DNSSEC Analyzer - netmeister.org

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-05-21 15:25:15 UTC, NTP stratum 4

Analyzing DNSSEC problems for netmeister.org

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 51078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to l.root-servers.net for netmeister.org/A
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for netmeister.org/A: 'IPv6 transport disabled'
	Received 858 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (858 bytes) ;; HEADER SECTION ;; id = 24177 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . SsB4f9k+YRGJtP68dF7vOaE8w2LMO0xdCexuRZYatmxSiZoTS8Qp/qtSdtY33R9JVtE19s6fb+Zk +M890khfunbaTJCGmoXHMExOUXS3HqLewirKGOWUBbUXiq+IGYi1dfjCRDrtgPWhEaw2nY59X8C2 VsNTvjks6ayb3YOLdctnFTEwHANWDwlNxtC9L/hMCrjKdUamz4jTd4NfIDPJLubPOrulNKfFerzL dnQKUl8ZJdoiHlOVA0kEPRHuGQuPplLRJx8mm/nF+rDVnjXaakZXF2KY04t1zta/9O6HvOw1v5fb fkzDL7a5De5BLuNjP5/CJUI0INOMac17yIbl9Q== ) ;; ADDITIONAL SECTION (13 records) b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for org/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for org/DNSKEY: 'IPv6 transport disabled'
	Received 805 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (805 bytes) ;; HEADER SECTION ;; id = 27376 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . SsB4f9k+YRGJtP68dF7vOaE8w2LMO0xdCexuRZYatmxSiZoTS8Qp/qtSdtY33R9JVtE19s6fb+Zk +M890khfunbaTJCGmoXHMExOUXS3HqLewirKGOWUBbUXiq+IGYi1dfjCRDrtgPWhEaw2nY59X8C2 VsNTvjks6ayb3YOLdctnFTEwHANWDwlNxtC9L/hMCrjKdUamz4jTd4NfIDPJLubPOrulNKfFerzL dnQKUl8ZJdoiHlOVA0kEPRHuGQuPplLRJx8mm/nF+rDVnjXaakZXF2KY04t1zta/9O6HvOw1v5fb fkzDL7a5De5BLuNjP5/CJUI0INOMac17yIbl9Q== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to h.root-servers.net for org/DS
	Received 403 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (403 bytes) ;; HEADER SECTION ;; id = 4455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (3 records) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . SsB4f9k+YRGJtP68dF7vOaE8w2LMO0xdCexuRZYatmxSiZoTS8Qp/qtSdtY33R9JVtE19s6fb+Zk +M890khfunbaTJCGmoXHMExOUXS3HqLewirKGOWUBbUXiq+IGYi1dfjCRDrtgPWhEaw2nY59X8C2 VsNTvjks6ayb3YOLdctnFTEwHANWDwlNxtC9L/hMCrjKdUamz4jTd4NfIDPJLubPOrulNKfFerzL dnQKUl8ZJdoiHlOVA0kEPRHuGQuPplLRJx8mm/nF+rDVnjXaakZXF2KY04t1zta/9O6HvOw1v5fb fkzDL7a5De5BLuNjP5/CJUI0INOMac17yIbl9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for org in the . zone
	DS=9795/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=9795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . SsB4f9k+YRGJtP68dF7vOaE8w2LMO0xdCexuRZYatmxSiZoTS8Qp/qtSdtY33R9JVtE19s6fb+Zk +M890khfunbaTJCGmoXHMExOUXS3HqLewirKGOWUBbUXiq+IGYi1dfjCRDrtgPWhEaw2nY59X8C2 VsNTvjks6ayb3YOLdctnFTEwHANWDwlNxtC9L/hMCrjKdUamz4jTd4NfIDPJLubPOrulNKfFerzL dnQKUl8ZJdoiHlOVA0kEPRHuGQuPplLRJx8mm/nF+rDVnjXaakZXF2KY04t1zta/9O6HvOw1v5fb fkzDL7a5De5BLuNjP5/CJUI0INOMac17yIbl9Q== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=9795/SHA-1 is now in the chain-of-trust
	`org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982`
	`org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 )`
	Query to a0.org.afilias-nst.info for org/DNSKEY
	Received 1625 bytes from 199.19.56.1
	;; Answer received from 199.19.56.1 (1625 bytes) ;; HEADER SECTION ;; id = 34103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (7 records) org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883 org. 900 IN DNSKEY ( 256 3 7 AwEAAfBtsh2BQYDdhCrLkyvDrS+ho5/PZpd4PLgxm9jl09fi/E+Khv8+/SX/2HiqIQep8gZP+wJR Dn2tp0XUNkUwgdtzatfcXYmOKs2QDFq4CNEvXzdyj/fSKlYp1On9tibgghunbUdBN3W1Rh+VPdnt n4Yk1IOqgkOOlnJbnl6X0LZL ) ; Key ID = 50465 org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795 org. 900 IN DNSKEY ( 256 3 7 AwEAAc7G+724zrE/jgs39nTmOzzDn/aC5FV3UcT994z869RcJSLULYHvfN3/4dGdhJ9c/yqfBo5c /gEECTKDLsF+bgnQzyWUV8klvxtAG8EbdDFCtfyG3nlAhsA3uaAXtpkKn+D3ODLk6OJEKf6BUZgw kFRwmKWwCw2SSBJLPTjEoasZ ) ; Key ID = 16454 org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 9795 org. Yhc3QrHa7UDV43RTHvLxeOcxp2eqXGS/Q9FgMKxLcuWQTckx+5ZCie6pg/CCSjSflhptDMGbZ2nR wpUQFchvffTg6KaN+9mBeP7LiktZwrq6QsltgMlHGXsZKc//nuNf/B0pdSJZeHvUh+k/7dOaiWVv qXqGuBYgfBdaslOOk39S0YlC+gz3Ikymh+hT79iS1lZU/S6VZ6gO2zoFso1/cFKVHPYEWaS9fFeg 8C+WvwpBwyoFx8+rM3pAJLv2TMhPOaRSUAonUuazvXHQczWtY88e4GXsgtghTZX2gYl6WzfOqQ3v OVs/NHd4eN/nhlEa4AfyPG+TMA1Z3XcF4ydmSw== ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 16454 org. pTjFjzRYH41Vm9CuD6AJg87wgDBccUSN7AyYrr99iRklr+9j4CLglgcD347m3Up5TYG+XqHq7e8J Uu8JNIGIquhhdtdmMCu63XAm4H4iDX2PbcikzyVnYCWjluKgZwzi90dGCFyjYbp4M2L0jlyHeAo2 rplsliveQa2aDM4m5mI= ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 17883 org. A48H2tvJj2pLjRaAXuqnIVLx4RJRPfoihDI9XSGu8RFmj9SvqWyyl0ZEpWBniGWUN/kfRnw2rtST fA7JaSrCZRcjkVOcdXmC0KwNc1I/ac2j1XF6B+kF+DJGRA1E9zvGuHt8htEr1+lllfX88f7MYRqQ yg6FjtanaGjrpE8bDXtiSn1Cg2VjQhndYL1klhfusu6TNCL32r5HWrSz3fSs9Ze5jQI3YU95gcq+ OslPH21Kje9wuvPzSNXNU5eKBEI1t06qoP4hqxJZ+YYiC8P2jLHa3QU5AYw6jF6ZTdWMvQO60baF /fLN2IVdhVxvOz1Nprac4nkqbbSwr9A3Q7oiHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for org
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883`
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAfBtsh2BQYDdhCrLkyvDrS+ho5/PZpd4PLgxm9jl09fi/E+Khv8+/SX/2HiqIQep8gZP+wJR Dn2tp0XUNkUwgdtzatfcXYmOKs2QDFq4CNEvXzdyj/fSKlYp1On9tibgghunbUdBN3W1Rh+VPdnt n4Yk1IOqgkOOlnJbnl6X0LZL ) ; Key ID = 50465`
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795`
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAc7G+724zrE/jgs39nTmOzzDn/aC5FV3UcT994z869RcJSLULYHvfN3/4dGdhJ9c/yqfBo5c /gEECTKDLsF+bgnQzyWUV8klvxtAG8EbdDFCtfyG3nlAhsA3uaAXtpkKn+D3ODLk6OJEKf6BUZgw kFRwmKWwCw2SSBJLPTjEoasZ ) ; Key ID = 16454`
	DNSKEY=9795/SEP is now in the chain-of-trust
	DS=9795/SHA-1 verifies DNSKEY=9795/SEP
	DS=9795/SHA-256 verifies DNSKEY=9795/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 9795 org. Yhc3QrHa7UDV43RTHvLxeOcxp2eqXGS/Q9FgMKxLcuWQTckx+5ZCie6pg/CCSjSflhptDMGbZ2nR wpUQFchvffTg6KaN+9mBeP7LiktZwrq6QsltgMlHGXsZKc//nuNf/B0pdSJZeHvUh+k/7dOaiWVv qXqGuBYgfBdaslOOk39S0YlC+gz3Ikymh+hT79iS1lZU/S6VZ6gO2zoFso1/cFKVHPYEWaS9fFeg 8C+WvwpBwyoFx8+rM3pAJLv2TMhPOaRSUAonUuazvXHQczWtY88e4GXsgtghTZX2gYl6WzfOqQ3v OVs/NHd4eN/nhlEa4AfyPG+TMA1Z3XcF4ydmSw== )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 16454 org. pTjFjzRYH41Vm9CuD6AJg87wgDBccUSN7AyYrr99iRklr+9j4CLglgcD347m3Up5TYG+XqHq7e8J Uu8JNIGIquhhdtdmMCu63XAm4H4iDX2PbcikzyVnYCWjluKgZwzi90dGCFyjYbp4M2L0jlyHeAo2 rplsliveQa2aDM4m5mI= )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20190607152755 20190517142755 17883 org. A48H2tvJj2pLjRaAXuqnIVLx4RJRPfoihDI9XSGu8RFmj9SvqWyyl0ZEpWBniGWUN/kfRnw2rtST fA7JaSrCZRcjkVOcdXmC0KwNc1I/ac2j1XF6B+kF+DJGRA1E9zvGuHt8htEr1+lllfX88f7MYRqQ yg6FjtanaGjrpE8bDXtiSn1Cg2VjQhndYL1klhfusu6TNCL32r5HWrSz3fSs9Ze5jQI3YU95gcq+ OslPH21Kje9wuvPzSNXNU5eKBEI1t06qoP4hqxJZ+YYiC8P2jLHa3QU5AYw6jF6ZTdWMvQO60baF /fLN2IVdhVxvOz1Nprac4nkqbbSwr9A3Q7oiHA== )`
	RRSIG=9795 and DNSKEY=9795/SEP verifies the DNSKEY RRset
	RRSIG=16454 and DNSKEY=16454 verifies the DNSKEY RRset
	RRSIG=17883 and DNSKEY=17883/SEP verifies the DNSKEY RRset
	DNSKEY=17883/SEP is now in the chain-of-trust
	DNSKEY=50465 is now in the chain-of-trust
	DNSKEY=16454 is now in the chain-of-trust
	Query to c0.org.afilias-nst.info for netmeister.org/A
	Received 332 bytes from 199.19.53.1
	;; Answer received from 199.19.53.1 (332 bytes) ;; HEADER SECTION ;; id = 62708 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) netmeister.org. 86400 IN NS ns-181-a.gandi.net. netmeister.org. 86400 IN NS ns-179-c.gandi.net. netmeister.org. 86400 IN NS ns-143-b.gandi.net. netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20190607152755 20190517142755 16454 org. HD06Y32VDoSh21dcQzVJTgSVG9ndbNJZjhF2iAWSfjEOAC4iMAW8EbbICBUmDh9gur06u1gg+QO6 rz0AIgBa8DoHr2cN5wEfsNxT9Z2I8QVrcBAajLdiRy1FxqvtAChddAuluK2At683mBoKIQ0kP1wX 4nYg5SicCkOhGXueaEA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d0.org.afilias-nst.org for netmeister.org/DNSKEY
	Received 332 bytes from 199.19.57.1
	;; Answer received from 199.19.57.1 (332 bytes) ;; HEADER SECTION ;; id = 63773 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) netmeister.org. 86400 IN NS ns-179-c.gandi.net. netmeister.org. 86400 IN NS ns-143-b.gandi.net. netmeister.org. 86400 IN NS ns-181-a.gandi.net. netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20190607152755 20190517142755 16454 org. HD06Y32VDoSh21dcQzVJTgSVG9ndbNJZjhF2iAWSfjEOAC4iMAW8EbbICBUmDh9gur06u1gg+QO6 rz0AIgBa8DoHr2cN5wEfsNxT9Z2I8QVrcBAajLdiRy1FxqvtAChddAuluK2At683mBoKIQ0kP1wX 4nYg5SicCkOhGXueaEA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netmeister.org

netmeister.org

	Checking DS between org and netmeister.org
	Query to c0.org.afilias-nst.info for netmeister.org/DS
	Error querying c0.org.afilias-nst.info/2001:500:b:0:0:0:0:1 for netmeister.org/DS: 'IPv6 transport disabled'
	Received 254 bytes from 199.19.53.1
	;; Answer received from 199.19.53.1 (254 bytes) ;; HEADER SECTION ;; id = 29262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DS ;; ANSWER SECTION (2 records) netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20190607152755 20190517142755 16454 org. HD06Y32VDoSh21dcQzVJTgSVG9ndbNJZjhF2iAWSfjEOAC4iMAW8EbbICBUmDh9gur06u1gg+QO6 rz0AIgBa8DoHr2cN5wEfsNxT9Z2I8QVrcBAajLdiRy1FxqvtAChddAuluK2At683mBoKIQ0kP1wX 4nYg5SicCkOhGXueaEA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for netmeister.org in the org zone
	DS=31910/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20190607152755 20190517142755 16454 org. HD06Y32VDoSh21dcQzVJTgSVG9ndbNJZjhF2iAWSfjEOAC4iMAW8EbbICBUmDh9gur06u1gg+QO6 rz0AIgBa8DoHr2cN5wEfsNxT9Z2I8QVrcBAajLdiRy1FxqvtAChddAuluK2At683mBoKIQ0kP1wX 4nYg5SicCkOhGXueaEA= )`
	RRSIG=16454 and DNSKEY=16454 verifies the DS RRset
	DS=31910/SHA-256 is now in the chain-of-trust
	`netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 )`
	Query to ns-181-a.gandi.net for netmeister.org/DNSKEY
	Error querying ns-181-a.gandi.net/2001:4b98:aaaa:0:0:0:0:b6 for netmeister.org/DNSKEY: 'IPv6 transport disabled'
	Received 233 bytes from 173.246.100.182
	;; Answer received from 173.246.100.182 (233 bytes) ;; HEADER SECTION ;; id = 9790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DNSKEY ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN DNSKEY ( 256 3 13 W1zt0mA1d1FHzK+qkEzMb8B7IZkn7qbHxSzjwDzQr4DUCjlycXDRGdxupCDsE7iaaxDCGR2T8nZs teX0PXx7Bg== ) ; Key ID = 31910 netmeister.org. 10800 IN RRSIG ( DNSKEY 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. Ose7/Gb2UOmwXX51hEknKE3y5FaZBsUvWalft1JNC2T+/ppZ3ab1LVRcQ1oxS4Rlhw5p8rNyFvkv lC3wjYX68Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for netmeister.org
	`netmeister.org. 10800 IN DNSKEY ( 256 3 13 W1zt0mA1d1FHzK+qkEzMb8B7IZkn7qbHxSzjwDzQr4DUCjlycXDRGdxupCDsE7iaaxDCGR2T8nZs teX0PXx7Bg== ) ; Key ID = 31910`
	DNSKEY=31910 is now in the chain-of-trust
	DS=31910/SHA-256 verifies DNSKEY=31910
	Found 1 RRSIGs over DNSKEY RRset
	`netmeister.org. 10800 IN RRSIG ( DNSKEY 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. Ose7/Gb2UOmwXX51hEknKE3y5FaZBsUvWalft1JNC2T+/ppZ3ab1LVRcQ1oxS4Rlhw5p8rNyFvkv lC3wjYX68Q== )`
	RRSIG=31910 and DNSKEY=31910 verifies the DNSKEY RRset
	Query to ns-179-c.gandi.net for netmeister.org/A
	Received 169 bytes from 217.70.187.180
	;; Answer received from 217.70.187.180 (169 bytes) ;; HEADER SECTION ;; id = 1283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN A 166.84.7.99 netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. +9A43nGscByFUV8POiZErHGtT/vNq1tzr8K0zneMv45LGJw3EJi9Ll83t0UkEheccT+K7Opo28t8 QU8/f6TXXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netmeister.org is authoritative for netmeister.org
	Found RRSIG signed by netmeister.org zone
	Query to ns-181-a.gandi.net for netmeister.org/SOA
	Received 213 bytes from 173.246.100.182
	;; Answer received from 173.246.100.182 (213 bytes) ;; HEADER SECTION ;; id = 42053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. hjZTpRQYEiPMaVs+MJ0Odpw2q1isqaxTPgZ/DX91692hL1ELXZAvAyybHK0YzO4OfKZG9rFEUm1R r9pwAd4Qng== ) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1557964800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-179-c.gandi.net for netmeister.org/SOA
	Error querying ns-179-c.gandi.net/2604:3400:aaac:0:0:0:0:b4 for netmeister.org/SOA: 'IPv6 transport disabled'
	Received 213 bytes from 217.70.187.180
	;; Answer received from 217.70.187.180 (213 bytes) ;; HEADER SECTION ;; id = 9415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. T+BMOQ75x+ncwgTO20h/LsX4Zn1kDqSre+xCLkOQ4rr8gG6+Z48Hs0irKEbrsFyNTZ/HdZ+NLxzs 91bt+xNTQQ== ) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1557964800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-143-b.gandi.net for netmeister.org/SOA
	Error querying ns-143-b.gandi.net/2001:4b98:aaab:0:0:0:0:90 for netmeister.org/SOA: 'IPv6 transport disabled'
	Received 213 bytes from 213.167.230.144
	;; Answer received from 213.167.230.144 (213 bytes) ;; HEADER SECTION ;; id = 54511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. T+BMOQ75x+ncwgTO20h/LsX4Zn1kDqSre+xCLkOQ4rr8gG6+Z48Hs0irKEbrsFyNTZ/HdZ+NLxzs 91bt+xNTQQ== ) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1557964800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-179-c.gandi.net for netmeister.org/A
	Error querying ns-179-c.gandi.net/2604:3400:aaac:0:0:0:0:b4 for netmeister.org/A: 'IPv6 transport disabled'
	Received 169 bytes from 217.70.187.180
	;; Answer received from 217.70.187.180 (169 bytes) ;; HEADER SECTION ;; id = 61327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN A 166.84.7.99 netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. pWi8NgAcX3QD6RHXeBY7XHjuz/y6SFztLipOT4EhYYuzXPBHBJ61+r7Ura48A46TUrdyq5joPIw7 Azx86LDSJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netmeister.org A RR has value 166.84.7.99
	Found 1 RRSIGs over A RRset
	`netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20190530000000 20190509000000 31910 netmeister.org. pWi8NgAcX3QD6RHXeBY7XHjuz/y6SFztLipOT4EhYYuzXPBHBJ61+r7Ura48A46TUrdyq5joPIw7 Azx86LDSJg== )`
	RRSIG=31910 and DNSKEY=31910 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netmeister.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: