Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 33853, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.04.2020, 00:00:00 +, Signature-Inception: 11.03.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: si
|
|
si
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner si., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 29.03.2020, 05:00:00 +, Signature-Inception: 16.03.2020, 04:00:00 +, KeyTag 33853, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 16239, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 39337, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner si., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 29.03.2020, 10:23:47 +, Signature-Inception: 16.03.2020, 07:54:18 +, KeyTag 39337, Signer-Name: si
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 39337 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 39337, DigestType 2 and Digest "qfShvMo3FL4rK9AQvlTDfpuPslxzQYoc64KDoinme2o=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: flint.si
|
|
flint.si
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "iqoass5b6k0fh5at09sff8su6db4qqbp" between the hashed NSEC3-owner "iph3ud0oir72pim6h7ac5aaolt88no11" and the hashed NextOwner "j188iukuhnh3709h3bd6soa1nqru7av1". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner iph3ud0oir72pim6h7ac5aaolt88no11.si., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 31.03.2020, 02:58:11 +, Signature-Inception: 16.03.2020, 05:54:18 +, KeyTag 16239, Signer-Name: si
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
Zone: gitlab.flint.si
|
|
gitlab.flint.si
| 0 DS RR in the parent zone found
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
Zone: www.gitlab.flint.si
|
|
www.gitlab.flint.si
| 0 DS RR in the parent zone found
|