DNSSEC Analyzer - netfactory.dk

Domain Name:

Time: 2021-07-31 14:21:42 UTC, NTP stratum 16

Analyzing DNSSEC problems for netfactory.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 42348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to f.root-servers.net for netfactory.dk/A
	Received 801 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (801 octets) ;; HEADER SECTION ;; id = 44031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS d.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 42585 13 2 cb0a14df57f2abd562609317adb4df20683d73a42923cfe1b450620a49b2a22b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . aZf3RKTX4lrkKnGgWC7KE1mI33bvB0Wv03UzHVlPijuCQ7u1CHp5N34xm9ojVKTXYReYXsPcptSC 982TOY+N7wm4V68AcNgXhA8OKagSTHvfBw+mBRJsBCvrh24IEk58vJQzyILpAyJxB8g2XVp2SLZ5 ynwUMrQJhiM+0kO1kPE/yxPSv8GJkE9lM679+5ruiS70iJBBvkCc65Z/7w7UNOup1LKMJ116klrl /mrMeCLYiwCOkX/fUmlO4ygbJpgtX3pnYBiszAFESZ9VGZySTzegxfxWeSAbG0RD5S0b+cSckls1 OD3VF62GeCZZoSUCfgqYF/1BGu0sjwMhIimH9Q== ) ;; ADDITIONAL SECTION (15 records) a.nic.dk. 172800 IN A 212.88.78.122 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 d.nic.dk. 172800 IN A 185.159.198.45 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 l.nic.dk. 172800 IN A 130.226.213.138 l.nic.dk. 172800 IN AAAA 2001:878:0:e000:82:e2:d5:8a p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to m.root-servers.net for dk/DNSKEY
	Received 790 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (790 octets) ;; HEADER SECTION ;; id = 18611 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS d.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 42585 13 2 cb0a14df57f2abd562609317adb4df20683d73a42923cfe1b450620a49b2a22b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . aZf3RKTX4lrkKnGgWC7KE1mI33bvB0Wv03UzHVlPijuCQ7u1CHp5N34xm9ojVKTXYReYXsPcptSC 982TOY+N7wm4V68AcNgXhA8OKagSTHvfBw+mBRJsBCvrh24IEk58vJQzyILpAyJxB8g2XVp2SLZ5 ynwUMrQJhiM+0kO1kPE/yxPSv8GJkE9lM679+5ruiS70iJBBvkCc65Z/7w7UNOup1LKMJ116klrl /mrMeCLYiwCOkX/fUmlO4ygbJpgtX3pnYBiszAFESZ9VGZySTzegxfxWeSAbG0RD5S0b+cSckls1 OD3VF62GeCZZoSUCfgqYF/1BGu0sjwMhIimH9Q== ) ;; ADDITIONAL SECTION (15 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 d.nic.dk. 172800 IN A 185.159.198.45 l.nic.dk. 172800 IN A 130.226.213.138 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 l.nic.dk. 172800 IN AAAA 2001:878:0:e000:82:e2:d5:8a p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to c.root-servers.net for dk/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (366 octets) ;; HEADER SECTION ;; id = 64791 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 42585 13 2 cb0a14df57f2abd562609317adb4df20683d73a42923cfe1b450620a49b2a22b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . aZf3RKTX4lrkKnGgWC7KE1mI33bvB0Wv03UzHVlPijuCQ7u1CHp5N34xm9ojVKTXYReYXsPcptSC 982TOY+N7wm4V68AcNgXhA8OKagSTHvfBw+mBRJsBCvrh24IEk58vJQzyILpAyJxB8g2XVp2SLZ5 ynwUMrQJhiM+0kO1kPE/yxPSv8GJkE9lM679+5ruiS70iJBBvkCc65Z/7w7UNOup1LKMJ116klrl /mrMeCLYiwCOkX/fUmlO4ygbJpgtX3pnYBiszAFESZ9VGZySTzegxfxWeSAbG0RD5S0b+cSckls1 OD3VF62GeCZZoSUCfgqYF/1BGu0sjwMhIimH9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for dk in the . zone
	DS=42585/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . aZf3RKTX4lrkKnGgWC7KE1mI33bvB0Wv03UzHVlPijuCQ7u1CHp5N34xm9ojVKTXYReYXsPcptSC 982TOY+N7wm4V68AcNgXhA8OKagSTHvfBw+mBRJsBCvrh24IEk58vJQzyILpAyJxB8g2XVp2SLZ5 ynwUMrQJhiM+0kO1kPE/yxPSv8GJkE9lM679+5ruiS70iJBBvkCc65Z/7w7UNOup1LKMJ116klrl /mrMeCLYiwCOkX/fUmlO4ygbJpgtX3pnYBiszAFESZ9VGZySTzegxfxWeSAbG0RD5S0b+cSckls1 OD3VF62GeCZZoSUCfgqYF/1BGu0sjwMhIimH9Q== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=42585/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 42585 13 2 cb0a14df57f2abd562609317adb4df20683d73a42923cfe1b450620a49b2a22b )`
	Query to d.nic.dk for dk/DNSKEY
	Received 289 bytes from 185.159.198.45
	;; Response received from 185.159.198.45 (289 octets) ;; HEADER SECTION ;; id = 49086 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 13 HegkUc5W9dRmbQerNDwXouBz/FpYho0hKXnzIBvD4kViuCODPO0FyhtQRCHphbfLNU6hwYMhkN46 EetpGb4n3w== ) ; Key ID = 48480 dk. 86400 IN DNSKEY ( 257 3 13 Ih4ps6CivA/X5Jwy33MTCUuty4kaJgjBf+yy4ZrMPFj/Qh4Bw3jqpPcCm9HoVKbLFUmmq15cdGCH 2UO4xZZB8Q== ) ; Key ID = 42585 dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210825114428 20210728101428 42585 dk. jHVdGi/q+I/O1xZBt4uz5yx5ZQC2KOV8rRjws05z7zDdDFureI+KljeflAZzsCUV6xb8Qj3pcKJC 31jUh7ceCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 13 HegkUc5W9dRmbQerNDwXouBz/FpYho0hKXnzIBvD4kViuCODPO0FyhtQRCHphbfLNU6hwYMhkN46 EetpGb4n3w== ) ; Key ID = 48480`
	`dk. 86400 IN DNSKEY ( 257 3 13 Ih4ps6CivA/X5Jwy33MTCUuty4kaJgjBf+yy4ZrMPFj/Qh4Bw3jqpPcCm9HoVKbLFUmmq15cdGCH 2UO4xZZB8Q== ) ; Key ID = 42585`
	DNSKEY=42585/SEP is now in the chain-of-trust
	DS=42585/SHA-256 verifies DNSKEY=42585/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210825114428 20210728101428 42585 dk. jHVdGi/q+I/O1xZBt4uz5yx5ZQC2KOV8rRjws05z7zDdDFureI+KljeflAZzsCUV6xb8Qj3pcKJC 31jUh7ceCA== )`
	RRSIG=42585 and DNSKEY=42585/SEP verifies the DNSKEY RRset
	DNSKEY=48480 is now in the chain-of-trust
	Query to d.nic.dk for netfactory.dk/A
	Received 346 bytes from 185.159.198.45
	;; Response received from 185.159.198.45 (346 octets) ;; HEADER SECTION ;; id = 65221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20210824104428 20210727091428 48480 dk. X4FuypntCDM6552dkaMg7kkqCkNo8NUVhYa4ooCvCij+mq7+YQ/ZAr4yQSDFIkbdx2Xw6duw3Ebn lyT+VNiKzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.nic.dk for netfactory.dk/DNSKEY
	Received 346 bytes from 194.0.46.53
	;; Response received from 194.0.46.53 (346 octets) ;; HEADER SECTION ;; id = 4895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20210824104428 20210727091428 48480 dk. X4FuypntCDM6552dkaMg7kkqCkNo8NUVhYa4ooCvCij+mq7+YQ/ZAr4yQSDFIkbdx2Xw6duw3Ebn lyT+VNiKzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to b.nic.dk for netfactory.dk/DS
	Received 288 bytes from 193.163.102.222
	;; Response received from 193.163.102.222 (288 octets) ;; HEADER SECTION ;; id = 16742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (4 records) netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f ) netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 ) netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 ) netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20210824104428 20210727091428 48480 dk. X4FuypntCDM6552dkaMg7kkqCkNo8NUVhYa4ooCvCij+mq7+YQ/ZAr4yQSDFIkbdx2Xw6duw3Ebn lyT+VNiKzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for netfactory.dk in the dk zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	DS=2371/SHA-384 has algorithm ECDSAP256SHA256
	DS=2371/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`netfactory.dk. 7200 IN RRSIG ( DS 13 2 7200 20210824104428 20210727091428 48480 dk. X4FuypntCDM6552dkaMg7kkqCkNo8NUVhYa4ooCvCij+mq7+YQ/ZAr4yQSDFIkbdx2Xw6duw3Ebn lyT+VNiKzA== )`
	RRSIG=48480 and DNSKEY=48480 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`netfactory.dk. 7200 IN DS ( 2371 13 2 d534c5066539844c86c6a7cd029af2f26d6141524ac2ab5b9ab5ad1dc6957a2f )`
	`netfactory.dk. 7200 IN DS ( 2371 13 4 bbb14adc3e1abdec66a948190d0806526c8ca38dace4d78c160e25c25bce916b d1a4aa31fdf3ac2ca247915e67764de9 )`
	`netfactory.dk. 7200 IN DS ( 2371 13 1 37ecfb335ceacc88db32bc304d0d5f857c4a4c04 )`
	Query to betty.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 311 bytes from 173.245.58.75
	;; Response received from 173.245.58.75 (311 octets) ;; HEADER SECTION ;; id = 8695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210821034830 20210622034830 2371 netfactory.dk. W9XCQMDQ6ZgSL5D9PGkTrD8L8YVYMDe+F712RhYBDzqWOJ82L1wUtdef4hqywHno5zfyqgWwclZm IwRfiD08dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	DS=2371/SHA-384 verifies DNSKEY=2371/SEP
	DS=2371/SHA-1 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210821034830 20210622034830 2371 netfactory.dk. W9XCQMDQ6ZgSL5D9PGkTrD8L8YVYMDe+F712RhYBDzqWOJ82L1wUtdef4hqywHno5zfyqgWwclZm IwRfiD08dg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 172.64.32.75
	;; Response received from 172.64.32.75 (167 octets) ;; HEADER SECTION ;; id = 34706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. m+Ev8GifSlwLliMicY3ohV5advulUTSrbQGM3ZIfs0AKuwHO/1IvfZb1RV0ioB5Opj5EInqRRM9N ha0q3H4hsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	betty.ns.cloudflare.com is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 172.64.33.168
	;; Response received from 172.64.33.168 (214 octets) ;; HEADER SECTION ;; id = 60221 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2037859232 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20210801152143 20210730132143 34505 netfactory.dk. XaO/rPwQrAPNGkeOeYVtjAFja7/AJ+sKDbK3GJolGrT9zeDVlAMkC9gm13TMesNqlGu7MDOvbuuW Hlk7qokAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 172.64.32.75
	;; Response received from 172.64.32.75 (167 octets) ;; HEADER SECTION ;; id = 21834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. zRvoRqa78Hq2/pRklSN6AQ8P9MYadlVOSPLhgxsh3ScnKYvM+Vt/1EIoh0tm0t1ZOFwdj+2E87Z2 iEj7j/LOKw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. zRvoRqa78Hq2/pRklSN6AQ8P9MYadlVOSPLhgxsh3ScnKYvM+Vt/1EIoh0tm0t1ZOFwdj+2E87Z2 iEj7j/LOKw== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

netfactory.dk

	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 172.64.33.168
	;; Response received from 172.64.33.168 (167 octets) ;; HEADER SECTION ;; id = 20280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. DSFrOy2B4GDGPSOIYzCRYrObo6szaHM1RmIOPYLm28cgSIc3yi7Y9417bmr8ublNjDZA08HFWnV/ acYv1uG57A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gerald.ns.cloudflare.com is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/A
	Received 167 bytes from 173.245.59.168
	;; Response received from 173.245.59.168 (167 octets) ;; HEADER SECTION ;; id = 63570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. zz0anXIexzXlrt6t8MCkUlI3AX+E8CxDEHwI3wCy5UcpS1PDrnGiCBSRjrjK7qPiRYnnieDr4zje 5OwMzngxJA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20210801152143 20210730132143 34505 netfactory.dk. zz0anXIexzXlrt6t8MCkUlI3AX+E8CxDEHwI3wCy5UcpS1PDrnGiCBSRjrjK7qPiRYnnieDr4zje 5OwMzngxJA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: