DNSSEC Analyzer - graham-freeman.info

Domain Name:

Time: 2022-01-28 18:53:31 UTC, NTP stratum 16

Analyzing DNSSEC problems for graham-freeman.info

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (864 octets) ;; HEADER SECTION ;; id = 57056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to l.root-servers.net for graham-freeman.info/A
	Received 786 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (786 octets) ;; HEADER SECTION ;; id = 52355 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . ZyOWpOyVCjRKVjz98jfMz7J7iiidXEYyXkb7T2MKb8T5JGI9SL32FNZrOB4tCwLEDeOnAfURZvaG 03hzX2tBv9PdP8lD+F76TU9YIEqrq1F7fkhkEPgIYiaY9Mw6cnqws2Qo3HId4z7XXrrGFdbZe2YC 7/Rc6isiX08BfAOeFguesJ+0IHBF4STOnco2c4iPp+lXAgp5P3MoYsfmTQN2xrolvCQwPSgugOef Cr9hZUHznSFQRS3VFNI3Xu0UYNWQ6+X9IQaEoDL0+HVr1xtCtHSWEZgl7fkMwuZ+PWDwDG1C3xBH aG5TywIKCe4SJZtMHSknujtmnHVXZnnZ/TjrFA== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for info/DNSKEY
	Received 775 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (775 octets) ;; HEADER SECTION ;; id = 21993 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS b2.info.afilias-nst.org. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . ZyOWpOyVCjRKVjz98jfMz7J7iiidXEYyXkb7T2MKb8T5JGI9SL32FNZrOB4tCwLEDeOnAfURZvaG 03hzX2tBv9PdP8lD+F76TU9YIEqrq1F7fkhkEPgIYiaY9Mw6cnqws2Qo3HId4z7XXrrGFdbZe2YC 7/Rc6isiX08BfAOeFguesJ+0IHBF4STOnco2c4iPp+lXAgp5P3MoYsfmTQN2xrolvCQwPSgugOef Cr9hZUHznSFQRS3VFNI3Xu0UYNWQ6+X9IQaEoDL0+HVr1xtCtHSWEZgl7fkMwuZ+PWDwDG1C3xBH aG5TywIKCe4SJZtMHSknujtmnHVXZnnZ/TjrFA== ) ;; ADDITIONAL SECTION (13 records) d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone info

info

	Checking DS between . and info
	Query to b.root-servers.net for info/DS
	Received 368 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (368 octets) ;; HEADER SECTION ;; id = 45191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DS ;; ANSWER SECTION (2 records) info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . ZyOWpOyVCjRKVjz98jfMz7J7iiidXEYyXkb7T2MKb8T5JGI9SL32FNZrOB4tCwLEDeOnAfURZvaG 03hzX2tBv9PdP8lD+F76TU9YIEqrq1F7fkhkEPgIYiaY9Mw6cnqws2Qo3HId4z7XXrrGFdbZe2YC 7/Rc6isiX08BfAOeFguesJ+0IHBF4STOnco2c4iPp+lXAgp5P3MoYsfmTQN2xrolvCQwPSgugOef Cr9hZUHznSFQRS3VFNI3Xu0UYNWQ6+X9IQaEoDL0+HVr1xtCtHSWEZgl7fkMwuZ+PWDwDG1C3xBH aG5TywIKCe4SJZtMHSknujtmnHVXZnnZ/TjrFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for info in the . zone
	DS=5104/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`info. 86400 IN RRSIG ( DS 8 1 86400 20220210170000 20220128160000 9799 . ZyOWpOyVCjRKVjz98jfMz7J7iiidXEYyXkb7T2MKb8T5JGI9SL32FNZrOB4tCwLEDeOnAfURZvaG 03hzX2tBv9PdP8lD+F76TU9YIEqrq1F7fkhkEPgIYiaY9Mw6cnqws2Qo3HId4z7XXrrGFdbZe2YC 7/Rc6isiX08BfAOeFguesJ+0IHBF4STOnco2c4iPp+lXAgp5P3MoYsfmTQN2xrolvCQwPSgugOef Cr9hZUHznSFQRS3VFNI3Xu0UYNWQ6+X9IQaEoDL0+HVr1xtCtHSWEZgl7fkMwuZ+PWDwDG1C3xBH aG5TywIKCe4SJZtMHSknujtmnHVXZnnZ/TjrFA== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=5104/SHA-256 is now in the chain-of-trust
	`info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 )`
	Query to b0.info.afilias-nst.org for info/DNSKEY
	Received 897 bytes from 199.254.48.1
	;; Response received from 199.254.48.1 (897 octets) ;; HEADER SECTION ;; id = 21489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (4 records) info. 3600 IN DNSKEY ( 256 3 8 AwEAAag4ZBX3Wv6vpPSb085tty1z+ivuBa763IjpTTYHGCO+PHZuUMXXaVZJzuF2OHZ02pUM0I7t 1KHrN+xJkBoeEE6unyHWTb4eqyM1RLdeY2TcbJAdO4KHhG4wwf0JStK3Q9xX/5MrXplI/IzDa01k qT9//Y0LwOkIbFqsCKoH4qsj ) ; Key ID = 12696 info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; Key ID = 5104 info. 3600 IN DNSKEY ( 256 3 8 AwEAAfKhcAVxF8PepUEwsZaIAkxTadMIt+X+hK5ZqN9PaPdu8M6e9vlLbkhpNmluyUmJ7jBqbbrq rjiVMa7SP6GPOheNjBh30JpHx6uPC6X8fusw5x8quY1qB4lIffG1/7djm6XHhqxANDuESMDgN+XH Qyv8lHaAgTfRYmRsmaBRgCEb ) ; Key ID = 6303 info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220215153332 20220125143332 5104 info. eKsg3W+SUFTM4rbZbQCpssUtdA7Hu+6rQuh2288vNDfM2yU/l5Z0Wwhsle/GRHXSmyeeZUQJHfGb 5g9GYkhkyTiSMFym+lUiOAUJKBPC9nCThh8pqxagJX80XbKozaNGQpuf9wOgvJgbXbRLeXuCpWos DO+1qgcEZp8dsahXp6hAUOsidYacyodCHkozvkERWxWPNeNvtj4ZpxJZYCLYExdZPRSzfqbh8YFj 2WZNcGRAY+Whz32ugjB9YDxGukW14jQUK5dLa8VMIb3AQiFAn4+HhVKvdsHq/XGe3yPoEVrJ9ByC hpH00TgPBcvG4FebOCisQ5w98HnouRUvJ1FmxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for info
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAag4ZBX3Wv6vpPSb085tty1z+ivuBa763IjpTTYHGCO+PHZuUMXXaVZJzuF2OHZ02pUM0I7t 1KHrN+xJkBoeEE6unyHWTb4eqyM1RLdeY2TcbJAdO4KHhG4wwf0JStK3Q9xX/5MrXplI/IzDa01k qT9//Y0LwOkIbFqsCKoH4qsj ) ; Key ID = 12696`
	`info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; Key ID = 5104`
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAfKhcAVxF8PepUEwsZaIAkxTadMIt+X+hK5ZqN9PaPdu8M6e9vlLbkhpNmluyUmJ7jBqbbrq rjiVMa7SP6GPOheNjBh30JpHx6uPC6X8fusw5x8quY1qB4lIffG1/7djm6XHhqxANDuESMDgN+XH Qyv8lHaAgTfRYmRsmaBRgCEb ) ; Key ID = 6303`
	DNSKEY=5104/SEP is now in the chain-of-trust
	DS=5104/SHA-256 verifies DNSKEY=5104/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220215153332 20220125143332 5104 info. eKsg3W+SUFTM4rbZbQCpssUtdA7Hu+6rQuh2288vNDfM2yU/l5Z0Wwhsle/GRHXSmyeeZUQJHfGb 5g9GYkhkyTiSMFym+lUiOAUJKBPC9nCThh8pqxagJX80XbKozaNGQpuf9wOgvJgbXbRLeXuCpWos DO+1qgcEZp8dsahXp6hAUOsidYacyodCHkozvkERWxWPNeNvtj4ZpxJZYCLYExdZPRSzfqbh8YFj 2WZNcGRAY+Whz32ugjB9YDxGukW14jQUK5dLa8VMIb3AQiFAn4+HhVKvdsHq/XGe3yPoEVrJ9ByC hpH00TgPBcvG4FebOCisQ5w98HnouRUvJ1FmxA== )`
	RRSIG=5104 and DNSKEY=5104/SEP verifies the DNSKEY RRset
	DNSKEY=12696 is now in the chain-of-trust
	DNSKEY=6303 is now in the chain-of-trust
	Query to b0.info.afilias-nst.org for graham-freeman.info/A
	Received 315 bytes from 199.254.48.1
	;; Response received from 199.254.48.1 (315 octets) ;; HEADER SECTION ;; id = 28121 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 3600 IN NS leah.ns.cloudflare.com. graham-freeman.info. 3600 IN NS greg.ns.cloudflare.com. graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220215153332 20220125143332 12696 info. BE2l1JTged/DuSmUQJH35ibt78zcIWK0TA5xUaiTTDG1b26Kh2JiOJekQ1bb6F3V437vor2ZudDg GbpNNnIX20As5iwu3FAv+TgkC/2dhd15JJb1hCDeGoyJIkbq8mRQPVHKbpih2vypflfHesfpNm4s rnC0XmP0WrV28NjdusE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d0.info.afilias-nst.org for graham-freeman.info/DNSKEY
	Received 315 bytes from 199.254.50.1
	;; Response received from 199.254.50.1 (315 octets) ;; HEADER SECTION ;; id = 36466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) graham-freeman.info. 3600 IN NS leah.ns.cloudflare.com. graham-freeman.info. 3600 IN NS greg.ns.cloudflare.com. graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220215153332 20220125143332 12696 info. BE2l1JTged/DuSmUQJH35ibt78zcIWK0TA5xUaiTTDG1b26Kh2JiOJekQ1bb6F3V437vor2ZudDg GbpNNnIX20As5iwu3FAv+TgkC/2dhd15JJb1hCDeGoyJIkbq8mRQPVHKbpih2vypflfHesfpNm4s rnC0XmP0WrV28NjdusE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone graham-freeman.info

graham-freeman.info

	Checking DS between info and graham-freeman.info
	Query to b2.info.afilias-nst.org for graham-freeman.info/DS
	Received 260 bytes from 199.249.121.1
	;; Response received from 199.249.121.1 (260 octets) ;; HEADER SECTION ;; id = 22820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DS ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f ) graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220215153332 20220125143332 12696 info. BE2l1JTged/DuSmUQJH35ibt78zcIWK0TA5xUaiTTDG1b26Kh2JiOJekQ1bb6F3V437vor2ZudDg GbpNNnIX20As5iwu3FAv+TgkC/2dhd15JJb1hCDeGoyJIkbq8mRQPVHKbpih2vypflfHesfpNm4s rnC0XmP0WrV28NjdusE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for graham-freeman.info in the info zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`graham-freeman.info. 3600 IN RRSIG ( DS 8 2 3600 20220215153332 20220125143332 12696 info. BE2l1JTged/DuSmUQJH35ibt78zcIWK0TA5xUaiTTDG1b26Kh2JiOJekQ1bb6F3V437vor2ZudDg GbpNNnIX20As5iwu3FAv+TgkC/2dhd15JJb1hCDeGoyJIkbq8mRQPVHKbpih2vypflfHesfpNm4s rnC0XmP0WrV28NjdusE= )`
	RRSIG=12696 and DNSKEY=12696 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`graham-freeman.info. 3600 IN DS ( 2371 13 2 9fe723d62b1b6afb4e6b7e4ec08fef4c03b0aa42f29557f360f11bb2e87d994f )`
	Query to greg.ns.cloudflare.com for graham-freeman.info/DNSKEY
	Received 323 bytes from 172.64.33.115
	;; Response received from 172.64.33.115 (323 octets) ;; HEADER SECTION ;; id = 10445 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN DNSKEY ;; ANSWER SECTION (3 records) graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220323181244 20220121181244 2371 graham-freeman.info. mS8hfDUlxI917yxwRrVfUmCIsWadfSFXs/p674JLk8rymK1NX0Yk0PyrChRKnZohkexUWX+bHQ26 vhbEv82Jew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for graham-freeman.info
	`graham-freeman.info. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`graham-freeman.info. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`graham-freeman.info. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220323181244 20220121181244 2371 graham-freeman.info. mS8hfDUlxI917yxwRrVfUmCIsWadfSFXs/p674JLk8rymK1NX0Yk0PyrChRKnZohkexUWX+bHQ26 vhbEv82Jew== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 173.245.59.115
	;; Response received from 173.245.59.115 (211 octets) ;; HEADER SECTION ;; id = 13347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 172.67.69.112 graham-freeman.info. 300 IN A 104.26.15.222 graham-freeman.info. 300 IN A 104.26.14.222 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. 6e3MpGWlN1rxcwvjFko2d3+ldDFnYHKcsu0KZLgbxG2PQuPZ93524KoWEDsOx7Z/OXfPiKFcqvjD l3GICXnJ9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	greg.ns.cloudflare.com is authoritative for graham-freeman.info
	Found RRSIG signed by graham-freeman.info zone
	Query to leah.ns.cloudflare.com for graham-freeman.info/SOA
	Received 225 bytes from 108.162.192.129
	;; Response received from 108.162.192.129 (225 octets) ;; HEADER SECTION ;; id = 39868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN SOA ;; ANSWER SECTION (2 records) graham-freeman.info. 3600 IN SOA ( greg.ns.cloudflare.com. dns.cloudflare.com. 2268360866 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) graham-freeman.info. 3600 IN RRSIG ( SOA 13 2 3600 20220129195332 20220127175332 34505 graham-freeman.info. P5AOpQ7uBRs8tfCBzzMQ+m3xV9zGAU8ADnhx0KeLAUTf0lqFR4L0YR/qhyWufLaZuWmkz+hq98xo f/JZczI5Gw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to greg.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 173.245.59.115
	;; Response received from 173.245.59.115 (211 octets) ;; HEADER SECTION ;; id = 55249 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 104.26.15.222 graham-freeman.info. 300 IN A 104.26.14.222 graham-freeman.info. 300 IN A 172.67.69.112 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. 6e3MpGWlN1rxcwvjFko2d3+ldDFnYHKcsu0KZLgbxG2PQuPZ93524KoWEDsOx7Z/OXfPiKFcqvjD l3GICXnJ9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info A RR has value 104.26.15.222
	graham-freeman.info A RR has value 104.26.14.222
	graham-freeman.info A RR has value 172.67.69.112
	Found 1 RRSIGs over A RRset
	`graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. 6e3MpGWlN1rxcwvjFko2d3+ldDFnYHKcsu0KZLgbxG2PQuPZ93524KoWEDsOx7Z/OXfPiKFcqvjD l3GICXnJ9g== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

graham-freeman.info

	Query to leah.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 172.64.32.129
	;; Response received from 172.64.32.129 (211 octets) ;; HEADER SECTION ;; id = 51868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 172.67.69.112 graham-freeman.info. 300 IN A 104.26.15.222 graham-freeman.info. 300 IN A 104.26.14.222 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. mhZuL6Oke95MbASwIzB5tRumt/7jub4mk7PK7vZJJOqVE/6sADecfWtjeo+lHAmZ0EUHdd25Nk0Q dUCdij1VGA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	leah.ns.cloudflare.com is authoritative for graham-freeman.info
	Found RRSIG signed by graham-freeman.info zone
	Query to leah.ns.cloudflare.com for graham-freeman.info/A
	Received 211 bytes from 173.245.58.129
	;; Response received from 173.245.58.129 (211 octets) ;; HEADER SECTION ;; id = 22469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; graham-freeman.info. IN A ;; ANSWER SECTION (4 records) graham-freeman.info. 300 IN A 104.26.14.222 graham-freeman.info. 300 IN A 172.67.69.112 graham-freeman.info. 300 IN A 104.26.15.222 graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. 2dyUv+WNXB+lKRhcFsYOZOlJ1t7zMlJuAUEM58jseBSKkMekiR0hTQxRszxam/OgbFqmOxlOhkfC NyCyLfEClQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	graham-freeman.info A RR has value 104.26.14.222
	graham-freeman.info A RR has value 172.67.69.112
	graham-freeman.info A RR has value 104.26.15.222
	Found 1 RRSIGs over A RRset
	`graham-freeman.info. 300 IN RRSIG ( A 13 2 300 20220129195332 20220127175332 34505 graham-freeman.info. 2dyUv+WNXB+lKRhcFsYOZOlJ1t7zMlJuAUEM58jseBSKkMekiR0hTQxRszxam/OgbFqmOxlOhkfC NyCyLfEClQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test graham-freeman.info at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: