View on GitHub

2uohek6j512fjfetfa7sdvo0ok.cmdns.dev.dns-oarc.net

• Tweet

• DNSSEC
• Responses
• Servers
• Analyze

DNSSEC options (hide)

1. |?| RR types: --All-- A AAAA TXT PTR MX NS SOA CNAME SRV NAPTR TLSA NSEC3PARAM CAA
2. |?| DNSSEC algorithms: --All-- 1 - RSA/MD5 3 - DSA/SHA1 5 - RSA/SHA-1 6 - DSA-NSEC3-SHA1 7 - RSASHA1-NSEC3-SHA1 8 - RSA/SHA-256 10 - RSA/SHA-512 12 - GOST R 34.10-2001 13 - ECDSA Curve P-256 with SHA-256 14 - ECDSA Curve P-384 with SHA-384 15 - Ed25519 16 - Ed448
3. |?| DS digest algorithms: --All-- 1 - SHA-1 2 - SHA-256 3 - GOST R 34.11-94 4 - SHA-384
4. |?| Denial of existence:
5. |?| Redundant edges:
6. |?| Trust anchors:
   • Root zone KSK
7. |?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (2)

• 2uohek6j512fjfetfa7sdvo0ok.cmdns.dev.dns-oarc.net/A (NXDOMAIN)
• cmdns.dev.dns-oarc.net/SOA

DNSKEY/DS/NSEC status

Secure (16)

• ./DNSKEY (alg 8, id 14748)
• ./DNSKEY (alg 8, id 20326)
• ./DNSKEY (alg 8, id 26838)
• NSEC proving non-existence of 2uohek6j512fjfetfa7sdvo0ok.cmdns.dev.dns-oarc.net/A
• cmdns.dev.dns-oarc.net/DNSKEY (alg 8, id 26460)
• cmdns.dev.dns-oarc.net/DNSKEY (alg 8, id 61882)
• cmdns.dev.dns-oarc.net/DS (alg 8, id 61882)
• dev.dns-oarc.net/DNSKEY (alg 8, id 25608)
• dev.dns-oarc.net/DNSKEY (alg 8, id 65191)
• dev.dns-oarc.net/DS (alg 8, id 65191)
• dns-oarc.net/DNSKEY (alg 8, id 3701)
• dns-oarc.net/DNSKEY (alg 8, id 40186)
• dns-oarc.net/DS (alg 8, id 3701)
• net/DNSKEY (alg 8, id 35886)
• net/DNSKEY (alg 8, id 65378)
• net/DS (alg 8, id 35886)

Delegation status

Secure (4)

• . to net
• dev.dns-oarc.net to cmdns.dev.dns-oarc.net
• dns-oarc.net to dev.dns-oarc.net
• net to dns-oarc.net

Notices

Warnings (8)

• RRSIG NSEC proving non-existence of 2uohek6j512fjfetfa7sdvo0ok.cmdns.dev.dns-oarc.net/A alg 8, id 26460: The value of the Signature Inception field of the RRSIG RR (2021-09-23 14:39:18+00:00) is within possible clock skew range (10 seconds) of the current time (2021-09-23 14:39:28+00:00).
• RRSIG NSEC proving non-existence of 2uohek6j512fjfetfa7sdvo0ok.cmdns.dev.dns-oarc.net/A alg 8, id 26460: The value of the Signature Inception field of the RRSIG RR (2021-09-23 14:39:18+00:00) is within possible clock skew range (10 seconds) of the current time (2021-09-23 14:39:28+00:00).
• RRSIG cmdns.dev.dns-oarc.net/DNSKEY alg 8, id 61882: The value of the Signature Inception field of the RRSIG RR (2021-09-23 14:39:18+00:00) is within possible clock skew range (9 seconds) of the current time (2021-09-23 14:39:27+00:00).
• RRSIG cmdns.dev.dns-oarc.net/DNSKEY alg 8, id 61882: The value of the Signature Inception field of the RRSIG RR (2021-09-23 14:39:18+00:00) is within possible clock skew range (9 seconds) of the current time (2021-09-23 14:39:27+00:00).
• RRSIG cmdns.dev.dns-oarc.net/SOA alg 8, id 26460: The value of the Signature Inception field of the RRSIG RR (2021-09-23 14:39:18+00:00) is within possible clock skew range (10 seconds) of the current time (2021-09-23 14:39:28+00:00).
• dev.dns-oarc.net to cmdns.dev.dns-oarc.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the dev.dns-oarc.net zone), but not in the authoritative NS RRset: ns.cmdns.dev.dns-oarc.net
• net to dns-oarc.net: Authoritative AAAA records exist for udns1.ultradns.net, but there are no corresponding AAAA glue records.
• net to dns-oarc.net: Authoritative AAAA records exist for udns2.ultradns.net, but there are no corresponding AAAA glue records.

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

JavaScript is required to make the graph below interactive.

Questions and Comments

Copyright © 2010 - 2014 Sandia Corporation