DNSSEC Analyzer - hendrickx.be

Domain Name:

Time: 2021-06-12 19:49:13 UTC, NTP stratum 4

Analyzing DNSSEC problems for hendrickx.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 28760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to g.root-servers.net for hendrickx.be/A
	Received 790 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (790 bytes) ;; HEADER SECTION ;; id = 26893 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS d.nsset.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS a.nsset.be. be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . PLl+9ih2EjSeXwVRSr9192dpuW1iR/H7imiQxsGWRSw0TGHalP/e4M3DdX70vktkzGZTRR/2nYRm PDVai+R7738GYs0xo8/138KGBXg/kXnz66Vexj3dsV0TJbAYh//aazUnoJarvp62BDgaX55O7tnw v6u56q2/9RJV7cC842YOgraCrnSW6m2q088v3EBRfzMwL75vVJMF/VT11vdcfXVyY7jhd1NtYKu6 gpnS5KkrFs9Ir2ed71ZpcJf8hixV4u8JnIg/5/DcA3QHdUGxq8ABR0iTSl4O6E8GPgG4WaH5Di1w Q6yMNvGU/KwXU+KoP8x10HIloaao/2FUxzs2NA== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for be/DNSKEY
	Received 782 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (782 bytes) ;; HEADER SECTION ;; id = 37659 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS b.nsset.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS a.nsset.be. be. 172800 IN NS c.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . PLl+9ih2EjSeXwVRSr9192dpuW1iR/H7imiQxsGWRSw0TGHalP/e4M3DdX70vktkzGZTRR/2nYRm PDVai+R7738GYs0xo8/138KGBXg/kXnz66Vexj3dsV0TJbAYh//aazUnoJarvp62BDgaX55O7tnw v6u56q2/9RJV7cC842YOgraCrnSW6m2q088v3EBRfzMwL75vVJMF/VT11vdcfXVyY7jhd1NtYKu6 gpnS5KkrFs9Ir2ed71ZpcJf8hixV4u8JnIg/5/DcA3QHdUGxq8ABR0iTSl4O6E8GPgG4WaH5Di1w Q6yMNvGU/KwXU+KoP8x10HIloaao/2FUxzs2NA== ) ;; ADDITIONAL SECTION (13 records) z.nsset.be. 172800 IN A 194.0.25.36 y.nsset.be. 172800 IN A 120.29.253.8 d.nsset.be. 172800 IN A 194.0.44.1 c.nsset.be. 172800 IN A 194.0.43.1 b.nsset.be. 172800 IN A 194.0.37.1 a.nsset.be. 172800 IN A 194.0.6.1 z.nsset.be. 172800 IN AAAA 2001:678:20::36 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 a.nsset.be. 172800 IN AAAA 2001:678:9::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to j.root-servers.net for be/DS
	Received 414 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (414 bytes) ;; HEADER SECTION ;; id = 8743 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . PLl+9ih2EjSeXwVRSr9192dpuW1iR/H7imiQxsGWRSw0TGHalP/e4M3DdX70vktkzGZTRR/2nYRm PDVai+R7738GYs0xo8/138KGBXg/kXnz66Vexj3dsV0TJbAYh//aazUnoJarvp62BDgaX55O7tnw v6u56q2/9RJV7cC842YOgraCrnSW6m2q088v3EBRfzMwL75vVJMF/VT11vdcfXVyY7jhd1NtYKu6 gpnS5KkrFs9Ir2ed71ZpcJf8hixV4u8JnIg/5/DcA3QHdUGxq8ABR0iTSl4O6E8GPgG4WaH5Di1w Q6yMNvGU/KwXU+KoP8x10HIloaao/2FUxzs2NA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . PLl+9ih2EjSeXwVRSr9192dpuW1iR/H7imiQxsGWRSw0TGHalP/e4M3DdX70vktkzGZTRR/2nYRm PDVai+R7738GYs0xo8/138KGBXg/kXnz66Vexj3dsV0TJbAYh//aazUnoJarvp62BDgaX55O7tnw v6u56q2/9RJV7cC842YOgraCrnSW6m2q088v3EBRfzMwL75vVJMF/VT11vdcfXVyY7jhd1NtYKu6 gpnS5KkrFs9Ir2ed71ZpcJf8hixV4u8JnIg/5/DcA3QHdUGxq8ABR0iTSl4O6E8GPgG4WaH5Di1w Q6yMNvGU/KwXU+KoP8x10HIloaao/2FUxzs2NA== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to y.nsset.be for be/DNSKEY
	Received 1317 bytes from 120.29.253.8
	;; Answer received from 120.29.253.8 (1317 bytes) ;; HEADER SECTION ;; id = 32389 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=59085 is now in the chain-of-trust
	DNSKEY=5955 is now in the chain-of-trust
	DNSKEY=46794 is now in the chain-of-trust
	Query to c.nsset.be for hendrickx.be/A
	Received 380 bytes from 194.0.43.1
	;; Answer received from 194.0.43.1 (380 bytes) ;; HEADER SECTION ;; id = 20944 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210626044418 20210604002330 59085 be. 3PPm3tBTeHqNuuvP5nhoU6V50QCtBA1LFIplJQcT3hkhSFgZQyxxW0SJhJdPShXQthawDxY1cpnN InVeCZs7a0Qm0SwAauL5A5Ip6U86P9RmKOkZG4tE188HxGkjk/miF+sJnF6rOTkKC1hvyTJQI/PL M00Db4ZIUCe3fQwSN9U= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Query to z.nsset.be for hendrickx.be/DNSKEY
	Received 380 bytes from 194.0.25.36
	;; Answer received from 194.0.25.36 (380 bytes) ;; HEADER SECTION ;; id = 26394 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210626044418 20210604002330 59085 be. 3PPm3tBTeHqNuuvP5nhoU6V50QCtBA1LFIplJQcT3hkhSFgZQyxxW0SJhJdPShXQthawDxY1cpnN InVeCZs7a0Qm0SwAauL5A5Ip6U86P9RmKOkZG4tE188HxGkjk/miF+sJnF6rOTkKC1hvyTJQI/PL M00Db4ZIUCe3fQwSN9U= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone hendrickx.be

hendrickx.be

	Checking DS between be and hendrickx.be
	Query to c.nsset.be for hendrickx.be/DS
	Received 251 bytes from 194.0.43.1
	;; Answer received from 194.0.43.1 (251 bytes) ;; HEADER SECTION ;; id = 30761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DS ;; ANSWER SECTION (2 records) hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210626044418 20210604002330 59085 be. 3PPm3tBTeHqNuuvP5nhoU6V50QCtBA1LFIplJQcT3hkhSFgZQyxxW0SJhJdPShXQthawDxY1cpnN InVeCZs7a0Qm0SwAauL5A5Ip6U86P9RmKOkZG4tE188HxGkjk/miF+sJnF6rOTkKC1hvyTJQI/PL M00Db4ZIUCe3fQwSN9U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 1 DS records for hendrickx.be in the be zone
	DS=3260/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210626044418 20210604002330 59085 be. 3PPm3tBTeHqNuuvP5nhoU6V50QCtBA1LFIplJQcT3hkhSFgZQyxxW0SJhJdPShXQthawDxY1cpnN InVeCZs7a0Qm0SwAauL5A5Ip6U86P9RmKOkZG4tE188HxGkjk/miF+sJnF6rOTkKC1hvyTJQI/PL M00Db4ZIUCe3fQwSN9U= )`
	RRSIG=59085 and DNSKEY=59085 verifies the DS RRset
	DS=3260/SHA-256 is now in the chain-of-trust
	`hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 )`
	Query to ns2.ghen.be for hendrickx.be/DNSKEY
	Received 229 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (229 bytes) ;; HEADER SECTION ;; id = 47450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260 hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. T9A/8J+18/jrleSctzYfswDv9lchA5j8DLWcdkRYbcEku/gv6H5hwlWY+YWq+rdDoBQ+o0Yvst5Z 4TK5fw9GLA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for hendrickx.be
	`hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260`
	DNSKEY=3260/SEP is now in the chain-of-trust
	DS=3260/SHA-256 verifies DNSKEY=3260/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. T9A/8J+18/jrleSctzYfswDv9lchA5j8DLWcdkRYbcEku/gv6H5hwlWY+YWq+rdDoBQ+o0Yvst5Z 4TK5fw9GLA== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the DNSKEY RRset
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 22224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. /9HBNyO9WYl4pWHWqqFgMIvf97UQ39sUcuUKGWPo63m57V6axVnM1Zb5WRnxaF6xbqocUmPcuCVy 9/IKEoAlwQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (347 bytes) ;; HEADER SECTION ;; id = 15369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1623126662 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. eqo8x2IsOhUJM93dQd0qdO6EKcdK6b0//9r5eXXpaUo/Qn5FUY6j2ppfDIADgMPqIbVVn2bEXJOL M7xve8pZ3Q== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. /9HBNyO9WYl4pWHWqqFgMIvf97UQ39sUcuUKGWPo63m57V6axVnM1Zb5WRnxaF6xbqocUmPcuCVy 9/IKEoAlwQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 37909 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. /9HBNyO9WYl4pWHWqqFgMIvf97UQ39sUcuUKGWPo63m57V6axVnM1Zb5WRnxaF6xbqocUmPcuCVy 9/IKEoAlwQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

hendrickx.be

	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 12162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. /9HBNyO9WYl4pWHWqqFgMIvf97UQ39sUcuUKGWPo63m57V6axVnM1Zb5WRnxaF6xbqocUmPcuCVy 9/IKEoAlwQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 21236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. /9HBNyO9WYl4pWHWqqFgMIvf97UQ39sUcuUKGWPo63m57V6axVnM1Zb5WRnxaF6xbqocUmPcuCVy 9/IKEoAlwQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210622043102 20210608033102 3260 hendrickx.be. N8FVKsnMFaTA81/U+s2N+6KRy9cwOt0jqEql9aJgn9lZmVQBZcdSkZCdd35RXex190TooFdeUvYm Nme7Qksvlg== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hendrickx.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: