DNSSEC Analyzer - netfactory.dk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 15:01:30 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (1139 bytes) ;; HEADER SECTION ;; id = 5545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to g.root-servers.net for netfactory.dk/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for netfactory.dk/A: 'IPv6 transport disabled'
	Received 713 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (713 bytes) ;; HEADER SECTION ;; id = 52912 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . mhWvghhimQnZzDTxwjWDyVrSQipprkpo8APD3ohtiuPyfuDio+6LzG6i1mJovDgKzS0Krqb4/XWx kSfaJ3eBtWosRBbXTja7FUmAPjeuPZ0YFWINsWSB2qYGZAXc6Kqh/kVAeNdAJCNVl3Te+bz3+NOD Fpkowr+PQTCd3CjWV7nnHbHnV1tuFr0BMMEpeB0c6sbpy4STxaAkuXlxJ86lEmJfdOVc8RQaengx DE5Cih8BondDPqkrxiWwvSwBl+yihy1hEADo/WykD6MJDO7cu62rzuE5didKeO7bgaMAtTd3YYjW PtJ2NmOL2Teer6IMbQ1XAfe8B56kMVCmV60TKA== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for dk/DNSKEY
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for dk/DNSKEY: 'IPv6 transport disabled'
	Received 702 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (702 bytes) ;; HEADER SECTION ;; id = 28711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . mhWvghhimQnZzDTxwjWDyVrSQipprkpo8APD3ohtiuPyfuDio+6LzG6i1mJovDgKzS0Krqb4/XWx kSfaJ3eBtWosRBbXTja7FUmAPjeuPZ0YFWINsWSB2qYGZAXc6Kqh/kVAeNdAJCNVl3Te+bz3+NOD Fpkowr+PQTCd3CjWV7nnHbHnV1tuFr0BMMEpeB0c6sbpy4STxaAkuXlxJ86lEmJfdOVc8RQaengx DE5Cih8BondDPqkrxiWwvSwBl+yihy1hEADo/WykD6MJDO7cu62rzuE5didKeO7bgaMAtTd3YYjW PtJ2NmOL2Teer6IMbQ1XAfe8B56kMVCmV60TKA== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to a.root-servers.net for dk/DS
	Received 366 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (366 bytes) ;; HEADER SECTION ;; id = 16140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . mhWvghhimQnZzDTxwjWDyVrSQipprkpo8APD3ohtiuPyfuDio+6LzG6i1mJovDgKzS0Krqb4/XWx kSfaJ3eBtWosRBbXTja7FUmAPjeuPZ0YFWINsWSB2qYGZAXc6Kqh/kVAeNdAJCNVl3Te+bz3+NOD Fpkowr+PQTCd3CjWV7nnHbHnV1tuFr0BMMEpeB0c6sbpy4STxaAkuXlxJ86lEmJfdOVc8RQaengx DE5Cih8BondDPqkrxiWwvSwBl+yihy1hEADo/WykD6MJDO7cu62rzuE5didKeO7bgaMAtTd3YYjW PtJ2NmOL2Teer6IMbQ1XAfe8B56kMVCmV60TKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20181226050000 20181213040000 2134 . mhWvghhimQnZzDTxwjWDyVrSQipprkpo8APD3ohtiuPyfuDio+6LzG6i1mJovDgKzS0Krqb4/XWx kSfaJ3eBtWosRBbXTja7FUmAPjeuPZ0YFWINsWSB2qYGZAXc6Kqh/kVAeNdAJCNVl3Te+bz3+NOD Fpkowr+PQTCd3CjWV7nnHbHnV1tuFr0BMMEpeB0c6sbpy4STxaAkuXlxJ86lEmJfdOVc8RQaengx DE5Cih8BondDPqkrxiWwvSwBl+yihy1hEADo/WykD6MJDO7cu62rzuE5didKeO7bgaMAtTd3YYjW PtJ2NmOL2Teer6IMbQ1XAfe8B56kMVCmV60TKA== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to s.nic.dk for dk/DNSKEY
	Error querying s.nic.dk/2a00:d78:0:102:193:176:144:15 for dk/DNSKEY: 'IPv6 transport disabled'
	Received 1149 bytes from 193.176.144.15
	;; Answer received from 193.176.144.15 (1149 bytes) ;; HEADER SECTION ;; id = 45496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (4 records) dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN DNSKEY ( 256 3 8 AwEAAZ9nXjH0A38ULosGENRRlaXkEwCusRsKGSWBgPEb1ksdZC0/iy5n5IEdYx1BSHK65O+hJ7HB V4fqbctObvdDQFrBbNY0GtW5kHoxjLzLi3W9qCbGi49L0KWNF3B1UTUp0CzwuCRA+ytqc2t9gusk QP8cRMOLRjOJLuprsVYL9SE9jj6YTGlgeL2g4wvCEFGSAjFEXoO5dKOdL0s+LgMd2tSAqXt3BE1j HvkeoAFmGzEGlsaW7bnGGUxWKnYtt30Zti6jNcw2xAZ2E5MB00mpN+LOCVZebOrw31aeODVBHmJC ETGkJA+lKJuhRmWiOyPRc/iqljymOIkqrdNoE77Uh70= ) ; Key ID = 47553 dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdwjvfU2GPUmsOGAVn51xHCvJgTncAV+us2L6kGWbhY3fWI0BQs1zkA6Rhfuy8EdozF+YSU8 G+wINomfpT8q4R8Nxwv1XdqDK0UOfoExZZjjMae8Cs/7UnjVc25bcThK5U/Y+08h5OXhxDCAU2SE Eexc2E5JDL5GjRcZTaK+DDQGNO7XXR9S6PJ460ilR/ir9mJ9/1OGroZUuI0Vtq/IsrbUxea44s+C UgjztpQKbCk2yeE+oZb+j+QyOjLmzNzk6mlpxpmBhBNKuUq3K4nhcJgZOrSMqazpXW2gyhf7R6zO 5uJCNUWEmAqGQBjnToisexDYQUIWtL4xrR+vheKHcns= ) ; Key ID = 26853 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190109122223 20181212180337 32195 dk. E9gzaUYgCzbfvukbrVNo0ERCToV50VoY6WYd5NM04WQqZ2qhJMeVksxPJKPv2h8oenfr89cc5vh1 HrY4su3ieLCdSvmr2utoEqaN1MlqOjIOdVGn0Ov9QmOgpbdlo2pagTWroB3F3gRCnrneM7m74ERF fki5ncv3Y1DzzLUhJAm6mclz+CnbsEl+QHQoUHBasqrUQ2orn2JwlSQaYaOu6XrJ7NGT6pKXf4zp 1wZ2RGpHalG8hInvIsoaE7zwlYgg+BFYCjPmJgNgQlQ8ZEKi7Kav0fI6HAW57B5Iy4ACcvJq/Oof TWg/vOIWejMqC2/mp+oIvmluqSpYFBnEMMW8GQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAZ9nXjH0A38ULosGENRRlaXkEwCusRsKGSWBgPEb1ksdZC0/iy5n5IEdYx1BSHK65O+hJ7HB V4fqbctObvdDQFrBbNY0GtW5kHoxjLzLi3W9qCbGi49L0KWNF3B1UTUp0CzwuCRA+ytqc2t9gusk QP8cRMOLRjOJLuprsVYL9SE9jj6YTGlgeL2g4wvCEFGSAjFEXoO5dKOdL0s+LgMd2tSAqXt3BE1j HvkeoAFmGzEGlsaW7bnGGUxWKnYtt30Zti6jNcw2xAZ2E5MB00mpN+LOCVZebOrw31aeODVBHmJC ETGkJA+lKJuhRmWiOyPRc/iqljymOIkqrdNoE77Uh70= ) ; Key ID = 47553`
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAdwjvfU2GPUmsOGAVn51xHCvJgTncAV+us2L6kGWbhY3fWI0BQs1zkA6Rhfuy8EdozF+YSU8 G+wINomfpT8q4R8Nxwv1XdqDK0UOfoExZZjjMae8Cs/7UnjVc25bcThK5U/Y+08h5OXhxDCAU2SE Eexc2E5JDL5GjRcZTaK+DDQGNO7XXR9S6PJ460ilR/ir9mJ9/1OGroZUuI0Vtq/IsrbUxea44s+C UgjztpQKbCk2yeE+oZb+j+QyOjLmzNzk6mlpxpmBhBNKuUq3K4nhcJgZOrSMqazpXW2gyhf7R6zO 5uJCNUWEmAqGQBjnToisexDYQUIWtL4xrR+vheKHcns= ) ; Key ID = 26853`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190109122223 20181212180337 32195 dk. E9gzaUYgCzbfvukbrVNo0ERCToV50VoY6WYd5NM04WQqZ2qhJMeVksxPJKPv2h8oenfr89cc5vh1 HrY4su3ieLCdSvmr2utoEqaN1MlqOjIOdVGn0Ov9QmOgpbdlo2pagTWroB3F3gRCnrneM7m74ERF fki5ncv3Y1DzzLUhJAm6mclz+CnbsEl+QHQoUHBasqrUQ2orn2JwlSQaYaOu6XrJ7NGT6pKXf4zp 1wZ2RGpHalG8hInvIsoaE7zwlYgg+BFYCjPmJgNgQlQ8ZEKi7Kav0fI6HAW57B5Iy4ACcvJq/Oof TWg/vOIWejMqC2/mp+oIvmluqSpYFBnEMMW8GQ== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=47553 is now in the chain-of-trust
	DNSKEY=26853 is now in the chain-of-trust
	Query to c.nic.dk for netfactory.dk/A
	Error querying c.nic.dk/2001:678:74:0:0:0:0:53 for netfactory.dk/A: 'IPv6 transport disabled'
	Received 855 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (855 bytes) ;; HEADER SECTION ;; id = 56410 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190107014334 20181209220343 26853 dk. jdnL6HO7yK0WRiQEDwgJhDndgovLUGnEDzRm00qb4cEEhaXjOC73+6NlN4jWngMQvcRGWNQt2gWM ViktZc95/ortAYyTR386ZCXlt1eQ27lXac1/fzKipFPcrwIORlMohQiqFNU3lKrdxtOdZZpxUe3l WA38xCleLzJXTl+XoPF2wkpv87jBuSTXihAanNi6fgUzXMxlhvmzaTNut1b2K6L2uatXdbNuBEo/ 8ZCTxC3ugt1rDUxTWDwQT0tRaXStS3aGaCeVRxDAmMsVnGrtkCr+iP5INIB4MEKzfpyn9P4Hq7a4 zLez+r+0jb8rTNqjTYdv4J0yyjK/NcyksA07jA== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190108182828 20181211120337 26853 dk. omdWqRhkQZKGIaTa9XVfY4gDqZe3XKi0YplsJfgaCcABYFLeTAdl8iiznfCGZ7cyXuRIyXfanz6r 6Z86tzbSotR/M5nxLPN3h5bxvwf0MsDJPVVe0hURRPSJgQo/ngZPVp78tNnmYERsY1WlT0zb0A1h u8T07b+Axwpi+PN3y06kBwZU4EhCoDU5etVhzw+SlvymVAlX3GWt9oqkRFR78uSByCGwrwFhkO3I irUFVBzN4a34z6rk7iqvq/oJGHhnh7t4ssklWxQoffXaPcwELsHlItO6n7O8EeEBX6UeecW0O9f5 pVNoLkgC49RwhPzrG8EoHB/DNED41jY0feYgyA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.nic.dk for netfactory.dk/DNSKEY
	Error querying c.nic.dk/2001:678:74:0:0:0:0:53 for netfactory.dk/DNSKEY: 'IPv6 transport disabled'
	Received 855 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (855 bytes) ;; HEADER SECTION ;; id = 36471 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190107014334 20181209220343 26853 dk. jdnL6HO7yK0WRiQEDwgJhDndgovLUGnEDzRm00qb4cEEhaXjOC73+6NlN4jWngMQvcRGWNQt2gWM ViktZc95/ortAYyTR386ZCXlt1eQ27lXac1/fzKipFPcrwIORlMohQiqFNU3lKrdxtOdZZpxUe3l WA38xCleLzJXTl+XoPF2wkpv87jBuSTXihAanNi6fgUzXMxlhvmzaTNut1b2K6L2uatXdbNuBEo/ 8ZCTxC3ugt1rDUxTWDwQT0tRaXStS3aGaCeVRxDAmMsVnGrtkCr+iP5INIB4MEKzfpyn9P4Hq7a4 zLez+r+0jb8rTNqjTYdv4J0yyjK/NcyksA07jA== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190108182828 20181211120337 26853 dk. omdWqRhkQZKGIaTa9XVfY4gDqZe3XKi0YplsJfgaCcABYFLeTAdl8iiznfCGZ7cyXuRIyXfanz6r 6Z86tzbSotR/M5nxLPN3h5bxvwf0MsDJPVVe0hURRPSJgQo/ngZPVp78tNnmYERsY1WlT0zb0A1h u8T07b+Axwpi+PN3y06kBwZU4EhCoDU5etVhzw+SlvymVAlX3GWt9oqkRFR78uSByCGwrwFhkO3I irUFVBzN4a34z6rk7iqvq/oJGHhnh7t4ssklWxQoffXaPcwELsHlItO6n7O8EeEBX6UeecW0O9f5 pVNoLkgC49RwhPzrG8EoHB/DNED41jY0feYgyA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to b.nic.dk for netfactory.dk/DS
	Error querying b.nic.dk/2a01:630:0:80:0:0:0:53 for netfactory.dk/DS: 'IPv6 transport disabled'
	Received 1148 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (1148 bytes) ;; HEADER SECTION ;; id = 31631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 nusosktpffs710tion7i9s7pjmb3nme9 A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) nus40pnce6fnqehvt88kqbt6c011u0d9.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190107014334 20181209220343 26853 dk. jdnL6HO7yK0WRiQEDwgJhDndgovLUGnEDzRm00qb4cEEhaXjOC73+6NlN4jWngMQvcRGWNQt2gWM ViktZc95/ortAYyTR386ZCXlt1eQ27lXac1/fzKipFPcrwIORlMohQiqFNU3lKrdxtOdZZpxUe3l WA38xCleLzJXTl+XoPF2wkpv87jBuSTXihAanNi6fgUzXMxlhvmzaTNut1b2K6L2uatXdbNuBEo/ 8ZCTxC3ugt1rDUxTWDwQT0tRaXStS3aGaCeVRxDAmMsVnGrtkCr+iP5INIB4MEKzfpyn9P4Hq7a4 zLez+r+0jb8rTNqjTYdv4J0yyjK/NcyksA07jA== ) dk. 600 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1544709660 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 600 ;minimum ) dk. 600 IN RRSIG ( SOA 8 1 86400 20190110030716 20181213130341 26853 dk. dAGEaPtojUx1P2T3EDjDE0aM6Xxy9sTRObPwD+pjP7piwa1hJAExvgwQ6RGMhRrbTsVI1GdwdA4Q k8lxI+T2fyfkmQq4CEUeRb7tMA8cwd2oA7TgXHN44LUlxYTFp9GMSsA7Dgf2UyV+u5ojynppEbLg PXUaxmPBYCGkx8O564xyVOF1eqoTi6IbVAS8jYZTr5nmKtNyhippAoPkPEos/GddNuxEqdNN7ZsI 1E7zF/MpRNEQjlQIJlaUNPDCzjD8mK63oUBv/RXNc96Uxmfu4yEoCfbs7ufXa5DULTG5MIJNFD3f zY07mNlJVDJTBPdZwI16VqgOE4mQu6k22ekzgw== ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN NSEC3 ( 1 1 17 15709310c2bd2b94 gf2c9ael9vruj9vioueffjfd6he7e6up NS DS RRSIG ) gf023ohgm9ojgrq6c5fqagn7l5q4r58m.dk. 600 IN RRSIG ( NSEC3 8 2 600 20190108182828 20181211120337 26853 dk. omdWqRhkQZKGIaTa9XVfY4gDqZe3XKi0YplsJfgaCcABYFLeTAdl8iiznfCGZ7cyXuRIyXfanz6r 6Z86tzbSotR/M5nxLPN3h5bxvwf0MsDJPVVe0hURRPSJgQo/ngZPVp78tNnmYERsY1WlT0zb0A1h u8T07b+Axwpi+PN3y06kBwZU4EhCoDU5etVhzw+SlvymVAlX3GWt9oqkRFR78uSByCGwrwFhkO3I irUFVBzN4a34z6rk7iqvq/oJGHhnh7t4ssklWxQoffXaPcwELsHlItO6n7O8EeEBX6UeecW0O9f5 pVNoLkgC49RwhPzrG8EoHB/DNED41jY0feYgyA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to betty.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 105 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (105 bytes) ;; HEADER SECTION ;; id = 48525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	No DNSKEY records found
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Error querying betty.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3a4b for netfactory.dk/A: 'IPv6 transport disabled'
	Received 58 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (58 bytes) ;; HEADER SECTION ;; id = 5630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Error querying gerald.ns.cloudflare.com/2400:cb00:2049:1:0:0:adf5:3ba8 for netfactory.dk/SOA: 'IPv6 transport disabled'
	Received 105 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (105 bytes) ;; HEADER SECTION ;; id = 9463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 105 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (105 bytes) ;; HEADER SECTION ;; id = 65025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 58 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (58 bytes) ;; HEADER SECTION ;; id = 46998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: