View on GitHub

DNSViz: A DNS visualization tool

dnssec-tools.org

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (5)
  • dnssec-tools.org/A
  • dnssec-tools.org/MX
  • dnssec-tools.org/NS
  • dnssec-tools.org/SOA
  • dnssec-tools.org/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (3)
  • dnssec-tools.org/DNSKEY (alg 5, id 19221)
  • dnssec-tools.org/DNSKEY (alg 5, id 3147)
  • dnssec-tools.org/DNSKEY (alg 5, id 34816)
Secure (9)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 39291)
  • ./DNSKEY (alg 8, id 46551)
  • dnssec-tools.org/DS (alg 5, id 34816)
  • org/DNSKEY (alg 7, id 17883)
  • org/DNSKEY (alg 7, id 48497)
  • org/DNSKEY (alg 7, id 64353)
  • org/DNSKEY (alg 7, id 9795)
  • org/DS (alg 7, id 9795)

Delegation statusDelegation status

Bogus (1)
  • org to dnssec-tools.org
Secure (1)
  • . to org

NoticesNotices

Errors (12)
  • RRSIG dnssec-tools.org/A alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/MX alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/NS alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/SOA alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • RRSIG dnssec-tools.org/TXT alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2016-10-24 22:02:36+00:00) is 10 hours, 7 minutes in the past.
  • org to dnssec-tools.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (75.101.48.145, 168.150.236.43, 199.101.97.233, 208.79.240.3, 208.79.241.3, 2607:fe70:0:3::b, 2607:fe70:0:4::b, UDP_0_EDNS0_32768_4096)
Warnings (1)
  • org to dnssec-tools.org: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the org zone): nsr.dnssec-tools.org

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph