DNSSEC Analyzer - glashio.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-26 12:21:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for glashio.net

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 5182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to g.root-servers.net for glashio.net/A
	Received 1168 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1168 bytes) ;; HEADER SECTION ;; id = 30213 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . L96sKo/MOo8ZQdtjmcOIj7TB+fNR1vCgKjn0WVffbaLeD6yiZe4me4vJMUr5Ru27peF6XKFW381H H6RLr5ZKYnT511n0a7mrjSly3YPDPeugwRHwaW52h+7OxLps++lmd+Q3Jw7Wti/2yzAemk5rNZQf dUPTf7RhsW6elM9y4D9k/zOT2eVOPBbuy1JUo/OTgY/Ap4XW0Zn4fY4hFTQVk87o3if/TTUpTN4g 1oWLOpjwaOpdOOOcHLt9zMJaWmEWhftiQFCCigEsF9WEt/MlTZhq6uUjzdIwuLMW1kY2hCI9fKaH m9r1ic5AkI9m/oZKhj6AcuIiIwy7UraYtVgD6Q== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for net/DNSKEY
	Received 1160 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1160 bytes) ;; HEADER SECTION ;; id = 10752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . L96sKo/MOo8ZQdtjmcOIj7TB+fNR1vCgKjn0WVffbaLeD6yiZe4me4vJMUr5Ru27peF6XKFW381H H6RLr5ZKYnT511n0a7mrjSly3YPDPeugwRHwaW52h+7OxLps++lmd+Q3Jw7Wti/2yzAemk5rNZQf dUPTf7RhsW6elM9y4D9k/zOT2eVOPBbuy1JUo/OTgY/Ap4XW0Zn4fY4hFTQVk87o3if/TTUpTN4g 1oWLOpjwaOpdOOOcHLt9zMJaWmEWhftiQFCCigEsF9WEt/MlTZhq6uUjzdIwuLMW1kY2hCI9fKaH m9r1ic5AkI9m/oZKhj6AcuIiIwy7UraYtVgD6Q== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to k.root-servers.net for net/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for net/DS: 'IPv6 transport disabled'
	Received 367 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (367 bytes) ;; HEADER SECTION ;; id = 34040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . L96sKo/MOo8ZQdtjmcOIj7TB+fNR1vCgKjn0WVffbaLeD6yiZe4me4vJMUr5Ru27peF6XKFW381H H6RLr5ZKYnT511n0a7mrjSly3YPDPeugwRHwaW52h+7OxLps++lmd+Q3Jw7Wti/2yzAemk5rNZQf dUPTf7RhsW6elM9y4D9k/zOT2eVOPBbuy1JUo/OTgY/Ap4XW0Zn4fY4hFTQVk87o3if/TTUpTN4g 1oWLOpjwaOpdOOOcHLt9zMJaWmEWhftiQFCCigEsF9WEt/MlTZhq6uUjzdIwuLMW1kY2hCI9fKaH m9r1ic5AkI9m/oZKhj6AcuIiIwy7UraYtVgD6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . L96sKo/MOo8ZQdtjmcOIj7TB+fNR1vCgKjn0WVffbaLeD6yiZe4me4vJMUr5Ru27peF6XKFW381H H6RLr5ZKYnT511n0a7mrjSly3YPDPeugwRHwaW52h+7OxLps++lmd+Q3Jw7Wti/2yzAemk5rNZQf dUPTf7RhsW6elM9y4D9k/zOT2eVOPBbuy1JUo/OTgY/Ap4XW0Zn4fY4hFTQVk87o3if/TTUpTN4g 1oWLOpjwaOpdOOOcHLt9zMJaWmEWhftiQFCCigEsF9WEt/MlTZhq6uUjzdIwuLMW1kY2hCI9fKaH m9r1ic5AkI9m/oZKhj6AcuIiIwy7UraYtVgD6Q== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to e.gtld-servers.net for net/DNSKEY
	Error querying e.gtld-servers.net/2001:502:1ca1:0:0:0:0:30 for net/DNSKEY: 'IPv6 transport disabled'
	Received 743 bytes from 192.12.94.30
	;; Answer received from 192.12.94.30 (743 bytes) ;; HEADER SECTION ;; id = 59127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPB6mADOfWU6hTegl+pTl1wtjTll+ZnWIuRb8+cU9XNWNPpc3mX+rUqPeiw0RpKkD4QkTqTefWj MqjXMvYn2TxX4V4FMQXYMJr0bgiZXGosA9C9Aa7RgYyt4GJCToXqlM+mTqBjXDkh7yBa8I2X3p6T t/PoKhiqCtmNl6sggTanJw== ) ; Key ID = 2129 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190505153857 20190420153357 35886 net. ToPubQILf3PnAl9R5PM6ndM5Td3EZGyHYqlwmvvzoz4N0BzpVU6yDivrm/yKjikfgwAgAm8Tok1a Xl8RawaWW6+Ol3g9u+lNdwLMoq4KN0pvpqlbhkcDYDySPitGNOUtPOXNZ9jElia+pyDhyd0keh6W G/yGVHTwy2snI1lhgnVGp7SlJPcVhgxt3LN4yV8Pl330yT0tfbIaP5bdk+8F47xrlBQNHFd+UbqG M4RDFJgW91Mel6e97h0izksW9YkCAtu1cFo6pb9oHNtR/myPbWnI2o0I6LTLP72tpBUlO+XHPpHk bDnzoZW4cKkY/IX8BzzcjtaDbx6wJaPRGKYh4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPB6mADOfWU6hTegl+pTl1wtjTll+ZnWIuRb8+cU9XNWNPpc3mX+rUqPeiw0RpKkD4QkTqTefWj MqjXMvYn2TxX4V4FMQXYMJr0bgiZXGosA9C9Aa7RgYyt4GJCToXqlM+mTqBjXDkh7yBa8I2X3p6T t/PoKhiqCtmNl6sggTanJw== ) ; Key ID = 2129`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190505153857 20190420153357 35886 net. ToPubQILf3PnAl9R5PM6ndM5Td3EZGyHYqlwmvvzoz4N0BzpVU6yDivrm/yKjikfgwAgAm8Tok1a Xl8RawaWW6+Ol3g9u+lNdwLMoq4KN0pvpqlbhkcDYDySPitGNOUtPOXNZ9jElia+pyDhyd0keh6W G/yGVHTwy2snI1lhgnVGp7SlJPcVhgxt3LN4yV8Pl330yT0tfbIaP5bdk+8F47xrlBQNHFd+UbqG M4RDFJgW91Mel6e97h0izksW9YkCAtu1cFo6pb9oHNtR/myPbWnI2o0I6LTLP72tpBUlO+XHPpHk bDnzoZW4cKkY/IX8BzzcjtaDbx6wJaPRGKYh4w== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=2129 is now in the chain-of-trust
	Query to f.gtld-servers.net for glashio.net/A
	Error querying f.gtld-servers.net/2001:503:d414:0:0:0:0:30 for glashio.net/A: 'IPv6 transport disabled'
	Received 306 bytes from 192.35.51.30
	;; Answer received from 192.35.51.30 (306 bytes) ;; HEADER SECTION ;; id = 32700 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) glashio.net. 172800 IN NS ns3.netsolidhosting.com. glashio.net. 172800 IN NS ns4.netsolidhosting.com. glashio.net. 86400 IN DS ( 15967 8 2 55e22643fd7e59e82bd29c55c39c0e58bf5265ddd673d9131ff4cf038ad8dea7 ) glashio.net. 86400 IN RRSIG ( DS 8 2 86400 20190430054442 20190423043442 2129 net. A7KS4wHOyCfiI9j4lbcWBZ9RizUWXf9qq7rElF/jKFltPQhwQz9nHwjFwPl4EK383v1pjTjwkvh+ 2SVgay5mb6QBvyhBqEJhxfieblUVto6MqsK8SkufUf02BcaWOxFutYT+fg/NKtPIMu+6qBDGwGvY mIQjDuQ7ANaqv5FAh7w= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.gtld-servers.net for glashio.net/DNSKEY
	Received 306 bytes from 192.48.79.30
	;; Answer received from 192.48.79.30 (306 bytes) ;; HEADER SECTION ;; id = 46811 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) glashio.net. 172800 IN NS ns3.netsolidhosting.com. glashio.net. 172800 IN NS ns4.netsolidhosting.com. glashio.net. 86400 IN DS ( 15967 8 2 55e22643fd7e59e82bd29c55c39c0e58bf5265ddd673d9131ff4cf038ad8dea7 ) glashio.net. 86400 IN RRSIG ( DS 8 2 86400 20190430054442 20190423043442 2129 net. A7KS4wHOyCfiI9j4lbcWBZ9RizUWXf9qq7rElF/jKFltPQhwQz9nHwjFwPl4EK383v1pjTjwkvh+ 2SVgay5mb6QBvyhBqEJhxfieblUVto6MqsK8SkufUf02BcaWOxFutYT+fg/NKtPIMu+6qBDGwGvY mIQjDuQ7ANaqv5FAh7w= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone glashio.net

glashio.net

	Checking DS between net and glashio.net
	Query to k.gtld-servers.net for glashio.net/DS
	Error querying k.gtld-servers.net/2001:503:d2d:0:0:0:0:30 for glashio.net/DS: 'IPv6 transport disabled'
	Received 1207 bytes from 192.52.178.30
	;; Answer received from 192.52.178.30 (1207 bytes) ;; HEADER SECTION ;; id = 12228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN DS ;; ANSWER SECTION (2 records) glashio.net. 86400 IN DS ( 15967 8 2 55e22643fd7e59e82bd29c55c39c0e58bf5265ddd673d9131ff4cf038ad8dea7 ) glashio.net. 86400 IN RRSIG ( DS 8 2 86400 20190430054442 20190423043442 2129 net. A7KS4wHOyCfiI9j4lbcWBZ9RizUWXf9qq7rElF/jKFltPQhwQz9nHwjFwPl4EK383v1pjTjwkvh+ 2SVgay5mb6QBvyhBqEJhxfieblUVto6MqsK8SkufUf02BcaWOxFutYT+fg/NKtPIMu+6qBDGwGvY mIQjDuQ7ANaqv5FAh7w= ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20190501055325 20190424044325 2129 net. kMNlQ8hsrpbXd5jM4q6/yKsU4LixaAaU51Q1VeNdri529SpiJxQeJhvRnrNhV28wm3dZfAlxXpU9 nbWbae8UqpbyM8lpZSPis5TUs61sswddZ5zZFoCgi4sjFBnJjHzdocSTojLeEI6PweLrkxUcP8K8 NbTvxBD3yvaXWTId5fk= ) ;; ADDITIONAL SECTION (27 records) l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for glashio.net in the net zone
	DS=15967/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`glashio.net. 86400 IN RRSIG ( DS 8 2 86400 20190430054442 20190423043442 2129 net. A7KS4wHOyCfiI9j4lbcWBZ9RizUWXf9qq7rElF/jKFltPQhwQz9nHwjFwPl4EK383v1pjTjwkvh+ 2SVgay5mb6QBvyhBqEJhxfieblUVto6MqsK8SkufUf02BcaWOxFutYT+fg/NKtPIMu+6qBDGwGvY mIQjDuQ7ANaqv5FAh7w= )`
	RRSIG=2129 and DNSKEY=2129 verifies the DS RRset
	DS=15967/SHA-256 is now in the chain-of-trust
	`glashio.net. 86400 IN DS ( 15967 8 2 55e22643fd7e59e82bd29c55c39c0e58bf5265ddd673d9131ff4cf038ad8dea7 )`
	Query to ns4.netsolidhosting.com for glashio.net/DNSKEY
	Error querying ns4.netsolidhosting.com/2a05:6440:208:0:0:0:0:181 for glashio.net/DNSKEY: 'IPv6 transport disabled'
	Received 763 bytes from 185.77.208.181
	;; Answer received from 185.77.208.181 (763 bytes) ;; HEADER SECTION ;; id = 14288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN DNSKEY ;; ANSWER SECTION (3 records) glashio.net. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190509000000 20190418000000 15967 glashio.net. R0VQ8X3WVd3jiUHhIYfCjuxVcgj4Hq5oIvlrY6NO97lMB3Qg5oM9SEM184sE3c5DwoqIXdw8f7o/ QJPM5RR0i54DU6QIWfNcirdlveBxP7YcPx0lzgFHsFfXfegAng8u0AEn5p6XrSjgyhfp5JuH2D+/ bF4oWAuT6t7onZsP7hXbG15PTvyjmDDtU5uuE5dY/7O8zihACiGcNMpmdzZmSzCfvOhUtCsgPnUh RF79WaODICQbuHMsfMZ/3aRBrvsPpACgJEgLYJc2EaToOtzi9el1httvH+1PYm+optuC2TJd7bpK oec+LJvqVPWwn+fb/6AJ0pwek/uEn/du95ELVg== ) glashio.net. 86400 IN DNSKEY ( 256 3 8 AwEAAaXNz1MlpTzbh5kvtNB0C7/zbPXIPo91DpNOHJt68A8NGvc0p6r2LCi6+6ZZ292BMW3wtT/l Btb53/LpMy4o+rXHbzQ8lJcnFJUl3KCWv/BVdxS1dGzhRNi2mTWrEA27Ohib6stW4jmqdt9iEBja 85dPnd66t+jM8e7PQOMSgfrT ) ; Key ID = 44755 glashio.net. 86400 IN DNSKEY ( 257 3 8 AwEAAYjMddqyGcMykXyGaEerl8CAyXmF3x7bNEXNzJdAW5TEUK4DjmGjhBB8KqXk0R+bfNIYmAex 7d6aqvvOw6C0B5LNCRg4jYFKuthHxsd0JXZDhSaNH9+ozWSK466TcMXz/L1bq9Yb4glhZyHw7tAc Pm5X7Rxqr89g/2BaCi6UZp2f0syx8wxBOHxx9m9Rzvh/pei4FJGu0ecO29zRBHuZ/O0g7A9CbACj RMMEEpNthoKkrdnwD+axdjAA3YiRf/M6TlbVdpSvQWBhnAm/COcvlM6pqYJI7k9s/0Mjjl//DmXL 8G9pd9+NloMY+fWYSx3wp2mZDp1WbTqX0rM1aqVCVwE= ) ; Key ID = 15967 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for glashio.net
	`glashio.net. 86400 IN DNSKEY ( 256 3 8 AwEAAaXNz1MlpTzbh5kvtNB0C7/zbPXIPo91DpNOHJt68A8NGvc0p6r2LCi6+6ZZ292BMW3wtT/l Btb53/LpMy4o+rXHbzQ8lJcnFJUl3KCWv/BVdxS1dGzhRNi2mTWrEA27Ohib6stW4jmqdt9iEBja 85dPnd66t+jM8e7PQOMSgfrT ) ; Key ID = 44755`
	`glashio.net. 86400 IN DNSKEY ( 257 3 8 AwEAAYjMddqyGcMykXyGaEerl8CAyXmF3x7bNEXNzJdAW5TEUK4DjmGjhBB8KqXk0R+bfNIYmAex 7d6aqvvOw6C0B5LNCRg4jYFKuthHxsd0JXZDhSaNH9+ozWSK466TcMXz/L1bq9Yb4glhZyHw7tAc Pm5X7Rxqr89g/2BaCi6UZp2f0syx8wxBOHxx9m9Rzvh/pei4FJGu0ecO29zRBHuZ/O0g7A9CbACj RMMEEpNthoKkrdnwD+axdjAA3YiRf/M6TlbVdpSvQWBhnAm/COcvlM6pqYJI7k9s/0Mjjl//DmXL 8G9pd9+NloMY+fWYSx3wp2mZDp1WbTqX0rM1aqVCVwE= ) ; Key ID = 15967`
	DNSKEY=15967/SEP is now in the chain-of-trust
	DS=15967/SHA-256 verifies DNSKEY=15967/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`glashio.net. 86400 IN RRSIG ( DNSKEY 8 2 86400 20190509000000 20190418000000 15967 glashio.net. R0VQ8X3WVd3jiUHhIYfCjuxVcgj4Hq5oIvlrY6NO97lMB3Qg5oM9SEM184sE3c5DwoqIXdw8f7o/ QJPM5RR0i54DU6QIWfNcirdlveBxP7YcPx0lzgFHsFfXfegAng8u0AEn5p6XrSjgyhfp5JuH2D+/ bF4oWAuT6t7onZsP7hXbG15PTvyjmDDtU5uuE5dY/7O8zihACiGcNMpmdzZmSzCfvOhUtCsgPnUh RF79WaODICQbuHMsfMZ/3aRBrvsPpACgJEgLYJc2EaToOtzi9el1httvH+1PYm+optuC2TJd7bpK oec+LJvqVPWwn+fb/6AJ0pwek/uEn/du95ELVg== )`
	RRSIG=15967 and DNSKEY=15967/SEP verifies the DNSKEY RRset
	DNSKEY=44755 is now in the chain-of-trust
	Query to ns3.netsolidhosting.com for glashio.net/A
	Received 227 bytes from 185.77.211.181
	;; Answer received from 185.77.211.181 (227 bytes) ;; HEADER SECTION ;; id = 51910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN A ;; ANSWER SECTION (2 records) glashio.net. 14400 IN RRSIG ( A 8 2 14400 20190509000000 20190418000000 44755 glashio.net. NLa+/IdiB3wvzvx36EZ1iNSWoraESXnnk8G1fwVqQVp0uGfinI/UogxOZ+DuA8A1WNLHg0iGQ3OG vhSZzO+nK7pUvHIZD5B1xv9qKg8ZhOkuTFUn7QCApSi46rA4UAemwi92GIu5G4540dbsllK2ev+l oaJBrl04XoNcsHq9Sec= ) glashio.net. 14400 IN A 185.77.208.121 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	glashio.net is authoritative for glashio.net
	Found RRSIG signed by glashio.net zone
	Query to ns3.netsolidhosting.com for glashio.net/SOA
	Received 281 bytes from 185.77.211.181
	;; Answer received from 185.77.211.181 (281 bytes) ;; HEADER SECTION ;; id = 6323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN SOA ;; ANSWER SECTION (2 records) glashio.net. 14400 IN SOA ( ns3.netsolidhosting.com. hostmaster.glashio.net. 2019032505 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) glashio.net. 14400 IN RRSIG ( SOA 8 2 14400 20190509000000 20190418000000 44755 glashio.net. HVxQqgGWepprpBtsQcAMsyDK26CQK9IYCo1J9qiwdFVu/8fFDm0xKb8pqdcDpdnOtbbfRYW649mv 80kUT13jSTtgxtWjL0gQ9H/CpB/ks8C8axa+DSrkU5A2CIQNM8CgNYq1EdcSwYqixm2RURqJ7Y8G hErMYYg1HLqtvkF/eLc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.netsolidhosting.com for glashio.net/SOA
	Error querying ns4.netsolidhosting.com/2a05:6440:208:0:0:0:0:181 for glashio.net/SOA: 'IPv6 transport disabled'
	Received 281 bytes from 185.77.208.181
	;; Answer received from 185.77.208.181 (281 bytes) ;; HEADER SECTION ;; id = 44549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN SOA ;; ANSWER SECTION (2 records) glashio.net. 14400 IN RRSIG ( SOA 8 2 14400 20190509000000 20190418000000 44755 glashio.net. HVxQqgGWepprpBtsQcAMsyDK26CQK9IYCo1J9qiwdFVu/8fFDm0xKb8pqdcDpdnOtbbfRYW649mv 80kUT13jSTtgxtWjL0gQ9H/CpB/ks8C8axa+DSrkU5A2CIQNM8CgNYq1EdcSwYqixm2RURqJ7Y8G hErMYYg1HLqtvkF/eLc= ) glashio.net. 14400 IN SOA ( ns3.netsolidhosting.com. hostmaster.glashio.net. 2019032505 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.netsolidhosting.com for glashio.net/A
	Error querying ns3.netsolidhosting.com/2a05:6440:211:0:0:0:0:181 for glashio.net/A: 'IPv6 transport disabled'
	Received 227 bytes from 185.77.211.181
	;; Answer received from 185.77.211.181 (227 bytes) ;; HEADER SECTION ;; id = 63945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; glashio.net. IN A ;; ANSWER SECTION (2 records) glashio.net. 14400 IN RRSIG ( A 8 2 14400 20190509000000 20190418000000 44755 glashio.net. NLa+/IdiB3wvzvx36EZ1iNSWoraESXnnk8G1fwVqQVp0uGfinI/UogxOZ+DuA8A1WNLHg0iGQ3OG vhSZzO+nK7pUvHIZD5B1xv9qKg8ZhOkuTFUn7QCApSi46rA4UAemwi92GIu5G4540dbsllK2ev+l oaJBrl04XoNcsHq9Sec= ) glashio.net. 14400 IN A 185.77.208.121 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	glashio.net A RR has value 185.77.208.121
	Found 1 RRSIGs over A RRset
	`glashio.net. 14400 IN RRSIG ( A 8 2 14400 20190509000000 20190418000000 44755 glashio.net. NLa+/IdiB3wvzvx36EZ1iNSWoraESXnnk8G1fwVqQVp0uGfinI/UogxOZ+DuA8A1WNLHg0iGQ3OG vhSZzO+nK7pUvHIZD5B1xv9qKg8ZhOkuTFUn7QCApSi46rA4UAemwi92GIu5G4540dbsllK2ev+l oaJBrl04XoNcsHq9Sec= )`
	RRSIG=44755 and DNSKEY=44755 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test glashio.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: