| Zone (*) | DNSSEC - Informations |
|---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 4 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 46441, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 61809, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.10.2025, 00:00:00 +, Signature-Inception: 01.10.2025, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: net
|
|
net
| 1 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 16.10.2025, 17:00:00 +, Signature-Inception: 03.10.2025, 16:00:00 +, KeyTag 61809, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 61809 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 33296, Flags 256
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 37331, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner net., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.10.2025, 14:10:35 +, Signature-Inception: 29.09.2025, 14:05:35 +, KeyTag 37331, Signer-Name: net
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 37331 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest "LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: moon-palace.net
|
|
moon-palace.net
| 2 DS RR in the parent zone found
|
|
|
|
|
| DS with Algorithm 13, KeyTag 53934, DigestType 2 and Digest VKT6goQouuxnhcRb6qaGIGAjyp/vUx8KAEN6Jr4nLQg=
|
|
|
|
|
| DS with Algorithm 13, KeyTag 53934, DigestType 4 and Digest P9Fvp7g8oWtffNxEfsVteByH+/FMSi+J0NaupTH+1aE7/jS2qdn4zZbCM50kf8uf
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 86400 sec, Signature-expiration: 08.10.2025, 03:09:01 +, Signature-Inception: 01.10.2025, 01:59:01 +, KeyTag 33296, Signer-Name: net
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 33296 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 1 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 53934, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 53934 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 53934, DigestType 2 and Digest "VKT6goQouuxnhcRb6qaGIGAjyp/vUx8KAEN6Jr4nLQg=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 53934, DigestType 4 and Digest "P9Fvp7g8oWtffNxEfsVteByH+/FMSi+J0NaupTH+1aE7/jS2qdn4zZbCM50kf8uf" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: chat.moon-palace.net
|
|
chat.moon-palace.net
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "moon-palace.net" and the NextOwner "moon-palace.net". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 73.189.58.197
Validated: RRSIG-Owner chat.moon-palace.net., Algorithm: 13, 3 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| TLSA-Query (_443._tcp.chat.moon-palace.net) sends a valid NSEC RR as result with the NSEC-owner "moon-palace.net" equal the NextOwner "moon-palace.net". So the zone confirmes that no other domain name exists.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY Validated: RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| Status: Good. NXDomain-Proof required and found.
|
|
|
|
|
| CNAME-Query sends a valid NSEC RR as result with the NSEC-owner "moon-palace.net" equal the NextOwner "moon-palace.net". So the zone confirmes that no other domain name exists.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY Validated: RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC-Records, so DNSSEC works.
|
|
|
|
|
| TXT-Query sends a valid NSEC RR as result with the NSEC-owner "moon-palace.net" equal the NextOwner "moon-palace.net". So the zone confirmes that no other domain name exists.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY Validated: RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC-Records, so DNSSEC works.
|
|
|
|
|
| AAAA-Query sends a valid NSEC RR as result with the NSEC-owner "moon-palace.net" equal the NextOwner "moon-palace.net". So the zone confirmes that no other domain name exists.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY Validated: RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC-Records, so DNSSEC works.
|
|
|
|
|
| CAA-Query sends a valid NSEC RR as result with the NSEC-owner "moon-palace.net" equal the NextOwner "moon-palace.net". So the zone confirmes that no other domain name exists.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY Validated: RRSIG-Owner moon-palace.net., Algorithm: 13, 2 Labels, original TTL: 300 sec, Signature-expiration: 16.10.2025, 00:00:00 +, Signature-Inception: 25.09.2025, 00:00:00 +, KeyTag 53934, Signer-Name: moon-palace.net
|
|
|
|
|
| Status: Fatal / bogus. NoError+NoDataResult sent, the answer says, the query name exists, the NSEC covers the Query Name, but there are not enough informations about wildcards: NoError - there must be a confirmed wildcard expansion to create the query name. Recalculate the zone or update the name server software. Or there is a Man in the middle, who has removed one of the required NSEC-Records, so DNSSEC works.
|
|
|
Zone: www.chat.moon-palace.net
|
|
www.chat.moon-palace.net
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "moon-palace.net" and the NextOwner "moon-palace.net". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, NS, SOA, RRSIG, NSEC, DNSKEY
|