DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-26 11:55:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for gg.gy

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 55438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to f.root-servers.net for gg.gy/A
	Received 567 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (567 bytes) ;; HEADER SECTION ;; id = 57069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN A 192.5.4.1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to h.root-servers.net for gy/DNSKEY
	Received 564 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (564 bytes) ;; HEADER SECTION ;; id = 12382 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gy

	Checking DS between . and gy
	Query to d.root-servers.net for gy/DS
	Received 705 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (705 bytes) ;; HEADER SECTION ;; id = 33112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2019042600 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20190509050000 20190426040000 25266 . eiMhWRksnwYhxBDE2QUwrFiVJcP5ZyXqoOjz3zrkSA6LK/Bz82Gn7Xns286S4M9YphW7yZUfZswW 0zlQMyxBoc0fSiTIErG0mJoSgfFojgjw3B9R8fmj6pAKtv+J88Hb7vdYvk12jgk7AVClz5WZ7Y2D uUiJ7lerHz7Cq279ES48Av/vk49n3ppwZfubaDLKaVLrCEgQ5zTZXPIzuFBSBlgXLRSyWQdrtH7D Y6aPMpNvHoitDBkR6XeofPC2XV5vY3YyCbDSSmmBqN417Tzo8TguQaTlFKxE6v6aFVN7LTv+qjlq WhkwANT9NSPCit3Gq1eMY/wUbCDrzmkABmSwCw== ) gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	No DS records found for gy in the . zone
	Query to gy-ns.anycast.pch.net for gy/DNSKEY
	Error querying gy-ns.anycast.pch.net/2001:500:14:6034:ad:0:0:1 for gy/DNSKEY: 'IPv6 transport disabled'
	Received 86 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (86 bytes) ;; HEADER SECTION ;; id = 57077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019042611 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns.cocca.fr for gg.gy/A
	Received 119 bytes from 185.17.236.93
	;; Answer received from 185.17.236.93 (119 bytes) ;; HEADER SECTION ;; id = 14966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gg.gy. 86400 IN NS ns2.20dragons.com. gg.gy. 86400 IN NS ns4.20dragons.com. gg.gy. 86400 IN NS ns3.20dragons.com. gg.gy. 86400 IN NS ns1.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gy-ns.anycast.pch.net for gg.gy/DNSKEY
	Error querying gy-ns.anycast.pch.net/2001:500:14:6034:ad:0:0:1 for gg.gy/DNSKEY: 'IPv6 transport disabled'
	Received 119 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (119 bytes) ;; HEADER SECTION ;; id = 5393 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) gg.gy. 86400 IN NS ns2.20dragons.com. gg.gy. 86400 IN NS ns3.20dragons.com. gg.gy. 86400 IN NS ns1.20dragons.com. gg.gy. 86400 IN NS ns4.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gg.gy

gg.gy

	Checking DS between gy and gg.gy
	Query to gy-ns.anycast.pch.net for gg.gy/DS
	Received 89 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (89 bytes) ;; HEADER SECTION ;; id = 38790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019042611 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for gg.gy in the gy zone
	Query to ns4.20dragons.com for gg.gy/DNSKEY
	Received 215 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (215 bytes) ;; HEADER SECTION ;; id = 59873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN DNSKEY ;; ANSWER SECTION (2 records) gg.gy. 7200 IN DNSKEY ( 257 3 13 uDQOziXkHYkoD/UUUbqCvpE1KDR8wb4SF7ji6cywIlr96MXs058pCgHNznlrLOzxKXfC1C+XIySX ZOoZ6Uegrw== ) ; Key ID = 4456 gg.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 4456 gg.gy. hVx05kKH9qItHkmnir5ZBcrFVf9dPg0dJJhZDGe48+ycFrHhLE2T8dRiXeWqowpS8s+H3zSK73+z ruIOqkyNeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for gg.gy
	`gg.gy. 7200 IN DNSKEY ( 257 3 13 uDQOziXkHYkoD/UUUbqCvpE1KDR8wb4SF7ji6cywIlr96MXs058pCgHNznlrLOzxKXfC1C+XIySX ZOoZ6Uegrw== ) ; Key ID = 4456`
	Found 1 RRSIGs over DNSKEY RRset
	`gg.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 4456 gg.gy. hVx05kKH9qItHkmnir5ZBcrFVf9dPg0dJJhZDGe48+ycFrHhLE2T8dRiXeWqowpS8s+H3zSK73+z ruIOqkyNeQ== )`
	RRSIG=4456 and DNSKEY=4456/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for gg.gy/A
	Received 151 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (151 bytes) ;; HEADER SECTION ;; id = 56425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN A ;; ANSWER SECTION (2 records) gg.gy. 86400 IN A 185.147.34.9 gg.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 4456 gg.gy. QazRMOkK73Y5UhSXTdqZGV9XEFq9QhZGNS9dDlCULrh24F1n8RN7hN9NqbyhigeqPwyLiAAHBxtT +Z79scESfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	gg.gy is authoritative for gg.gy
	Found RRSIG signed by gg.gy zone
	Query to ns3.20dragons.com for gg.gy/SOA
	Received 195 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (195 bytes) ;; HEADER SECTION ;; id = 7687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN SOA ;; ANSWER SECTION (2 records) gg.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042608 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) gg.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 4456 gg.gy. iDBPtZkBnLsEvE3SAdHRtNT+Hft58IiiRfMrU+2jLNdtQnhqT5byePp5GwCBaVrS5lhXi/NL8IMJ Ri1kY887GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for gg.gy/SOA
	Received 195 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (195 bytes) ;; HEADER SECTION ;; id = 30031 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN SOA ;; ANSWER SECTION (2 records) gg.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042608 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) gg.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 4456 gg.gy. iDBPtZkBnLsEvE3SAdHRtNT+Hft58IiiRfMrU+2jLNdtQnhqT5byePp5GwCBaVrS5lhXi/NL8IMJ Ri1kY887GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for gg.gy/SOA
	Timeout querying ns2.20dragons.com/155.254.33.250 for gg.gy/SOA
	All Queries to ns2.20dragons.com for gg.gy/SOA timed out or failed
	Query to ns1.20dragons.com for gg.gy/SOA
	Timeout querying ns1.20dragons.com/23.94.166.82 for gg.gy/SOA
	All Queries to ns1.20dragons.com for gg.gy/SOA timed out or failed
	Query to ns3.20dragons.com for gg.gy/A
	Received 151 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (151 bytes) ;; HEADER SECTION ;; id = 26475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; gg.gy. IN A ;; ANSWER SECTION (2 records) gg.gy. 86400 IN A 185.147.34.9 gg.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 4456 gg.gy. QazRMOkK73Y5UhSXTdqZGV9XEFq9QhZGNS9dDlCULrh24F1n8RN7hN9NqbyhigeqPwyLiAAHBxtT +Z79scESfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	gg.gy A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`gg.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 4456 gg.gy. QazRMOkK73Y5UhSXTdqZGV9XEFq9QhZGNS9dDlCULrh24F1n8RN7hN9NqbyhigeqPwyLiAAHBxtT +Z79scESfQ== )`
	RRSIG=4456 and DNSKEY=4456/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gg.gy at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: