infoblox.com

Updated: 2020-06-30 19:16:07 UTC (1388 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (6)

infoblox.com/A
infoblox.com/AAAA
infoblox.com/MX
infoblox.com/NS
infoblox.com/SOA
infoblox.com/TXT

DNSKEY/DS/NSEC status

Secure (14)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46594)
./DNSKEY (alg 8, id 48903)
com/DNSKEY (alg 8, id 30909)
com/DNSKEY (alg 8, id 39844)
com/DS (alg 8, id 30909)
infoblox.com/DNSKEY (alg 5, id 12405)
infoblox.com/DNSKEY (alg 5, id 19665)
infoblox.com/DNSKEY (alg 5, id 33613)
infoblox.com/DNSKEY (alg 5, id 49879)
infoblox.com/DS (alg 5, id 33613)
infoblox.com/DS (alg 5, id 33613)
infoblox.com/DS (alg 5, id 49879)
infoblox.com/DS (alg 5, id 49879)

Delegation status

Secure (2)

. to com
com to infoblox.com

Notices

Errors (1)

com zone: The server(s) were not responsive to queries over UDP. (2001:502:1ca1::30, 2001:503:d414::30, 2001:503:eea3::30)

Warnings (37)

RRSIG infoblox.com/A alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/A alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/AAAA alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/AAAA alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 33613: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 33613: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 33613: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 33613: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 49879: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 49879: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 49879: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/DNSKEY alg 5, id 49879: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/MX alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/MX alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/NS alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/NS alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/SOA alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/SOA alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/TXT alg 5, id 12405: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
RRSIG infoblox.com/TXT alg 5, id 19665: DNSSEC specification recommends not signing with DNSSEC algorithm 5 (RSASHA1).
com to infoblox.com: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the com zone): ns5.infoblox.com
infoblox.com/DS (alg 5, id 33613): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
infoblox.com/DS (alg 5, id 33613): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
infoblox.com/DS (alg 5, id 33613): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
infoblox.com/DS (alg 5, id 33613): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
infoblox.com/DS (alg 5, id 49879): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
infoblox.com/DS (alg 5, id 49879): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
infoblox.com/DS (alg 5, id 49879): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
infoblox.com/DS (alg 5, id 49879): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

infoblox.com

RRset status

Secure (6)

DNSKEY/DS/NSEC status

Secure (14)

Delegation status

Secure (2)

Notices

Errors (1)

Warnings (37)

DNSKEY legend

See also