Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 33853, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 48903, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.04.2020, 00:00:00 +, Signature-Inception: 01.04.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: info
|
|
info
| 2 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner info., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 19.04.2020, 17:00:00 +, Signature-Inception: 06.04.2020, 16:00:00 +, KeyTag 48903, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 48903 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 4 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 8674, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 22109, Flags 256
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 43982, Flags 256
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 65121, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 3 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner info., Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 23.04.2020, 11:32:04 +, Signature-Inception: 02.04.2020, 10:32:04 +, KeyTag 8674, Signer-Name: info
|
|
|
|
|
| RRSIG-Owner info., Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 23.04.2020, 11:32:04 +, Signature-Inception: 02.04.2020, 10:32:04 +, KeyTag 22109, Signer-Name: info
|
|
|
|
|
| RRSIG-Owner info., Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 23.04.2020, 11:32:04 +, Signature-Inception: 02.04.2020, 10:32:04 +, KeyTag 65121, Signer-Name: info
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 8674 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 22109 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 65121 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 8674, DigestType 1 and Digest "GXeJosurpv7NC1rIjFvEFM4fwwk=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 8674, DigestType 2 and Digest "7JtggrlrX4cUNpbytIOsybLEM9zgyU5w8f9WSMoYAIs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: iaderdor.info
|
|
iaderdor.info
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 23.04.2020, 11:32:04 +, Signature-Inception: 02.04.2020, 10:32:04 +, KeyTag 22109, Signer-Name: info
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 22109 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 16746, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 26150, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 16746, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 16746 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 26150 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 16746, DigestType 2 and Digest "mI4HYgQGkxhccXcXxLq7FuhNEWt23DDMP9GpRag1Z3k=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 137.74.194.99
Validated: RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: 1|www.iaderdor.info
v=spf1 include:zoho.com ~all
v=spf1 include:mx.ovh.com ~all
Validated: RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 28 validates the AAAA - Result: 2001:41D0:0401:3100:0000:0000:0000:138D
Validated: RRSIG-Owner iaderdor.info., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: No Bitmap?
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, NS, SOA, MX, TXT, AAAA, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
Zone: www.iaderdor.info
|
|
www.iaderdor.info
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "8bgnscms5okr8fnahhmqdr931s6tk82h" between the hashed NSEC3-owner "8bgnscms5okr8fnahhmqdr931s6tk82h" and the hashed NextOwner "9ff7fogu8nunoeaomhvq7r42rq4f8krv". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, MX, TXT, RRSIG Validated: RRSIG-Owner 8bgnscms5okr8fnahhmqdr931s6tk82h.iaderdor.info., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 137.74.194.99
Validated: RRSIG-Owner www.iaderdor.info., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: l|es
3|welcome
Validated: RRSIG-Owner www.iaderdor.info., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 07.05.2020, 00:30:55 +, Signature-Inception: 07.04.2020, 00:30:55 +, KeyTag 26150, Signer-Name: iaderdor.info
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, MX, TXT, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, MX, TXT, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: CNAME, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, MX, TXT, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-05-07 00:30:55 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, MX, TXT, RRSIG
|