Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 22545, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 59944, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2019, 00:00:00 +, Signature-Inception: 19.09.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: no
|
|
no
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner no., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.10.2019, 17:00:00 +, Signature-Inception: 24.09.2019, 16:00:00 +, KeyTag 59944, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59944 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 14551, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 29471, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner no., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 06.10.2019, 06:52:39 +, Signature-Inception: 23.09.2019, 11:03:31 +, KeyTag 29471, Signer-Name: no
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 29471 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 29471, DigestType 2 and Digest "kV7eRupTJP+GsRye1OnIFK6MRiwWXlOAo5mdkEGIQdo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: elprint.no
|
|
elprint.no
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 06.10.2019, 11:45:08 +, Signature-Inception: 23.09.2019, 07:03:43 +, KeyTag 14551, Signer-Name: no
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14551 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 7523, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 25274, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 7523, Signer-Name: elprint.no
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 7523 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 25274 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 7523, DigestType 2 and Digest "Pre67I8Q8OpJCa3HZFxwiqOmcygi/Ob57X4KOEgx18E=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: mail.elprint.no
|
|
mail.elprint.no
| 0 DS RR in the parent zone found
|
|
|
Zone: www.mail.elprint.no
|
|
www.mail.elprint.no
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "cdgsgr72r9eo8e8fbv0vp50mtjspbe7l" between the hashed NSEC3-owner "aiarg1b7aokpuelug9um55irksg0lkg8" and the hashed NextOwner "ctde1t0sp9conh81nk5j66417n17pp53". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: TXT, RRSIG Validated: RRSIG-Owner aiarg1b7aokpuelug9um55irksg0lkg8.elprint.no., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 22545, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 59944, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 10.10.2019, 00:00:00 +, Signature-Inception: 19.09.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: no
|
|
no
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner no., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 07.10.2019, 17:00:00 +, Signature-Inception: 24.09.2019, 16:00:00 +, KeyTag 59944, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59944 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 14551, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 29471, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner no., Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 06.10.2019, 06:52:39 +, Signature-Inception: 23.09.2019, 11:03:31 +, KeyTag 29471, Signer-Name: no
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 29471 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 29471, DigestType 2 and Digest "kV7eRupTJP+GsRye1OnIFK6MRiwWXlOAo5mdkEGIQdo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: elprint.no
|
|
elprint.no
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 8, 2 Labels, original TTL: 7200 sec, Signature-expiration: 06.10.2019, 11:45:08 +, Signature-Inception: 23.09.2019, 07:03:43 +, KeyTag 14551, Signer-Name: no
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 14551 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 7523, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 13, KeyTag 25274, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 7523, Signer-Name: elprint.no
|
|
|
|
|
| RRSIG-Owner elprint.no., Algorithm: 13, 2 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 7523 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 13 and DNSKEY with KeyTag 25274 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 7523, DigestType 2 and Digest "Pre67I8Q8OpJCa3HZFxwiqOmcygi/Ob57X4KOEgx18E=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: mailgw.elprint.no
|
|
mailgw.elprint.no
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ctde1t0sp9conh81nk5j66417n17pp53" between the hashed NSEC3-owner "ctde1t0sp9conh81nk5j66417n17pp53" and the hashed NextOwner "ef3saaribl3qvuqro8gpiiarljqin2d2". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, AAAA, RRSIG Validated: RRSIG-Owner ctde1t0sp9conh81nk5j66417n17pp53.elprint.no., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 193.212.5.115
Validated: RRSIG-Owner mailgw.elprint.no., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
|
|
| RRSIG Type 28 validates the AAAA - Result: 2001:4610:0020:000A:0192:0168:0005:0115
Validated: RRSIG-Owner mailgw.elprint.no., Algorithm: 13, 3 Labels, original TTL: 3600 sec, Signature-expiration: 15.10.2019, 14:53:08 +, Signature-Inception: 15.09.2019, 14:53:08 +, KeyTag 25274, Signer-Name: elprint.no
|
|
|
|
|
| RRSIG Type 50, expiration 2019-10-15 14:53:08 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, AAAA, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-10-15 14:53:08 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, AAAA, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-10-15 14:53:08 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: TXT, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-10-15 14:53:08 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, AAAA, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2019-10-15 14:53:08 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, AAAA, RRSIG
|