www.bncr.fi.cr
Updated:
2020-09-23 20:36:02 UTC (1570 days ago)
Go to most recent »
Notices
DNSSEC Authentication Chain
RRset status
Bogus (1)
- www.bncr.fi.cr/CNAME
Insecure (5)
- akamaiedge.net/SOA
- e38474.dscx.akamaiedge.net/A
- e38474.dscx.akamaiedge.net/AAAA
- e38474.dscx.akamaiedge.net/AAAA
- oce.bncr.fi.cr.edgekey.net/CNAME
Secure (3)
- net/SOA
- net/SOA
- net/SOA
DNSKEY/DS/NSEC status
Bogus (7)
- bncr.fi.cr/DNSKEY (alg 8, id 13921)
- bncr.fi.cr/DNSKEY (alg 8, id 30790)
- bncr.fi.cr/DNSKEY (alg 8, id 56985)
- bncr.fi.cr/DNSKEY (alg 8, id 9847)
- bncr.fi.cr/DS (alg 8, id 30790)
- fi.cr/DNSKEY (alg 13, id 15493)
- fi.cr/DNSKEY (alg 13, id 31253)
Secure (12)
- ./DNSKEY (alg 8, id 20326)
- ./DNSKEY (alg 8, id 26116)
- ./DNSKEY (alg 8, id 46594)
- NSEC3 proving non-existence of akamaiedge.net/DS
- NSEC3 proving non-existence of edgekey.net/DS
- cr/DNSKEY (alg 13, id 11634)
- cr/DNSKEY (alg 13, id 51625)
- cr/DS (alg 13, id 51625)
- fi.cr/DS (alg 13, id 15493)
- net/DNSKEY (alg 8, id 35886)
- net/DNSKEY (alg 8, id 56519)
- net/DS (alg 8, id 35886)
Delegation status
Bogus (1)
- cr to fi.cr
Insecure (3)
- akamaiedge.net to dscx.akamaiedge.net
- net to akamaiedge.net
- net to edgekey.net
Secure (3)
- . to cr
- . to net
- fi.cr to bncr.fi.cr
Notices
Errors (4)
- RRSIG fi.cr/DNSKEY alg 13, id 15493: The cryptographic signature of the RRSIG RR does not properly validate. See RFC 4035, Sec. 5.3.3.
- RRSIG fi.cr/DNSKEY alg 13, id 15493: The cryptographic signature of the RRSIG RR does not properly validate. See RFC 4035, Sec. 5.3.3.
- cr to fi.cr: No valid RRSIGs made by a key corresponding to a DS RR were found covering the DNSKEY RRset, resulting in no secure entry point (SEP) into the zone. See RFC 4035, Sec. 2.2, RFC 6840, Sec. 5.11. (185.159.197.100, 185.159.198.100, 194.0.11.107, 200.0.68.10, 200.107.82.100, 204.61.216.89, 2001:500:14:6089:ad::1, 2001:678:e:107::53, 2001:13c7:7004:1::d100, 2620:10a:80aa::100, 2620:10a:80ab::100, 2801:14:a000::10, UDP_-_EDNS0_4096_D_K, UDP_-_EDNS0_512_D_K)
- bncr.fi.cr/CNAME has errors; select the "Denial of existence" DNSSEC option to see them.
Warnings (13)
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n1dscx.akamaiedge.net (128.241.216.206, 204.2.136.206) differed from its authoritative address(es) (204.2.136.206). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n2dscx.akamaiedge.net (128.241.216.207, 204.237.221.222) differed from its authoritative address(es) (204.237.221.222). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n3dscx.akamaiedge.net (128.241.216.199, 128.241.216.201) differed from its authoritative address(es) (128.241.216.201). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n4dscx.akamaiedge.net (128.241.216.200, 128.241.216.214) differed from its authoritative address(es) (128.241.216.214). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n5dscx.akamaiedge.net (128.241.216.208, 204.237.221.222) differed from its authoritative address(es) (128.241.216.208). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n6dscx.akamaiedge.net (128.241.216.201, 128.241.216.206) differed from its authoritative address(es) (128.241.216.201). See RFC 1034, Sec. 4.2.2.
- akamaiedge.net to dscx.akamaiedge.net: The glue address(es) for n7dscx.akamaiedge.net (128.241.220.29, 204.2.136.198) differed from its authoritative address(es) (128.241.220.29). See RFC 1034, Sec. 4.2.2.
- net to akamaiedge.net: Authoritative AAAA records exist for a11-192.akamaiedge.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- net to edgekey.net: Authoritative AAAA records exist for a13-65.akam.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- net to edgekey.net: Authoritative AAAA records exist for a5-65.akam.net, but there are no corresponding AAAA glue records. See RFC 1034, Sec. 4.2.2.
- net to edgekey.net: The following NS name(s) were found in the authoritative NS RRset, but not in the delegation NS RRset (i.e., in the net zone): a11-65.akam.net, ns1-2.akam.net, a9-65.akam.net, a3-65.akam.net See RFC 1034, Sec. 4.2.2.
- net to edgekey.net: The following NS name(s) were found in the delegation NS RRset (i.e., in the net zone), but not in the authoritative NS RRset: ns1-66.akam.net, ns4-66.akam.net, ns5-66.akam.net, ns7-65.akam.net See RFC 1034, Sec. 4.2.2.
- bncr.fi.cr/CNAME has warnings; select the "Denial of existence" DNSSEC option to see them.
JavaScript is required to make the graph below interactive.
