DNSSEC Analyzer - netfactory.dk

Domain Name:

Time: 2019-11-18 00:30:55 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 64756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191201000000 20191110000000 20326 . Ls9QKBBhEie6yu8Y8nxmSg/K7CvsJ7mQr1mgOiOkzokm97IpD+Wnls/84l77jFKDJBHEA2mzEMUi eKMb4B95aGqrJua2J4HB/51jwaae7GrVpKtS5w5ni5k1bpB6qPmvmlDlq4vJ3YOVawMsy4vF9Dxa lQ0satgSoFdze4QNUy9J+2Lcjtf6+OamOS7R2bKOQGD4z7+ftKLJqYXlKw3UgGMmnaCMVbcC6IpU UHl52CEPlWTga/fI33QVJjD3j2zkZCip+lIPY3lNb+CXHKr8UvgnrQckZ/MYnvUNlt/JxjFME1hy bwACbrJ/Ea6IwGbDNW4wsmq8HLSn5n9mA6n6iw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to b.root-servers.net for netfactory.dk/A
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for netfactory.dk/A: 'IPv6 transport disabled'
	Received 741 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (741 bytes) ;; HEADER SECTION ;; id = 18611 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . dnulHucoVO0ESK5crNJjJ2QNF9LX5Jby3RSEZSE08++53YZvyFiSMGeNcl/46HvB+6ud/PzsAw9K SaKeHbO6Gih9i8omeGiP67ml3q4dLpCOnWsjwXPewzkSkS4OZQ5voqaiojFuNP9X6KxLlybjQmqP Lh5ktrfJHbmWjyg4u3k8vCAL0+Klbj7+Q0r2ms6/jqs/j5qQD+/T+FXNcc+yR8+KiZbD5hTCso6N 7LSlc0j0Lee4d3xOlFWnJRmRR35aANgNA8jppuI144zd7bLw2g3KH7hH7FJyxx5W243BnwP7UEOD p6lRNzXlTlPtnNiF/MTq5NLgH1BoAe4lETSQYQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for dk/DNSKEY
	Received 730 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (730 bytes) ;; HEADER SECTION ;; id = 1736 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . dnulHucoVO0ESK5crNJjJ2QNF9LX5Jby3RSEZSE08++53YZvyFiSMGeNcl/46HvB+6ud/PzsAw9K SaKeHbO6Gih9i8omeGiP67ml3q4dLpCOnWsjwXPewzkSkS4OZQ5voqaiojFuNP9X6KxLlybjQmqP Lh5ktrfJHbmWjyg4u3k8vCAL0+Klbj7+Q0r2ms6/jqs/j5qQD+/T+FXNcc+yR8+KiZbD5hTCso6N 7LSlc0j0Lee4d3xOlFWnJRmRR35aANgNA8jppuI144zd7bLw2g3KH7hH7FJyxx5W243BnwP7UEOD p6lRNzXlTlPtnNiF/MTq5NLgH1BoAe4lETSQYQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to d.root-servers.net for dk/DS
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for dk/DS: 'IPv6 transport disabled'
	Received 366 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (366 bytes) ;; HEADER SECTION ;; id = 52963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . dnulHucoVO0ESK5crNJjJ2QNF9LX5Jby3RSEZSE08++53YZvyFiSMGeNcl/46HvB+6ud/PzsAw9K SaKeHbO6Gih9i8omeGiP67ml3q4dLpCOnWsjwXPewzkSkS4OZQ5voqaiojFuNP9X6KxLlybjQmqP Lh5ktrfJHbmWjyg4u3k8vCAL0+Klbj7+Q0r2ms6/jqs/j5qQD+/T+FXNcc+yR8+KiZbD5hTCso6N 7LSlc0j0Lee4d3xOlFWnJRmRR35aANgNA8jppuI144zd7bLw2g3KH7hH7FJyxx5W243BnwP7UEOD p6lRNzXlTlPtnNiF/MTq5NLgH1BoAe4lETSQYQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20191130170000 20191117160000 22545 . dnulHucoVO0ESK5crNJjJ2QNF9LX5Jby3RSEZSE08++53YZvyFiSMGeNcl/46HvB+6ud/PzsAw9K SaKeHbO6Gih9i8omeGiP67ml3q4dLpCOnWsjwXPewzkSkS4OZQ5voqaiojFuNP9X6KxLlybjQmqP Lh5ktrfJHbmWjyg4u3k8vCAL0+Klbj7+Q0r2ms6/jqs/j5qQD+/T+FXNcc+yR8+KiZbD5hTCso6N 7LSlc0j0Lee4d3xOlFWnJRmRR35aANgNA8jppuI144zd7bLw2g3KH7hH7FJyxx5W243BnwP7UEOD p6lRNzXlTlPtnNiF/MTq5NLgH1BoAe4lETSQYQ== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to c.nic.dk for dk/DNSKEY
	Received 873 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (873 bytes) ;; HEADER SECTION ;; id = 13690 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdPyY3FD58p49epl/rIqvQtgB3FgSz8fGQQhiMkUwKKy5IKyUnVU20x8qpPjOYp0QVS4ZBoH AbHKktc9iVOMCCpQfJJe3m/qVi29PEUyi4V0ZYqkKB+uq2C//EcXYDRgecxRdlDiBgd0LnrCplHA CBR0Kif17Qgs4289UqaSG+47+nIR8c8fqQieHcIjd3i7l+/WrLUg91eMuzOg37eYYBTOABHFwPwy ZnsXQMZXFFr4/9cn2iqxsxvWRDFmcwPj9lWcbIVT21iKVR8srwniRMJdUXalkBVp4NvKa+FLCHc/ JZ5N7v+mN7tVOVUwJKVZs+2x8vrJaqiulgCRPy1GNds= ) ; Key ID = 49836 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191214120345 20191116103345 32195 dk. a6tCGQRHc0XrDgIudrWkcCGp0KRK3ZVuGArR6I3wyYfTdzZVvdJrd7s9BuabzQeagzp9rmF+UNRC KtQu58G8M6GUt+D5qCxdgRVEhU5/yITnws1imZ5oQU5G5wHCkGzye+Nq+ishXbH0cc6Y2rwrzsId GUFK+V0LhsM9yVGM+oo/6wBzgZ0nyO/hlcsVyHea2E2qWM1GNAF7Th3Oa5H7kNkJOdDVfeDSpGsu 14oPQFv4a1JbAd/p6/QwR9HcyU7C1H3BcYH8jVuTW78CVlHZECtDsPjpVTERLViaq1nX2HLceDLl ZiH1Sy0dNaY7dxAlTIXcvB9WW4M6HKwl90Mp7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdPyY3FD58p49epl/rIqvQtgB3FgSz8fGQQhiMkUwKKy5IKyUnVU20x8qpPjOYp0QVS4ZBoH AbHKktc9iVOMCCpQfJJe3m/qVi29PEUyi4V0ZYqkKB+uq2C//EcXYDRgecxRdlDiBgd0LnrCplHA CBR0Kif17Qgs4289UqaSG+47+nIR8c8fqQieHcIjd3i7l+/WrLUg91eMuzOg37eYYBTOABHFwPwy ZnsXQMZXFFr4/9cn2iqxsxvWRDFmcwPj9lWcbIVT21iKVR8srwniRMJdUXalkBVp4NvKa+FLCHc/ JZ5N7v+mN7tVOVUwJKVZs+2x8vrJaqiulgCRPy1GNds= ) ; Key ID = 49836`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191214120345 20191116103345 32195 dk. a6tCGQRHc0XrDgIudrWkcCGp0KRK3ZVuGArR6I3wyYfTdzZVvdJrd7s9BuabzQeagzp9rmF+UNRC KtQu58G8M6GUt+D5qCxdgRVEhU5/yITnws1imZ5oQU5G5wHCkGzye+Nq+ishXbH0cc6Y2rwrzsId GUFK+V0LhsM9yVGM+oo/6wBzgZ0nyO/hlcsVyHea2E2qWM1GNAF7Th3Oa5H7kNkJOdDVfeDSpGsu 14oPQFv4a1JbAd/p6/QwR9HcyU7C1H3BcYH8jVuTW78CVlHZECtDsPjpVTERLViaq1nX2HLceDLl ZiH1Sy0dNaY7dxAlTIXcvB9WW4M6HKwl90Mp7Q== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=49836 is now in the chain-of-trust
	Query to s.nic.dk for netfactory.dk/A
	Error querying s.nic.dk/2a00:d78:0:102:193:176:144:15 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 855 bytes from 193.176.144.15
	;; Answer received from 193.176.144.15 (855 bytes) ;; HEADER SECTION ;; id = 46571 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 0dpn3oa62obmsk2i5af5affa1tq40dr0 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191214025018 20191116012018 49836 dk. ekwrvINU01wEsAJh4zrzpr3Q/idi23wADF9gfHoVKDSr99MY/Fzjf52e06FFvQvf0v7mY7ElEOcH aHWKIhJgznRI/9MTaUqnX/FLL1R76y62eLgU0SHO+CvievzM7rFnt1m2wUkwELCtODUY1+j9CDl7 b60y5tn/wfR2PYvAHVvVoMmmKAfCMWZ1wYvG8recIJPiCNAM+hN2itVo8R3y6/Yox2lT1c/9+5iT +mXYmKJkxpn8xCF3cJhpZdWvrmqi7JT+6LbBd7w8gKmAfOCbTQBsBmfMngz7CaC2D/GUbmJFLI+L c6lB6DKjvL0KRIbd0UHE8nUuCaw2xlGWQTI7pA== ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 dtft8h1tnjld6mi46kj4714v37lq97m2 NS DS RRSIG ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191213074802 20191115061802 49836 dk. diA/0ZUiC+KMVSwdO8SKND5NZy2iCKyTBq8xdjsxvi6nK0DdyshIcnQ4cEadkTVZh8wLh9Om/m4G BVJxXU0rIaubC2MZPAQ0TKeOImL1OuPuJkkBwTZrAATwCFj6c3Atcs5PyPGZw5eNRg/gu7PCIfit j3HOruZHPmbBxUmhalLalpWISwjLZNtV3f5L9lzVskjFU0jK6sP/DqHTBmVMpam20JDaYIRNAaTN Qm+LZWoZI0DEwLZKkLar25hocISAGChk0WLiWy+kefSMPq3d71IiNNf1+EBuRskheIlVmZ9c4zLN GKXRyS9UcgYdtDQS6Wqz7iYxOC3nAcbfYr33fw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.nic.dk for netfactory.dk/DNSKEY
	Error querying c.nic.dk/2001:678:74:0:0:0:0:53 for netfactory.dk/DNSKEY: 'IPv6 transport disabled'
	Received 855 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (855 bytes) ;; HEADER SECTION ;; id = 4495 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 0dpn3oa62obmsk2i5af5affa1tq40dr0 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 dtft8h1tnjld6mi46kj4714v37lq97m2 NS DS RRSIG ) 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191214025018 20191116012018 49836 dk. ekwrvINU01wEsAJh4zrzpr3Q/idi23wADF9gfHoVKDSr99MY/Fzjf52e06FFvQvf0v7mY7ElEOcH aHWKIhJgznRI/9MTaUqnX/FLL1R76y62eLgU0SHO+CvievzM7rFnt1m2wUkwELCtODUY1+j9CDl7 b60y5tn/wfR2PYvAHVvVoMmmKAfCMWZ1wYvG8recIJPiCNAM+hN2itVo8R3y6/Yox2lT1c/9+5iT +mXYmKJkxpn8xCF3cJhpZdWvrmqi7JT+6LbBd7w8gKmAfOCbTQBsBmfMngz7CaC2D/GUbmJFLI+L c6lB6DKjvL0KRIbd0UHE8nUuCaw2xlGWQTI7pA== ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191213074802 20191115061802 49836 dk. diA/0ZUiC+KMVSwdO8SKND5NZy2iCKyTBq8xdjsxvi6nK0DdyshIcnQ4cEadkTVZh8wLh9Om/m4G BVJxXU0rIaubC2MZPAQ0TKeOImL1OuPuJkkBwTZrAATwCFj6c3Atcs5PyPGZw5eNRg/gu7PCIfit j3HOruZHPmbBxUmhalLalpWISwjLZNtV3f5L9lzVskjFU0jK6sP/DqHTBmVMpam20JDaYIRNAaTN Qm+LZWoZI0DEwLZKkLar25hocISAGChk0WLiWy+kefSMPq3d71IiNNf1+EBuRskheIlVmZ9c4zLN GKXRyS9UcgYdtDQS6Wqz7iYxOC3nAcbfYr33fw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to b.nic.dk for netfactory.dk/DS
	Received 1148 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (1148 bytes) ;; HEADER SECTION ;; id = 32049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 0dpn3oa62obmsk2i5af5affa1tq40dr0 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) 0dpinfp09g6ejt9t00ck799143onirue.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191214025018 20191116012018 49836 dk. ekwrvINU01wEsAJh4zrzpr3Q/idi23wADF9gfHoVKDSr99MY/Fzjf52e06FFvQvf0v7mY7ElEOcH aHWKIhJgznRI/9MTaUqnX/FLL1R76y62eLgU0SHO+CvievzM7rFnt1m2wUkwELCtODUY1+j9CDl7 b60y5tn/wfR2PYvAHVvVoMmmKAfCMWZ1wYvG8recIJPiCNAM+hN2itVo8R3y6/Yox2lT1c/9+5iT +mXYmKJkxpn8xCF3cJhpZdWvrmqi7JT+6LbBd7w8gKmAfOCbTQBsBmfMngz7CaC2D/GUbmJFLI+L c6lB6DKjvL0KRIbd0UHE8nUuCaw2xlGWQTI7pA== ) dk. 300 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1574036914 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 300 ;minimum ) dk. 300 IN RRSIG ( SOA 8 1 86400 20191216002816 20191117225816 49836 dk. u8Jf7U6qFUue+jC6fDPQ3iqfm3D7i/7sl6qhYK9AWIkcAatVg4l/VX8an3gMMOs3rF9jm6JthCfG UX+32kJGmBMMkoRVMXJfU8wr5sQBHFCSlIE6Xv80jXzwtEnoacdDaUGmVL4wGY2JNaOLVX6VhswI OvszFz52RFhKgmvQC3v7YJFLdrwvhCbUgvnNDbO1Juvm9Y6faJ2OrgUSR7anGNGZnyh58sn/wsQa luyRlTPjasBfK4cOV2/8CCNl3aayOUuM+FX+i6FaJyX9PImA3BISZw9h5XIaQnFd3H98WIR2Qmjz 49K5jZW1P8Q316fWH3+3hyGfN1sp/AxZg9n+Lg== ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN NSEC3 ( 1 1 17 2977c707ae3c77c5 dtft8h1tnjld6mi46kj4714v37lq97m2 NS DS RRSIG ) dtfco987esinjro873t7rjqoni4kt6ks.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191213074802 20191115061802 49836 dk. diA/0ZUiC+KMVSwdO8SKND5NZy2iCKyTBq8xdjsxvi6nK0DdyshIcnQ4cEadkTVZh8wLh9Om/m4G BVJxXU0rIaubC2MZPAQ0TKeOImL1OuPuJkkBwTZrAATwCFj6c3Atcs5PyPGZw5eNRg/gu7PCIfit j3HOruZHPmbBxUmhalLalpWISwjLZNtV3f5L9lzVskjFU0jK6sP/DqHTBmVMpam20JDaYIRNAaTN Qm+LZWoZI0DEwLZKkLar25hocISAGChk0WLiWy+kefSMPq3d71IiNNf1+EBuRskheIlVmZ9c4zLN GKXRyS9UcgYdtDQS6Wqz7iYxOC3nAcbfYr33fw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to betty.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 311 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (311 bytes) ;; HEADER SECTION ;; id = 18059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20191212090443 20191013090443 2371 netfactory.dk. EC3oaIlE7gDeu7XF3cqAo3A9kkGJOxo+kB6LMBezmvZtmUjQsenwgNMM42n6Q46S9gaRRPGVg7yV xVDqLBkCfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20191212090443 20191013090443 2371 netfactory.dk. EC3oaIlE7gDeu7XF3cqAo3A9kkGJOxo+kB6LMBezmvZtmUjQsenwgNMM42n6Q46S9gaRRPGVg7yV xVDqLBkCfQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Error querying gerald.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3ba8 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 167 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (167 bytes) ;; HEADER SECTION ;; id = 47373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191119013058 20191116233058 34505 netfactory.dk. Ku9E69PFwDMKxCsLJSLqIEGeUkEwtDoMDGYmJ4KwlaizCHxj9DQ2z1inROEyolJzmEg7gINf/2O9 ymQkNEfuJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (214 bytes) ;; HEADER SECTION ;; id = 64667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2032521608 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20191119013058 20191116233058 34505 netfactory.dk. 2giQp/x+07jwM+4/4UiVV4QCpqYKbyQneLSSv6kftCSlODf0L20IodvlRK1/49joTFtsfEKkG4ik LJ/N9p3UDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (214 bytes) ;; HEADER SECTION ;; id = 60966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2032521608 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20191119013058 20191116233058 34505 netfactory.dk. pggF4j/9C6thYZOiCuvs4zeX4pXs4uDzRVB2Fz+Yo9k6SXExUhOOXYHK4Wsp39uDyu7dBnwoaukd vO1ZDPi+ug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Error querying gerald.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3ba8 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 167 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (167 bytes) ;; HEADER SECTION ;; id = 41935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191119013058 20191116233058 34505 netfactory.dk. tJzJMS1Z3y8edv343c3ZJI/FbevWHwZoQwG9lmred9963/4Fcq3RFCODZvA+HlTArZl2RjRHYpGB xl7fy5pJCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191119013058 20191116233058 34505 netfactory.dk. tJzJMS1Z3y8edv343c3ZJI/FbevWHwZoQwG9lmred9963/4Fcq3RFCODZvA+HlTArZl2RjRHYpGB xl7fy5pJCg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: