Back to Verisign Labs Tools
Domain Name: Detail: more(+) / less(-) Time: 2020-05-29 02:49:34 UTC, NTP stratum 4

Analyzing DNSSEC problems for hdl.handle.net

.
Found 2 DNSKEY records for .
DS=20326/SHA-256 verifies DNSKEY=20326/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
net
Found 1 DS records for net in the . zone
DS=35886/SHA-256 has algorithm RSASHA256
Found 1 RRSIGs over DS RRset
RRSIG=48903 and DNSKEY=48903 verifies the DS RRset
Found 2 DNSKEY records for net
DS=35886/SHA-256 verifies DNSKEY=35886/SEP
Found 1 RRSIGs over DNSKEY RRset
RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
handle.net
Found 2 DS records for handle.net in the net zone
DS=59772/SHA-256 has algorithm ECDSAP256SHA256
DS=3368/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
Found 1 RRSIGs over DS RRset
RRSIG=36059 and DNSKEY=36059 verifies the DS RRset
Found 8 DNSKEY records for handle.net
DS=3368/SHA-256 verifies DNSKEY=3368
DS=59772/SHA-256 verifies DNSKEY=59772
Found 8 RRSIGs over DNSKEY RRset
RRSIG=28486 and DNSKEY=28486/SEP verifies the DNSKEY RRset
hdl.handle.net is a CNAME to hdl.dyn.handle.net
Found 4 RRSIGs over CNAME RRset
RRSIG=38310 and DNSKEY=38310 verifies the CNAME RRset
dyn.handle.net
Found 1 DS records for dyn.handle.net in the handle.net zone
DS=10934/SHA-256 has algorithm ECDSAP256SHA256
Found 4 RRSIGs over DS RRset
RRSIG=38310 and DNSKEY=38310 verifies the DS RRset
Found 8 DNSKEY records for dyn.handle.net
DS=10934/SHA-256 verifies DNSKEY=10934
Found 8 RRSIGs over DNSKEY RRset
RRSIG=26476 is expired
RRSIG=27525 is expired
RRSIG=35749 is expired
RRSIG=40938 is expired
RRSIG=44526 is expired
RRSIG=5175 is expired
RRSIG=10934 and DNSKEY=10934 verifies the DNSKEY RRset
Found DNSKEY, but no RRSIG, for algorithm 8
hdl.dyn.handle.net A RR has value 134.76.30.195
Found 1 RRSIGs over A RRset
RRSIG=10934 and DNSKEY=10934 verifies the A RRset
Found DNSKEY, but no RRSIG, for algorithm 8

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hdl.handle.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options