View on GitHub

DNSViz: A DNS visualization tool

16.172.in-addr.arpa

DNSSEC options (hide)
  1. |?|
  2. |?|
  3. |?|
  4. |?|
  5. |?|
  6. |?|
  7. |?|
Notices
DNSSEC Authentication Chain

RRset statusRRset status

Insecure (2)
  • 16.172.in-addr.arpa/NS
  • 16.172.in-addr.arpa/SOA
Secure (1)
  • 172.in-addr.arpa/SOA

DNSKEY/DS/NSEC statusDNSKEY/DS/NSEC status

Secure (18)
  • ./DNSKEY (alg 8, id 20326)
  • ./DNSKEY (alg 8, id 46780)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 48231)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 48745)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 49851)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 8719)
  • 172.in-addr.arpa/DS (alg 8, id 48745)
  • NSEC proving non-existence of 16.172.in-addr.arpa/DS
  • arpa/DNSKEY (alg 8, id 42581)
  • arpa/DNSKEY (alg 8, id 46174)
  • arpa/DS (alg 8, id 42581)
  • in-addr.arpa/DNSKEY (alg 8, id 35160)
  • in-addr.arpa/DNSKEY (alg 8, id 47054)
  • in-addr.arpa/DNSKEY (alg 8, id 54956)
  • in-addr.arpa/DS (alg 8, id 47054)
  • in-addr.arpa/DS (alg 8, id 53696)
  • in-addr.arpa/DS (alg 8, id 54956)
  • in-addr.arpa/DS (alg 8, id 63982)
Non_existent (2)
  • in-addr.arpa/DNSKEY (alg 8, id 53696)
  • in-addr.arpa/DNSKEY (alg 8, id 63982)

Delegation statusDelegation status

Insecure (1)
  • 172.in-addr.arpa to 16.172.in-addr.arpa
Secure (3)
  • . to arpa
  • arpa to in-addr.arpa
  • in-addr.arpa to 172.in-addr.arpa

NoticesNotices

Errors (15)
  • 172.in-addr.arpa/DS (alg 8, id 48745): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 11 times) with EDNS enabled. (2620:37:e000::53, UDP_-_NOEDNS_)
  • 172.in-addr.arpa/DS (alg 8, id 48745): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 11 times) with EDNS enabled. (2620:37:e000::53, UDP_-_NOEDNS_)
  • 172.in-addr.arpa/DS (alg 8, id 48745): No response was received from the server over UDP (tried 11 times) until EDNS was disabled (however, this server appeared to respond legitimately to other queries with EDNS enabled). (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DS (alg 8, id 48745): No response was received from the server over UDP (tried 11 times) until EDNS was disabled (however, this server appeared to respond legitimately to other queries with EDNS enabled). (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DS (alg 8, id 48745): The DNSSEC records necessary to validate the response could not be retrieved from the server. (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DS (alg 8, id 48745): The DNSSEC records necessary to validate the response could not be retrieved from the server. (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • arpa to in-addr.arpa: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. (2620:37:e000::53, TCP_-_NOEDNS_)
  • arpa to in-addr.arpa: The DS RRset for the zone included algorithm 8 (RSASHA256), but no DS RR matched a DNSKEY with algorithm 8 that signs the zone's DNSKEY RRset. (2620:37:e000::53, TCP_-_NOEDNS_)
  • in-addr.arpa/DNSKEY (alg 8, id 35160): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 11 times) with EDNS enabled. (2620:37:e000::53, TCP_-_NOEDNS_)
  • in-addr.arpa/DNSKEY (alg 8, id 35160): No response was received from the server over UDP (tried 11 times) until EDNS was disabled (however, this server appeared to respond legitimately to other queries with EDNS enabled). (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • in-addr.arpa/DNSKEY (alg 8, id 47054): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 11 times) with EDNS enabled. (2620:37:e000::53, TCP_-_NOEDNS_)
  • in-addr.arpa/DNSKEY (alg 8, id 47054): No response was received from the server over UDP (tried 11 times) until EDNS was disabled (however, this server appeared to respond legitimately to other queries with EDNS enabled). (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • in-addr.arpa/DNSKEY (alg 8, id 54956): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 11 times) with EDNS enabled. (2620:37:e000::53, TCP_-_NOEDNS_)
  • in-addr.arpa/DNSKEY (alg 8, id 54956): No response was received from the server over UDP (tried 11 times) until EDNS was disabled (however, this server appeared to respond legitimately to other queries with EDNS enabled). (2620:37:e000::53, UDP_-_EDNS0_4096_D_KN)
  • in-addr.arpa/DNSKEY: No response was received from the server over UDP (tried 4 times). (2620:37:e000::53, UDP_-_EDNS0_512_D_KN)
Warnings (4)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 48231): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (2001:500:f0::63, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 48745): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (2001:500:f0::63, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 49851): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (2001:500:f0::63, UDP_-_EDNS0_4096_D_KN)
  • 172.in-addr.arpa/DNSKEY (alg 8, id 8719): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (2001:500:f0::63, UDP_-_EDNS0_4096_D_KN)

DNSKEY legend

Full legend
SEP bit setSEP bit set
Revoke bit setRevoke bit set
Trust anchorTrust anchor
Download: png | svg
Warning JavaScript is required to make the graph below interactive.
DNSSEC authentication graph