DNSSEC Analyzer - netfactory.dk

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-06-21 09:49:37 UTC, NTP stratum 4

Analyzing DNSSEC problems for netfactory.dk

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1414 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1414 bytes) ;; HEADER SECTION ;; id = 36971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakixDgTOkgG/PUzlEauAiKzlxGwezjqbKFPS wrY3qHmbbsSTY6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdlUReP+uhBWBfKI2aGwhRm QYR0zSmg7PGOde34c/rOItK1ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVLx/WUKQpU /nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXSaUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME 9JbYinBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs= ) ; Key ID = 41656 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20180711000000 20180620000000 19036 . hv/+rE3CW8vEsd/Ufj2esJ3L1ZVhHS/mfdt0w7SjpgOxUCRAGx7QmsEo9xCeqr0DSf3uKWEOzNgg W++nmugo178KKw9DgvnThf+e5lKRxoSHCmKP46RQapj3E76ERnH3hHxtG4yO6QZhc13VsgdTfnwI S+HjqaeuHUrgddW/RCZqlif2TCdLD8SQXgcmprRsFN6Jtfz/wP3HE6ftSIoKs7bqo/SPVT7WFAwd euhL655dVw2vVvMHatB2hKOZGf0SQxizYjVntWpudq6JDUZiE4m1TWCWcwZe39Th/Jcz54tPB48B pn7X3rWGCOtHeAjHJ3GylWiop+Xl1zp2oxl+Zg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakixDgTOkgG/PUzlEauAiKzlxGwezjqbKFPS wrY3qHmbbsSTY6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdlUReP+uhBWBfKI2aGwhRm QYR0zSmg7PGOde34c/rOItK1ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVLx/WUKQpU /nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXSaUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME 9JbYinBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs= ) ; Key ID = 41656`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20180711000000 20180620000000 19036 . hv/+rE3CW8vEsd/Ufj2esJ3L1ZVhHS/mfdt0w7SjpgOxUCRAGx7QmsEo9xCeqr0DSf3uKWEOzNgg W++nmugo178KKw9DgvnThf+e5lKRxoSHCmKP46RQapj3E76ERnH3hHxtG4yO6QZhc13VsgdTfnwI S+HjqaeuHUrgddW/RCZqlif2TCdLD8SQXgcmprRsFN6Jtfz/wP3HE6ftSIoKs7bqo/SPVT7WFAwd euhL655dVw2vVvMHatB2hKOZGf0SQxizYjVntWpudq6JDUZiE4m1TWCWcwZe39Th/Jcz54tPB48B pn7X3rWGCOtHeAjHJ3GylWiop+Xl1zp2oxl+Zg== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=41656 is now in the chain-of-trust
	DNSKEY=39570 is now in the chain-of-trust
	Query to l.root-servers.net for netfactory.dk/A
	Received 713 bytes from 2001:500:9f::42
	;; Answer received from 2001:500:9f::42 (713 bytes) ;; HEADER SECTION ;; id = 16834 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20180704050000 20180621040000 39570 . deyi/dQj3XzK5tpW3pwW8lzkcJvFGF1XiOkB9YEZ1bwNbbZ8F3Fdwu1ZR2MbN53+z/ehD8JeFGXN AT4ZdU3nTn1pSRH+IWEjbxQRYdR2Pu1gemypx4wCIxXpCrwEiNZ4gYrwfn50qZbdPzCcIND6UEEJ Uz9XOj4JQGadr4h1en2am1QwXMepP0ekMr9jFU7ZtCNO3WQL5q9FJNDs82pRz+tpyHkfW/TA3g+F 19x+Fiu1JkonU8WROFTYdRZElOfSAcl8YkwLLsZYkCOroQxliW3UlngLo3vdlIWQWbZih982Kbb+ akSfBe9pQvixoaq68IDHCTTGlkQBNlh0v1pM5A== ) ;; ADDITIONAL SECTION (12 records) b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for dk/DNSKEY
	Received 702 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (702 bytes) ;; HEADER SECTION ;; id = 16050 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20180704050000 20180621040000 39570 . deyi/dQj3XzK5tpW3pwW8lzkcJvFGF1XiOkB9YEZ1bwNbbZ8F3Fdwu1ZR2MbN53+z/ehD8JeFGXN AT4ZdU3nTn1pSRH+IWEjbxQRYdR2Pu1gemypx4wCIxXpCrwEiNZ4gYrwfn50qZbdPzCcIND6UEEJ Uz9XOj4JQGadr4h1en2am1QwXMepP0ekMr9jFU7ZtCNO3WQL5q9FJNDs82pRz+tpyHkfW/TA3g+F 19x+Fiu1JkonU8WROFTYdRZElOfSAcl8YkwLLsZYkCOroQxliW3UlngLo3vdlIWQWbZih982Kbb+ akSfBe9pQvixoaq68IDHCTTGlkQBNlh0v1pM5A== ) ;; ADDITIONAL SECTION (12 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to c.root-servers.net for dk/DS
	Received 366 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (366 bytes) ;; HEADER SECTION ;; id = 28227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20180704050000 20180621040000 39570 . deyi/dQj3XzK5tpW3pwW8lzkcJvFGF1XiOkB9YEZ1bwNbbZ8F3Fdwu1ZR2MbN53+z/ehD8JeFGXN AT4ZdU3nTn1pSRH+IWEjbxQRYdR2Pu1gemypx4wCIxXpCrwEiNZ4gYrwfn50qZbdPzCcIND6UEEJ Uz9XOj4JQGadr4h1en2am1QwXMepP0ekMr9jFU7ZtCNO3WQL5q9FJNDs82pRz+tpyHkfW/TA3g+F 19x+Fiu1JkonU8WROFTYdRZElOfSAcl8YkwLLsZYkCOroQxliW3UlngLo3vdlIWQWbZih982Kbb+ akSfBe9pQvixoaq68IDHCTTGlkQBNlh0v1pM5A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=32195/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20180704050000 20180621040000 39570 . deyi/dQj3XzK5tpW3pwW8lzkcJvFGF1XiOkB9YEZ1bwNbbZ8F3Fdwu1ZR2MbN53+z/ehD8JeFGXN AT4ZdU3nTn1pSRH+IWEjbxQRYdR2Pu1gemypx4wCIxXpCrwEiNZ4gYrwfn50qZbdPzCcIND6UEEJ Uz9XOj4JQGadr4h1en2am1QwXMepP0ekMr9jFU7ZtCNO3WQL5q9FJNDs82pRz+tpyHkfW/TA3g+F 19x+Fiu1JkonU8WROFTYdRZElOfSAcl8YkwLLsZYkCOroQxliW3UlngLo3vdlIWQWbZih982Kbb+ akSfBe9pQvixoaq68IDHCTTGlkQBNlh0v1pM5A== )`
	RRSIG=39570 and DNSKEY=39570 verifies the DS RRset
	DS=32195/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 32195 8 2 167cb3652048f478222e958d1cad907d7ecb28e7a545de01b8591ad29eac6444 )`
	Query to b.nic.dk for dk/DNSKEY
	Received 1149 bytes from 2a01:630:0:80::53
	;; Answer received from 2a01:630:0:80::53 (1149 bytes) ;; HEADER SECTION ;; id = 40272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (4 records) dk. 86400 IN DNSKEY ( 256 3 8 AwEAAb3RUNZrn6ccRrPDva9xjLw1dqCwh6LeQDWSjbveNMlep/R91/u+CE8zJSnZ7NBUcO095yaM ST+/Wh+VKFQuwaZx58+Hs6acA/H0Eer47fDRIEOWkQAHWyEWNj0Tsecod+W1h/KDX9C85WX7sqM9 fy4FTq+u7PAH+jfrvj/wgSsCIVgOE1+gWHRr+GGvNkNrTHZWjJJVDz3w6gk+HXa5+nweD5hpgKp9 rYaHRI0gGfgjBSYkbUVbgFnO1ikD2GUkUZCInVK8/u/muY77EQ5YInFyhy0wMn4dFhoPRMDvd4dI 9gD9sQ+q0aAQ0uT73oCe4G8abiQAki4B2lwKBGyMvzU= ) ; Key ID = 44541 dk. 86400 IN DNSKEY ( 256 3 8 AwEAAfCCQX725vtKq9W+VpqRy2Kl1oVhNey0PQkG/ospr+rAV1YUGMHWwx3AzMO1++6E6Bi5Cekw eV/nGif/QU/l90L0OXHZYP6JSNtuDihkmLjcfawURY/yORh8C0ZPxShU4+XhN12H3UsTBcZ6+vid Ir27yy5ziFVFf1XG6w3DqF6/YNi4MMHwnt4kwVdj71L1KowmHpSEdkWwbUYlgK1TnUXN27MEGWiO rXLOeCEa3RXHTU5lU+5l1DujBPgm3qAl56h0bZeQiNQKayC+ug9Oq9khvB95Uu8QZHO2MiUEpsWU BEuSYB+7ETMZK4Uf6kvszGFC2d8d8k5/n+m1rHjjv9k= ) ; Key ID = 55771 dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195 dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180718015353 20180619210319 32195 dk. HR5JU34oRtPHf87a7Ite0dUyOzHoyoUh6MIi091zPD3wHqRSR0JnVGUZ7/pG7KNh8ZLRPUqYe21I XxPYrk3rMBmhti8gkCE6FaROR516QQtA6TIE66mjJ3kDOpUK36VtedBhMk0csE8Oo3JU5jdSmGiE IdrCBU5q+yLzci3BBFs4D2CvX78o4NXoT8B66RIgOc184wYv3dplR2/gdOnpoVFz4tysvTKhhybu eNjtxLzT8AqQ6FOKRLpyzKoFvU8ikmgIovdh6F2C/zJmu3jbYyhnk8BUlXxMJVP+B+mCuOdWvSZ1 C7qyqqHb714TjVhdzCY3Tt6O0bGj6ECgIc9rPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAb3RUNZrn6ccRrPDva9xjLw1dqCwh6LeQDWSjbveNMlep/R91/u+CE8zJSnZ7NBUcO095yaM ST+/Wh+VKFQuwaZx58+Hs6acA/H0Eer47fDRIEOWkQAHWyEWNj0Tsecod+W1h/KDX9C85WX7sqM9 fy4FTq+u7PAH+jfrvj/wgSsCIVgOE1+gWHRr+GGvNkNrTHZWjJJVDz3w6gk+HXa5+nweD5hpgKp9 rYaHRI0gGfgjBSYkbUVbgFnO1ikD2GUkUZCInVK8/u/muY77EQ5YInFyhy0wMn4dFhoPRMDvd4dI 9gD9sQ+q0aAQ0uT73oCe4G8abiQAki4B2lwKBGyMvzU= ) ; Key ID = 44541`
	`dk. 86400 IN DNSKEY ( 256 3 8 AwEAAfCCQX725vtKq9W+VpqRy2Kl1oVhNey0PQkG/ospr+rAV1YUGMHWwx3AzMO1++6E6Bi5Cekw eV/nGif/QU/l90L0OXHZYP6JSNtuDihkmLjcfawURY/yORh8C0ZPxShU4+XhN12H3UsTBcZ6+vid Ir27yy5ziFVFf1XG6w3DqF6/YNi4MMHwnt4kwVdj71L1KowmHpSEdkWwbUYlgK1TnUXN27MEGWiO rXLOeCEa3RXHTU5lU+5l1DujBPgm3qAl56h0bZeQiNQKayC+ug9Oq9khvB95Uu8QZHO2MiUEpsWU BEuSYB+7ETMZK4Uf6kvszGFC2d8d8k5/n+m1rHjjv9k= ) ; Key ID = 55771`
	`dk. 86400 IN DNSKEY ( 257 3 8 AwEAAb2yDbklk39lgJKkEcv8Vl6+i3LC0w6R+bae/rxYcJVd3LzvrtKJE6AEZH6E9FFWb9w8Miu8 RDsJoHGnvuNu9t2/xIufmfUaT2WNb4+4OLDqHng8w6JpRsFBEufzs9Tq+gaa5rDu0O9emFlnim5j 8KqwqjSQP4yKRO/9IGxevZWFWTan7oAgBy4frLDbefWS0kJQiVHdGgsThswYyPOpWRJrW9mMIrC3 cnor3ziOESY+bw+quxuSq2eZmFRSa9Felw8LPbVM9hTZ1dz1gDU0RcGCMYzdOSJ7E7ua/5/hkcKj 6GKLozObmnDV7RXHfX6WuC60UrrNdgRv/ZB49QkCvOc= ) ; Key ID = 32195`
	DNSKEY=32195/SEP is now in the chain-of-trust
	DS=32195/SHA-256 verifies DNSKEY=32195/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180718015353 20180619210319 32195 dk. HR5JU34oRtPHf87a7Ite0dUyOzHoyoUh6MIi091zPD3wHqRSR0JnVGUZ7/pG7KNh8ZLRPUqYe21I XxPYrk3rMBmhti8gkCE6FaROR516QQtA6TIE66mjJ3kDOpUK36VtedBhMk0csE8Oo3JU5jdSmGiE IdrCBU5q+yLzci3BBFs4D2CvX78o4NXoT8B66RIgOc184wYv3dplR2/gdOnpoVFz4tysvTKhhybu eNjtxLzT8AqQ6FOKRLpyzKoFvU8ikmgIovdh6F2C/zJmu3jbYyhnk8BUlXxMJVP+B+mCuOdWvSZ1 C7qyqqHb714TjVhdzCY3Tt6O0bGj6ECgIc9rPg== )`
	RRSIG=32195 and DNSKEY=32195/SEP verifies the DNSKEY RRset
	DNSKEY=44541 is now in the chain-of-trust
	DNSKEY=55771 is now in the chain-of-trust
	Query to b.nic.dk for netfactory.dk/A
	Received 855 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (855 bytes) ;; HEADER SECTION ;; id = 26431 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a ci4fpp56aaekhd4fe4522qa9ic1pdg9g A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180717184501 20180619210319 44541 dk. eG5qsvaUJ+56efJebpHQP8PLSfU7Og+fxwTy8xd6t1z4pauXpOkAFJxPH5X1SHVBGDyQraB8B9i+ mbq5Hu3h2siYsNwJWe40VFgbEG7MuaLqT71oThz5oYqIwXZlZqdLzJLAKl2e7pZzFYkyAP3EthCH tP6WHJ9K8J4y7QUx+sbVROiIPDlC8PIka1crVzmGKYOBvGXaosO0TuJJUXQ5KmXj3/6SG8tcvOYL 1L/3vz+QnccZBqldTB1O+VSLz7jttyu18ks2ufw4PP4x5DLoGr3JQgernRtCW7J0gzBT98mhpivC BmWM1Ozp1D3v7ASXuXxyekUoIKo8jCSJwtN1iA== ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a pu79q0ss26ti13vm3v7cu0os534qsp4t NS DS RRSIG ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180718085228 20180619210319 44541 dk. AWy0it1NWKl7eLQwlXUIveC0ttTZxaOd4/FaLaTK5BBT93leYk6sD1jEc0Hjw0y4DIOOgoblHf7i PKXlcAGpXxbJBtlpzc3dbwh5HXoEJWulAEk0sNcV7r3EM1mQThCST9QyZoeI7/KnmjN1vuvGFOMd mfDZWR/TL1aK3yi7+S82sru1Azy9OZc/1Hv8Z6BYo1fK5gs1BuIRY1DPtInXkohs0iafAS6gyn75 1fWQrXp004ry7BAErljNQrJJiEqDKs3fJnhpJRJVWVC8Rwl6b+fcIJ8klhCRSbmo9NCaq65a02X0 Ng+GI1pOt9KjULTJRkkxfwffGn6q7uF4x5vSQw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.nic.dk for netfactory.dk/DNSKEY
	Received 855 bytes from 194.0.46.53
	;; Answer received from 194.0.46.53 (855 bytes) ;; HEADER SECTION ;; id = 13227 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) netfactory.dk. 86400 IN NS betty.ns.cloudflare.com. netfactory.dk. 86400 IN NS gerald.ns.cloudflare.com. ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a ci4fpp56aaekhd4fe4522qa9ic1pdg9g A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a pu79q0ss26ti13vm3v7cu0os534qsp4t NS DS RRSIG ) ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180717184501 20180619210319 44541 dk. eG5qsvaUJ+56efJebpHQP8PLSfU7Og+fxwTy8xd6t1z4pauXpOkAFJxPH5X1SHVBGDyQraB8B9i+ mbq5Hu3h2siYsNwJWe40VFgbEG7MuaLqT71oThz5oYqIwXZlZqdLzJLAKl2e7pZzFYkyAP3EthCH tP6WHJ9K8J4y7QUx+sbVROiIPDlC8PIka1crVzmGKYOBvGXaosO0TuJJUXQ5KmXj3/6SG8tcvOYL 1L/3vz+QnccZBqldTB1O+VSLz7jttyu18ks2ufw4PP4x5DLoGr3JQgernRtCW7J0gzBT98mhpivC BmWM1Ozp1D3v7ASXuXxyekUoIKo8jCSJwtN1iA== ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180718085228 20180619210319 44541 dk. AWy0it1NWKl7eLQwlXUIveC0ttTZxaOd4/FaLaTK5BBT93leYk6sD1jEc0Hjw0y4DIOOgoblHf7i PKXlcAGpXxbJBtlpzc3dbwh5HXoEJWulAEk0sNcV7r3EM1mQThCST9QyZoeI7/KnmjN1vuvGFOMd mfDZWR/TL1aK3yi7+S82sru1Azy9OZc/1Hv8Z6BYo1fK5gs1BuIRY1DPtInXkohs0iafAS6gyn75 1fWQrXp004ry7BAErljNQrJJiEqDKs3fJnhpJRJVWVC8Rwl6b+fcIJ8klhCRSbmo9NCaq65a02X0 Ng+GI1pOt9KjULTJRkkxfwffGn6q7uF4x5vSQw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netfactory.dk

netfactory.dk

	Checking DS between dk and netfactory.dk
	Query to b.nic.dk for netfactory.dk/DS
	Received 1148 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (1148 bytes) ;; HEADER SECTION ;; id = 13283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a ci4fpp56aaekhd4fe4522qa9ic1pdg9g A NS SOA TXT AAAA RRSIG DNSKEY NSEC3PARAM ) ci17kkg1d2g85fnqjedu90ndidkdh3h3.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180717184501 20180619210319 44541 dk. eG5qsvaUJ+56efJebpHQP8PLSfU7Og+fxwTy8xd6t1z4pauXpOkAFJxPH5X1SHVBGDyQraB8B9i+ mbq5Hu3h2siYsNwJWe40VFgbEG7MuaLqT71oThz5oYqIwXZlZqdLzJLAKl2e7pZzFYkyAP3EthCH tP6WHJ9K8J4y7QUx+sbVROiIPDlC8PIka1crVzmGKYOBvGXaosO0TuJJUXQ5KmXj3/6SG8tcvOYL 1L/3vz+QnccZBqldTB1O+VSLz7jttyu18ks2ufw4PP4x5DLoGr3JQgernRtCW7J0gzBT98mhpivC BmWM1Ozp1D3v7ASXuXxyekUoIKo8jCSJwtN1iA== ) dk. 600 IN SOA ( b.nic.dk. tech.dk-hostmaster.dk. 1529571660 ;serial 600 ;refresh 300 ;retry 1814400 ;expire 600 ;minimum ) dk. 600 IN RRSIG ( SOA 8 1 86400 20180719161010 20180621080323 44541 dk. tHyZmwWPFGAJpyU/yyRqlVHxbvUMiAybu8f9hTjDjs1HY3C5JVGq62ZgztKBrS7Mz1S9xWuG6iKU iHcrMRMUwESTiMolN95E/X5mKvM7O896MEcMlwX72VBPeI/Te/xTaf4nbC4v+YODeZHtoQAAVvwZ 0s8KG4J3+C1Tzuth3ddhEoi30aj1qsD7/kpav43Y4HTYf6BINXgwQnIeXCJKN0Qa+2iAaE1PkCE2 fU2fUpll0XDRS0QvYQCLG0SXICbBGonCYoL78BnF9Bkh6GBdNFIX/UlmRjG+KxT7JhZKHsu4A9uM g024/R0uKTV0mUoufCVidKHKn9oxmGQbeS02Hg== ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN NSEC3 ( 1 1 17 85d6edd2d69d713a pu79q0ss26ti13vm3v7cu0os534qsp4t NS DS RRSIG ) pu3gaeu3pppd25de94e7jlr3c3gnoatg.dk. 600 IN RRSIG ( NSEC3 8 2 600 20180718085228 20180619210319 44541 dk. AWy0it1NWKl7eLQwlXUIveC0ttTZxaOd4/FaLaTK5BBT93leYk6sD1jEc0Hjw0y4DIOOgoblHf7i PKXlcAGpXxbJBtlpzc3dbwh5HXoEJWulAEk0sNcV7r3EM1mQThCST9QyZoeI7/KnmjN1vuvGFOMd mfDZWR/TL1aK3yi7+S82sru1Azy9OZc/1Hv8Z6BYo1fK5gs1BuIRY1DPtInXkohs0iafAS6gyn75 1fWQrXp004ry7BAErljNQrJJiEqDKs3fJnhpJRJVWVC8Rwl6b+fcIJ8klhCRSbmo9NCaq65a02X0 Ng+GI1pOt9KjULTJRkkxfwffGn6q7uF4x5vSQw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for netfactory.dk in the dk zone
	Query to gerald.ns.cloudflare.com for netfactory.dk/DNSKEY
	Received 105 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (105 bytes) ;; HEADER SECTION ;; id = 4435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	No DNSKEY records found
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 58 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (58 bytes) ;; HEADER SECTION ;; id = 48273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk is authoritative for netfactory.dk
	Query to betty.ns.cloudflare.com for netfactory.dk/SOA
	Received 105 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (105 bytes) ;; HEADER SECTION ;; id = 25986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to gerald.ns.cloudflare.com for netfactory.dk/SOA
	Received 105 bytes from 173.245.59.168
	;; Answer received from 173.245.59.168 (105 bytes) ;; HEADER SECTION ;; id = 54518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN SOA ;; ANSWER SECTION (1 record) netfactory.dk. 3600 IN SOA ( betty.ns.cloudflare.com. dns.cloudflare.com. 2028109423 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to betty.ns.cloudflare.com for netfactory.dk/A
	Received 58 bytes from 173.245.58.75
	;; Answer received from 173.245.58.75 (58 bytes) ;; HEADER SECTION ;; id = 5546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; netfactory.dk. IN A ;; ANSWER SECTION (1 record) netfactory.dk. 300 IN A 162.243.107.241 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	netfactory.dk A RR has value 162.243.107.241
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netfactory.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: