View on GitHub

DNSViz: A DNS visualization tool

internetsociety.org

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (6)
  • internetsociety.org/A
  • internetsociety.org/AAAA
  • internetsociety.org/MX
  • internetsociety.org/NS
  • internetsociety.org/SOA
  • internetsociety.org/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (2)
  • internetsociety.org/DNSKEY (alg 5, id 40532)
  • internetsociety.org/DNSKEY (alg 5, id 55956)
Secure (8)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 61045)
  • internetsociety.org/DS (alg 5, id 55956)
  • org/DNSKEY (alg 7, id 17883)
  • org/DNSKEY (alg 7, id 1862)
  • org/DNSKEY (alg 7, id 3947)
  • org/DNSKEY (alg 7, id 9795)
  • org/DS (alg 7, id 9795)

Delegation statusDelegation status

Bogus (1)
  • org to internetsociety.org
Secure (1)
  • . to org

NoticesNotices

Errors (9)
  • RRSIG internetsociety.org/A alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/AAAA alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/DNSKEY alg 5, id 55956: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/DNSKEY alg 5, id 55956: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/MX alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/NS alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/SOA alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • RRSIG internetsociety.org/TXT alg 5, id 40532: The Signature Expiration field of the RRSIG RR (2017-02-19 20:40:01+00:00) is 18 hours, 14 minutes in the past.
  • org to internetsociety.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (65.22.6.1, 65.22.6.79, 65.22.7.1, 65.22.8.1, 65.22.9.1, 185.49.140.62, 2a01:8840:6::1, 2a01:8840:7::1, 2a01:8840:8::1, 2a01:8840:9::1, 2a04:b900::8:0:0:62, UDP_0_EDNS0_32768_4096)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph