DNSSEC Analyzer - netfactory.dk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-22 09:58:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 13760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to f.root-servers.net for netfactory.dk/A
	Received 713 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (713 bytes) ;; HEADER SECTION ;; id = 10411 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . vCJC6r/NARHEOQQxdfxqFlOIuB85FvLYN+upai7lxzDTM0ApVzGeApkidH/GMIs/pEEtbErnLMFx EkFzohvtNgQ2ZQrU0Pqft3j3BSusG5yKzfBKJ9TfTBNleNgmrZ1lBfbjhF/sJwjMgQkOZoza9fCo AXr9PSrx0FT3ErPZQjzb0Vkt3b6JqRyfzpQip8Cn7MbS5k5d/nxOOXqIAt3aYG78wnCYGc6Uj2Ud /GAqRp1K6m70N6tSj/9pc7gMReDmkTydomne6Vp6GQGTmYbEupyYZt/GqkciwlLLRL3tENE+O7ax vVD7BGolMyZbkp4yctgELN+b+LUeko+TxJ9+Lw== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN A 192.38.7.242 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to f.root-servers.net for dk/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for dk/DNSKEY: 'IPv6 transport disabled'
	Received 702 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (702 bytes) ;; HEADER SECTION ;; id = 69 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . vCJC6r/NARHEOQQxdfxqFlOIuB85FvLYN+upai7lxzDTM0ApVzGeApkidH/GMIs/pEEtbErnLMFx EkFzohvtNgQ2ZQrU0Pqft3j3BSusG5yKzfBKJ9TfTBNleNgmrZ1lBfbjhF/sJwjMgQkOZoza9fCo AXr9PSrx0FT3ErPZQjzb0Vkt3b6JqRyfzpQip8Cn7MbS5k5d/nxOOXqIAt3aYG78wnCYGc6Uj2Ud /GAqRp1K6m70N6tSj/9pc7gMReDmkTydomne6Vp6GQGTmYbEupyYZt/GqkciwlLLRL3tENE+O7ax vVD7BGolMyZbkp4yctgELN+b+LUeko+TxJ9+Lw== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN A 192.38.7.242 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to f.root-servers.net for dk/DS
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for dk/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (366 bytes) ;; HEADER SECTION ;; id = 22355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . vCJC6r/NARHEOQQxdfxqFlOIuB85FvLYN+upai7lxzDTM0ApVzGeApkidH/GMIs/pEEtbErnLMFx EkFzohvtNgQ2ZQrU0Pqft3j3BSusG5yKzfBKJ9TfTBNleNgmrZ1lBfbjhF/sJwjMgQkOZoza9fCo AXr9PSrx0FT3ErPZQjzb0Vkt3b6JqRyfzpQip8Cn7MbS5k5d/nxOOXqIAt3aYG78wnCYGc6Uj2Ud /GAqRp1K6m70N6tSj/9pc7gMReDmkTydomne6Vp6GQGTmYbEupyYZt/GqkciwlLLRL3tENE+O7ax vVD7BGolMyZbkp4yctgELN+b+LUeko+TxJ9+Lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20190505050000 20190422040000 25266 . vCJC6r/NARHEOQQxdfxqFlOIuB85FvLYN+upai7lxzDTM0ApVzGeApkidH/GMIs/pEEtbErnLMFx EkFzohvtNgQ2ZQrU0Pqft3j3BSusG5yKzfBKJ9TfTBNleNgmrZ1lBfbjhF/sJwjMgQkOZoza9fCo AXr9PSrx0FT3ErPZQjzb0Vkt3b6JqRyfzpQip8Cn7MbS5k5d/nxOOXqIAt3aYG78wnCYGc6Uj2Ud /GAqRp1K6m70N6tSj/9pc7gMReDmkTydomne6Vp6GQGTmYbEupyYZt/GqkciwlLLRL3tENE+O7ax vVD7BGolMyZbkp4yctgELN+b+LUeko+TxJ9+Lw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to s.nic.dk for dk/DNSKEY
	Received 1149 bytes from 193.176.144.15
	;; Answer received from 193.176.144.15 (1149 bytes) ;; HEADER SECTION ;; id = 36749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (4 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAbZegB9UzWxo4oTYHQofRUmM2kTMp8bR5u7wy8hm2/2LfIv6PrBFpH4MXph4TL3WafQmAWqz 2XsAwJWUYdPEQwW7CN1EmErnYBrqRu5VQ2+b7O3SAh1oqFwGXNx0sHqgqCYrUSwns5xclkEn16YV 08y0RfuAoH085C/VqqHBixrKWiSz8vj+TmWBgiP9ocpMWjqnjxrEsyAZIznFOElAANYde3mBPgoH 8AVea4a93bJCi+0qTg4vwDVgfA11c1FXs9mqpTv6cmgrKPTAiw5QjDbu2QaXykWB2wyfZ1F9hlCC KNUYA73GXOf/Tqf5qsU8xUbmn3YPzueFvnd6Z+TMdRc= ) ; Key ID = 53079 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN DNSKEY ( 256 3 8 AwEAAaIGYc3tp/KaX8l925IYC8eDBXq3Rd5/cT0t05O88E2h1NTckhWURiBQfZofFGFFSA1ZNEGB WJQItvz+KKW1LBa56W8XHtofkPqbpun3430tDaS0KBJFoIpOvrJ5yw9gZ5sBzRWbt7UF313q5F7i +UYxK8UopwNo5vdQDnWhbw5Y/K9ZYJGDUVpbO8LpQDN8ncNKwI8Czz3oKB2FJXknY0zDTHhAms1R klmHh+N14g2itmycW8W+SYE/6LYcpbMPhTkQQM1+E8k1GQM0LnbQvhQqS2EU66qEzMIko7F0WzAR ZmNpDlYOzkpRf6ZOpRiU7zEMkaJM5TOVgxFSU49lVg8= ) ; Key ID = 37881 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190518163710 20190420140358 32195 dk. GC1Sot7Cl13yt4SHXyYzvN6EP1nLaYAAQ4J1s4o1gFOTap+0nyt1cJ4uFpY16ksm+y1AUtUfXK6D RXtXwAxDbfAaghZRszTUV/mtc/cjjfXCrXOBRfKJ09sZIYpt1/oQDIy/NVm6jU+rlE3fYNlHBI9/ SSKinyXbaqbbkXz6Wwv4Gsy5rQ0UaNZEpMIm/5x+iXrGc4vBSWFheJf13y7sBctPuDzmXUPVD2d/ GRsMieBku/ciXSlPl01NgW6Oy+OnHnk4IulcBuYE+7F6XolRO8F0OYyc2CgOrMJPMqw0fpi9gUS9 1pdfGzBSDDPsAerlmUzx8JKkQSO+XV+Ln8+Abg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAbZegB9UzWxo4oTYHQofRUmM2kTMp8bR5u7wy8hm2/2LfIv6PrBFpH4MXph4TL3WafQmAWqz 2XsAwJWUYdPEQwW7CN1EmErnYBrqRu5VQ2+b7O3SAh1oqFwGXNx0sHqgqCYrUSwns5xclkEn16YV 08y0RfuAoH085C/VqqHBixrKWiSz8vj+TmWBgiP9ocpMWjqnjxrEsyAZIznFOElAANYde3mBPgoH 8AVea4a93bJCi+0qTg4vwDVgfA11c1FXs9mqpTv6cmgrKPTAiw5QjDbu2QaXykWB2wyfZ1F9hlCC KNUYA73GXOf/Tqf5qsU8xUbmn3YPzueFvnd6Z+TMdRc= ) ; Key ID = 53079`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAaIGYc3tp/KaX8l925IYC8eDBXq3Rd5/cT0t05O88E2h1NTckhWURiBQfZofFGFFSA1ZNEGB WJQItvz+KKW1LBa56W8XHtofkPqbpun3430tDaS0KBJFoIpOvrJ5yw9gZ5sBzRWbt7UF313q5F7i +UYxK8UopwNo5vdQDnWhbw5Y/K9ZYJGDUVpbO8LpQDN8ncNKwI8Czz3oKB2FJXknY0zDTHhAms1R klmHh+N14g2itmycW8W+SYE/6LYcpbMPhTkQQM1+E8k1GQM0LnbQvhQqS2EU66qEzMIko7F0WzAR ZmNpDlYOzkpRf6ZOpRiU7zEMkaJM5TOVgxFSU49lVg8= ) ; Key ID = 37881`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190518163710 20190420140358 32195 dk. GC1Sot7Cl13yt4SHXyYzvN6EP1nLaYAAQ4J1s4o1gFOTap+0nyt1cJ4uFpY16ksm+y1AUtUfXK6D RXtXwAxDbfAaghZRszTUV/mtc/cjjfXCrXOBRfKJ09sZIYpt1/oQDIy/NVm6jU+rlE3fYNlHBI9/ SSKinyXbaqbbkXz6Wwv4Gsy5rQ0UaNZEpMIm/5x+iXrGc4vBSWFheJf13y7sBctPuDzmXUPVD2d/ GRsMieBku/ciXSlPl01NgW6Oy+OnHnk4IulcBuYE+7F6XolRO8F0OYyc2CgOrMJPMqw0fpi9gUS9 1pdfGzBSDDPsAerlmUzx8JKkQSO+XV+Ln8+Abg== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=53079 is now in the chain-of-trust
	DNSKEY=37881 is now in the chain-of-trust
	Query to l.nic.dk for netfactory.dk/A
	Received 855 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (855 bytes) ;; HEADER SECTION ;; id = 1985 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 321kqnf4aoi442be5qrakt25c84nlg4k A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 9mvofrusmoe4rravn8rrqcnej1plo88l NS DS RRSIG ) 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517105618 20190419190349 37881 dk. Tct6xkN4bP7QlH/iV6fatRZdE+TP5FDrCgizZxn2PrHmbxU9NBqQ5WR6LaMqhQNLQxo0bFnwX//u sUV5dgtzuuntvmomqgvlWszdN3ppAjxcJvFB9T23kS4ZhHK8Sbi5I1jgKohUrBHPkXKb2P9/rfTx eKZcukKS5MYaSj7q7jf2+/rqjz2OrnO19vd4H2M0R3mqG20oTIPdD0MTSiKriMQmgxpBJ3n1GiqN jmzep45Qv+Ph44rhIgpEmI8hqTlqXWZ8uyrVziToYxFRf2RqXkXF25Vne3QVRmg2xWWUIeIvdKOc fBeL9wMzm7jJa6vXtoT93/P6+AGlzfBEBaDFpw== ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517222505 20190420090350 37881 dk. m8RSQXLimszEvgPmcvU9TKDU1NaIUfq0lprifeTC75TrzrR3gE7KedaxbaegUQ9K9ysQx1JShD4J gkbboEZ0UwxyI3pb5j3p5czjxOPy59Jt+0BtJh9DdoQxEmod4fJUJ2Yp2A8xZL/IDnViB8Iifhdl 9VSNjAlhX5ovfbWhwift06WHpKnFrDcjRaCtLY3V3hlQ0ZqJfcnRFwmZoUl6OaI25Z7MG9NbGG59 pbut+ptTkW/GCqoMxozKKkrBRkHjR41i3lKTpCNeZJ2mx4HUxq4Zz8jvs0K4174Tllik/EBcPQZD nXKJilgKb7oPOBb2GGFI7/V5eTHH/BwQZGccnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.nic.dk for netfactory.dk/DNSKEY
	Error querying l.nic.dk/2001:7f8:1f:0:0:1835:242:0 for netfactory.dk/DNSKEY: 'IPv6 transport disabled'
	Received 855 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (855 bytes) ;; HEADER SECTION ;; id = 56590 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 321kqnf4aoi442be5qrakt25c84nlg4k A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 9mvofrusmoe4rravn8rrqcnej1plo88l NS DS RRSIG ) 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517105618 20190419190349 37881 dk. Tct6xkN4bP7QlH/iV6fatRZdE+TP5FDrCgizZxn2PrHmbxU9NBqQ5WR6LaMqhQNLQxo0bFnwX//u sUV5dgtzuuntvmomqgvlWszdN3ppAjxcJvFB9T23kS4ZhHK8Sbi5I1jgKohUrBHPkXKb2P9/rfTx eKZcukKS5MYaSj7q7jf2+/rqjz2OrnO19vd4H2M0R3mqG20oTIPdD0MTSiKriMQmgxpBJ3n1GiqN jmzep45Qv+Ph44rhIgpEmI8hqTlqXWZ8uyrVziToYxFRf2RqXkXF25Vne3QVRmg2xWWUIeIvdKOc fBeL9wMzm7jJa6vXtoT93/P6+AGlzfBEBaDFpw== ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517222505 20190420090350 37881 dk. m8RSQXLimszEvgPmcvU9TKDU1NaIUfq0lprifeTC75TrzrR3gE7KedaxbaegUQ9K9ysQx1JShD4J gkbboEZ0UwxyI3pb5j3p5czjxOPy59Jt+0BtJh9DdoQxEmod4fJUJ2Yp2A8xZL/IDnViB8Iifhdl 9VSNjAlhX5ovfbWhwift06WHpKnFrDcjRaCtLY3V3hlQ0ZqJfcnRFwmZoUl6OaI25Z7MG9NbGG59 pbut+ptTkW/GCqoMxozKKkrBRkHjR41i3lKTpCNeZJ2mx4HUxq4Zz8jvs0K4174Tllik/EBcPQZD nXKJilgKb7oPOBb2GGFI7/V5eTHH/BwQZGccnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to s.nic.dk for netfactory.dk/DS
	Received 1148 bytes from 193.176.144.15
	;; Answer received from 193.176.144.15 (1148 bytes) ;; HEADER SECTION ;; id = 12715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 321kqnf4aoi442be5qrakt25c84nlg4k A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 320trpjnb5r8i62j3o45brhp1slu70uv.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517105618 20190419190349 37881 dk. Tct6xkN4bP7QlH/iV6fatRZdE+TP5FDrCgizZxn2PrHmbxU9NBqQ5WR6LaMqhQNLQxo0bFnwX//u sUV5dgtzuuntvmomqgvlWszdN3ppAjxcJvFB9T23kS4ZhHK8Sbi5I1jgKohUrBHPkXKb2P9/rfTx eKZcukKS5MYaSj7q7jf2+/rqjz2OrnO19vd4H2M0R3mqG20oTIPdD0MTSiKriMQmgxpBJ3n1GiqN jmzep45Qv+Ph44rhIgpEmI8hqTlqXWZ8uyrVziToYxFRf2RqXkXF25Vne3QVRmg2xWWUIeIvdKOc fBeL9wMzm7jJa6vXtoT93/P6+AGlzfBEBaDFpw== ) dk. 600 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1555923660 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 600 ;minimum ) dk. 600 IN RRSIG ( SOA 8 1 86400 20190520173046 20190422080348 37881 dk. ECdG4jyfIl5rRFLcFDXB0x8Vp9lHCQXqm4SXJ1lBZuhR/inwfisTNcah5BBzK2TLzmlu1WStA9ac aFeKuMXj9/2hG7+dpHIhsrwJRBQXHcMzZUMLJdyP5If3aT3zGsPIJTWeuFBKTSCwLAa631SktWHL 3hBbkZkvnUwJqtlgVfrI7xaxfuKr0D6lCt+tLbEtQi0E+A5QfUhPkVmszvicYStsYgQ1yY61wIZP LTt09XvIsfh0EuP+nbxXTfm3n3H+0rG6MkTT+idBLtA1QlHlJZdSUOGPi+LU9bKmOD4XKHOjEGeP tze+iLi6ZiJk/jQ8bMimohA4Tlcg0CfMe3CX1w== ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN NSEC3 ( 1 1 17 190284e62dd070d0 9mvofrusmoe4rravn8rrqcnej1plo88l NS DS RRSIG ) 9mtmfeotm011cdjqt6rm1q27ltn6nt1k.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190517222505 20190420090350 37881 dk. m8RSQXLimszEvgPmcvU9TKDU1NaIUfq0lprifeTC75TrzrR3gE7KedaxbaegUQ9K9ysQx1JShD4J gkbboEZ0UwxyI3pb5j3p5czjxOPy59Jt+0BtJh9DdoQxEmod4fJUJ2Yp2A8xZL/IDnViB8Iifhdl 9VSNjAlhX5ovfbWhwift06WHpKnFrDcjRaCtLY3V3hlQ0ZqJfcnRFwmZoUl6OaI25Z7MG9NbGG59 pbut+ptTkW/GCqoMxozKKkrBRkHjR41i3lKTpCNeZJ2mx4HUxq4Zz8jvs0K4174Tllik/EBcPQZD nXKJilgKb7oPOBb2GGFI7/V5eTHH/BwQZGccnQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/DNSKEY
	Error querying gerald.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3ba8 for netfactory.dk/DNSKEY: 'IPv6 transport disabled'
	Received 311 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (311 bytes) ;; HEADER SECTION ;; id = 47792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190518085505 20190319085505 2371 netfactory.dk. Y1wsQ1V/FbIG0ZZFt9kcvyjaE4aKDj7iAhLETACmi8+4/0B36jdiug1kwQq0+EmYn27ocjhnCLa4 LLBD6+i3QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190518085505 20190319085505 2371 netfactory.dk. Y1wsQ1V/FbIG0ZZFt9kcvyjaE4aKDj7iAhLETACmi8+4/0B36jdiug1kwQq0+EmYn27ocjhnCLa4 LLBD6+i3QA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 5444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20190423105834 20190421085834 34505 netfactory.dk. Ke9bkb5u5K8wgFa1jxFnn7KKoh/U3kfkzI6mqSJgTgaGOMUG0p3SGvRHlDRW/c7mGPv3WxkCnhe2 fBlHoXTWlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (214 bytes) ;; HEADER SECTION ;; id = 31812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2030724430 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20190423105834 20190421085834 34505 netfactory.dk. A2ioRW8pZ4pMtAQb9V6zQzmuA39fA2+0+M8k0+rcs/Cfl/SqcunPrORYttf52GJMVyUX+P9x6B2k liy9HJ4cPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Error querying betty.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a4b for netfactory.dk/SOA: 'IPv6 transport disabled'
	Received 214 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (214 bytes) ;; HEADER SECTION ;; id = 56345 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2030724430 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20190423105834 20190421085834 34505 netfactory.dk. JWmP8F0QMCA5D0qtL16Egn0uHGbilqcS4Fy7vm/1ugmYB5Z99kupua2Y+aC8uOWMxbahUmkh+SX6 Ka+JE6VXlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 39812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20190423105834 20190421085834 34505 netfactory.dk. uXQb2YDxwJpKuS5dY3W/i9nZ7+bGABs54hRvjsdJrEDub+0NcxscQ96G6pNrxKDA54hNqy/KresB fa9uc3zHMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20190423105834 20190421085834 34505 netfactory.dk. uXQb2YDxwJpKuS5dY3W/i9nZ7+bGABs54hRvjsdJrEDub+0NcxscQ96G6pNrxKDA54hNqy/KresB fa9uc3zHMA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: