Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 33853, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 12.03.2020, 00:00:00 +, Signature-Inception: 20.02.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: fr
|
|
fr
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 11.03.2020, 05:00:00 +, Signature-Inception: 27.02.2020, 04:00:00 +, KeyTag 33853, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 29173, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 35095, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 8, 1 Labels, original TTL: 172800 sec, Signature-expiration: 26.03.2020, 19:13:15 +, Signature-Inception: 26.01.2020, 19:13:15 +, KeyTag 35095, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35095 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35095, DigestType 2 and Digest "I8bKrcmSfumAYfK1LJuNprU/P2SPgUpKhqD6+YQ+LE4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: kuruma-esport.fr
|
|
kuruma-esport.fr
| 2 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner kuruma-esport.fr., Algorithm: 8, 2 Labels, original TTL: 172800 sec, Signature-expiration: 23.03.2020, 15:50:12 +, Signature-Inception: 23.01.2020, 15:50:12 +, KeyTag 29173, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 29173 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 4683, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 19418, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner kuruma-esport.fr., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 18.03.2020, 18:31:16 +, Signature-Inception: 26.02.2020, 17:35:32 +, KeyTag 4683, Signer-Name: kuruma-esport.fr
|
|
|
|
|
| RRSIG-Owner kuruma-esport.fr., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 18.03.2020, 18:31:16 +, Signature-Inception: 26.02.2020, 17:35:32 +, KeyTag 19418, Signer-Name: kuruma-esport.fr
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 4683 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19418 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4683, DigestType 1 and Digest "xJ/Pp85ib53NVowbndJl55oYzSU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 4683, DigestType 2 and Digest "+X1BS2JHeackArotkSfI+0W0apmTCcrIRaW6gSxceaA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 185.13.36.68
Validated: RRSIG-Owner kuruma-esport.fr., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.03.2020, 02:38:27 +, Signature-Inception: 23.02.2020, 02:20:03 +, KeyTag 19418, Signer-Name: kuruma-esport.fr
|
|
|
|
|
| RRSIG Type 16 validates the TXT - Result: v=spf1 include:spf.infomaniak.ch ?all
Validated: RRSIG-Owner kuruma-esport.fr., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 18.03.2020, 17:13:20 +, Signature-Inception: 26.02.2020, 16:15:34 +, KeyTag 19418, Signer-Name: kuruma-esport.fr
|
|
|
|
|
| RRSIG Type 47, expiration 2020-03-16 08:37:35 + validates the NSEC RR that proves the not-existence of the CNAME RR. Owner kuruma-esport.fr, NextOwner: _domainkey.kuruma-esport.fr.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY
|
|
|
|
|
| RRSIG Type 47, expiration 2020-03-16 08:37:35 + validates the NSEC RR that proves the not-existence of the AAAA RR. Owner kuruma-esport.fr, NextOwner: _domainkey.kuruma-esport.fr.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY
|
|
|
|
|
| RRSIG Type 47, expiration 2020-03-16 08:37:35 + validates the NSEC RR that proves the not-existence of the TLSA RR. Owner kuruma-esport.fr, NextOwner: _domainkey.kuruma-esport.fr.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY
|
|
|
|
|
| RRSIG Type 47, expiration 2020-03-16 08:37:35 + validates the NSEC RR that proves the not-existence of the TLSA RR. Owner _domainkey.kuruma-esport.fr, NextOwner: autoconfig.kuruma-esport.fr.
Bitmap: NS, RRSIG, NSEC
|
|
|
|
|
| RRSIG Type 47, expiration 2020-03-16 08:37:35 + validates the NSEC RR that proves the not-existence of the CAA RR. Owner kuruma-esport.fr, NextOwner: _domainkey.kuruma-esport.fr.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY
|
|
|
Zone: www.kuruma-esport.fr
|
|
www.kuruma-esport.fr
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "kuruma-esport.fr" and the NextOwner "_domainkey.kuruma-esport.fr". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: A, NS, SOA, MX, TXT, RRSIG, NSEC, DNSKEY
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC RR as result with the domain name between the NSEC-Owner "autodiscover.kuruma-esport.fr" and the NextOwner "kuruma-esport.fr". So the parent zone confirmes the non-existence of a DS RR.
Bitmap: CNAME, RRSIG, NSEC
|