DNSSEC Analyzer - hendrickx.be

Domain Name:

Time: 2021-05-15 22:52:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for hendrickx.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 30808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to g.root-servers.net for hendrickx.be/A
	Received 790 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (790 bytes) ;; HEADER SECTION ;; id = 1292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS y.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS a.nsset.be. be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . CIV0vEvGvkM//uDVr3tT/BUwemnI2hcJ+xTrtroScbtisF2Jw6ywI0CKpr8anlZUxk9vNO4PUfGI hmvrXEn8GnGO7+B1kuxdGCJ/lP4RH5cHR+8kc0PLJhgypywiriZ1YPRZnNDMzlz5A8VALwwJKV/p ycF1GOGnJwk4RbDtfBpnDHRNd1ZrNSHg80OtCceF/mxn+fo1Vzfz80S8yjXHX7vYXrbijKphShaB HPBwYRbNfPl8O97WWvA+6RlxsbuczIRt99R53YKQODe1d6gAQ+Aj1/BrlssXfh2fb9xjcdZTNqAd /ROzpk+YYYnDimtvZ7Ne7BnTF2dZL6q0aQ94/g== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for be/DNSKEY
	Received 780 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (780 bytes) ;; HEADER SECTION ;; id = 10016 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . CIV0vEvGvkM//uDVr3tT/BUwemnI2hcJ+xTrtroScbtisF2Jw6ywI0CKpr8anlZUxk9vNO4PUfGI hmvrXEn8GnGO7+B1kuxdGCJ/lP4RH5cHR+8kc0PLJhgypywiriZ1YPRZnNDMzlz5A8VALwwJKV/p ycF1GOGnJwk4RbDtfBpnDHRNd1ZrNSHg80OtCceF/mxn+fo1Vzfz80S8yjXHX7vYXrbijKphShaB HPBwYRbNfPl8O97WWvA+6RlxsbuczIRt99R53YKQODe1d6gAQ+Aj1/BrlssXfh2fb9xjcdZTNqAd /ROzpk+YYYnDimtvZ7Ne7BnTF2dZL6q0aQ94/g== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to g.root-servers.net for be/DS
	Received 414 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (414 bytes) ;; HEADER SECTION ;; id = 10189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . CIV0vEvGvkM//uDVr3tT/BUwemnI2hcJ+xTrtroScbtisF2Jw6ywI0CKpr8anlZUxk9vNO4PUfGI hmvrXEn8GnGO7+B1kuxdGCJ/lP4RH5cHR+8kc0PLJhgypywiriZ1YPRZnNDMzlz5A8VALwwJKV/p ycF1GOGnJwk4RbDtfBpnDHRNd1ZrNSHg80OtCceF/mxn+fo1Vzfz80S8yjXHX7vYXrbijKphShaB HPBwYRbNfPl8O97WWvA+6RlxsbuczIRt99R53YKQODe1d6gAQ+Aj1/BrlssXfh2fb9xjcdZTNqAd /ROzpk+YYYnDimtvZ7Ne7BnTF2dZL6q0aQ94/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . CIV0vEvGvkM//uDVr3tT/BUwemnI2hcJ+xTrtroScbtisF2Jw6ywI0CKpr8anlZUxk9vNO4PUfGI hmvrXEn8GnGO7+B1kuxdGCJ/lP4RH5cHR+8kc0PLJhgypywiriZ1YPRZnNDMzlz5A8VALwwJKV/p ycF1GOGnJwk4RbDtfBpnDHRNd1ZrNSHg80OtCceF/mxn+fo1Vzfz80S8yjXHX7vYXrbijKphShaB HPBwYRbNfPl8O97WWvA+6RlxsbuczIRt99R53YKQODe1d6gAQ+Aj1/BrlssXfh2fb9xjcdZTNqAd /ROzpk+YYYnDimtvZ7Ne7BnTF2dZL6q0aQ94/g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to a.nsset.be for be/DNSKEY
	Received 1317 bytes from 194.0.6.1
	;; Answer received from 194.0.6.1 (1317 bytes) ;; HEADER SECTION ;; id = 34871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955 be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=5955 is now in the chain-of-trust
	DNSKEY=59085 is now in the chain-of-trust
	DNSKEY=46794 is now in the chain-of-trust
	Query to a.nsset.be for hendrickx.be/A
	Received 380 bytes from 194.0.6.1
	;; Answer received from 194.0.6.1 (380 bytes) ;; HEADER SECTION ;; id = 28771 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210603152928 20210513000207 59085 be. MsicxSv7qbfLTDS/QmMWOaW/tU+uHsmaaTl4qlqNPismgRQURoTVAolHS5lSKDVeBf0H6X22Xfz1 pJN5QHclQ+E1XChG6kX7+cno0BUXkF3/8tiwLdOhyiey+TbnNZHvxuHqHCrrtxUNvi6+1XljJVrd ia5+uUrrG4VyucxIZZg= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Query to y.nsset.be for hendrickx.be/DNSKEY
	Received 382 bytes from 120.29.253.8
	;; Answer received from 120.29.253.8 (382 bytes) ;; HEADER SECTION ;; id = 38529 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210603152928 20210513000207 59085 be. MsicxSv7qbfLTDS/QmMWOaW/tU+uHsmaaTl4qlqNPismgRQURoTVAolHS5lSKDVeBf0H6X22Xfz1 pJN5QHclQ+E1XChG6kX7+cno0BUXkF3/8tiwLdOhyiey+TbnNZHvxuHqHCrrtxUNvi6+1XljJVrd ia5+uUrrG4VyucxIZZg= ) ;; ADDITIONAL SECTION (5 records) ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone hendrickx.be

hendrickx.be

	Checking DS between be and hendrickx.be
	Query to d.nsset.be for hendrickx.be/DS
	Received 251 bytes from 194.0.44.1
	;; Answer received from 194.0.44.1 (251 bytes) ;; HEADER SECTION ;; id = 26604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DS ;; ANSWER SECTION (2 records) hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210603152928 20210513000207 59085 be. MsicxSv7qbfLTDS/QmMWOaW/tU+uHsmaaTl4qlqNPismgRQURoTVAolHS5lSKDVeBf0H6X22Xfz1 pJN5QHclQ+E1XChG6kX7+cno0BUXkF3/8tiwLdOhyiey+TbnNZHvxuHqHCrrtxUNvi6+1XljJVrd ia5+uUrrG4VyucxIZZg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 1 DS records for hendrickx.be in the be zone
	DS=3260/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210603152928 20210513000207 59085 be. MsicxSv7qbfLTDS/QmMWOaW/tU+uHsmaaTl4qlqNPismgRQURoTVAolHS5lSKDVeBf0H6X22Xfz1 pJN5QHclQ+E1XChG6kX7+cno0BUXkF3/8tiwLdOhyiey+TbnNZHvxuHqHCrrtxUNvi6+1XljJVrd ia5+uUrrG4VyucxIZZg= )`
	RRSIG=59085 and DNSKEY=59085 verifies the DS RRset
	DS=3260/SHA-256 is now in the chain-of-trust
	`hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 )`
	Query to ns1.ghen.be for hendrickx.be/DNSKEY
	Received 229 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (229 bytes) ;; HEADER SECTION ;; id = 6586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260 hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. 5+TVNqot0Ihb+0OeXlc9xK3N0w3bMB5CWDahmn/3/nxcwKgkBfUwjnBhgbr0BIzK6OJhoJ6hsEDp ZP7kP9Tbww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for hendrickx.be
	`hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260`
	DNSKEY=3260/SEP is now in the chain-of-trust
	DS=3260/SHA-256 verifies DNSKEY=3260/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. 5+TVNqot0Ihb+0OeXlc9xK3N0w3bMB5CWDahmn/3/nxcwKgkBfUwjnBhgbr0BIzK6OJhoJ6hsEDp ZP7kP9Tbww== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the DNSKEY RRset
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 35138 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. QXLhvTqFQ9VT9szmgwPOx/V9KthGzYxYxyMHgoWyTtclKI81W9dA+DftQVMti9HzvkqBoqlmRXL6 6jbuYd1fYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (347 bytes) ;; HEADER SECTION ;; id = 52974 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1620707461 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. 7teNH+k6huQBWSH63a41EYgaOIYRNPnQxnX06F6rNDDRNwrbgNQF8UkqF6D+zxhnglDsMSubNbte GHE0eshi0w== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. QXLhvTqFQ9VT9szmgwPOx/V9KthGzYxYxyMHgoWyTtclKI81W9dA+DftQVMti9HzvkqBoqlmRXL6 6jbuYd1fYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 29232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. QXLhvTqFQ9VT9szmgwPOx/V9KthGzYxYxyMHgoWyTtclKI81W9dA+DftQVMti9HzvkqBoqlmRXL6 6jbuYd1fYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

hendrickx.be

	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 5213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. QXLhvTqFQ9VT9szmgwPOx/V9KthGzYxYxyMHgoWyTtclKI81W9dA+DftQVMti9HzvkqBoqlmRXL6 6jbuYd1fYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 56576 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. QXLhvTqFQ9VT9szmgwPOx/V9KthGzYxYxyMHgoWyTtclKI81W9dA+DftQVMti9HzvkqBoqlmRXL6 6jbuYd1fYw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210525043101 20210511033101 3260 hendrickx.be. c7+i3tNKoMUy6Obs44FIYEFhItU7NmxSrzGfG9orUwtTrtIdyl168kmZqH6A02PRgZLItBeHkRDu q+xbVaJ48g== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hendrickx.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: