Zone (*) | DNSSEC - Informations |
---|
|
|
Zone: (root)
|
|
(root)
| 1 DS RR published
|
|
|
|
|
| • Status: Valid because published
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 33853, Flags 256
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 12.03.2020, 00:00:00 +, Signature-Inception: 20.02.2020, 00:00:00 +, KeyTag 20326, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: fr
|
|
fr
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 10.03.2020, 03:00:00 +, Signature-Inception: 26.02.2020, 02:00:00 +, KeyTag 33853, Signer-Name: (root)
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 33853 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 29173, Flags 256
|
|
|
|
|
| Public Key with Algorithm 8, KeyTag 35095, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| 1 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner fr., Algorithm: 8, 1 Labels, original TTL: 172800 sec, Signature-expiration: 26.03.2020, 19:13:15 +, Signature-Inception: 26.01.2020, 19:13:15 +, KeyTag 35095, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 35095 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 35095, DigestType 2 and Digest "I8bKrcmSfumAYfK1LJuNprU/P2SPgUpKhqD6+YQ+LE4=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
Zone: serim-amenageur.fr
|
|
serim-amenageur.fr
| 1 DS RR in the parent zone found
|
|
|
|
|
| 1 RRSIG RR to validate DS RR found
|
|
|
|
|
| RRSIG-Owner serim-amenageur.fr., Algorithm: 8, 2 Labels, original TTL: 172800 sec, Signature-expiration: 23.03.2020, 15:50:12 +, Signature-Inception: 23.01.2020, 15:50:12 +, KeyTag 29173, Signer-Name: fr
|
|
|
|
|
| • Status: Good - Algorithmus 8 and DNSKEY with KeyTag 29173 used to validate the DS RRSet in the parent zone
|
|
|
|
|
| 2 DNSKEY RR found
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 7170, Flags 257 (SEP = Secure Entry Point)
|
|
|
|
|
| Public Key with Algorithm 7, KeyTag 57497, Flags 256
|
|
|
|
|
| 2 RRSIG RR to validate DNSKEY RR found
|
|
|
|
|
| RRSIG-Owner serim-amenageur.fr., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.03.2020, 05:56:49 +, Signature-Inception: 19.02.2020, 05:56:49 +, KeyTag 7170, Signer-Name: serim-amenageur.fr
|
|
|
|
|
| RRSIG-Owner serim-amenageur.fr., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.03.2020, 05:56:49 +, Signature-Inception: 19.02.2020, 05:56:49 +, KeyTag 57497, Signer-Name: serim-amenageur.fr
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 7170 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Good - Algorithmus 7 and DNSKEY with KeyTag 57497 used to validate the DNSKEY RRSet
|
|
|
|
|
| • Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 7170, DigestType 2 and Digest "nHz08FBajcCeQu1zZqbwMMECjWwZMf1cnvl0Jv5rYN8=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 193.70.73.130
Validated: RRSIG-Owner serim-amenageur.fr., Algorithm: 7, 2 Labels, original TTL: 86400 sec, Signature-expiration: 20.03.2020, 05:56:49 +, Signature-Inception: 19.02.2020, 05:56:49 +, KeyTag 57497, Signer-Name: serim-amenageur.fr
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, NS, SOA, MX, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, NS, SOA, MX, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, NS, SOA, MX, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, NS, SOA, MX, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, NS, SOA, MX, RRSIG, DNSKEY, NSEC3PARAM
|
|
|
Zone: www.serim-amenageur.fr
|
|
www.serim-amenageur.fr
| 0 DS RR in the parent zone found
|
|
|
|
|
| RRSIG Type 1 validates the A - Result: 193.70.73.130
Validated: RRSIG-Owner www.serim-amenageur.fr., Algorithm: 7, 3 Labels, original TTL: 86400 sec, Signature-expiration: 20.03.2020, 05:56:49 +, Signature-Inception: 19.02.2020, 05:56:49 +, KeyTag 57497, Signer-Name: serim-amenageur.fr
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the CNAME RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the TXT RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the AAAA RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: A, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the TLSA RR.
Bitmap: CNAME, RRSIG
|
|
|
|
|
| RRSIG Type 50, expiration 2020-03-20 05:56:49 + validates the NSEC3 RR that proves the not-existence of the CAA RR.
Bitmap: A, RRSIG
|