DNSSEC Analyzer - graham-freeman.info

Domain Name:

Time: 2020-09-26 17:59:55 UTC, NTP stratum 4

Analyzing DNSSEC problems for graham-freeman.info

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1139 bytes) ;; HEADER SECTION ;; id = 10741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201010000000 20200919000000 20326 . gNV6AU+66kB5XldvckVd/ldhaWTu0rO589zdyHDODOwQ1murJshvt8cjBw3G3G4xO06I1gCKT2HW IJLEEhhvQSRvowbcIW3EocWtTZjeQvCp4U1449doRAiUblpQi7EIstdOxIzcttvh0VcIRecWV7Fl 3kvBzEhpwX42EKXaWUV58Rrn/43o/bRSgh3XBSDwIuIsZVJiMMvHdgm0a5FM6jNHxuuXT1DLlXgL Qyggm/PFciUKTXAo91f6HiyWGNZY9AfAAlvprPiyFOCjBotvk7F5Bi5ss1p8mxl522t/8UuSKcFz qE1J3U4IisgEjTkyxnbCJqY/vKJcyPU8fCzxEg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=26116 is now in the chain-of-trust
	Query to l.root-servers.net for graham-freeman.info/A
	Received 911 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (911 bytes) ;; HEADER SECTION ;; id = 41422 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS 8674 7 1 197789a2cbaba6fecd0b5ac88c5bc414ce1fc309 info. 86400 IN DS ( 8674 7 2 ec9b6082b96b5f87143696f2b483acc9b2c433dce0c94e70f1ff5648ca18008b ) info. 86400 IN DS ( 65121 7 2 3a3fd8cf088151a02da1821efe92d570eb3e4b6428444d5b255ea4938e984cc7 ) info. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . shd1s5XxXFFX5KjoWP8CHucUJzv8rLhxfiMG8+z/tbKSCtu00T+GxWMQmbHk7m1igNXTgzx1JrgQ CotiNf5e42zmNZEvNBKyP/9OwttXXoOp2rctcgRRkhUSBrm06LCVh8b1N+9VHskbyw9JH/1UHWlM Sfe4Yn/UOXwpgELTh8YL2KUn3nEPpUaGsI82BF6wWSZNFWddY/n9vlpsMtSp3RWboaiHX/1q+h/s wl1P3t7bhses5cHWqDStXAzyzgWk7djGLVYxa59oNW2Zve+DsOi4isL+cvYZPBIpZVEwDrcsRzS0 ONwIBvJb0WnaTI+RgSPunADmlGPVTjUrpJ+X2A== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for info/DNSKEY
	Received 855 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (855 bytes) ;; HEADER SECTION ;; id = 13023 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS 8674 7 1 197789a2cbaba6fecd0b5ac88c5bc414ce1fc309 info. 86400 IN DS ( 8674 7 2 ec9b6082b96b5f87143696f2b483acc9b2c433dce0c94e70f1ff5648ca18008b ) info. 86400 IN DS ( 65121 7 2 3a3fd8cf088151a02da1821efe92d570eb3e4b6428444d5b255ea4938e984cc7 ) info. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . shd1s5XxXFFX5KjoWP8CHucUJzv8rLhxfiMG8+z/tbKSCtu00T+GxWMQmbHk7m1igNXTgzx1JrgQ CotiNf5e42zmNZEvNBKyP/9OwttXXoOp2rctcgRRkhUSBrm06LCVh8b1N+9VHskbyw9JH/1UHWlM Sfe4Yn/UOXwpgELTh8YL2KUn3nEPpUaGsI82BF6wWSZNFWddY/n9vlpsMtSp3RWboaiHX/1q+h/s wl1P3t7bhses5cHWqDStXAzyzgWk7djGLVYxa59oNW2Zve+DsOi4isL+cvYZPBIpZVEwDrcsRzS0 ONwIBvJb0WnaTI+RgSPunADmlGPVTjUrpJ+X2A== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone info

info

	Checking DS between . and info
	Query to f.root-servers.net for info/DS
	Received 452 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (452 bytes) ;; HEADER SECTION ;; id = 35534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DS ;; ANSWER SECTION (4 records) info. 86400 IN DS 8674 7 1 197789a2cbaba6fecd0b5ac88c5bc414ce1fc309 info. 86400 IN DS ( 8674 7 2 ec9b6082b96b5f87143696f2b483acc9b2c433dce0c94e70f1ff5648ca18008b ) info. 86400 IN DS ( 65121 7 2 3a3fd8cf088151a02da1821efe92d570eb3e4b6428444d5b255ea4938e984cc7 ) info. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . shd1s5XxXFFX5KjoWP8CHucUJzv8rLhxfiMG8+z/tbKSCtu00T+GxWMQmbHk7m1igNXTgzx1JrgQ CotiNf5e42zmNZEvNBKyP/9OwttXXoOp2rctcgRRkhUSBrm06LCVh8b1N+9VHskbyw9JH/1UHWlM Sfe4Yn/UOXwpgELTh8YL2KUn3nEPpUaGsI82BF6wWSZNFWddY/n9vlpsMtSp3RWboaiHX/1q+h/s wl1P3t7bhses5cHWqDStXAzyzgWk7djGLVYxa59oNW2Zve+DsOi4isL+cvYZPBIpZVEwDrcsRzS0 ONwIBvJb0WnaTI+RgSPunADmlGPVTjUrpJ+X2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DS records for info in the . zone
	DS=8674/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=8674/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=65121/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`info. 86400 IN RRSIG ( DS 8 1 86400 20201009170000 20200926160000 46594 . shd1s5XxXFFX5KjoWP8CHucUJzv8rLhxfiMG8+z/tbKSCtu00T+GxWMQmbHk7m1igNXTgzx1JrgQ CotiNf5e42zmNZEvNBKyP/9OwttXXoOp2rctcgRRkhUSBrm06LCVh8b1N+9VHskbyw9JH/1UHWlM Sfe4Yn/UOXwpgELTh8YL2KUn3nEPpUaGsI82BF6wWSZNFWddY/n9vlpsMtSp3RWboaiHX/1q+h/s wl1P3t7bhses5cHWqDStXAzyzgWk7djGLVYxa59oNW2Zve+DsOi4isL+cvYZPBIpZVEwDrcsRzS0 ONwIBvJb0WnaTI+RgSPunADmlGPVTjUrpJ+X2A== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=8674/SHA-1 is now in the chain-of-trust
	DS=65121/SHA-256 is now in the chain-of-trust
	`info. 86400 IN DS 8674 7 1 197789a2cbaba6fecd0b5ac88c5bc414ce1fc309`
	`info. 86400 IN DS ( 8674 7 2 ec9b6082b96b5f87143696f2b483acc9b2c433dce0c94e70f1ff5648ca18008b )`
	`info. 86400 IN DS ( 65121 7 2 3a3fd8cf088151a02da1821efe92d570eb3e4b6428444d5b255ea4938e984cc7 )`
	Query to b2.info.afilias-nst.org for info/DNSKEY
	Received 897 bytes from 199.249.121.1
	;; Answer received from 199.249.121.1 (897 bytes) ;; HEADER SECTION ;; id = 43713 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (4 records) info. 900 IN DNSKEY ( 256 3 7 AwEAAcYAx1jZIUMmdeTmSEeBdonj12rlM2exsUgtsA/bI3+SJyYTK5Azhq1NE2VCzPCy9AnGcFZc hCyBDa40XXye/fqs+6lQHKVK4xallxlsoySB4LgW5ClzXbbfBO7BL4gbcz2zBIkGpb37OEu4EOsk 9d343rcy1gU/kT6h//r2KHZt ) ; Key ID = 29240 info. 900 IN DNSKEY ( 257 3 7 AwEAAYWGPCqJkYvsdDycb2VxkCzBeXa99x0En03deqf3mjIn+E2XQcJBcaeRSia9hgxS1djKMgv8 yUAtqCsauZ8J0kLu6GBtGSoNghEndwbUey9lzP7yXOyaRY0TUogYVRj/rFxK5rFk0xGgTJDqL2NL +NeUMwK0RWevWVVe7oWC5aoDDTTQpE9E0kT4DUy3n/Czp4n2m+zlDEgi57Sbrvdt70nui2b5bJCp LpOaBSoLWJBfrCMKMY6DiHqfGsNtRResOuHRO2FLmuHXqt0DLfkpEQ5Y525T2IR6IPMNpMOJEH9N F+EX7/Vng5vte70IyGMEBBg49TITlItwDGzDeRs3bJU= ) ; Key ID = 65121 info. 900 IN DNSKEY ( 256 3 7 AwEAAazF5pYLaLM22XSevFAAJ6A1nCFhlY8eoYAera4eJ486Ks8ChtgibEL6HWDrwiy33x4PM9Qh ON1sN9JNqh+4lQnUnpxJpC0bNtMOb4K7Q0I+pEerOBt5qcalE4vky4zLdJp0bBPsP3E9gVYnpQbj RVvMYFrpmBfeRnsM2niHwkk1 ) ; Key ID = 27464 info. 900 IN RRSIG ( DNSKEY 7 1 900 20201015154046 20200924144046 65121 info. gXXsaUPguJap2hGUYauEYXpuGMEGUUw1w6J8r7TXN6+TZ4hL3DL8nlQOlLsotYGJnzhEnf6Up3eG rTZ0ijHsOVNqly6iPbweODqWFz3V48qSH6GIqPeTGCu0uAl0pJgYiD6j96Y08H7aJT7I3sMU6bX+ SjYAoG6J0ud5WU4xeMy2G/wF2vqaUjRkeUtRxMj16ZDX1AfCGEVyN8e/dv8o9r6Qv82ZN8SaQGSC FTSJruZrL6Ut4cehkNQGcMeYWB3h0rA6jgWCfbSjMQnGo8IzXqb6pJ9MCgRWdemHq0cpZZMzUuvV C0+Bl7hNDaC3LoVPirmtT1QcvBSFw7JogLhIUg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for info
	`info. 900 IN DNSKEY ( 256 3 7 AwEAAcYAx1jZIUMmdeTmSEeBdonj12rlM2exsUgtsA/bI3+SJyYTK5Azhq1NE2VCzPCy9AnGcFZc hCyBDa40XXye/fqs+6lQHKVK4xallxlsoySB4LgW5ClzXbbfBO7BL4gbcz2zBIkGpb37OEu4EOsk 9d343rcy1gU/kT6h//r2KHZt ) ; Key ID = 29240`
	`info. 900 IN DNSKEY ( 257 3 7 AwEAAYWGPCqJkYvsdDycb2VxkCzBeXa99x0En03deqf3mjIn+E2XQcJBcaeRSia9hgxS1djKMgv8 yUAtqCsauZ8J0kLu6GBtGSoNghEndwbUey9lzP7yXOyaRY0TUogYVRj/rFxK5rFk0xGgTJDqL2NL +NeUMwK0RWevWVVe7oWC5aoDDTTQpE9E0kT4DUy3n/Czp4n2m+zlDEgi57Sbrvdt70nui2b5bJCp LpOaBSoLWJBfrCMKMY6DiHqfGsNtRResOuHRO2FLmuHXqt0DLfkpEQ5Y525T2IR6IPMNpMOJEH9N F+EX7/Vng5vte70IyGMEBBg49TITlItwDGzDeRs3bJU= ) ; Key ID = 65121`
	`info. 900 IN DNSKEY ( 256 3 7 AwEAAazF5pYLaLM22XSevFAAJ6A1nCFhlY8eoYAera4eJ486Ks8ChtgibEL6HWDrwiy33x4PM9Qh ON1sN9JNqh+4lQnUnpxJpC0bNtMOb4K7Q0I+pEerOBt5qcalE4vky4zLdJp0bBPsP3E9gVYnpQbj RVvMYFrpmBfeRnsM2niHwkk1 ) ; Key ID = 27464`
	DNSKEY=65121/SEP is now in the chain-of-trust
	DS=65121/SHA-256 verifies DNSKEY=65121/SEP
	DS=8674/SHA-1 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`info. 900 IN RRSIG ( DNSKEY 7 1 900 20201015154046 20200924144046 65121 info. gXXsaUPguJap2hGUYauEYXpuGMEGUUw1w6J8r7TXN6+TZ4hL3DL8nlQOlLsotYGJnzhEnf6Up3eG rTZ0ijHsOVNqly6iPbweODqWFz3V48qSH6GIqPeTGCu0uAl0pJgYiD6j96Y08H7aJT7I3sMU6bX+ SjYAoG6J0ud5WU4xeMy2G/wF2vqaUjRkeUtRxMj16ZDX1AfCGEVyN8e/dv8o9r6Qv82ZN8SaQGSC FTSJruZrL6Ut4cehkNQGcMeYWB3h0rA6jgWCfbSjMQnGo8IzXqb6pJ9MCgRWdemHq0cpZZMzUuvV C0+Bl7hNDaC3LoVPirmtT1QcvBSFw7JogLhIUg== )`
	RRSIG=65121 and DNSKEY=65121/SEP verifies the DNSKEY RRset
	DNSKEY=29240 is now in the chain-of-trust
	DNSKEY=27464 is now in the chain-of-trust
	Query to d0.info.afilias-nst.org for graham-freeman.info/A
	Received 315 bytes from 199.254.50.1
	;; Answer received from 199.254.50.1 (315 bytes) ;; HEADER SECTION ;; id = 44031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 86400 IN NS leah.ns.cloudflare.com. graham-freeman.info. 86400 IN NS greg.ns.cloudflare.com. graham-freeman.info. 86400 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 86400 IN RRSIG ( DS 7 2 86400 20201015154046 20200924144046 27464 info. bbdJoohIrUyKz0qxoyRITSnZzo5bgSa6jLwaPvQkmEzBohH4Mpp0jXQhfVm4hTZ24nBKjNcytstd Z3+Cv1SSbUzMiwq/qJ3eCQTD5VdoOHHAaVNoov6zJQR1XDd82xcYzgjHgYOgeBOUJL8zHA5OUpdQ j/jOwNJ7BGzIFARsUCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b2.info.afilias-nst.org for graham-freeman.info/DNSKEY
	Received 315 bytes from 199.249.121.1
	;; Answer received from 199.249.121.1 (315 bytes) ;; HEADER SECTION ;; id = 23245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 86400 IN NS leah.ns.cloudflare.com. graham-freeman.info. 86400 IN NS greg.ns.cloudflare.com. graham-freeman.info. 86400 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 86400 IN RRSIG ( DS 7 2 86400 20201015154046 20200924144046 27464 info. bbdJoohIrUyKz0qxoyRITSnZzo5bgSa6jLwaPvQkmEzBohH4Mpp0jXQhfVm4hTZ24nBKjNcytstd Z3+Cv1SSbUzMiwq/qJ3eCQTD5VdoOHHAaVNoov6zJQR1XDd82xcYzgjHgYOgeBOUJL8zHA5OUpdQ j/jOwNJ7BGzIFARsUCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone graham-freeman.info

graham-freeman.info

	Checking DS between info and graham-freeman.info
	Query to d0.info.afilias-nst.org for graham-freeman.info/DS
	Received 260 bytes from 199.254.50.1
	;; Answer received from 199.254.50.1 (260 bytes) ;; HEADER SECTION ;; id = 36900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DS ;; ANSWER SECTION (2 records) graham-freeman.info. 86400 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 86400 IN RRSIG ( DS 7 2 86400 20201015154046 20200924144046 27464 info. bbdJoohIrUyKz0qxoyRITSnZzo5bgSa6jLwaPvQkmEzBohH4Mpp0jXQhfVm4hTZ24nBKjNcytstd Z3+Cv1SSbUzMiwq/qJ3eCQTD5VdoOHHAaVNoov6zJQR1XDd82xcYzgjHgYOgeBOUJL8zHA5OUpdQ j/jOwNJ7BGzIFARsUCg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for graham-freeman.info in the info zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`graham-freeman.info. 86400 IN RRSIG ( DS 7 2 86400 20201015154046 20200924144046 27464 info. bbdJoohIrUyKz0qxoyRITSnZzo5bgSa6jLwaPvQkmEzBohH4Mpp0jXQhfVm4hTZ24nBKjNcytstd Z3+Cv1SSbUzMiwq/qJ3eCQTD5VdoOHHAaVNoov6zJQR1XDd82xcYzgjHgYOgeBOUJL8zHA5OUpdQ j/jOwNJ7BGzIFARsUCg= )`
	RRSIG=27464 and DNSKEY=27464 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`graham-freeman.info. 86400 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f )`
	Query to greg.ns.cloudflare.com for graham-freeman.info/DNSKEY
	Received 323 bytes from 173.245.59.115
	;; Answer received from 173.245.59.115 (323 bytes) ;; HEADER SECTION ;; id = 19277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (3 records) graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20201018190916 20200819190916 2371 graham-freeman.info. SCG8eKdWoTUzvCqzi5Zp9LOoH/dUiUXVy2Myj+7T+BETJazAOeWoM/ZaHBheAcnBA4aFkz9Jf+tk lw/EEQf93Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for graham-freeman.info
	`graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20201018190916 20200819190916 2371 graham-freeman.info. SCG8eKdWoTUzvCqzi5Zp9LOoH/dUiUXVy2Myj+7T+BETJazAOeWoM/ZaHBheAcnBA4aFkz9Jf+tk lw/EEQf93Q== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 173.245.59.115
	;; Answer received from 173.245.59.115 (211 bytes) ;; HEADER SECTION ;; id = 16858 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 104.18.62.158 graham-freeman.info. 300 IN A 172.67.186.182 graham-freeman.info. 300 IN A 104.18.63.158 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20200927185955 20200925165955 34505 graham-freeman.info. sK2XgLetSWPKRikCRFys0S68aJQwrC1WmRNhVvngnH/82BqepWVlHTpSnmHdPtGtf/7d74TVN6vM knwBN7/rmw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info is authoritative for graham-freeman.info
	Found RRSIG signed by graham-freeman.info zone
	Query to leah.ns.cloudflare.com for graham-freeman.info/SOA
	Received 225 bytes from 173.245.58.129
	;; Answer received from 173.245.58.129 (225 bytes) ;; HEADER SECTION ;; id = 41358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN SOA ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN SOA ( greg.ns.cloudflare.com. dns.cloudflare.com. 2035212275 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) graham-freeman.info. 3600 IN RRSIG ( SOA 13 2 3600 20200927185955 20200925165955 34505 graham-freeman.info. QlfwO6LZ49pURLspEQ8UWvOLtK+V9nlKNNHpWp9qLSFyvNoAlMfPsY7xxk0DZdUdWBtSusTkkGRE YviM1x+9+g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to greg.ns.cloudflare.com for graham-freeman.info/SOA
	Received 225 bytes from 172.64.33.115
	;; Answer received from 172.64.33.115 (225 bytes) ;; HEADER SECTION ;; id = 1391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN SOA ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN SOA ( greg.ns.cloudflare.com. dns.cloudflare.com. 2035212275 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) graham-freeman.info. 3600 IN RRSIG ( SOA 13 2 3600 20200927185955 20200925165955 34505 graham-freeman.info. SmSWui3Wy0MVAqEbgJjStT20ZpXSY0KbFdkZCHk4b8gVHb8x494hTV4j2kD3LNt5uLROc/0SPoMV 8W7i/XtEaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 173.245.59.115
	;; Answer received from 173.245.59.115 (211 bytes) ;; HEADER SECTION ;; id = 49269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 172.67.186.182 graham-freeman.info. 300 IN A 104.18.63.158 graham-freeman.info. 300 IN A 104.18.62.158 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20200927185955 20200925165955 34505 graham-freeman.info. YTTiDJejryH6H7gMlp+MJ6tNno4MAp799i/cF3rMcY4LFeTp63ipuxUzoXlL4VGVMjFkGZO62Cet y09cjtAHXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info A RR has value 172.67.186.182
	graham-freeman.info A RR has value 104.18.63.158
	graham-freeman.info A RR has value 104.18.62.158
	Found 1 RRSIGs over A RRset
	`graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20200927185955 20200925165955 34505 graham-freeman.info. YTTiDJejryH6H7gMlp+MJ6tNno4MAp799i/cF3rMcY4LFeTp63ipuxUzoXlL4VGVMjFkGZO62Cet y09cjtAHXQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test graham-freeman.info at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: