Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2021-09-17 15:24:24 UTC, NTP stratum 16

Analyzing DNSSEC problems for 228.41.196.in-addr.arpa

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
arpa
Found 2 DS records for arpa in the . zone
DS=42581/SHA-1 has algorithm RSASHA256
DS=42581/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
Found 2 DNSKEY records for arpa
DS=42581/SHA-1 verifies DNSKEY=42581/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=42581 and DNSKEY=42581/SEP verifies the DNSKEY RRset
in-addr.arpa
Found 3 DS records for in-addr.arpa in the arpa zone
DS=47054/SHA-256 has algorithm RSASHA256
DS=53696/SHA-256 has algorithm RSASHA256
DS=63982/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=13711 and DNSKEY=13711 verifies the DS RRset
Found 3 DNSKEY records for in-addr.arpa
DS=47054/SHA-256 verifies DNSKEY=47054/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=47054 and DNSKEY=47054/SEP verifies the DNSKEY RRset
196.in-addr.arpa
Found 4 DS records for 196.in-addr.arpa in the in-addr.arpa zone
DS=18872/SHA-1 has algorithm RSASHA256
DS=18872/SHA-256 has algorithm RSASHA256
DS=18977/SHA-1 has algorithm RSASHA256
DS=18977/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=54586 and DNSKEY=54586 verifies the DS RRset
Found 2 DNSKEY records for 196.in-addr.arpa
DS=18977/SHA-1 verifies DNSKEY=18977/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=18977 and DNSKEY=18977/SEP verifies the DNSKEY RRset
Zone 196.in-addr.arpa (204.61.216.100) returns NXDOMAIN for 228.41.196.in-addr.arpa
Found 1 RRSIGs over NSEC RRset
RRSIG=8019 and DNSKEY=8019 verifies the NSEC RRset
NSEC proves no records exist with name 228.41.196.in-addr.arpa
No NSEC record could prove that *.196.in-addr.arpa does not exist

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 228.41.196.in-addr.arpa at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options