DNSSEC Analyzer - netfactory.dk

Domain Name:

Time: 2019-10-14 10:16:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (864 bytes) ;; HEADER SECTION ;; id = 59200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to i.root-servers.net for netfactory.dk/A
	Received 741 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (741 bytes) ;; HEADER SECTION ;; id = 44552 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . noLkOIevPpq41FRZmD9VxGR0rGf9JARs1LIjKPeBp5t5sEfJBZDjgcdAY2L+AGlk2sGG+yevEUr7 6sQzxXPtB2A5VdTcMONYyHR/UOC3OAQgd7s0HzQyttOsSFRmUM/LE0NtbQ5sGT4E+rB5+utiyZMb fhTjqhcYUuAr+d4YaRmUXvz4xsrrImI5xqXmpg7ptxasowsp9UnMSZtROKwWEf9hZxOXkabHcwvS wWijb0IxkP0yBUoHtyS9WPCzrpEY4q2vJ06dMJJZy6Kv5cMChorjIIvAAQvQcqituU2Sq00z6IAD YNKT7H6K3aeKDQF5z1tcKxaS0luS1TXX6Ml9tw== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 194.0.46.53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN A 192.38.7.242 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN A 194.0.47.42 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN A 193.176.144.15 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for dk/DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for dk/DNSKEY: 'IPv6 transport disabled'
	Received 730 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (730 bytes) ;; HEADER SECTION ;; id = 33851 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . noLkOIevPpq41FRZmD9VxGR0rGf9JARs1LIjKPeBp5t5sEfJBZDjgcdAY2L+AGlk2sGG+yevEUr7 6sQzxXPtB2A5VdTcMONYyHR/UOC3OAQgd7s0HzQyttOsSFRmUM/LE0NtbQ5sGT4E+rB5+utiyZMb fhTjqhcYUuAr+d4YaRmUXvz4xsrrImI5xqXmpg7ptxasowsp9UnMSZtROKwWEf9hZxOXkabHcwvS wWijb0IxkP0yBUoHtyS9WPCzrpEY4q2vJ06dMJJZy6Kv5cMChorjIIvAAQvQcqituU2Sq00z6IAD YNKT7H6K3aeKDQF5z1tcKxaS0luS1TXX6Ml9tw== ) ;; ADDITIONAL SECTION (13 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to b.root-servers.net for dk/DS
	Received 366 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (366 bytes) ;; HEADER SECTION ;; id = 40141 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . noLkOIevPpq41FRZmD9VxGR0rGf9JARs1LIjKPeBp5t5sEfJBZDjgcdAY2L+AGlk2sGG+yevEUr7 6sQzxXPtB2A5VdTcMONYyHR/UOC3OAQgd7s0HzQyttOsSFRmUM/LE0NtbQ5sGT4E+rB5+utiyZMb fhTjqhcYUuAr+d4YaRmUXvz4xsrrImI5xqXmpg7ptxasowsp9UnMSZtROKwWEf9hZxOXkabHcwvS wWijb0IxkP0yBUoHtyS9WPCzrpEY4q2vJ06dMJJZy6Kv5cMChorjIIvAAQvQcqituU2Sq00z6IAD YNKT7H6K3aeKDQF5z1tcKxaS0luS1TXX6Ml9tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20191027050000 20191014040000 22545 . noLkOIevPpq41FRZmD9VxGR0rGf9JARs1LIjKPeBp5t5sEfJBZDjgcdAY2L+AGlk2sGG+yevEUr7 6sQzxXPtB2A5VdTcMONYyHR/UOC3OAQgd7s0HzQyttOsSFRmUM/LE0NtbQ5sGT4E+rB5+utiyZMb fhTjqhcYUuAr+d4YaRmUXvz4xsrrImI5xqXmpg7ptxasowsp9UnMSZtROKwWEf9hZxOXkabHcwvS wWijb0IxkP0yBUoHtyS9WPCzrpEY4q2vJ06dMJJZy6Kv5cMChorjIIvAAQvQcqituU2Sq00z6IAD YNKT7H6K3aeKDQF5z1tcKxaS0luS1TXX6Ml9tw== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to l.nic.dk for dk/DNSKEY
	Error querying l.nic.dk/2001:7f8:1f:0:0:1835:242:0 for dk/DNSKEY: 'IPv6 transport disabled'
	Received 873 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (873 bytes) ;; HEADER SECTION ;; id = 19771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAekR3bhW+z13wUbn8jQhtA/JwS6CFIhhjYrwnKIOfymTE38opdfrfbHtspXv/z+WNGSwAxpr bFn+FDarFmAxOspvXHLOy8S7xUeO9xSjHXrUTf4uDuHBbXi3jz4p+x7W1pwZWFAWmGwT0tCj+ThI wopUrLScwflW8X4jeI9Fp2nbEkTlS+ANGXZ9o28ZEL5yAsUxgBPLhCFKy72XRHFiVAL7QkxiwLXs eUHS72kqmOQ3MVHZlFM6iQ+fVW2E/yRYcVxHkMmSxGzTnmh1hsTlgw9QZZhpJw3WOYrJ0/C/GMSB IYBvuLlZlerKjziWblnXq65bpYv0isboASDb8KN1m/s= ) ; Key ID = 41071 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191107110334 20191010093334 32195 dk. UP6r0/x9NrZYwx6nVZBdAXIn1b4D4I+1Hvw78uTyT+olQQhUQ9QaWNXFCgRPyWGHQUy/uhFYf/sU 9e2Mt5n2PbgUt+JZlPIsfBTGbugpivkmBudvHz6W5AxuCvdiLyD0VSzVn1WUs021pDZQD2UkmtHb tWuiDjRIWeIDTwBe80l7YLszHnmPcyZdXLkTvBmqllitMYCp1z01fjIg+8n0JhfhKTrGu5uRWpxs iYSfZ2O0br25C09Z5k+N8BPgnoT+3vaJZXRHysjaG5lrrzi67weItRjFTqueHroJNQnZ3dcS9JEW ErgZDqcZhJCTSsIkxR0uhrmHRNlJhqd+3o0v2g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAekR3bhW+z13wUbn8jQhtA/JwS6CFIhhjYrwnKIOfymTE38opdfrfbHtspXv/z+WNGSwAxpr bFn+FDarFmAxOspvXHLOy8S7xUeO9xSjHXrUTf4uDuHBbXi3jz4p+x7W1pwZWFAWmGwT0tCj+ThI wopUrLScwflW8X4jeI9Fp2nbEkTlS+ANGXZ9o28ZEL5yAsUxgBPLhCFKy72XRHFiVAL7QkxiwLXs eUHS72kqmOQ3MVHZlFM6iQ+fVW2E/yRYcVxHkMmSxGzTnmh1hsTlgw9QZZhpJw3WOYrJ0/C/GMSB IYBvuLlZlerKjziWblnXq65bpYv0isboASDb8KN1m/s= ) ; Key ID = 41071`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20191107110334 20191010093334 32195 dk. UP6r0/x9NrZYwx6nVZBdAXIn1b4D4I+1Hvw78uTyT+olQQhUQ9QaWNXFCgRPyWGHQUy/uhFYf/sU 9e2Mt5n2PbgUt+JZlPIsfBTGbugpivkmBudvHz6W5AxuCvdiLyD0VSzVn1WUs021pDZQD2UkmtHb tWuiDjRIWeIDTwBe80l7YLszHnmPcyZdXLkTvBmqllitMYCp1z01fjIg+8n0JhfhKTrGu5uRWpxs iYSfZ2O0br25C09Z5k+N8BPgnoT+3vaJZXRHysjaG5lrrzi67weItRjFTqueHroJNQnZ3dcS9JEW ErgZDqcZhJCTSsIkxR0uhrmHRNlJhqd+3o0v2g== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=41071 is now in the chain-of-trust
	Query to b.nic.dk for netfactory.dk/A
	Received 855 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (855 bytes) ;; HEADER SECTION ;; id = 38820 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 o5ts84nup86je09buqtvbtmrh10gf42a A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. zv+XEt6AkF1ao5oOjEV5ZXTixU9RhhwjUGj71IL/5j5afjK+oTMf2ujbTJZe+dmnUQmpbmzpFtd6 H48h2WXYxGb5JEw4Fg72E7erM4P+X7FvoTFFb3rM168NS+RVEsWAjYb1TpfvyHT26995t0zTiqsX 1tYdyqxwSEFdQwyxuvqxIe3VSTwZG/NPZVopcgHqCIYPYa/AvFiZdhZUt/ExPO/1CIAUR9vepBfO hPtydQQKXzqfzn7/yczhmNiKwjD0u8GK0B+2XWViSOzZx4HNkjciuUQ07RSGi0MuLmw5yt/V9pmm b4oNOnphrkTAXDeCn4ySuhBDUZsC8aqrGkUj6g== ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 6a7v8691la2g0b798m173ojq7cj1kpiq NS DS RRSIG ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. L9UNI6leMb1XLsZiNsyO5F2uH0Wx/fXyzW95SLI1zD/slF6oeGYoMWCymm2A1JiMZyytKyr8uj/o pmHdSsGlIN+Ja/19BkgshbRLS73kHisSXIRcQR5H1U6aJINvSbrEXqNWyFTkO607GIVnspapjn7m YHKBC4uD4lzCzWvJNpT7GKWzRzxUNYRkCZJvUg0xvkjcUvvEA9TmFVZSCubnb2mA19TVGXSyZkJ6 WWR5cVVxYqWA6i73A9uLMkhrmL0macdbFvalN4cRred1YCdJHX20+L2CRQs8TPZ0romfo3mAexqC EboIt4CGWQoCNPcrAGAKg1UHuVoWG1Vwigu3KQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.dk for netfactory.dk/DNSKEY
	Error querying a.nic.dk/2001:1580:0:180d:0:0:0:122 for netfactory.dk/DNSKEY: 'IPv6 transport disabled'
	Received 855 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (855 bytes) ;; HEADER SECTION ;; id = 21198 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 o5ts84nup86je09buqtvbtmrh10gf42a A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. zv+XEt6AkF1ao5oOjEV5ZXTixU9RhhwjUGj71IL/5j5afjK+oTMf2ujbTJZe+dmnUQmpbmzpFtd6 H48h2WXYxGb5JEw4Fg72E7erM4P+X7FvoTFFb3rM168NS+RVEsWAjYb1TpfvyHT26995t0zTiqsX 1tYdyqxwSEFdQwyxuvqxIe3VSTwZG/NPZVopcgHqCIYPYa/AvFiZdhZUt/ExPO/1CIAUR9vepBfO hPtydQQKXzqfzn7/yczhmNiKwjD0u8GK0B+2XWViSOzZx4HNkjciuUQ07RSGi0MuLmw5yt/V9pmm b4oNOnphrkTAXDeCn4ySuhBDUZsC8aqrGkUj6g== ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 6a7v8691la2g0b798m173ojq7cj1kpiq NS DS RRSIG ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. L9UNI6leMb1XLsZiNsyO5F2uH0Wx/fXyzW95SLI1zD/slF6oeGYoMWCymm2A1JiMZyytKyr8uj/o pmHdSsGlIN+Ja/19BkgshbRLS73kHisSXIRcQR5H1U6aJINvSbrEXqNWyFTkO607GIVnspapjn7m YHKBC4uD4lzCzWvJNpT7GKWzRzxUNYRkCZJvUg0xvkjcUvvEA9TmFVZSCubnb2mA19TVGXSyZkJ6 WWR5cVVxYqWA6i73A9uLMkhrmL0macdbFvalN4cRred1YCdJHX20+L2CRQs8TPZ0romfo3mAexqC EboIt4CGWQoCNPcrAGAKg1UHuVoWG1Vwigu3KQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to s.nic.dk for netfactory.dk/DS
	Received 1148 bytes from 193.176.144.15
	;; Answer received from 193.176.144.15 (1148 bytes) ;; HEADER SECTION ;; id = 29047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 o5ts84nup86je09buqtvbtmrh10gf42a A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) o5s7r3vfs4vs98qomr4vgg0gkoa1lq72.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. zv+XEt6AkF1ao5oOjEV5ZXTixU9RhhwjUGj71IL/5j5afjK+oTMf2ujbTJZe+dmnUQmpbmzpFtd6 H48h2WXYxGb5JEw4Fg72E7erM4P+X7FvoTFFb3rM168NS+RVEsWAjYb1TpfvyHT26995t0zTiqsX 1tYdyqxwSEFdQwyxuvqxIe3VSTwZG/NPZVopcgHqCIYPYa/AvFiZdhZUt/ExPO/1CIAUR9vepBfO hPtydQQKXzqfzn7/yczhmNiKwjD0u8GK0B+2XWViSOzZx4HNkjciuUQ07RSGi0MuLmw5yt/V9pmm b4oNOnphrkTAXDeCn4ySuhBDUZsC8aqrGkUj6g== ) dk. 300 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1571048042 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 300 ;minimum ) dk. 300 IN RRSIG ( SOA 8 1 86400 20191111101403 20191014084403 41071 dk. Zct/z1eY7SjbaKYhiWJGzwe393dG9iCGOGISsMtfectL9/DJ27EYV5BGY4z58+w9GUN0+zgMdcPU e0XWH0D51fiei/gBj8MxrNghNGOefcz4ShStHOvFYBn/DaPYrtzqY2TomENNHptr6kZLCA9chb8M tdujpyeNumL5JSu9HyEw2nLjqUDtMlSG9QTPFJJAwQmsUz8WgMCW9DYJYT0j8lAEZ150wY/fk9HS 4wbn/ElEcR+4TotcANMO1pRI+SMHV9sd+A6b/mP6dby0FvtW1XajZUQwG03ASCzHrwiNoDIIQlb4 FPOH/h37oK1V7MdphzbA4yTpwLamd7JQbRKmyA== ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN NSEC3 ( 1 1 17 aca34952754ade94 6a7v8691la2g0b798m173ojq7cj1kpiq NS DS RRSIG ) 6a6d8hott42gcafp2d8abg5ejctkddi4.dk. 300 IN RRSIG ( NSEC3 8 2 300 20191106100333 20191009083333 41071 dk. L9UNI6leMb1XLsZiNsyO5F2uH0Wx/fXyzW95SLI1zD/slF6oeGYoMWCymm2A1JiMZyytKyr8uj/o pmHdSsGlIN+Ja/19BkgshbRLS73kHisSXIRcQR5H1U6aJINvSbrEXqNWyFTkO607GIVnspapjn7m YHKBC4uD4lzCzWvJNpT7GKWzRzxUNYRkCZJvUg0xvkjcUvvEA9TmFVZSCubnb2mA19TVGXSyZkJ6 WWR5cVVxYqWA6i73A9uLMkhrmL0macdbFvalN4cRred1YCdJHX20+L2CRQs8TPZ0romfo3mAexqC EboIt4CGWQoCNPcrAGAKg1UHuVoWG1Vwigu3KQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to betty.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 311 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (311 bytes) ;; HEADER SECTION ;; id = 32072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (3 records) netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20191103090207 20190904090207 2371 netfactory.dk. LTXsATUJ1rYTaoXDhQslJ/061IkgHq4gXw2IlhjjAD2V3E/75o+TAqShXJh4spfv9CuPoe+wMAMn rr1L55W83Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for netfactory.dk
	`netfactory.dk. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`netfactory.dk. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`netfactory.dk. 3600 IN RRSIG ( DNSKEY 13 2 3600 20191103090207 20190904090207 2371 netfactory.dk. LTXsATUJ1rYTaoXDhQslJ/061IkgHq4gXw2IlhjjAD2V3E/75o+TAqShXJh4spfv9CuPoe+wMAMn rr1L55W83Q== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Error querying betty.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a4b for netfactory.dk/A: 'IPv6 transport disabled'
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 24020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191015111638 20191013091638 34505 netfactory.dk. EUgnlhbtI8jOcWS+OBald5TW3NESWZ46UA6pyRscLy/bP0jYYZBWBmldBS5KhknqWgrmVVfaPyXZ 9267Bz0CnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Found RRSIG signed by netfactory.dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Error querying gerald.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3ba8 for netfactory.dk/SOA: 'IPv6 transport disabled'
	Received 214 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (214 bytes) ;; HEADER SECTION ;; id = 36111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2032184633 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20191015111638 20191013091638 34505 netfactory.dk. yy6uFPTurDdg7ugOvJBox9WUm1Rsm3AFJgS68U1surZ2I/RcjrUUpISEc+xqoVN1s3RSfkex0g9N gZ0nOy7k4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 214 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (214 bytes) ;; HEADER SECTION ;; id = 47566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (2 records) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2032184633 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) netfactory.dk. 3600 IN RRSIG ( SOA 13 2 3600 20191015111638 20191013091638 34505 netfactory.dk. aPZVNretakMoX/s6JKnHQeXZg+p8csHENZp8DpvzJDwzCROt+UHekpAx0LK564cCrdfaZLi4N+Ry Ogt7d6KIHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Error querying betty.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a4b for netfactory.dk/A: 'IPv6 transport disabled'
	Received 167 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (167 bytes) ;; HEADER SECTION ;; id = 53504 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (2 records) netfactory.dk. 300 IN A 162.243.107.241 netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191015111638 20191013091638 34505 netfactory.dk. ngJEyW1e+oiDtumg4rs34GrL2nAjZB6pzm/KM6f65ZwMElwFW6tUKWY8KTqrYLP5b/WXx8PAgpWx nkZ6RA2RZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	Found 1 RRSIGs over A RRset
	`netfactory.dk. 300 IN RRSIG ( A 13 2 300 20191015111638 20191013091638 34505 netfactory.dk. ngJEyW1e+oiDtumg4rs34GrL2nAjZB6pzm/KM6f65ZwMElwFW6tUKWY8KTqrYLP5b/WXx8PAgpWx nkZ6RA2RZA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: