DNSSEC Analyzer - netfactory.dk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-10-21 09:45:25 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (1139 bytes) ;; HEADER SECTION ;; id = 4718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181111000000 20181021000000 20326 . kOL+9usG/0qcLzqk7b4iqDAtp5bxuxcS0vgeK2SbWPXiVGmhSS8OMoEajLDrdaNTh1V9MSMZIgeM D9Q2wFg2WF39+LEJHxUhcYK30eTN4g+eRLeD2Um54jZt4BtIQ0jlYmJaY+DO49fx85aEgWMuu7Ho mcc1/Mekq1UWi+L27wtkXwCuX2KMuw7iJiHEftdz6piXawnvBVz1V12iG+Ir7ULuq40UwBMxDqFI d67c8DSNfs6dHQo3DWRVlCWTdrM/tV5bDXrWkVqKeEGoqucOH+hHgLAmD2Kfk8nbl0bEWhBu/MG0 EbGHuF4Y7x+l6hS8zlgCz3/hRYYCs4y1qgJ48w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181111000000 20181021000000 20326 . kOL+9usG/0qcLzqk7b4iqDAtp5bxuxcS0vgeK2SbWPXiVGmhSS8OMoEajLDrdaNTh1V9MSMZIgeM D9Q2wFg2WF39+LEJHxUhcYK30eTN4g+eRLeD2Um54jZt4BtIQ0jlYmJaY+DO49fx85aEgWMuu7Ho mcc1/Mekq1UWi+L27wtkXwCuX2KMuw7iJiHEftdz6piXawnvBVz1V12iG+Ir7ULuq40UwBMxDqFI d67c8DSNfs6dHQo3DWRVlCWTdrM/tV5bDXrWkVqKeEGoqucOH+hHgLAmD2Kfk8nbl0bEWhBu/MG0 EbGHuF4Y7x+l6hS8zlgCz3/hRYYCs4y1qgJ48w== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to c.root-servers.net for netfactory.dk/A
	Received 713 bytes from 2001:500:2::c
	;; Answer received from 2001:500:2::c (713 bytes) ;; HEADER SECTION ;; id = 26563 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181103050000 20181021040000 2134 . QiRRHpwSy+qe4a1z5EIfDZwjNqG3LYkBoAahOlxgAD+c5Yb6CDuV9xkYKljwpoKMwYPFUmmV0tag o3H2jbF1u3FDjWKulkg4yxZZOs69PFubsNSgcenqsIsz1IVC6cLtF+OzasHkP3RIkGhMiQJa3unW zith+RhbLVvbvtGWt/OT6n9+9GW5a64PdpbAUPdIWCPcurNYt3dO3En7+tLGDTxXcMXcK5jTveI9 6sjopyjTxdghiH+R/x8NViQUFghuwer91RIx/y/A6UYXEXmB1SrzJmbNRtuR60uVobWROebjkbpS eXizndFIxxGEsd9E4j1PDX15Ampe5TEte2gZ5Q== ) ;; ADDITIONAL SECTION (12 records) b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for dk/DNSKEY
	Received 702 bytes from 2001:500:2f::f
	;; Answer received from 2001:500:2f::f (702 bytes) ;; HEADER SECTION ;; id = 37340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181103050000 20181021040000 2134 . QiRRHpwSy+qe4a1z5EIfDZwjNqG3LYkBoAahOlxgAD+c5Yb6CDuV9xkYKljwpoKMwYPFUmmV0tag o3H2jbF1u3FDjWKulkg4yxZZOs69PFubsNSgcenqsIsz1IVC6cLtF+OzasHkP3RIkGhMiQJa3unW zith+RhbLVvbvtGWt/OT6n9+9GW5a64PdpbAUPdIWCPcurNYt3dO3En7+tLGDTxXcMXcK5jTveI9 6sjopyjTxdghiH+R/x8NViQUFghuwer91RIx/y/A6UYXEXmB1SrzJmbNRtuR60uVobWROebjkbpS eXizndFIxxGEsd9E4j1PDX15Ampe5TEte2gZ5Q== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN A 192.38.7.242 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to k.root-servers.net for dk/DS
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 22984 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181103050000 20181021040000 2134 . QiRRHpwSy+qe4a1z5EIfDZwjNqG3LYkBoAahOlxgAD+c5Yb6CDuV9xkYKljwpoKMwYPFUmmV0tag o3H2jbF1u3FDjWKulkg4yxZZOs69PFubsNSgcenqsIsz1IVC6cLtF+OzasHkP3RIkGhMiQJa3unW zith+RhbLVvbvtGWt/OT6n9+9GW5a64PdpbAUPdIWCPcurNYt3dO3En7+tLGDTxXcMXcK5jTveI9 6sjopyjTxdghiH+R/x8NViQUFghuwer91RIx/y/A6UYXEXmB1SrzJmbNRtuR60uVobWROebjkbpS eXizndFIxxGEsd9E4j1PDX15Ampe5TEte2gZ5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20181103050000 20181021040000 2134 . QiRRHpwSy+qe4a1z5EIfDZwjNqG3LYkBoAahOlxgAD+c5Yb6CDuV9xkYKljwpoKMwYPFUmmV0tag o3H2jbF1u3FDjWKulkg4yxZZOs69PFubsNSgcenqsIsz1IVC6cLtF+OzasHkP3RIkGhMiQJa3unW zith+RhbLVvbvtGWt/OT6n9+9GW5a64PdpbAUPdIWCPcurNYt3dO3En7+tLGDTxXcMXcK5jTveI9 6sjopyjTxdghiH+R/x8NViQUFghuwer91RIx/y/A6UYXEXmB1SrzJmbNRtuR60uVobWROebjkbpS eXizndFIxxGEsd9E4j1PDX15Ampe5TEte2gZ5Q== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to l.nic.dk for dk/DNSKEY
	Received 1149 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (1149 bytes) ;; HEADER SECTION ;; id = 45112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (4 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAbdaLfLrEzYAOiNS5thvB7XyeZMk3AUUqll8LGQWR5jKi1qOYlZORBXdbWqJyWTk2YnieC6a q2DmDYY/LgdG+8A9DQbFAT5GgrA73UWHK3YfhBX9kHL0ZCPmTg96XzLIUn5HIiYcKwPig58VR71B 7JeUUk4IOG4lNRm6gvbwbP4r+7+hoYijH7j1vJVF6NBgDH3mcw7KAtH8VgTkKJcFVe09iJAuLrta sJwEtlwM/2/ClOOPtdtsaDzwfvFPv/y1Y9LDmR0w7MDFT2IuK52HhmExKWidya89h645sQt+LZ7n MIks6468QLh0QASN1PO/qgzVp7p+bk/V7sC/ne/qDP8= ) ; Key ID = 45241 dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdgM9NGNKQ+RYY42zGSsFt6kVR+QW1bN0vpVPzYO0qdCQif0mufeF5wUP+DMpoA2mdx7CI+6 +wTK+mB3QqnfSTj9uH6FHtqkHAFS4mp/FewmB01WQTgQuiqkW94ZVZBqfkqIjBfqmVZ/xIiSoMQt Iw/0o33wU+VpbX+Egq/ubcl4qqg3DeA7qCSs7hz6nerg3KjfNhpylxNZdDFI5wh3VRc7iqGuj0y9 xIWNcl8xF49TXXi537iqhkpEL3+gE/jKacvtqQ+cFUOkKJHrKYtze3xFPh9M4Ib8YfULDt9+37cV W5oDHuhvZuR8YsRbD4HTf9gbYuUttCR9n/2Gif25x+8= ) ; Key ID = 5923 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181114214130 20181017130338 32195 dk. AFKnWBdYymi2iqueV4DhGuyJ3HcGaAPWacR3c4Muv1bm7bqezYXckJEWq+3UBVv/uHZbS6QEx1q7 XIoJUJvX1p4oOxe38rW0qCYnIjDBhnFM0j+PfHa9Urs/Q3fLSpi2LnkXgytfx7tBkn1nHLm4sH3d B72FjgOEEDZ1qrJ1gh9fVLxeXFkhhhWl7Ak65iEOHiheuC4JMGhOYeK8HE5mmll6LTYS2HNmIFvf v58iMXvC+MUUOP2PBec0ABVQwtfff9vocPoNjPd/dqgNAAk97GJlai6CuCstJyYJVAo8KiCEwGS0 5/xeCP6kpiIRozqKKKA9wuek+QDi/vHsfe5n/g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAbdaLfLrEzYAOiNS5thvB7XyeZMk3AUUqll8LGQWR5jKi1qOYlZORBXdbWqJyWTk2YnieC6a q2DmDYY/LgdG+8A9DQbFAT5GgrA73UWHK3YfhBX9kHL0ZCPmTg96XzLIUn5HIiYcKwPig58VR71B 7JeUUk4IOG4lNRm6gvbwbP4r+7+hoYijH7j1vJVF6NBgDH3mcw7KAtH8VgTkKJcFVe09iJAuLrta sJwEtlwM/2/ClOOPtdtsaDzwfvFPv/y1Y9LDmR0w7MDFT2IuK52HhmExKWidya89h645sQt+LZ7n MIks6468QLh0QASN1PO/qgzVp7p+bk/V7sC/ne/qDP8= ) ; Key ID = 45241`
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdgM9NGNKQ+RYY42zGSsFt6kVR+QW1bN0vpVPzYO0qdCQif0mufeF5wUP+DMpoA2mdx7CI+6 +wTK+mB3QqnfSTj9uH6FHtqkHAFS4mp/FewmB01WQTgQuiqkW94ZVZBqfkqIjBfqmVZ/xIiSoMQt Iw/0o33wU+VpbX+Egq/ubcl4qqg3DeA7qCSs7hz6nerg3KjfNhpylxNZdDFI5wh3VRc7iqGuj0y9 xIWNcl8xF49TXXi537iqhkpEL3+gE/jKacvtqQ+cFUOkKJHrKYtze3xFPh9M4Ib8YfULDt9+37cV W5oDHuhvZuR8YsRbD4HTf9gbYuUttCR9n/2Gif25x+8= ) ; Key ID = 5923`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181114214130 20181017130338 32195 dk. AFKnWBdYymi2iqueV4DhGuyJ3HcGaAPWacR3c4Muv1bm7bqezYXckJEWq+3UBVv/uHZbS6QEx1q7 XIoJUJvX1p4oOxe38rW0qCYnIjDBhnFM0j+PfHa9Urs/Q3fLSpi2LnkXgytfx7tBkn1nHLm4sH3d B72FjgOEEDZ1qrJ1gh9fVLxeXFkhhhWl7Ak65iEOHiheuC4JMGhOYeK8HE5mmll6LTYS2HNmIFvf v58iMXvC+MUUOP2PBec0ABVQwtfff9vocPoNjPd/dqgNAAk97GJlai6CuCstJyYJVAo8KiCEwGS0 5/xeCP6kpiIRozqKKKA9wuek+QDi/vHsfe5n/g== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=45241 is now in the chain-of-trust
	DNSKEY=5923 is now in the chain-of-trust
	Query to s.nic.dk for netfactory.dk/A
	Received 855 bytes from 2a00:d78:0:102:193:176:144:15
	;; Answer received from 2a00:d78:0:102:193:176:144:15 (855 bytes) ;; HEADER SECTION ;; id = 61936 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181115092534 20181018060344 5923 dk. pEz4yRjThaqgARREDHXoRUlUDupG4YxV92S07FBuyUoy8XcffUfYkgsH+Si1J2fyyVzHF8ThFaou bpjC7ybHnk+M/fI+F9UW3+hjiIkIX6mmBNqI2CVob0TZ7f2S93ST2rlapkYmKmKEjX/FE4FPlu8X 0fZ/vnsSbqlbILVEl/y3kGe00FlsNfu+sbLQVNGRYGe9OXXaFlpcIEifalHN4MCNOiJAEVveXWea XM76+ldfGLnvfIVqkFSelUsRVWxgiTUyPvlOXPcnoGcNfpDwEK3RYxZpJB4BWV5bhsjyrYANJcS0 IzHMlxzlZwq/THzhnfA4U+U07P3LJXZw+iq/sQ== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181118075312 20181020220351 5923 dk. p73pcNhLqCbpfSXgPoPM4WhP3QQu+nrVLJCMR7nvZ9o+Bg3k/nSr6YKsQZbCe4UgWKy5YDWfrCwt dH+K9gfNhHoMTnL/45qo/smzNxHWxaUk6scXJL9HORCY2JbCtfAoVXEpLE+jMEp5uVaoaCCxdj9I tClzHS/j3l5Hefpeg9H2qL72hq1Eh87DNqxxCrCR4HZCK4LxjHXaGrUXHbXe8BgKACE7Jb6A8ScP 6wzsmek55OtBUI2YvQuz257kARzWEVNbo4vxdZhsFiZaKevfyqNcTNifzW1O04EoVfTCSzGcR9ns 2oke7s4pnW1i9ywErohat7xQqbtMyXkuNMywSg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.dk for netfactory.dk/DNSKEY
	Received 855 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (855 bytes) ;; HEADER SECTION ;; id = 51593 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181115092534 20181018060344 5923 dk. pEz4yRjThaqgARREDHXoRUlUDupG4YxV92S07FBuyUoy8XcffUfYkgsH+Si1J2fyyVzHF8ThFaou bpjC7ybHnk+M/fI+F9UW3+hjiIkIX6mmBNqI2CVob0TZ7f2S93ST2rlapkYmKmKEjX/FE4FPlu8X 0fZ/vnsSbqlbILVEl/y3kGe00FlsNfu+sbLQVNGRYGe9OXXaFlpcIEifalHN4MCNOiJAEVveXWea XM76+ldfGLnvfIVqkFSelUsRVWxgiTUyPvlOXPcnoGcNfpDwEK3RYxZpJB4BWV5bhsjyrYANJcS0 IzHMlxzlZwq/THzhnfA4U+U07P3LJXZw+iq/sQ== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181118075312 20181020220351 5923 dk. p73pcNhLqCbpfSXgPoPM4WhP3QQu+nrVLJCMR7nvZ9o+Bg3k/nSr6YKsQZbCe4UgWKy5YDWfrCwt dH+K9gfNhHoMTnL/45qo/smzNxHWxaUk6scXJL9HORCY2JbCtfAoVXEpLE+jMEp5uVaoaCCxdj9I tClzHS/j3l5Hefpeg9H2qL72hq1Eh87DNqxxCrCR4HZCK4LxjHXaGrUXHbXe8BgKACE7Jb6A8ScP 6wzsmek55OtBUI2YvQuz257kARzWEVNbo4vxdZhsFiZaKevfyqNcTNifzW1O04EoVfTCSzGcR9ns 2oke7s4pnW1i9ywErohat7xQqbtMyXkuNMywSg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to b.nic.dk for netfactory.dk/DS
	Received 1148 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (1148 bytes) ;; HEADER SECTION ;; id = 54095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181115092534 20181018060344 5923 dk. pEz4yRjThaqgARREDHXoRUlUDupG4YxV92S07FBuyUoy8XcffUfYkgsH+Si1J2fyyVzHF8ThFaou bpjC7ybHnk+M/fI+F9UW3+hjiIkIX6mmBNqI2CVob0TZ7f2S93ST2rlapkYmKmKEjX/FE4FPlu8X 0fZ/vnsSbqlbILVEl/y3kGe00FlsNfu+sbLQVNGRYGe9OXXaFlpcIEifalHN4MCNOiJAEVveXWea XM76+ldfGLnvfIVqkFSelUsRVWxgiTUyPvlOXPcnoGcNfpDwEK3RYxZpJB4BWV5bhsjyrYANJcS0 IzHMlxzlZwq/THzhnfA4U+U07P3LJXZw+iq/sQ== ) dk. 600 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1540112460 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 600 ;minimum ) dk. 600 IN RRSIG ( SOA 8 1 86400 20181118044622 20181021080344 5923 dk. s4W8xCFiR/j9MTFBJ3Z8SnTuTKFKwLmCXfij5KYk+kdmTmPJX5Tz4c+Vi/ivtZ2dklDnCI95dmkF s6SOSXe6tWT8AgQ/y8opF2St9rrjrewEmGy66L7Kd9T9Xup3htwJbPrenhdnSoLTKyOyFO2q/aD7 H1DNqrwpBo3r4y8seSvHGH7DPOdXXB5q4ZijTb3/w6jqc5vXtGgAhhI9Fspoa1pE91A3Hp3RIbAr MsHNCdKP6LiXa9+xdeCB+Xh9gHhksyyk95uh8H2LRwF+nfIkciL7q/WpAuP5HQNW1t8gHoQAaNn3 yh7DW/3V2VNJ1cXDqktzS1tgLTbK9VZsI5rwhQ== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20181118075312 20181020220351 5923 dk. p73pcNhLqCbpfSXgPoPM4WhP3QQu+nrVLJCMR7nvZ9o+Bg3k/nSr6YKsQZbCe4UgWKy5YDWfrCwt dH+K9gfNhHoMTnL/45qo/smzNxHWxaUk6scXJL9HORCY2JbCtfAoVXEpLE+jMEp5uVaoaCCxdj9I tClzHS/j3l5Hefpeg9H2qL72hq1Eh87DNqxxCrCR4HZCK4LxjHXaGrUXHbXe8BgKACE7Jb6A8ScP 6wzsmek55OtBUI2YvQuz257kARzWEVNbo4vxdZhsFiZaKevfyqNcTNifzW1O04EoVfTCSzGcR9ns 2oke7s4pnW1i9ywErohat7xQqbtMyXkuNMywSg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 105 bytes from 2400:cb00:2049:1::adf5:3ba8
	;; Answer received from 2400:cb00:2049:1::adf5:3ba8 (105 bytes) ;; HEADER SECTION ;; id = 44571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	No DNSKEY records found
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Received 58 bytes from 2400:cb00:2049:1::adf5:3ba8
	;; Answer received from 2400:cb00:2049:1::adf5:3ba8 (58 bytes) ;; HEADER SECTION ;; id = 62370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 105 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (105 bytes) ;; HEADER SECTION ;; id = 1371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 105 bytes from 2400:cb00:2049:1::adf5:3a4b
	;; Answer received from 2400:cb00:2049:1::adf5:3a4b (105 bytes) ;; HEADER SECTION ;; id = 56477 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Received 58 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (58 bytes) ;; HEADER SECTION ;; id = 24764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: