Zone (*) DNSSEC - Informations Zone : (root)(root) 1 DS RR published • Status: Valid because published2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 33853, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 21.02.2020, 00:00:00 +, Signature-Inception: 31.01.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : caca 1 DS RR in the parent zone found 1 RRSIG RR to validate DS RR found RRSIG-Owner ca., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 16.02.2020, 17:00:00 +, Signature-Inception: 03.02.2020, 16:00:00 +, KeyTag 33853, Signer-Name: (root)
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone2 DNSKEY RR found Public Key with Algorithm 8, KeyTag 2134, Flags 257 (SEP = Secure Entry Point)
Public Key with Algorithm 8, KeyTag 35433, Flags 256
1 RRSIG RR to validate DNSKEY RR found RRSIG-Owner ca., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 07.02.2020, 17:01:40 +, Signature-Inception: 31.01.2020, 17:07:44 +, KeyTag 2134, Signer-Name: ca
• Status: Good - Algorithmus 8 and DNSKEY with KeyTag 2134 used to validate the DNSKEY RRSet• Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 2134, DigestType 2 and Digest "S4R1wMD+Kv3+4acaI3yRBZCY0S/BgmWykO2yOKX2NYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zoneZone : ihasamoose.caihasamoose.ca 0 DS RR in the parent zone found DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "2v6uh6ekhr1285pmlgf0q0k1b016n1cl" between the hashed NSEC3-owner "2v5q07htusmel3rf0k9nni16kq45c6g7" and the hashed NextOwner "2vsjri0jjo1dq7ma1tq7uu41tt5h0i4c". So the parent zone confirmes the not-existence of a DS RR.Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner 2v5q07htusmel3rf0k9nni16kq45c6g7.ca., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.02.2020, 01:52:09 +, Signature-Inception: 03.02.2020, 09:37:52 +, KeyTag 35433, Signer-Name: ca
0 DNSKEY RR found Zone : cloud.ihasamoose.cacloud.ihasamoose.ca 0 DS RR in the parent zone found 0 DNSKEY RR found Zone : www.cloud.ihasamoose.cawww.cloud.ihasamoose.ca 0 DS RR in the parent zone found