View on GitHub

DNSViz: A DNS visualization tool

sru.ac.th

Updated: 2024-05-15 09:40:23 UTC (2 days ago) Update now
« Previous analysis | Next analysis »
DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (2)
  • sru.ac.th/NSEC3PARAM (NODATA)
  • sru.ac.th/TXT (NODATA)
Secure (11)
  • sru.ac.th/A
  • sru.ac.th/AAAA
  • sru.ac.th/MX
  • sru.ac.th/NS
  • sru.ac.th/NSEC3PARAM
  • sru.ac.th/SOA
  • sru.ac.th/SOA
  • sru.ac.th/SOA
  • sru.ac.th/SOA
  • sru.ac.th/SOA
  • sru.ac.th/TXT

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (13)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 5613)
  • ac.th/DNSKEY (alg 8, id 12799)
  • ac.th/DNSKEY (alg 8, id 6168)
  • ac.th/DS (alg 8, id 12799)
  • sru.ac.th/DNSKEY (alg 7, id 45740)
  • sru.ac.th/DNSKEY (alg 7, id 48767)
  • sru.ac.th/DNSKEY (alg 8, id 9430)
  • sru.ac.th/DS (alg 8, id 9430)
  • sru.ac.th/DS (alg 8, id 9430)
  • th/DNSKEY (alg 8, id 19117)
  • th/DNSKEY (alg 8, id 36798)
  • th/DS (alg 8, id 19117)

Delegation statusDelegation status

Secure (3)
  • . to th
  • ac.th to sru.ac.th
  • th to ac.th

NoticesNotices

Errors (28)
  • RRSIG sru.ac.th/SOA alg 8, id 9430: The cryptographic signature of the RRSIG RR does not properly validate.
  • RRSIG sru.ac.th/SOA alg 8, id 9430: The cryptographic signature of the RRSIG RR does not properly validate.
  • RRSIG sru.ac.th/SOA alg 8, id 9430: The cryptographic signature of the RRSIG RR does not properly validate.
  • RRSIG sru.ac.th/SOA alg 8, id 9430: The cryptographic signature of the RRSIG RR does not properly validate.
  • RRSIG sru.ac.th/SOA alg 8, id 9430: The cryptographic signature of the RRSIG RR does not properly validate.
  • ac.th to sru.ac.th: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • ac.th to sru.ac.th: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • ac.th zone: The server(s) were not responsive to queries over UDP. (122.155.23.64, 202.28.0.1)
  • ac.th/DS: No response was received from the server over UDP (tried 12 times). (122.155.23.64, UDP_-_NOEDNS_)
  • sru.ac.th zone: The server(s) did not respond authoritatively for the namespace. (202.29.18.1)
  • sru.ac.th zone: The server(s) were not responsive to queries over UDP. (2001:3c8:7402:52::1, 2001:3c8:7402:52::8, 2001:3c8:7402:52::9)
  • sru.ac.th/A: No response was received from the server over UDP (tried 12 times). (2001:3c8:7402:52::1, 2001:3c8:7402:52::8, 2001:3c8:7402:52::9, UDP_-_NOEDNS_)
  • sru.ac.th/A: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/AAAA: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/DNSKEY (alg 7, id 45740): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/DNSKEY (alg 8, id 9430): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/MX: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/NS: No response was received from the server over UDP (tried 12 times). (2001:3c8:7402:52::1, 2001:3c8:7402:52::8, 2001:3c8:7402:52::9, UDP_-_NOEDNS_)
  • sru.ac.th/NS: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/NSEC3PARAM (NODATA): No NSEC RR(s) were returned to validate the NODATA response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/NSEC3PARAM (NODATA): No SOA RR was returned with the NODATA response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/NSEC3PARAM (NODATA): The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/SOA: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
  • sru.ac.th/TXT (NODATA): No NSEC RR(s) were returned to validate the NODATA response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/TXT (NODATA): No SOA RR was returned with the NODATA response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/TXT (NODATA): The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • th zone: The server(s) were not responsive to queries over UDP. (202.28.0.1)
  • th/DNSKEY: No response was received from the server over UDP (tried 4 times). (122.155.23.64, UDP_-_EDNS0_512_D_KN)
Warnings (23)
  • RRSIG sru.ac.th/A alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/AAAA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/DNSKEY alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/DNSKEY alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/DNSKEY alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/MX alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/NS alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/NSEC3PARAM alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/SOA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/SOA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/SOA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/SOA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/SOA alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • RRSIG sru.ac.th/TXT alg 7, id 45740: DNSSEC specification recommends not signing with DNSSEC algorithm 7 (RSASHA1NSEC3SHA1).
  • ac.th to sru.ac.th: The glue address(es) for ns1.sru.ac.th (2001:3c8:7402:52::1) differed from its authoritative address(es) (2001:3c8:7402:52::8).
  • ac.th to sru.ac.th: The glue address(es) for ns2.sru.ac.th (2001:3c8:7402:52::8) differed from its authoritative address(es) (2001:3c8:7402:52::9).
  • sru.ac.th/DNSKEY (alg 7, id 48767): The DNSKEY RR was not found in the DNSKEY RRset returned by one or more servers. (202.29.18.1, UDP_-_EDNS0_4096_D_KN)
  • sru.ac.th/DNSKEY: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_512_D_KN)
  • sru.ac.th/DS (alg 8, id 9430): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
  • sru.ac.th/DS (alg 8, id 9430): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
  • sru.ac.th/DS (alg 8, id 9430): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
  • sru.ac.th/DS (alg 8, id 9430): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
  • sru.ac.th/MX: The Authoritative Answer (AA) flag was not set in the response. (202.29.18.1, UDP_-_EDNS0_512_D_KN)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph