polri.go.id

Updated: 2023-11-02 16:04:18 UTC (197 days ago) Go to most recent »

DNSSEC options (hide)

|?| RR types:
|?| DNSSEC algorithms:
|?| DS digest algorithms:
|?| Denial of existence:
|?| Redundant edges:
|?| Trust anchors:
- Root zone KSK
|?| Additional trusted keys:

Notices

DNSSEC Authentication Chain

RRset status

Secure (5)

polri.go.id/A
polri.go.id/MX
polri.go.id/NS
polri.go.id/SOA
polri.go.id/TXT

DNSKEY/DS/NSEC status

Secure (25)

./DNSKEY (alg 8, id 20326)
./DNSKEY (alg 8, id 46780)
go.id/DNSKEY (alg 10, id 25427)
go.id/DNSKEY (alg 10, id 48051)
go.id/DS (alg 10, id 48051)
id/DNSKEY (alg 8, id 22449)
id/DNSKEY (alg 8, id 26887)
id/DS (alg 8, id 26887)
polri.go.id/DNSKEY (alg 8, id 21903)
polri.go.id/DNSKEY (alg 8, id 41364)
polri.go.id/DNSKEY (alg 8, id 52849)
polri.go.id/DS (alg 10, id 27582)
polri.go.id/DS (alg 5, id 16006)
polri.go.id/DS (alg 5, id 20851)
polri.go.id/DS (alg 5, id 32602)
polri.go.id/DS (alg 5, id 36757)
polri.go.id/DS (alg 5, id 51121)
polri.go.id/DS (alg 5, id 54928)
polri.go.id/DS (alg 5, id 667)
polri.go.id/DS (alg 5, id 9886)
polri.go.id/DS (alg 8, id 31582)
polri.go.id/DS (alg 8, id 52849)
polri.go.id/DS (alg 8, id 52849)
polri.go.id/DS (alg 8, id 54619)
polri.go.id/DS (alg 8, id 62776)

Non_existent (12)

polri.go.id/DNSKEY (alg 10, id 27582)
polri.go.id/DNSKEY (alg 5, id 16006)
polri.go.id/DNSKEY (alg 5, id 20851)
polri.go.id/DNSKEY (alg 5, id 32602)
polri.go.id/DNSKEY (alg 5, id 36757)
polri.go.id/DNSKEY (alg 5, id 51121)
polri.go.id/DNSKEY (alg 5, id 54928)
polri.go.id/DNSKEY (alg 5, id 667)
polri.go.id/DNSKEY (alg 5, id 9886)
polri.go.id/DNSKEY (alg 8, id 31582)
polri.go.id/DNSKEY (alg 8, id 54619)
polri.go.id/DNSKEY (alg 8, id 62776)

Delegation status

Secure (3)

. to id
go.id to polri.go.id
id to go.id

Notices

Errors (33)

go.id to polri.go.id: The DS RRset for the zone included algorithm 10 (RSASHA512), but no DS RR matched a DNSKEY with algorithm 10 that signs the zone's DNSKEY RRset. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
go.id to polri.go.id: The DS RRset for the zone included algorithm 5 (RSASHA1), but no DS RR matched a DNSKEY with algorithm 5 that signs the zone's DNSKEY RRset. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
go.id zone: The server(s) were not responsive to queries over TCP. (45.126.57.57)
go.id zone: The server(s) were not responsive to queries over UDP. (103.19.178.178, 2001:df5:4000:4::4, 2402:ee80:c::c, 2402:ee80:d::d)
go.id/DNSKEY: No response was received from the server over TCP (tried 12 times). (45.126.57.57, TCP_-_EDNS0_4096_D_KN)
id zone: The server(s) were not responsive to queries over UDP. (103.19.178.178, 2001:df5:4000:4::4, 2402:ee80:c::c, 2402:ee80:d::d)
id/DS (alg 8, id 26887): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 10 times) with the DO bit set. (2001:500:2f::f, UDP_-_EDNS0_4096_)
id/DS (alg 8, id 26887): DNSSEC was effectively downgraded because no response was received from the server over UDP (tried 10 times) with the DO bit set. (2001:500:2f::f, UDP_-_EDNS0_4096_)
id/DS (alg 8, id 26887): No response was received from the server over UDP (tried 10 times) until the DO EDNS flag was cleared (however, this server appeared to respond legitimately to other queries with the DO EDNS flag set). (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)
id/DS (alg 8, id 26887): No response was received from the server over UDP (tried 10 times) until the DO EDNS flag was cleared (however, this server appeared to respond legitimately to other queries with the DO EDNS flag set). (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)
id/DS (alg 8, id 26887): The DNSSEC records necessary to validate the response could not be retrieved from the server. (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)
id/DS (alg 8, id 26887): The DNSSEC records necessary to validate the response could not be retrieved from the server. (2001:500:2f::f, UDP_-_EDNS0_4096_D_KN)
polri.go.id zone: The server(s) were not responsive to queries over UDP. (120.29.231.234)
polri.go.id/A: No response was received from the server over UDP (tried 12 times). (120.29.231.234, UDP_-_NOEDNS_)
polri.go.id/A: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/A: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 21903): The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 21903): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 41364): The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 41364): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 52849): The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DNSKEY (alg 8, id 52849): The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DS: No response was received from the server over TCP (tried 7 times). (45.126.57.57, TCP_-_EDNS0_4096_D_KN)
polri.go.id/MX: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
polri.go.id/MX: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_512_D_KN)
polri.go.id/NS: No response was received from the server over TCP (tried 5 times). (45.126.57.57, TCP_-_EDNS0_4096_D_KN)
polri.go.id/NS: No response was received from the server over UDP (tried 12 times). (120.29.231.234, UDP_-_NOEDNS_)
polri.go.id/NS: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/NS: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/SOA: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
polri.go.id/SOA: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, TCP_-_EDNS0_4096_D_N, UDP_-_EDNS0_4096_D_KN, UDP_-_EDNS0_4096_D_KN_0x20)
polri.go.id/TXT: The DS RRset for the zone included algorithm 10 (RSASHA512), but no RRSIG with algorithm 10 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)
polri.go.id/TXT: The DS RRset for the zone included algorithm 5 (RSASHA1), but no RRSIG with algorithm 5 covering the RRset was returned in the response. (120.29.225.225, 120.29.226.12, 120.29.228.228, 120.29.230.230, UDP_-_EDNS0_4096_D_KN)

Warnings (56)

RRSIG go.id/DNSKEY alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG go.id/DNSKEY alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG go.id/DNSKEY alg 10, id 48051: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG go.id/DNSKEY alg 10, id 48051: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
RRSIG polri.go.id/DS alg 10, id 25427: DNSSEC specification recommends not signing with DNSSEC algorithm 10 (RSASHA512).
id/DNSKEY (alg 8, id 22449): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (45.126.57.57, UDP_-_EDNS0_4096_D_KN)
id/DNSKEY (alg 8, id 26887): No response was received from the server over UDP (tried 6 times) until the COOKIE EDNS option was removed (however, this server appeared to respond legitimately to other queries with the COOKIE EDNS option present). (45.126.57.57, UDP_-_EDNS0_4096_D_KN)
polri.go.id/DS (alg 5, id 16006): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 16006): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 16006): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 16006): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 32602): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 32602): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 32602): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 32602): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 36757): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 36757): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 36757): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 36757): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 51121): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 51121): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 51121): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 51121): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 54928): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 54928): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 54928): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 54928): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 667): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 667): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 5, id 667): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 5, id 667): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 31582): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 31582): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 31582): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 31582): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 52849): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 52849): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 52849): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 52849): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 54619): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 54619): DNSSEC specification prohibits signing with DS records that use digest algorithm 1 (SHA-1).
polri.go.id/DS (alg 8, id 54619): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.
polri.go.id/DS (alg 8, id 54619): DS records with digest type 1 (SHA-1) are ignored when DS records with digest type 2 (SHA-256) exist in the same RRset.