Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2019-01-15 22:57:03 UTC, NTP stratum 4

Analyzing DNSSEC problems for aa.am

.
Found 3 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
am
Found 1 DS records for am in the . zone
DS=17214/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
Found 4 DNSKEY records for am
DS=17214/SHA-256 verifies DNSKEY=17214/SEP
Found 2 RRSIGs over DNSKEY RRset
RRSIG=63218 and DNSKEY=63218 verifies the DNSKEY RRset
aa.am
No DS records found for aa.am in the am zone
All Queries to ns1.20dragons.com for aa.am/DNSKEY timed out or failed
Found 1 DNSKEY records for aa.am
Found 1 RRSIGs over DNSKEY RRset
RRSIG=39176 and DNSKEY=39176/SEP verifies the DNSKEY RRset
aa.am A RR has value 185.147.34.9
Found 1 RRSIGs over A RRset
RRSIG=39176 and DNSKEY=39176/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test aa.am at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options