Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2021-12-01 09:53:05 UTC, NTP stratum 16

Analyzing DNSSEC problems for example.arpa

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
Zone . (192.58.128.30) returns NXDOMAIN for example.arpa
Found 1 RRSIGs over NSEC RRset
None of the 1 RRSIG and 2 DNSKEY records validate the NSEC RRset
The NSEC RRset was not signed by any trusted keys
No NSEC record could prove that example.arpa does not exist
No NSEC record could prove that * does not exist

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test example.arpa at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options