DNSSEC Analyzer - hendrickx.be

Domain Name:

Time: 2021-04-22 10:39:35 UTC, NTP stratum 4

Analyzing DNSSEC problems for hendrickx.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 41136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to m.root-servers.net for hendrickx.be/A
	Received 790 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (790 bytes) ;; HEADER SECTION ;; id = 16672 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS b.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . XCgCkpq/1r2Ek2A8iHt/AAb54iWWppKCPwb1n2RH0s6JAcHDxw49JMRB2yUDVUoiXDX9t7gjSDkq Pk8hW7kf2j7fBd44n4tFNkWM7JYLmbbltOdQQJzdxJaRFHPTUFIeO2vhyBSat3F9zhdTpJGtkUJK maBVIb7TtiZfPLyuFZc2joYgIr9f25Z9u4gVXgbQ4L4RCTxVKhmRWxv51kAO181SHA3QBKjDokWN 5rOk6UgqCd1FY0PFz785FLCTJmnng9MU23ux5cCY3IgOJxtPQnJI+juiXQ1k4eNXOuU/mSMjJmOS djT/85b6ONoDUOjlRgoXaAWvkWqa/69d+lQh6A== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for be/DNSKEY
	Received 780 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (780 bytes) ;; HEADER SECTION ;; id = 44211 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . XCgCkpq/1r2Ek2A8iHt/AAb54iWWppKCPwb1n2RH0s6JAcHDxw49JMRB2yUDVUoiXDX9t7gjSDkq Pk8hW7kf2j7fBd44n4tFNkWM7JYLmbbltOdQQJzdxJaRFHPTUFIeO2vhyBSat3F9zhdTpJGtkUJK maBVIb7TtiZfPLyuFZc2joYgIr9f25Z9u4gVXgbQ4L4RCTxVKhmRWxv51kAO181SHA3QBKjDokWN 5rOk6UgqCd1FY0PFz785FLCTJmnng9MU23ux5cCY3IgOJxtPQnJI+juiXQ1k4eNXOuU/mSMjJmOS djT/85b6ONoDUOjlRgoXaAWvkWqa/69d+lQh6A== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN A 194.0.37.1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN A 194.0.43.1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN A 194.0.44.1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN A 120.29.253.8 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN A 194.0.25.36 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to e.root-servers.net for be/DS
	Received 414 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (414 bytes) ;; HEADER SECTION ;; id = 35209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . XCgCkpq/1r2Ek2A8iHt/AAb54iWWppKCPwb1n2RH0s6JAcHDxw49JMRB2yUDVUoiXDX9t7gjSDkq Pk8hW7kf2j7fBd44n4tFNkWM7JYLmbbltOdQQJzdxJaRFHPTUFIeO2vhyBSat3F9zhdTpJGtkUJK maBVIb7TtiZfPLyuFZc2joYgIr9f25Z9u4gVXgbQ4L4RCTxVKhmRWxv51kAO181SHA3QBKjDokWN 5rOk6UgqCd1FY0PFz785FLCTJmnng9MU23ux5cCY3IgOJxtPQnJI+juiXQ1k4eNXOuU/mSMjJmOS djT/85b6ONoDUOjlRgoXaAWvkWqa/69d+lQh6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . XCgCkpq/1r2Ek2A8iHt/AAb54iWWppKCPwb1n2RH0s6JAcHDxw49JMRB2yUDVUoiXDX9t7gjSDkq Pk8hW7kf2j7fBd44n4tFNkWM7JYLmbbltOdQQJzdxJaRFHPTUFIeO2vhyBSat3F9zhdTpJGtkUJK maBVIb7TtiZfPLyuFZc2joYgIr9f25Z9u4gVXgbQ4L4RCTxVKhmRWxv51kAO181SHA3QBKjDokWN 5rOk6UgqCd1FY0PFz785FLCTJmnng9MU23ux5cCY3IgOJxtPQnJI+juiXQ1k4eNXOuU/mSMjJmOS djT/85b6ONoDUOjlRgoXaAWvkWqa/69d+lQh6A== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to y.nsset.be for be/DNSKEY
	Received 1317 bytes from 120.29.253.8
	;; Answer received from 120.29.253.8 (1317 bytes) ;; HEADER SECTION ;; id = 54065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955 be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085`
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=46794 is now in the chain-of-trust
	DNSKEY=5955 is now in the chain-of-trust
	DNSKEY=59085 is now in the chain-of-trust
	Query to z.nsset.be for hendrickx.be/A
	Received 380 bytes from 194.0.25.36
	;; Answer received from 194.0.25.36 (380 bytes) ;; HEADER SECTION ;; id = 15054 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to a.nsset.be for hendrickx.be/DNSKEY
	Received 380 bytes from 194.0.6.1
	;; Answer received from 194.0.6.1 (380 bytes) ;; HEADER SECTION ;; id = 63593 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found child zone hendrickx.be

hendrickx.be

	Checking DS between be and hendrickx.be
	Query to d.nsset.be for hendrickx.be/DS
	Received 251 bytes from 194.0.44.1
	;; Answer received from 194.0.44.1 (251 bytes) ;; HEADER SECTION ;; id = 18378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DS ;; ANSWER SECTION (2 records) hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 1 DS records for hendrickx.be in the be zone
	DS=3260/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= )`
	RRSIG=59085 and DNSKEY=59085 verifies the DS RRset
	DS=3260/SHA-256 is now in the chain-of-trust
	`hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 )`
	Query to ns1.ghen.be for hendrickx.be/DNSKEY
	Received 229 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (229 bytes) ;; HEADER SECTION ;; id = 3939 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260 hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. t/msHGiHZueag2pylYqvRXFc3tV6x5n2XJQITAa4sU/4BBeQyU09Jii/ZAUKdLqBlT9fTgRD9lF1 bL2oxuX5aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for hendrickx.be
	`hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260`
	DNSKEY=3260/SEP is now in the chain-of-trust
	DS=3260/SHA-256 verifies DNSKEY=3260/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. t/msHGiHZueag2pylYqvRXFc3tV6x5n2XJQITAa4sU/4BBeQyU09Jii/ZAUKdLqBlT9fTgRD9lF1 bL2oxuX5aw== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the DNSKEY RRset
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 24695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns2.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (347 bytes) ;; HEADER SECTION ;; id = 46852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1618893061 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. 1eEUNHArAMsOMlCUkyvrQINAiyrGMYc3iuSqUcZDvHGBTRhZ1bA3q+DCpr2Ey+d/GDRhRAB16BDc NVZ9Zop5dw== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 46321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

hendrickx.be

	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 59690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 60895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hendrickx.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: