of.to | DNSViz

of.to

Updated: 2022-09-23 01:07:34 UTC (1180 days ago) Update now

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Ignore RFC 8624:
|?| Ignore RFC 9276:
|?| Multi-signer:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Insecure (7)

of.to/A
of.to/AAAA
of.to/MX
of.to/NS
of.to/SOA
of.to/TXT
to/SOA

Secure (1)

./SOA

DNSKEY/DS/NSEC status

Insecure (1)

of.to/DNSKEY (alg 13, id 35376)

Secure (4)

./DNSKEY (alg 8, id 18733)
./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 20826)
NSEC proving non-existence of to/DS

Delegation status

Insecure (2)

. to to
to to of.to

Notices

Errors (4)

of.to zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2a0f:93c1:26:2d8::9009)
of.to/A: The UDP connection was refused (ECONNREFUSED). See RFC 1035, Sec. 4.2. (2a0f:93c1:26:2d8::9009, UDP_-_EDNS0_4096_D_KN)
of.to/NS: The UDP connection was refused (ECONNREFUSED). See RFC 1035, Sec. 4.2. (2a0f:93c1:26:2d8::9009, UDP_-_EDNS0_4096_D_KN)
to zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (46.101.233.168)

Warnings (1)

. to to: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the . zone): la.tonic.to See RFC 1034, Sec. 4.2.2.

DNSKEY legend

Full legend

	SEP bit set
	Revoke bit set
	Trust anchor

See also

DNSSEC Debugger by Verisign Labs.

Download: png | svg

Warning

JavaScript is required to make the graph below interactive.

DNSSEC authentication graph