Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 22545, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 31.12.2019, 00:00:00 +, Signature-Inception: 10.12.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: de
|
|
de
| 2 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.12.2019, 17:00:00 +, Signature-Inception: 11.12.2019, 16:00:00 +, KeyTag 22545, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 22545 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 18318, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 26008, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 45580, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 24.12.2019, 15:09:33 +, Signature-Inception: 10.12.2019, 13:39:33 +, KeyTag 45580, Signer-Name: de
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 45580 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 45580, DigestType 2 and Digest "kYwy4vEiEXZr5iJmdPRHRY8iWbmg2HtE0p1Vr+ymsuE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: bellanger-fr.de
|
|
bellanger-fr.de
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 24.12.2019, 15:09:33 +, Signature-Inception: 10.12.2019, 13:39:33 +, KeyTag 18318, Signer-Name: de
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 18318 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 40208, Flags 256
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 56895, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 56895, Signer-Name: bellanger-fr.de
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 40208 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 56895 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 56895, DigestType 2 and Digest "ihsDNfXFClU3lo6y7AVHK3PlgZ5o1hCHGiHDqJyQ8RE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: nextcloud.bellanger-fr.de
|
|
nextcloud.bellanger-fr.de
| 0 DS RR in the parent zone found
|
|
|
Zone: www.nextcloud.bellanger-fr.de
|
|
www.nextcloud.bellanger-fr.de
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "ps0tq4th9almspgid11s0i6fna5pbvji" between the hashed NSEC3-owner "m81s6pqtto4ac9chubrdljt88eaaug16" and the hashed NextOwner "qbqajdre6542lf7k59m6gg8mfhctn63v". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: CNAME, RRSIG Validated: RRSIG-Owner m81s6pqtto4ac9chubrdljt88eaaug16.bellanger-fr.de., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 22545, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 31.12.2019, 00:00:00 +, Signature-Inception: 10.12.2019, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: de
|
|
de
| 2 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 24.12.2019, 17:00:00 +, Signature-Inception: 11.12.2019, 16:00:00 +, KeyTag 22545, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 22545 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 3 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 18318, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 26008, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 45580, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner de., Algorithm: 8, 1 Labels, original TTL: 300 sec, Signature-expiration: 24.12.2019, 15:09:33 +, Signature-Inception: 10.12.2019, 13:39:33 +, KeyTag 45580, Signer-Name: de
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 45580 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 45580, DigestType 2 and Digest "kYwy4vEiEXZr5iJmdPRHRY8iWbmg2HtE0p1Vr+ymsuE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: bellanger-fr.de
|
|
bellanger-fr.de
| 1 DS RR in the parent zone found
|
|
|
|
|
| 2 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 8, 2 Labels, original TTL: 86400 sec, Signature-expiration: 24.12.2019, 15:09:33 +, Signature-Inception: 10.12.2019, 13:39:33 +, KeyTag 18318, Signer-Name: de
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 18318 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 40208, Flags 256
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 56895, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
|
|
| RRSIG-Owner bellanger-fr.de., Algorithm: 7, 2 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 56895, Signer-Name: bellanger-fr.de
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 40208 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 56895 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 56895, DigestType 2 and Digest "ihsDNfXFClU3lo6y7AVHK3PlgZ5o1hCHGiHDqJyQ8RE=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: maison.bellanger-fr.de
|
|
maison.bellanger-fr.de
| 0 DS RR in the parent zone found
|
|
|
|
|
| DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "j5m2gtcao1i4k66v1ropti86s2lkhagl" between the hashed NSEC3-owner "j5m2gtcao1i4k66v1ropti86s2lkhagl" and the hashed NextOwner "janpikl0cpgul0f3miarlo8sq06353lm". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: A, RRSIG, CAA Validated: RRSIG-Owner j5m2gtcao1i4k66v1ropti86s2lkhagl.bellanger-fr.de., Algorithm: 7, 3 Labels, original TTL: 300 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
|
|
| 0 DNSKEY RR found
|
|
|
|
|
|
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 95.90.100.189
Validated: RRSIG-Owner maison.bellanger-fr.de., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
|
|
| RRSIG Type 257 validates the CAA - Result: 32773|issueletsencrypt.org
Validated: RRSIG-Owner maison.bellanger-fr.de., Algorithm: 7, 3 Labels, original TTL: 3600 sec, Signature-expiration: 10.01.2020, 19:52:29 +, Signature-Inception: 11.12.2019, 19:52:29 +, KeyTag 40208, Signer-Name: bellanger-fr.de
|
|
|
|
|
| RRSIG Type 50, expiration 2020-01-10 19:52:29 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, RRSIG, CAA
|
|
|
|
|
| RRSIG Type 50, expiration 2020-01-10 19:52:29 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, RRSIG, CAA
|
|
|
|
|
| RRSIG Type 50, expiration 2020-01-10 19:52:29 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, RRSIG, CAA
|
|
|
|
|
| RRSIG Type 50, expiration 2020-01-10 19:52:29 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, RRSIG, CAA
|