View on GitHub

DNSViz: A DNS visualization tool

vu

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Bogus (2)
  • vu/NS
  • vu/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Bogus (2)
  • vu/DNSKEY (alg 10, id 32532)
  • vu/DNSKEY (alg 10, id 37496)
Secure (5)
  • ./DNSKEY (alg 8, id 19036)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 41824)
  • ./DNSKEY (alg 8, id 46809)
  • vu/DS (alg 10, id 32532)

Delegation statusDelegation status

Bogus (1)
  • . to vu

NoticesNotices

Errors (11)
  • . to vu: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (77.72.229.254, 202.80.32.9, 203.119.43.53, 2001:dd8:12::53, 2a01:3f0:0:306::53, UDP_-_EDNS0_4096_D)
  • RRSIG vu/DNSKEY alg 10, id 32532: The Signature Expiration field of the RRSIG RR (2018-01-11 00:00:00+00:00) is 3 minutes in the past.
  • RRSIG vu/DNSKEY alg 10, id 32532: The Signature Expiration field of the RRSIG RR (2018-01-11 00:00:00+00:00) is 3 minutes in the past.
  • RRSIG vu/NS alg 10, id 37496: The Signature Expiration field of the RRSIG RR (2018-01-11 00:00:00+00:00) is 3 minutes in the past.
  • RRSIG vu/SOA alg 10, id 37496: The Signature Expiration field of the RRSIG RR (2018-01-11 00:00:00+00:00) is 3 minutes in the past.
  • vu zone: The server(s) responded over TCP with a malformed response or with an invalid RCODE. (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39)
  • vu zone: The server(s) responded over UDP with a malformed response or with an invalid RCODE. (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39)
  • vu/DNSKEY: The response had an invalid RCODE (SERVFAIL). (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39, UDP_-_EDNS0_512_D, UDP_-_NOEDNS_)
  • vu/NS: The response had an invalid RCODE (SERVFAIL). (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39, UDP_-_NOEDNS_)
  • vu/SOA: The response had an invalid RCODE (SERVFAIL). (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39, TCP_-_NOEDNS_)
  • vu/SOA: The response had an invalid RCODE (SERVFAIL). (147.28.0.39, 202.80.32.5, 202.80.32.7, 202.80.32.10, 2001:418:1::39, UDP_-_NOEDNS_)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph