DNSSEC Analyzer - netfactory.dk

Domain Name:

Time: 2020-01-26 04:58:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 33182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200211000000 20200121000000 20326 . UaaPoqlBlRixcabCWMJ9jVvevx+Sp8W5rMt06Tozfg/gefIspEKxw4fx22mRaAQZzdHq9Lt+Who4 YpUX95CDrgDYtYJ9NOyICRNlWnY9FNqOW0AreCmEK0qqS52xYb72hJYpFrCILGLD6jl4Ar0LFi29 iXnVLQ99+SvD8PPHHkEiIu1WhlES7taEavtbKijyjLYXwagQxSQCzMgkbWN1+S78kJGZEMaBODTZ uiiGIw5Jy3OPAQxHQyLTElR5ZuEg59/sSnTCEfmoXcxG9/g6O1qWs6d9hDVadKfXhHr8OTXGoB25 Ttp3CyZGdSqRkCwwJpWJ9SlaL+khcJoLFqwm8w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to i.root-servers.net for netfactory.dk/A
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 741 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (741 bytes) ;; HEADER SECTION ;; id = 11288 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . TyiWKtjy8q0nbx2ZA0vacJuZGjXH8KcT0CIDzlj0YgX4KKyUyqdDiQLIUjCorIB51cyYom1MU2pP HAHJX2nw5LAlndn36xe3GQ0ydoD3S0m0jnW+rCbgo68Zv/io7Gesrnx117bI0DoyR8hdAfu4e10p sMczbyI4WLzLcYC8/91056GzACDVp7ba46WHv4zVtyhZqYdq4MQ9A2U0eK4vfvBbVW60bhazYiq7 5k30AM2SmpcaUVgtxkxf93H3RsJ+0/VPoAyowC+xWXXJ1BmL6WHIVevqJL1OB31YR+F6m03YoJ5/ n0RnVT40u72FnWZ3l6h2wbeJKILfWEhFMmLCFg== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN A 192.38.7.242 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for dk/DNSKEY
	Received 730 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (730 bytes) ;; HEADER SECTION ;; id = 59630 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . TyiWKtjy8q0nbx2ZA0vacJuZGjXH8KcT0CIDzlj0YgX4KKyUyqdDiQLIUjCorIB51cyYom1MU2pP HAHJX2nw5LAlndn36xe3GQ0ydoD3S0m0jnW+rCbgo68Zv/io7Gesrnx117bI0DoyR8hdAfu4e10p sMczbyI4WLzLcYC8/91056GzACDVp7ba46WHv4zVtyhZqYdq4MQ9A2U0eK4vfvBbVW60bhazYiq7 5k30AM2SmpcaUVgtxkxf93H3RsJ+0/VPoAyowC+xWXXJ1BmL6WHIVevqJL1OB31YR+F6m03YoJ5/ n0RnVT40u72FnWZ3l6h2wbeJKILfWEhFMmLCFg== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to j.root-servers.net for dk/DS
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for dk/DS: 'IPv6 transport disabled'
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 22319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . TyiWKtjy8q0nbx2ZA0vacJuZGjXH8KcT0CIDzlj0YgX4KKyUyqdDiQLIUjCorIB51cyYom1MU2pP HAHJX2nw5LAlndn36xe3GQ0ydoD3S0m0jnW+rCbgo68Zv/io7Gesrnx117bI0DoyR8hdAfu4e10p sMczbyI4WLzLcYC8/91056GzACDVp7ba46WHv4zVtyhZqYdq4MQ9A2U0eK4vfvBbVW60bhazYiq7 5k30AM2SmpcaUVgtxkxf93H3RsJ+0/VPoAyowC+xWXXJ1BmL6WHIVevqJL1OB31YR+F6m03YoJ5/ n0RnVT40u72FnWZ3l6h2wbeJKILfWEhFMmLCFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20200207200000 20200125190000 33853 . TyiWKtjy8q0nbx2ZA0vacJuZGjXH8KcT0CIDzlj0YgX4KKyUyqdDiQLIUjCorIB51cyYom1MU2pP HAHJX2nw5LAlndn36xe3GQ0ydoD3S0m0jnW+rCbgo68Zv/io7Gesrnx117bI0DoyR8hdAfu4e10p sMczbyI4WLzLcYC8/91056GzACDVp7ba46WHv4zVtyhZqYdq4MQ9A2U0eK4vfvBbVW60bhazYiq7 5k30AM2SmpcaUVgtxkxf93H3RsJ+0/VPoAyowC+xWXXJ1BmL6WHIVevqJL1OB31YR+F6m03YoJ5/ n0RnVT40u72FnWZ3l6h2wbeJKILfWEhFMmLCFg== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to l.nic.dk for dk/DNSKEY
	Error querying l.nic.dk/2001:7f8:1f:0:0:1835:242:0 for dk/DNSKEY: 'IPv6 transport disabled'
	Received 873 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (873 bytes) ;; HEADER SECTION ;; id = 48898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdnozB0w3Z3dN2HRI3ZfwNmOFMxnU+MnnIoUieldHpREmtyMgr6kzeKzq59b5vGV048iX/ds Y1zMap+W9PJ8iQM1p0E5EZVp2iEMrdz3DoMINsQUhy2ZVxZYQWBFQk6hHR1f9RVE1io3SfCQT2KL syuyd9DtVEdTBVqvCdmKJTZou5viC1aaq+hMemEkeO/u+qEwP7jMxhT/rpr/ZiMuTRuq1pq6RBQ+ B75beIzsrLVGOGFYEqthbT+Zo1/SkSB/9YpEN+cjvsI9CN7v5q/UfdXxoum3bCK4nAFl2Wgy/pHu xZLUp6F9B63htE73njwKZS52NdA5ln13kkRJNYxTvk8= ) ; Key ID = 28638 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200223000802 20200125223802 32195 dk. l5ulvV8DwgPLK0WtWaKj5UY/U+D840BQvDz5AN36Fyx82n4E6luVbmyu2o87pFZVC8Yil1+YyAFD Gcs0w2Th7XdrYODYW7r0eyenVuzzg17+Amx8FbiUr3ctp3a/mxBlCsv3C9uDODTmNqIC1h2qjB/s g4MX3fs8eF6+VQcZpNcVaokld07EHo6vyzu6t0rT2S9btH//YPpgt08qwPA/kXsob7muAlItI8Kq VCeXTAAeLe8y7QGv+aPGfM0N09hyQyGmVUW1tLSuPZwwGX7qbguIktVYdHnk5soa+QwZraAgLEEd T4TUQQCm12FSszluf/zRLtpe8c7k2qxRIIcv4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdnozB0w3Z3dN2HRI3ZfwNmOFMxnU+MnnIoUieldHpREmtyMgr6kzeKzq59b5vGV048iX/ds Y1zMap+W9PJ8iQM1p0E5EZVp2iEMrdz3DoMINsQUhy2ZVxZYQWBFQk6hHR1f9RVE1io3SfCQT2KL syuyd9DtVEdTBVqvCdmKJTZou5viC1aaq+hMemEkeO/u+qEwP7jMxhT/rpr/ZiMuTRuq1pq6RBQ+ B75beIzsrLVGOGFYEqthbT+Zo1/SkSB/9YpEN+cjvsI9CN7v5q/UfdXxoum3bCK4nAFl2Wgy/pHu xZLUp6F9B63htE73njwKZS52NdA5ln13kkRJNYxTvk8= ) ; Key ID = 28638`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200223000802 20200125223802 32195 dk. l5ulvV8DwgPLK0WtWaKj5UY/U+D840BQvDz5AN36Fyx82n4E6luVbmyu2o87pFZVC8Yil1+YyAFD Gcs0w2Th7XdrYODYW7r0eyenVuzzg17+Amx8FbiUr3ctp3a/mxBlCsv3C9uDODTmNqIC1h2qjB/s g4MX3fs8eF6+VQcZpNcVaokld07EHo6vyzu6t0rT2S9btH//YPpgt08qwPA/kXsob7muAlItI8Kq VCeXTAAeLe8y7QGv+aPGfM0N09hyQyGmVUW1tLSuPZwwGX7qbguIktVYdHnk5soa+QwZraAgLEEd T4TUQQCm12FSszluf/zRLtpe8c7k2qxRIIcv4g== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=28638 is now in the chain-of-trust
	Query to c.nic.dk for netfactory.dk/A
	Received 855 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (855 bytes) ;; HEADER SECTION ;; id = 9527 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 6fr3478gapg27m3va0hu5173b9bsken1 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 tknsnjsuonaspkr1n1q2mqah63p4ecn2 NS DS RRSIG ) 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223000802 20200125223802 28638 dk. u4yL4/gTgwWTOfJYvi/qFM2RATEqYQa6Gkd/+9grucruKs1lwXimYHE0rmn3hJjaJ8P+rekhU8HK EoPP/ud+8fkkdO/0ebHumpWDbL6WZ6kjstjq9vEYZDYeGtodovh+MLroH++gv+J+3bsKPz8i+Yw4 evKCg/L1jvbXIkymzpSM7Hl9DXKdhcn6D5aI7vI9MZNY1ut4JVZIusy2Y+wfhPf68yQJPdjRsXBa DilGn1YnYvqqSVOFwu9RuKCBZjrZVkgaBsqXsowaZksXtUY2n42dRPh5sIcZCb6yZL1Qxn+FkS4v 3vHDyvwzT26iklfWx4ZuzbKTGRm9mazQOrmrzQ== ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223010732 20200125233732 28638 dk. KcYLHxz5Hwt0DgcvSHwenXHyHAeg1KffcrLOb+IOb9Cm5DDMfFVCKhvoyFH6C4oKInzdu5gbNQIn HdhCe6V7mb1ohS3bz2GBG/G9h4LaL1vVb43JNnG/zAyvXFtqnPCEbE3iZaOK9jEjCRTXLizV1XTX Hx1oLAmhntQ/kdrywbY27DSCPvm4PMPXKD8A7EKDj/NWXPoB38gHe9M/CslIi1fXAKq/4GPfLMQn vmeQGJx7rY24gafkhJ2nrduKmvXc4/wz3Y4ryoeB5RXiUu0wmR2zbStHJt53lQ2NkrsidplErNHq dLXXbnnn9BnUMiaf1cxJBNcSWpdlixd/RMNFIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.dk for netfactory.dk/DNSKEY
	Received 855 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (855 bytes) ;; HEADER SECTION ;; id = 46194 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 6fr3478gapg27m3va0hu5173b9bsken1 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223000802 20200125223802 28638 dk. u4yL4/gTgwWTOfJYvi/qFM2RATEqYQa6Gkd/+9grucruKs1lwXimYHE0rmn3hJjaJ8P+rekhU8HK EoPP/ud+8fkkdO/0ebHumpWDbL6WZ6kjstjq9vEYZDYeGtodovh+MLroH++gv+J+3bsKPz8i+Yw4 evKCg/L1jvbXIkymzpSM7Hl9DXKdhcn6D5aI7vI9MZNY1ut4JVZIusy2Y+wfhPf68yQJPdjRsXBa DilGn1YnYvqqSVOFwu9RuKCBZjrZVkgaBsqXsowaZksXtUY2n42dRPh5sIcZCb6yZL1Qxn+FkS4v 3vHDyvwzT26iklfWx4ZuzbKTGRm9mazQOrmrzQ== ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 tknsnjsuonaspkr1n1q2mqah63p4ecn2 NS DS RRSIG ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223010732 20200125233732 28638 dk. KcYLHxz5Hwt0DgcvSHwenXHyHAeg1KffcrLOb+IOb9Cm5DDMfFVCKhvoyFH6C4oKInzdu5gbNQIn HdhCe6V7mb1ohS3bz2GBG/G9h4LaL1vVb43JNnG/zAyvXFtqnPCEbE3iZaOK9jEjCRTXLizV1XTX Hx1oLAmhntQ/kdrywbY27DSCPvm4PMPXKD8A7EKDj/NWXPoB38gHe9M/CslIi1fXAKq/4GPfLMQn vmeQGJx7rY24gafkhJ2nrduKmvXc4/wz3Y4ryoeB5RXiUu0wmR2zbStHJt53lQ2NkrsidplErNHq dLXXbnnn9BnUMiaf1cxJBNcSWpdlixd/RMNFIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to p.nic.dk for netfactory.dk/DS
	Received 1152 bytes from 194.0.47.42
	;; Answer received from 194.0.47.42 (1152 bytes) ;; HEADER SECTION ;; id = 13915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 6fr3478gapg27m3va0hu5173b9bsken1 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 6fqsf5ksf06nfkqkrh41h9becahdpset.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223000802 20200125223802 28638 dk. u4yL4/gTgwWTOfJYvi/qFM2RATEqYQa6Gkd/+9grucruKs1lwXimYHE0rmn3hJjaJ8P+rekhU8HK EoPP/ud+8fkkdO/0ebHumpWDbL6WZ6kjstjq9vEYZDYeGtodovh+MLroH++gv+J+3bsKPz8i+Yw4 evKCg/L1jvbXIkymzpSM7Hl9DXKdhcn6D5aI7vI9MZNY1ut4JVZIusy2Y+wfhPf68yQJPdjRsXBa DilGn1YnYvqqSVOFwu9RuKCBZjrZVkgaBsqXsowaZksXtUY2n42dRPh5sIcZCb6yZL1Qxn+FkS4v 3vHDyvwzT26iklfWx4ZuzbKTGRm9mazQOrmrzQ== ) dk. 300 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1580014442 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 300 ;minimum ) dk. 300 IN RRSIG ( SOA 8 1 86400 20200223045402 20200126032402 28638 dk. op0Bpkw+DwQq6y+kfLNjh7MkwTLu0uCMiPVZ/i0sxiiz4f8uK+Oj14+tUkKeXPul0a2ix/FCJPMd QNZ4+dxzWH1WDfTdejF7icvUuK3ao6Q8OA2PiqJt0pjMn549oaZfdu9Qg+rl97eCrMQbNxNwGJ7V C5JiMsJKM/ZcyqWVxZ33O0ZVIfuyn92RMt6pozSv6mbzJfbaqlrBk+tUIY+DrOrnArZMDM0VrAlT coJV8IW27PIGcWCzBQM4tTSzuzwl45QLkkyC1qIdurwNshGfFRTMUIMLOLIfkJliHkiG6AxQxVhR JSOhl/vYtko01mI8reDSx9M0wBCsaZbZFdI7GQ== ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN NSEC3 ( 1 1 17 8686b26fdf03caf3 tknsnjsuonaspkr1n1q2mqah63p4ecn2 NS DS RRSIG ) tknbnb1pe134vf3fk2in82i1adio81rk.dk. 300 IN RRSIG ( NSEC3 8 2 300 20200223010732 20200125233732 28638 dk. KcYLHxz5Hwt0DgcvSHwenXHyHAeg1KffcrLOb+IOb9Cm5DDMfFVCKhvoyFH6C4oKInzdu5gbNQIn HdhCe6V7mb1ohS3bz2GBG/G9h4LaL1vVb43JNnG/zAyvXFtqnPCEbE3iZaOK9jEjCRTXLizV1XTX Hx1oLAmhntQ/kdrywbY27DSCPvm4PMPXKD8A7EKDj/NWXPoB38gHe9M/CslIi1fXAKq/4GPfLMQn vmeQGJx7rY24gafkhJ2nrduKmvXc4/wz3Y4ryoeB5RXiUu0wmR2zbStHJt53lQ2NkrsidplErNHq dLXXbnnn9BnUMiaf1cxJBNcSWpdlixd/RMNFIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 311 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (311 bytes) ;; HEADER SECTION ;; id = 21391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200215090809 20191217090809 2371 netfactory.dk. TxZWPYjWhvEbCsjhKFCdyeCE56qHPttLovWwBMgu6skZdCOamegEme5rV5CMVERyNxy3oNTBbaID T6pMFNfvlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200215090809 20191217090809 2371 netfactory.dk. TxZWPYjWhvEbCsjhKFCdyeCE56qHPttLovWwBMgu6skZdCOamegEme5rV5CMVERyNxy3oNTBbaID T6pMFNfvlw== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Error querying gerald.ns.cloudflare.com/2606:4700:58:0:0:0:adf5:3ba8 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 167 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (167 bytes) ;; HEADER SECTION ;; id = 3096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200127055807 20200125035807 34505 netfactory.dk. 9DiPg6rmaAASRiExBPYLksVqX2Bz5Aehw+7U/aaiCCzSeN//Si66/3IEekvFD2U7mX+T2wc221mI 6djie7P8Jg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (214 bytes) ;; HEADER SECTION ;; id = 5534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2033083229 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20200127055807 20200125035807 34505 netfactory.dk. xaw2Qt2W4xcxR/AbHf4YabiHj3y7e1lSvgtOR8ZnQF8Yt2WP5aNpqgPdhSWBzdKay3xcgFKeavNF BBekIbMDRA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (214 bytes) ;; HEADER SECTION ;; id = 29318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2033083229 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20200127055807 20200125035807 34505 netfactory.dk. cCMN/gBbl/xw336hwfPeyUkUEeoTLN1+pfIDd4j/d03NttNyOX/pUP6hneJV5dcM7UYVbVwDwrar JiL7pq8OJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (167 bytes) ;; HEADER SECTION ;; id = 55550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200127055807 20200125035807 34505 netfactory.dk. Dn7EwlbBNwhgxJ2IEjFMSCeTTFuHCTKUME6N+S907vdqNebHU1w4uHeZwh8psv/P8/23mAq2iWe+ conMvPXbgQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200127055807 20200125035807 34505 netfactory.dk. Dn7EwlbBNwhgxJ2IEjFMSCeTTFuHCTKUME6N+S907vdqNebHU1w4uHeZwh8psv/P8/23mAq2iWe+ conMvPXbgQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: