DNSSEC Analyzer - graham-freeman.info

Domain Name:

Time: 2022-08-12 11:18:14 UTC, NTP stratum 16

Analyzing DNSSEC problems for graham-freeman.info

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 42092 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to f.root-servers.net for graham-freeman.info/A
	Received 786 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (786 octets) ;; HEADER SECTION ;; id = 9970 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . f231/nOU3EOY0IXBd/QN0h7QqeiEnh5PxZxoXINEJp28/mVNynOWXWzNvTYCyuHJ7dhSnSv7/cNm zeAnxqMkZHRP7yO2s7wMe4UCpNFqLG4xLUfHvkJj3PRu6cqOWq23NrmEwYqNshRxu4a7TEZmpa3K cVLpPepMmliPYQlavOHB6namK5zhCBVbp75qY+TJBjS4ED/1I0RRNjw95zptDSNZCQW7f2ga0/Gz e4cmAHJ4YyDZ6TRA/yNixygewFWyAvOVcoqEtpG/NyITmFhuYznQ/GTz3TCgJ5+ySTI5rgewRtNQ QojNHe9rRO/Ayus13sB6Lss3Ni3cU+pj1wOUiA== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to h.root-servers.net for info/DNSKEY
	Received 771 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (771 octets) ;; HEADER SECTION ;; id = 43530 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . f231/nOU3EOY0IXBd/QN0h7QqeiEnh5PxZxoXINEJp28/mVNynOWXWzNvTYCyuHJ7dhSnSv7/cNm zeAnxqMkZHRP7yO2s7wMe4UCpNFqLG4xLUfHvkJj3PRu6cqOWq23NrmEwYqNshRxu4a7TEZmpa3K cVLpPepMmliPYQlavOHB6namK5zhCBVbp75qY+TJBjS4ED/1I0RRNjw95zptDSNZCQW7f2ga0/Gz e4cmAHJ4YyDZ6TRA/yNixygewFWyAvOVcoqEtpG/NyITmFhuYznQ/GTz3TCgJ5+ySTI5rgewRtNQ QojNHe9rRO/Ayus13sB6Lss3Ni3cU+pj1wOUiA== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone info

info

	Checking DS between . and info
	Query to d.root-servers.net for info/DS
	Received 368 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (368 octets) ;; HEADER SECTION ;; id = 23109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DS ;; ANSWER SECTION (2 records) info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . f231/nOU3EOY0IXBd/QN0h7QqeiEnh5PxZxoXINEJp28/mVNynOWXWzNvTYCyuHJ7dhSnSv7/cNm zeAnxqMkZHRP7yO2s7wMe4UCpNFqLG4xLUfHvkJj3PRu6cqOWq23NrmEwYqNshRxu4a7TEZmpa3K cVLpPepMmliPYQlavOHB6namK5zhCBVbp75qY+TJBjS4ED/1I0RRNjw95zptDSNZCQW7f2ga0/Gz e4cmAHJ4YyDZ6TRA/yNixygewFWyAvOVcoqEtpG/NyITmFhuYznQ/GTz3TCgJ5+ySTI5rgewRtNQ QojNHe9rRO/Ayus13sB6Lss3Ni3cU+pj1wOUiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for info in the . zone
	DS=5104/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`info. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . f231/nOU3EOY0IXBd/QN0h7QqeiEnh5PxZxoXINEJp28/mVNynOWXWzNvTYCyuHJ7dhSnSv7/cNm zeAnxqMkZHRP7yO2s7wMe4UCpNFqLG4xLUfHvkJj3PRu6cqOWq23NrmEwYqNshRxu4a7TEZmpa3K cVLpPepMmliPYQlavOHB6namK5zhCBVbp75qY+TJBjS4ED/1I0RRNjw95zptDSNZCQW7f2ga0/Gz e4cmAHJ4YyDZ6TRA/yNixygewFWyAvOVcoqEtpG/NyITmFhuYznQ/GTz3TCgJ5+ySTI5rgewRtNQ QojNHe9rRO/Ayus13sB6Lss3Ni3cU+pj1wOUiA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=5104/SHA-256 is now in the chain-of-trust
	`info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 )`
	Query to a2.info.afilias-nst.info for info/DNSKEY
	Received 897 bytes from 199.249.113.1
	;; Response received from 199.249.113.1 (897 octets) ;; HEADER SECTION ;; id = 45184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (4 records) info. 3600 IN DNSKEY ( 256 3 8 AwEAAc4Okg5lmWmIIMw2KCraJtQD6hSM4UWSo5mPZkJTmdhLYz8fKKkvNQRSMekqtzgs06puh24h LGf3PFStYQwn6OUSDUVt+umVnD8D9B8oKg9P5tlPaJWG6kiSsDA8P+TK9HPG2cNlOG6cirF5WjJj ce7zycbMVmpG2fvgu2gv2S5b ) ; Key ID = 48723 info. 3600 IN DNSKEY ( 256 3 8 AwEAAee7OLGa9TEtTbTYG2oAls9MWAQSaAzNTFTD2SLeEl3IKBTkrVolajJyMx0ckV2eHIA7/MLZ 2ptPRoOwoP/iqWXiu3qQyd0X5nhSszvltHLvuh3G3z9NkUlwxOqrXGWXa60KATFjqL55IWWMmrjk KLvswAO7c7CQDOJEYgLj1Mlx ) ; Key ID = 54804 info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; Key ID = 5104 info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830153442 20220809143442 5104 info. ArCu391BVks6LwvDhOZMLNVDKDMZQEcPWhhbS319f6ZZ14mR5rHyqoeT9HWFkulN7Nh9NCqFwOwh SiUEhFy+jE/hew/GWkKlE1tDKZiNo5BOzm12okqR3EDWeHuMJfaTldTorrz12VohfsFPjkFI9ADo bTsEjBDrqUlimB8exFOItyIuQkDfmY3CI5q9bKBwXLphM1X8FX4Ikgum+hNyFYop+OZb5ir/pRzE 3sx6PCjUbO+VNVdAVY/oXHyNQoyfSMzd7wrif0vLsIBJBkzgrtzbOAHZfEeiWWdESFgjmlBoBnmW L8muzRlUGSJ2Kz8ugcD2PwMc6nRl+kLY4cfA7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for info
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAc4Okg5lmWmIIMw2KCraJtQD6hSM4UWSo5mPZkJTmdhLYz8fKKkvNQRSMekqtzgs06puh24h LGf3PFStYQwn6OUSDUVt+umVnD8D9B8oKg9P5tlPaJWG6kiSsDA8P+TK9HPG2cNlOG6cirF5WjJj ce7zycbMVmpG2fvgu2gv2S5b ) ; Key ID = 48723`
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAee7OLGa9TEtTbTYG2oAls9MWAQSaAzNTFTD2SLeEl3IKBTkrVolajJyMx0ckV2eHIA7/MLZ 2ptPRoOwoP/iqWXiu3qQyd0X5nhSszvltHLvuh3G3z9NkUlwxOqrXGWXa60KATFjqL55IWWMmrjk KLvswAO7c7CQDOJEYgLj1Mlx ) ; Key ID = 54804`
	`info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; Key ID = 5104`
	DNSKEY=5104/SEP is now in the chain-of-trust
	DS=5104/SHA-256 verifies DNSKEY=5104/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220830153442 20220809143442 5104 info. ArCu391BVks6LwvDhOZMLNVDKDMZQEcPWhhbS319f6ZZ14mR5rHyqoeT9HWFkulN7Nh9NCqFwOwh SiUEhFy+jE/hew/GWkKlE1tDKZiNo5BOzm12okqR3EDWeHuMJfaTldTorrz12VohfsFPjkFI9ADo bTsEjBDrqUlimB8exFOItyIuQkDfmY3CI5q9bKBwXLphM1X8FX4Ikgum+hNyFYop+OZb5ir/pRzE 3sx6PCjUbO+VNVdAVY/oXHyNQoyfSMzd7wrif0vLsIBJBkzgrtzbOAHZfEeiWWdESFgjmlBoBnmW L8muzRlUGSJ2Kz8ugcD2PwMc6nRl+kLY4cfA7A== )`
	RRSIG=5104 and DNSKEY=5104/SEP verifies the DNSKEY RRset
	DNSKEY=48723 is now in the chain-of-trust
	DNSKEY=54804 is now in the chain-of-trust
	Query to b0.info.afilias-nst.org for graham-freeman.info/A
	Received 315 bytes from 199.254.48.1
	;; Response received from 199.254.48.1 (315 octets) ;; HEADER SECTION ;; id = 64861 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 3600 IN NS leah.ns.cloudflare.com. graham-freeman.info. 3600 IN NS greg.ns.cloudflare.com. graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220830153442 20220809143442 54804 info. X2bWGMohJtAkdbe2ocqrJo/s9WXXBMqUPHJ71qlXlVT3rAKghs93rj40byRjv/m+/eZMVsgULr5x wud0TvEj11JmWmvLYhyMrb6U/jDqwIHHhxCHkyg1wIePqWD6+qEii1QA9O/F7A3+48pAZh/BOFRM h7hqSHXLWPDD7cZrT/o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b0.info.afilias-nst.org for graham-freeman.info/DNSKEY
	Received 315 bytes from 199.254.48.1
	;; Response received from 199.254.48.1 (315 octets) ;; HEADER SECTION ;; id = 5317 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 3600 IN NS greg.ns.cloudflare.com. graham-freeman.info. 3600 IN NS leah.ns.cloudflare.com. graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220830153442 20220809143442 54804 info. X2bWGMohJtAkdbe2ocqrJo/s9WXXBMqUPHJ71qlXlVT3rAKghs93rj40byRjv/m+/eZMVsgULr5x wud0TvEj11JmWmvLYhyMrb6U/jDqwIHHhxCHkyg1wIePqWD6+qEii1QA9O/F7A3+48pAZh/BOFRM h7hqSHXLWPDD7cZrT/o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone graham-freeman.info

graham-freeman.info

	Checking DS between info and graham-freeman.info
	Query to b2.info.afilias-nst.org for graham-freeman.info/DS
	Received 260 bytes from 199.249.121.1
	;; Response received from 199.249.121.1 (260 octets) ;; HEADER SECTION ;; id = 8219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DS ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220830153442 20220809143442 54804 info. X2bWGMohJtAkdbe2ocqrJo/s9WXXBMqUPHJ71qlXlVT3rAKghs93rj40byRjv/m+/eZMVsgULr5x wud0TvEj11JmWmvLYhyMrb6U/jDqwIHHhxCHkyg1wIePqWD6+qEii1QA9O/F7A3+48pAZh/BOFRM h7hqSHXLWPDD7cZrT/o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for graham-freeman.info in the info zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220830153442 20220809143442 54804 info. X2bWGMohJtAkdbe2ocqrJo/s9WXXBMqUPHJ71qlXlVT3rAKghs93rj40byRjv/m+/eZMVsgULr5x wud0TvEj11JmWmvLYhyMrb6U/jDqwIHHhxCHkyg1wIePqWD6+qEii1QA9O/F7A3+48pAZh/BOFRM h7hqSHXLWPDD7cZrT/o= )`
	RRSIG=54804 and DNSKEY=54804 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f )`
	Query to greg.ns.cloudflare.com for graham-freeman.info/DNSKEY
	Received 323 bytes from 173.245.59.115
	;; Response received from 173.245.59.115 (323 octets) ;; HEADER SECTION ;; id = 4204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (3 records) graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220928172626 20220729172626 2371 graham-freeman.info. APK72w4gQ5Xc4Ecc8LmAPJWZrY9o+jaPVgb1f1k8YtcmQmYjH3t/z8/Qy4bqr80uOD63DUz6qqQO zFoQOl9Bvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for graham-freeman.info
	`graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220928172626 20220729172626 2371 graham-freeman.info. APK72w4gQ5Xc4Ecc8LmAPJWZrY9o+jaPVgb1f1k8YtcmQmYjH3t/z8/Qy4bqr80uOD63DUz6qqQO zFoQOl9Bvw== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 195 bytes from 172.64.33.115
	;; Response received from 172.64.33.115 (195 octets) ;; HEADER SECTION ;; id = 32679 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (3 records) graham-freeman.info. 300 IN A 104.21.84.44 graham-freeman.info. 300 IN A 172.67.186.61 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. b2pbev2h/Mim6k6xL8Wdzxnp8U2wgdNZRZ5Uhf8QcsbkaVGrpsBPGdJCb3+v5BohNOoERtAiQMoB twoAI1IKRA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	greg.ns.cloudflare.com is authoritative for graham-freeman.info
	Found RRSIG signed by graham-freeman.info zone
	Query to leah.ns.cloudflare.com for graham-freeman.info/SOA
	Received 225 bytes from 173.245.58.129
	;; Response received from 173.245.58.129 (225 octets) ;; HEADER SECTION ;; id = 29337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN SOA ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN SOA ( greg.ns.cloudflare.com. dns.cloudflare.com. 2285121570 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) graham-freeman.info. 3600 IN RRSIG ( SOA 13 2 3600 20220813121814 20220811101814 34505 graham-freeman.info. gAvm0A1yFOhLg2pZoylcwgsu8Y9Sj5Q8rkZJPI8XrntRx1ZM0oP6D/Eqw3hra+5UyV7v1pgRCYNX t8GR1qlehQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 195 bytes from 172.64.33.115
	;; Response received from 172.64.33.115 (195 octets) ;; HEADER SECTION ;; id = 14875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (3 records) graham-freeman.info. 300 IN A 104.21.84.44 graham-freeman.info. 300 IN A 172.67.186.61 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. Itqq6cZc7wfRbdSt2xjr7IwEWAy68LN7ZhSsEpHq5Ox+nyGwZXnRXhGz48e4rfieRzId8lEHt8r4 vRGlfd8sBQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info A RR has value 104.21.84.44
	graham-freeman.info A RR has value 172.67.186.61
	Found 1 RRSIGs over A RRset
	`graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. Itqq6cZc7wfRbdSt2xjr7IwEWAy68LN7ZhSsEpHq5Ox+nyGwZXnRXhGz48e4rfieRzId8lEHt8r4 vRGlfd8sBQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

graham-freeman.info

	Query to leah.ns.cloudflare.com for graham-freeman.info/A
	Received 195 bytes from 173.245.58.129
	;; Response received from 173.245.58.129 (195 octets) ;; HEADER SECTION ;; id = 1784 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (3 records) graham-freeman.info. 300 IN A 172.67.186.61 graham-freeman.info. 300 IN A 104.21.84.44 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. LtjpBSfJP/iBZu/AuwlJOMUzIG3Kis7df3kQlYc74EzRmqs4kKvLJN3V8Ki0i71eRC+yd4K0XZMw DhAYZv3ZDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	leah.ns.cloudflare.com is authoritative for graham-freeman.info
	Found RRSIG signed by graham-freeman.info zone
	Query to leah.ns.cloudflare.com for graham-freeman.info/A
	Received 195 bytes from 173.245.58.129
	;; Response received from 173.245.58.129 (195 octets) ;; HEADER SECTION ;; id = 14230 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (3 records) graham-freeman.info. 300 IN A 104.21.84.44 graham-freeman.info. 300 IN A 172.67.186.61 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. VX4fRgop+sq6GYzSZnYTquUiR06cH6j0ngQNQmDb0dN20iDdl85+jAhGwJBvfBdeiCNqYZL5AS+R oLEHIRYZRQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info A RR has value 104.21.84.44
	graham-freeman.info A RR has value 172.67.186.61
	Found 1 RRSIGs over A RRset
	`graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220813121814 20220811101814 34505 graham-freeman.info. VX4fRgop+sq6GYzSZnYTquUiR06cH6j0ngQNQmDb0dN20iDdl85+jAhGwJBvfBdeiCNqYZL5AS+R oLEHIRYZRQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test graham-freeman.info at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: