net/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (367 octets) ;; HEADER SECTION ;; id = 11755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . UWONEXzXoLyxq/7q5v3QBL0q9pjQEXcRFX0e3PvAs6S5JLJ1GM/3lgreiszEmXsGtCYi7o5dbDWJ 6BzQvx8mmFnFTQahvx7Aij/N9dqMzw28N+a0DOf/39RJl8J+3yLAfLLByap5tizAocaQc+xpqbK/ S6KXBVWHK8/yDw1sXyt1cNAxzqc6gPiBuS2FsheeDSH7lcsL4xV/fkZJMsmX7aizc2476sqbYb8g K8w2V1Uu+fL7IrCXg4fF/6oucTLYSJO0axMXF0VARYVNVN9JMZd8YGjodWAyV+e8xuXj21L4TyJR eSZUh75YzgEpkpjkbRgGorWR15s7K9q6n5xP9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . UWONEXzXoLyxq/7q5v3QBL0q9pjQEXcRFX0e3PvAs6S5JLJ1GM/3lgreiszEmXsGtCYi7o5dbDWJ 6BzQvx8mmFnFTQahvx7Aij/N9dqMzw28N+a0DOf/39RJl8J+3yLAfLLByap5tizAocaQc+xpqbK/ S6KXBVWHK8/yDw1sXyt1cNAxzqc6gPiBuS2FsheeDSH7lcsL4xV/fkZJMsmX7aizc2476sqbYb8g K8w2V1Uu+fL7IrCXg4fF/6oucTLYSJO0axMXF0VARYVNVN9JMZd8YGjodWAyV+e8xuXj21L4TyJR eSZUh75YzgEpkpjkbRgGorWR15s7K9q6n5xP9g== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (775 octets) ;; HEADER SECTION ;; id = 32144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPW36Zs2vsDFGgdXBlg8RXSr1pSJ12NK+u9YcWfOr85we2z5A04SKQlIfyTK37dItGFcldtF7oY wPg11T3R33viKV6PyASvnuRl8QKiLk5FfGUDt1sQJv3S/9wT22Le1vnoE/6XFRyeb8kmJgz0oQB1 VAO9b0l6Vm8KAVeOGJ+Qsjaq0O0aVzwPvmPtYm/i3qoAhkaMBUpg6RrF5NKhRyG3 ) ; Key ID = 65378 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210812162830 20210728162330 35886 net. S+LyQHPaSBBM3YIZb0G6xPPS7x07EOLy+2bnm3tLUL4rWhFhmpxZTFb0lK03mcZ8eTErNbuUs9Th S5RLmXJ2GvDGh2Dc7dv9tTazEhWDYLDiJhUqvvndt5VVDVQk9qn8b4mX9bRVN6e/b8kfx0h3UVc8 KAWPd1gFPKeVeFSvZtmwmM/t4AFKIztKR+KYwyfs3yYC2MHpCUnUAXMhYLMVFRZhSfxastHDL0T9 tC7alNGh7zc3FTfayfNqXCSM6Cu8N/PxLYdBG6FQO5BjZfsAkGmnATG5n8HBM3cKG494G9zFeuzd 7tqS/YJ+MIDQtGOBapDpLkoAqnC1pHBGF1JwzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPW36Zs2vsDFGgdXBlg8RXSr1pSJ12NK+u9YcWfOr85we2z5A04SKQlIfyTK37dItGFcldtF7oY wPg11T3R33viKV6PyASvnuRl8QKiLk5FfGUDt1sQJv3S/9wT22Le1vnoE/6XFRyeb8kmJgz0oQB1 VAO9b0l6Vm8KAVeOGJ+Qsjaq0O0aVzwPvmPtYm/i3qoAhkaMBUpg6RrF5NKhRyG3 ) ; Key ID = 65378`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210812162830 20210728162330 35886 net. S+LyQHPaSBBM3YIZb0G6xPPS7x07EOLy+2bnm3tLUL4rWhFhmpxZTFb0lK03mcZ8eTErNbuUs9Th S5RLmXJ2GvDGh2Dc7dv9tTazEhWDYLDiJhUqvvndt5VVDVQk9qn8b4mX9bRVN6e/b8kfx0h3UVc8 KAWPd1gFPKeVeFSvZtmwmM/t4AFKIztKR+KYwyfs3yYC2MHpCUnUAXMhYLMVFRZhSfxastHDL0T9 tC7alNGh7zc3FTfayfNqXCSM6Cu8N/PxLYdBG6FQO5BjZfsAkGmnATG5n8HBM3cKG494G9zFeuzd 7tqS/YJ+MIDQtGOBapDpLkoAqnC1pHBGF1JwzQ== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=65378 is now in the chain-of-trust
	Query to k.gtld-servers.net for dnssec-test-gd.net/A
	Received 1138 bytes from 192.52.178.30
	;; Response received from 192.52.178.30 (1138 octets) ;; HEADER SECTION ;; id = 19216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec-test-gd.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1627743156 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20210807145236 20210731134236 65378 net. FKOGO0ZqXwYCJF5cWmJ93E65kcepPqoFuMTySxMhUW6MpUJrQD51SBoHbANSWoijGJvj7j4kEXR/ r1Gke1acMJkPLvjXAP8pNfw+ROWfJUVvcVJlAGynWFRkKEr0fXQQR51dqhx0l3KKIhyJL3W9woCR W4m0qA7VFSMZTS0w6IxtThUNRs9GSwcAcFiVWMZ8BGV/Ca0fqXc1Pg/TJ+ADug== ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210804054558 20210728043558 65378 net. umWg/Vyey/kOhQNpVcNBDUzindL7bGVjUy0GswCsf62lw6ShI2AJ7VpsHYFiQ5z3YHEavUtlEBro G7AgXW+nVZiW8JBa6RtzTS8Z9CIyySv7gWvNhb+2QH69UR/ITk7TDuFsy3T8cz4cyzKUYcJjpJ97 AC/ap5CC1ezmblDc5l+fVwTNq+4Rhkd1q/ezlTySd4Imbah0TBYVy1ntoIMF3A== ) PSANFI3QRG82M945TQ2U2KQ0GNO6OK6S.net. 86400 IN NSEC3 ( 1 1 0 - psao4scoltstgsmugfmbg5vq9lvplf5t NS DS RRSIG ) PSANFI3QRG82M945TQ2U2KQ0GNO6OK6S.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210806053843 20210730042843 65378 net. 1tLkW897fNZercXc5jSAcjMueaY9Su0hSuL/CFznRJN6EUanV9ekbdN4lOU+K+DZtjfnH3uYTHyZ 5lxjPGMpPw6rXYpbg7xlEIIrknThA4wBmOjPJWlHwnCZ0OwG1o5DNWX34QWHUDuT6wcFJ7e+yzuR YfVe4wR7gIDt3UCwRyaUoGNGAwSI8gOOP/BiEUFOmx0EvD51juj/WiknqhnwNQ== ) EEQ3CIFFULOPN4J3E5MKEGKVDJKIGVBP.net. 86400 IN NSEC3 ( 1 1 0 - eeqj8vp8tmkim7a9tt4dirr6d1j6abrr NS DS RRSIG ) EEQ3CIFFULOPN4J3E5MKEGKVDJKIGVBP.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210806054047 20210730043047 65378 net. DILlvUyw7MzpOVu5ASK1dd3Xrwn4AtR2vCLcOKgwfyaWS/0ux4jVouhh94dVyNZuTnesq6PSOxln kphVhcRtO3mpLMimdoJ5Py1Y2q34+LwT4e2COTeM1JeRkfZwLTjVx3Fx+jyWfcNu5Om4BBnyAv75 cvFTbd6mJrhGMlQ9RgRlxA8l+FiRM4rcP/6rI91KWua6BBsoNVCBBdOV+DCQuw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Zone net (192.52.178.30) returns NXDOMAIN for dnssec-test-gd.net
	NSEC3 validation not implemented yet

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec-test-gd.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: