View on GitHub

DNSViz: A DNS visualization tool

dnssec-tools.org

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (5)
  • dnssec-tools.org/A
  • dnssec-tools.org/MX
  • dnssec-tools.org/NS
  • dnssec-tools.org/SOA
  • dnssec-tools.org/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (3)
  • dnssec-tools.org/DNSKEY (alg 5, id 19221)
  • dnssec-tools.org/DNSKEY (alg 5, id 3147)
  • dnssec-tools.org/DNSKEY (alg 5, id 34816)
Secure (9)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 46809)
  • dnssec-tools.org/DS (alg 5, id 34816)
  • org/DNSKEY (alg 7, id 17883)
  • org/DNSKEY (alg 7, id 1862)
  • org/DNSKEY (alg 7, id 6368)
  • org/DNSKEY (alg 7, id 9795)
  • org/DS (alg 7, id 9795)

Delegation statusDelegation status

Bogus (1)
  • org to dnssec-tools.org
Secure (1)
  • . to org

NoticesNotices

Errors (15)
  • RRSIG dnssec-tools.org/A alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/DNSKEY alg 5, id 34816: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/MX alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/NS alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/SOA alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • RRSIG dnssec-tools.org/TXT alg 5, id 3147: The Signature Expiration field of the RRSIG RR (2017-12-17 00:24:33+00:00) is 9 minutes in the past.
  • dnssec-tools.org zone: The server(s) were not responsive to queries over UDP. (168.150.236.43, 2607:fe70:0:4::b)
  • dnssec-tools.org/A: No response was received from the server over UDP (tried 8 times). (168.150.236.43, 2607:fe70:0:4::b, UDP_0_NOEDNS)
  • dnssec-tools.org/NS: No response was received from the server over UDP (tried 8 times). (168.150.236.43, 2607:fe70:0:4::b, UDP_0_NOEDNS)
  • org to dnssec-tools.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (68.78.72.20, 75.101.48.145, 199.101.97.233, 208.79.240.3, 208.79.241.3, 2607:fe70:0:3::b, UDP_0_EDNS0_32768_4096)
Warnings (2)
  • org to dnssec-tools.org: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the org zone): nsr.dnssec-tools.org
  • org to dnssec-tools.org: The glue address(es) for ns1.dnssec-tools.org (168.150.236.43) differed from its authoritative address(es) (68.78.72.20).

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph