View on GitHub

DNSViz: A DNS visualization tool

cv.dilichen.fr

Updated: 2020-07-24 17:46:35 UTC (1373 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (2)
  • cv.dilichen.fr/NS (NODATA)
  • cv.dilichen.fr/SOA (NODATA)
Secure (5)
  • cv.dilichen.fr/A
  • cv.dilichen.fr/AAAA
  • cv.dilichen.fr/NS
  • cv.dilichen.fr/SOA
  • dilichen.fr/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (2)
  • NSEC3 proving non-existence of cv.dilichen.fr/NS
  • NSEC3 proving non-existence of cv.dilichen.fr/SOA
Secure (11)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 46594)
  • cv.dilichen.fr/DNSKEY (alg 14, id 41620)
  • cv.dilichen.fr/DNSKEY (alg 14, id 52129)
  • cv.dilichen.fr/DS (alg 14, id 41620)
  • dilichen.fr/DNSKEY (alg 14, id 56141)
  • dilichen.fr/DNSKEY (alg 14, id 6397)
  • dilichen.fr/DS (alg 14, id 6397)
  • fr/DNSKEY (alg 8, id 35095)
  • fr/DNSKEY (alg 8, id 3816)
  • fr/DS (alg 8, id 35095)

Delegation statusDelegation status

Secure (3)
  • . to fr
  • dilichen.fr to cv.dilichen.fr
  • fr to dilichen.fr

NoticesNotices

Errors (14)
  • NSEC3 proving non-existence of cv.dilichen.fr/NS: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
  • NSEC3 proving non-existence of cv.dilichen.fr/NS: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
  • NSEC3 proving non-existence of cv.dilichen.fr/SOA: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
  • NSEC3 proving non-existence of cv.dilichen.fr/SOA: The following queries resulted in an answer response, even though the bitmap in the NSEC3 RR indicates that the queried records don't exist: cv.dilichen.fr/NS, cv.dilichen.fr/DNSKEY, cv.dilichen.fr/SOA
  • RRSIG NSEC3 proving non-existence of cv.dilichen.fr/NS alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
  • RRSIG NSEC3 proving non-existence of cv.dilichen.fr/SOA alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
  • RRSIG cv.dilichen.fr/A alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
  • RRSIG cv.dilichen.fr/AAAA alg 14, id 56141: The Signer's Name field of the RRSIG RR (dilichen.fr) does not match the name of the zone containing the RRset (cv.dilichen.fr).
  • cv.dilichen.fr/DNSKEY (alg 14, id 41620): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
  • cv.dilichen.fr/DNSKEY (alg 14, id 52129): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
  • cv.dilichen.fr/NS (NODATA): An SOA RR with owner name (dilichen.fr) not matching the zone name (cv.dilichen.fr) was returned with the NODATA response. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K)
  • cv.dilichen.fr/SOA (NODATA): An SOA RR with owner name (dilichen.fr) not matching the zone name (cv.dilichen.fr) was returned with the NODATA response. (217.70.177.40, 2001:4b98:d:1::40, TCP_-_EDNS0_4096_D, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_4096_D_K_0x20)
  • dilichen.fr to cv.dilichen.fr: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
  • dilichen.fr to cv.dilichen.fr: The DS RRset for the zone included algorithm 14 (ECDSAP384SHA384), but no DS RR matched a DNSKEY with algorithm 14 that signs the zone's DNSKEY RRset. (217.70.177.40, 2001:4b98:d:1::40, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
Warnings (2)
  • fr to dilichen.fr: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the fr zone): ns6.gandi.net
  • fr to dilichen.fr: The following NS name(s) were found in the delegation NS RRset (i.e., in the fr zone), but not in the authoritative NS RRset: ns.fol.tf

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph