View on GitHub

DNSViz: A DNS visualization tool

libreswan.org

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (5)
  • libreswan.org/A
  • libreswan.org/AAAA
  • libreswan.org/MX
  • libreswan.org/NS
  • libreswan.org/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (2)
  • libreswan.org/DNSKEY (alg 8, id 15232)
  • libreswan.org/DNSKEY (alg 8, id 36186)
Secure (9)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 22603)
  • ./DNSKEY (alg 8, id 8230)
  • libreswan.org/DS (alg 8, id 15232)
  • org/DNSKEY (alg 7, id 21366)
  • org/DNSKEY (alg 7, id 33287)
  • org/DNSKEY (alg 7, id 57479)
  • org/DNSKEY (alg 7, id 9795)
  • org/DS (alg 7, id 21366)

Delegation statusDelegation status

Bogus (1)
  • org to libreswan.org
Secure (1)
  • . to org

NoticesNotices

Errors (14)
  • ./DNSKEY: No response was received from the server over UDP (tried 4 times). (2001:500:84::b, UDP_0_EDNS0_32768_512)
  • RRSIG libreswan.org/A alg 8, id 36186: The Signature Expiration field of the RRSIG RR (2014-09-19 03:59:53+00:00) is 2 days in the past.
  • RRSIG libreswan.org/AAAA alg 8, id 36186: The Signature Expiration field of the RRSIG RR (2014-09-19 10:05:29+00:00) is 2 days in the past.
  • RRSIG libreswan.org/DNSKEY alg 8, id 15232: The Signature Expiration field of the RRSIG RR (2014-09-19 09:45:16+00:00) is 2 days in the past.
  • RRSIG libreswan.org/DNSKEY alg 8, id 15232: The Signature Expiration field of the RRSIG RR (2014-09-19 09:45:16+00:00) is 2 days in the past.
  • RRSIG libreswan.org/MX alg 8, id 36186: The Signature Expiration field of the RRSIG RR (2014-09-18 20:37:48+00:00) is 3 days in the past.
  • RRSIG libreswan.org/NS alg 8, id 36186: The Signature Expiration field of the RRSIG RR (2014-09-19 17:20:19+00:00) is 2 days in the past.
  • RRSIG libreswan.org/SOA alg 8, id 36186: The Signature Expiration field of the RRSIG RR (2014-09-19 17:30:01+00:00) is 2 days in the past.
  • libreswan.org zone: The server(s) were not responsive to queries over UDP. (65.18.175.19, 2001:470:96:4::188)
  • libreswan.org/A: No response was received from the server over UDP (tried 8 times). (65.18.175.19, UDP_0_NOEDNS)
  • libreswan.org/A: There was an error communicating with the server over UDP (EACCES). (2001:470:96:4::188, UDP_0_EDNS0_32768_4096)
  • libreswan.org/NS: No response was received from the server over UDP (tried 8 times). (65.18.175.19, UDP_0_NOEDNS)
  • libreswan.org/NS: There was an error communicating with the server over UDP (EACCES). (2001:470:96:4::188, UDP_0_EDNS0_32768_4096)
  • org to libreswan.org: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (81.22.252.185, 193.110.157.102, 2001:470:dd9e:d00:1::185, 2a03:6000:1004:1::102, UDP_0_EDNS0_32768_4096)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph