Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 33853, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 22.03.2020, 00:00:00 +, Signature-Inception: 01.03.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: eu
|
|
eu
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner eu., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 14.03.2020, 05:00:00 +, Signature-Inception: 01.03.2020, 04:00:00 +, KeyTag 33853, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 51120, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 59479, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner eu., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.03.2020, 09:00:00 +, Signature-Inception: 27.02.2020, 08:00:00 +, KeyTag 51120, Signer-Name: eu
|
|
|
|
|
| RRSIG-Owner eu., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 05.03.2020, 09:00:00 +, Signature-Inception: 27.02.2020, 08:00:00 +, KeyTag 59479, Signer-Name: eu
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 51120 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 59479 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 59479, DigestType 2 and Digest "XbqoG8C+/pIYhtjaKEmNn9RBtFf7DjZCoLL5gRyOFeA=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: oxbridge.eu
|
|
oxbridge.eu
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner oxbridge.eu., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 05.03.2020, 07:07:59 +, Signature-Inception: 27.02.2020, 06:14:16 +, KeyTag 51120, Signer-Name: eu
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 51120 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 2631, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 34744, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 53394, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner oxbridge.eu., Algorithm: 8, 2 Labels, original TTL: 3600 sec, Signature-expiration: 31.03.2020, 14:14:35 +, Signature-Inception: 31.01.2020, 14:14:35 +, KeyTag 34744, Signer-Name: oxbridge.eu
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 34744 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 34744, DigestType 2 and Digest "GFCePYMirInvHbAqS7DBSPQCX+i79unbT2U3bDB/DcQ=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: mail.oxbridge.eu
|
|
mail.oxbridge.eu
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "jn0o4qlvbna3i6ad0sfprnta9hrdaa1c" between the hashed NSEC3-owner "jn0o4qlvbna3i6ad0sfprnta9hrdaa1c" and the hashed NextOwner "k4ss6q8uq13b0qjrg9d7rt4r9nven1vq". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A Validated: RRSIG-Owner jn0o4qlvbna3i6ad0sfprnta9hrdaa1c.oxbridge.eu., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 11.03.2020, 09:05:00 +, Signature-Inception: 20.02.2020, 09:05:00 +, KeyTag 2631, Signer-Name: oxbridge.eu
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "jn0o4qlvbna3i6ad0sfprnta9hrdaa1c" between the hashed NSEC3-owner "jn0o4qlvbna3i6ad0sfprnta9hrdaa1c" and the hashed NextOwner "k4ss6q8uq13b0qjrg9d7rt4r9nven1vq". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A Validated: RRSIG-Owner jn0o4qlvbna3i6ad0sfprnta9hrdaa1c.oxbridge.eu., Algorithm: 8, 3 Labels, original TTL: 3600 sec, Signature-expiration: 11.03.2020, 10:05:00 +, Signature-Inception: 20.02.2020, 10:05:00 +, KeyTag 53394, Signer-Name: oxbridge.eu
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 81.82.234.120
Validated: RRSIG-Owner mail.oxbridge.eu., Algorithm: 8, 3 Labels, original TTL: 14400 sec, Signature-expiration: 11.03.2020, 10:05:00 +, Signature-Inception: 20.02.2020, 10:05:00 +, KeyTag 53394, Signer-Name: oxbridge.eu
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-11 10:05:00 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-11 10:05:00 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-11 10:05:00 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-11 10:05:00 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-11 10:05:00 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A
|
|
|
Zone: www.mail.oxbridge.eu
|
|
www.mail.oxbridge.eu
| 0 DS RR in the parent zone found
|