DNSSEC Analyzer - netfactory.dk

Domain Name:

Time: 2020-07-07 18:28:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1139 bytes) ;; HEADER SECTION ;; id = 770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	DNSKEY=48903 is now in the chain-of-trust
	Query to g.root-servers.net for netfactory.dk/A
	Received 801 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (801 bytes) ;; HEADER SECTION ;; id = 41220 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS d.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . jDIgvCjuG0TyoGFoYtK1dR3a9lFGU3mw3OQinpG0nGF8UlBO+gG6astHPwNAA0uIjaCD5hFssOYx TQK2JJ24UMWJzHPn8/v4aSYK/mnpwesZWSGgc/HjrRQJORHTendXYyKIM9rSgjOejR+9r7I8avwo oWN2Gcn6Kpzqxo32Fvly5VTPmcX5oqQuK69zJABPF1fkCURq16TJUjeKTyYORK0Z8mIRAnS/a6Nu GkUm3fJ6O6LI/+p0mo6CmYfS1LtNsqCsJak7+Hw1a6deYWEKurorw12V5UgtxqLCPlPG3fzIvUqX 2Dt60q0bhmMFAmhMNnxEfJcgVG7sMFHvB13ttg== ) ;; ADDITIONAL SECTION (15 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 d.nic.dk. 172800 IN A 185.159.198.45 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for dk/DNSKEY
	Received 790 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (790 bytes) ;; HEADER SECTION ;; id = 32778 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS d.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . jDIgvCjuG0TyoGFoYtK1dR3a9lFGU3mw3OQinpG0nGF8UlBO+gG6astHPwNAA0uIjaCD5hFssOYx TQK2JJ24UMWJzHPn8/v4aSYK/mnpwesZWSGgc/HjrRQJORHTendXYyKIM9rSgjOejR+9r7I8avwo oWN2Gcn6Kpzqxo32Fvly5VTPmcX5oqQuK69zJABPF1fkCURq16TJUjeKTyYORK0Z8mIRAnS/a6Nu GkUm3fJ6O6LI/+p0mo6CmYfS1LtNsqCsJak7+Hw1a6deYWEKurorw12V5UgtxqLCPlPG3fzIvUqX 2Dt60q0bhmMFAmhMNnxEfJcgVG7sMFHvB13ttg== ) ;; ADDITIONAL SECTION (15 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 d.nic.dk. 172800 IN A 185.159.198.45 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to k.root-servers.net for dk/DS
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 30914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . jDIgvCjuG0TyoGFoYtK1dR3a9lFGU3mw3OQinpG0nGF8UlBO+gG6astHPwNAA0uIjaCD5hFssOYx TQK2JJ24UMWJzHPn8/v4aSYK/mnpwesZWSGgc/HjrRQJORHTendXYyKIM9rSgjOejR+9r7I8avwo oWN2Gcn6Kpzqxo32Fvly5VTPmcX5oqQuK69zJABPF1fkCURq16TJUjeKTyYORK0Z8mIRAnS/a6Nu GkUm3fJ6O6LI/+p0mo6CmYfS1LtNsqCsJak7+Hw1a6deYWEKurorw12V5UgtxqLCPlPG3fzIvUqX 2Dt60q0bhmMFAmhMNnxEfJcgVG7sMFHvB13ttg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=9280/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . jDIgvCjuG0TyoGFoYtK1dR3a9lFGU3mw3OQinpG0nGF8UlBO+gG6astHPwNAA0uIjaCD5hFssOYx TQK2JJ24UMWJzHPn8/v4aSYK/mnpwesZWSGgc/HjrRQJORHTendXYyKIM9rSgjOejR+9r7I8avwo oWN2Gcn6Kpzqxo32Fvly5VTPmcX5oqQuK69zJABPF1fkCURq16TJUjeKTyYORK0Z8mIRAnS/a6Nu GkUm3fJ6O6LI/+p0mo6CmYfS1LtNsqCsJak7+Hw1a6deYWEKurorw12V5UgtxqLCPlPG3fzIvUqX 2Dt60q0bhmMFAmhMNnxEfJcgVG7sMFHvB13ttg== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=9280/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b )`
	Query to a.nic.dk for dk/DNSKEY
	Received 289 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (289 bytes) ;; HEADER SECTION ;; id = 14542 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 13 v51dMC9+ixYUMFk/NIMgcOyHFPQNyLnZi9r5TqHiZ9FFAH7krWRcDjzsBnvQw7NRWjAKEu6+1jBs K7ZeO9m/mw== ) ; Key ID = 53715 dk. 86400 IN DNSKEY ( 257 3 13 w1A+x+9//7iXXrBx8IhIKtqNuyuWrWYvIdNzXhoiiHDKYhZek6oLzC1FXmqYsIU2R5DIL48bjhBB 1kL9oIpn6g== ) ; Key ID = 9280 dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200804160402 20200707143402 9280 dk. xLxq5URXd8ef6igALQLmWWhF5tzxa0mFV6oZ+PZqkJI5FcZKAhCzU2KONuYRJOHi3IFtA1A7bLF1 wihhgb9KSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 13 v51dMC9+ixYUMFk/NIMgcOyHFPQNyLnZi9r5TqHiZ9FFAH7krWRcDjzsBnvQw7NRWjAKEu6+1jBs K7ZeO9m/mw== ) ; Key ID = 53715`
	`dk. 86400 IN DNSKEY ( 257 3 13 w1A+x+9//7iXXrBx8IhIKtqNuyuWrWYvIdNzXhoiiHDKYhZek6oLzC1FXmqYsIU2R5DIL48bjhBB 1kL9oIpn6g== ) ; Key ID = 9280`
	DNSKEY=9280/SEP is now in the chain-of-trust
	DS=9280/SHA-256 verifies DNSKEY=9280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200804160402 20200707143402 9280 dk. xLxq5URXd8ef6igALQLmWWhF5tzxa0mFV6oZ+PZqkJI5FcZKAhCzU2KONuYRJOHi3IFtA1A7bLF1 wihhgb9KSg== )`
	RRSIG=9280 and DNSKEY=9280/SEP verifies the DNSKEY RRset
	DNSKEY=53715 is now in the chain-of-trust
	Query to c.nic.dk for netfactory.dk/A
	Received 346 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (346 bytes) ;; HEADER SECTION ;; id = 39504 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20200802081202 20200705064202 53715 dk. n7aFJLquPzsF9bgzPr/KafsL056nocdIQ+qVdKzhTwTxGAtZkxAv14p2Q/1EiwIXruYvk83aLshU Ulq9bAqNXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.dk for netfactory.dk/DNSKEY
	Received 346 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (346 bytes) ;; HEADER SECTION ;; id = 45928 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20200802081202 20200705064202 53715 dk. n7aFJLquPzsF9bgzPr/KafsL056nocdIQ+qVdKzhTwTxGAtZkxAv14p2Q/1EiwIXruYvk83aLshU Ulq9bAqNXQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to c.nic.dk for netfactory.dk/DS
	Received 288 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (288 bytes) ;; HEADER SECTION ;; id = 45003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (4 records) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20200802081202 20200705064202 53715 dk. n7aFJLquPzsF9bgzPr/KafsL056nocdIQ+qVdKzhTwTxGAtZkxAv14p2Q/1EiwIXruYvk83aLshU Ulq9bAqNXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for netfactory.dk in the dk zone
	DS=2371/SHA-384 has algorithm ECDSAP256SHA256
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	DS=2371/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20200802081202 20200705064202 53715 dk. n7aFJLquPzsF9bgzPr/KafsL056nocdIQ+qVdKzhTwTxGAtZkxAv14p2Q/1EiwIXruYvk83aLshU Ulq9bAqNXQ== )`
	RRSIG=53715 and DNSKEY=53715 verifies the DS RRset
	DS=2371/SHA-384 is now in the chain-of-trust
	`netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 )`
	`netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f )`
	`netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 )`
	Query to betty.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 311 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (311 bytes) ;; HEADER SECTION ;; id = 50990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200802111249 20200603111249 2371 netfactory.dk. LFErGdJLkc73UAumfRBcbfQ2TlcwlA0007ae4czYFxRIC9X89ljTvm5AMrob+5j4g4YdmDVWpsuW iSC2hPcq3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-384 verifies DNSKEY=2371/SEP
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	DS=2371/SHA-1 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20200802111249 20200603111249 2371 netfactory.dk. LFErGdJLkc73UAumfRBcbfQ2TlcwlA0007ae4czYFxRIC9X89ljTvm5AMrob+5j4g4YdmDVWpsuW iSC2hPcq3g== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 63770 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200708192803 20200706172803 34505 netfactory.dk. 0kRpI/Z1l578LU1sIq9yfAtTSkkscuVbEALQejNN8lpLzOltrBI0lPPIlK23bFE9HJoQMaOueHiH D6taVVpiAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (214 bytes) ;; HEADER SECTION ;; id = 29585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2034544137 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20200708192803 20200706172803 34505 netfactory.dk. OOAdNK3++I4y3nYaUeQng2skhViLMhkZiHehiEEYSnD0JtJejfOfAm3Taj9otkXq8qal21csM6F5 tGDKCnT25g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (214 bytes) ;; HEADER SECTION ;; id = 38015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2034544137 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20200708192803 20200706172803 34505 netfactory.dk. k74ubXmij7QMQ7ZceIor1ppxtIRGOaskgELBapJABRl7vgFQXfYAp3nKr8FXgzR/TJ/i6zY6s0qz mIuE4sIh5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 28820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200708192803 20200706172803 34505 netfactory.dk. vDg29LW4xsV3ZTtmvc+ULcHL4/4Wvwfh+H8QQz/JBt4wyodeuyVgGbmCAJLyfefoEqTlhK5Bl2If xAp3KX7aCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20200708192803 20200706172803 34505 netfactory.dk. vDg29LW4xsV3ZTtmvc+ULcHL4/4Wvwfh+H8QQz/JBt4wyodeuyVgGbmCAJLyfefoEqTlhK5Bl2If xAp3KX7aCA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: