gn | DNSViz

gn

Updated: 2023-12-04 14:31:42 UTC (299 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Bogus (1)

gn/SOA

Secure (2)

gn/NS
gn/SOA

DNSKEY/DS/NSEC status

Secure (7)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46780)
gn/DNSKEY (alg 8, id 21855)
gn/DNSKEY (alg 8, id 27928)
gn/DNSKEY (alg 8, id 38486)
gn/DNSKEY (alg 8, id 9311)
gn/DS (alg 8, id 9311)

Non_existent (1)

gn/DNSKEY (alg 8, id 20340)

Delegation status

Secure (1)

. to gn

Notices

Errors (2)

RRSIG gn/NS alg 8, id 20340: The Signature Expiration field of the RRSIG RR (2023-12-01 14:00:11+00:00) is 3 days in the past. See RFC 4035, Sec. 5.3.1.
gn/NSEC3PARAM has errors; select the "Denial of existence" DNSSEC option to see them.

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph