DNSSEC Analyzer - hendrickx.be

Domain Name:

Time: 2020-12-05 14:51:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for hendrickx.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 16979 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201221000000 20201130000000 20326 . Didi7hzR3l250KyQuwL9RCVB/ZqJEaAmtPe5nR1XxmOAYJ/pA40v9NXdPODZiFdRcFha8+jaE4+r S2F2tROdxicdDsmCqw6Ekf3JAz4h4ybdkgf04+4E5VVEULQvvc+fAtv9N7ToBUqezWm/7kkVwtax ga7j1t+V6gheVrTgWmlizqfXGzYJYA8+brHy6oqVwAn+cayMbxFBJZ2ywzoOfJbYHtLm9Tlco86V 6uqlOmE1mEKYyLu0PNL9HgPu+Wy/F0fzx3vma+2mgrRMLsns0oAlAr+8CqzSwzuF4d/oDj3oKlbe 8YpKpXx6JbCInRitab8ODmWpZy+DbXJ8K6OHRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201221000000 20201130000000 20326 . Didi7hzR3l250KyQuwL9RCVB/ZqJEaAmtPe5nR1XxmOAYJ/pA40v9NXdPODZiFdRcFha8+jaE4+r S2F2tROdxicdDsmCqw6Ekf3JAz4h4ybdkgf04+4E5VVEULQvvc+fAtv9N7ToBUqezWm/7kkVwtax ga7j1t+V6gheVrTgWmlizqfXGzYJYA8+brHy6oqVwAn+cayMbxFBJZ2ywzoOfJbYHtLm9Tlco86V 6uqlOmE1mEKYyLu0PNL9HgPu+Wy/F0fzx3vma+2mgrRMLsns0oAlAr+8CqzSwzuF4d/oDj3oKlbe 8YpKpXx6JbCInRitab8ODmWpZy+DbXJ8K6OHRw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to m.root-servers.net for hendrickx.be/A
	Received 797 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (797 bytes) ;; HEADER SECTION ;; id = 13704 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS y.ns.dns.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS a.ns.dns.be. be. 172800 IN NS b.ns.dns.be. be. 172800 IN NS d.ns.dns.be. be. 172800 IN NS c.ns.dns.be. be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . ToZdj3iXh0YizUMp+CXctxau5E5fnh0x8Tz4jKUMPq23Q2u4ZDndKKOh+Sr0KOGZbT416agJdvDd nYuZswBBn30y0upPUULckJsLbQbp7bqIp/ntt7ACTiX7z9i3ZDUgjeF/v4GvHD9SEYMBIDVEVWrm Y8a7AjwaU1CohcfpDrU/5CmEZQY0aUo1PBhJtasiyTTsz0cwlHAHOeR1XwzmDjzX7c3H+z9nCe+p KkY7d/kAYFbjJH8+nTWpVUsfLxDzGv9o4Z41ZNN93kAxWvjPnC5CkydY9xdHgwpiEJDnzfKVyU9P kAcLUXlCMlOWQkabHdg50Av7iXqZs5N6mShw1w== ) ;; ADDITIONAL SECTION (13 records) a.ns.dns.be. 172800 IN A 194.0.6.1 b.ns.dns.be. 172800 IN A 194.0.37.1 c.ns.dns.be. 172800 IN A 194.0.43.1 d.ns.dns.be. 172800 IN A 194.0.44.1 y.ns.dns.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.ns.dns.be. 172800 IN AAAA 2001:678:9::1 b.ns.dns.be. 172800 IN AAAA 2001:678:64::1 c.ns.dns.be. 172800 IN AAAA 2001:678:68::1 d.ns.dns.be. 172800 IN AAAA 2001:678:6c::1 y.ns.dns.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for be/DNSKEY
	Received 787 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (787 bytes) ;; HEADER SECTION ;; id = 13120 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.ns.dns.be. be. 172800 IN NS b.ns.dns.be. be. 172800 IN NS c.ns.dns.be. be. 172800 IN NS d.ns.dns.be. be. 172800 IN NS y.ns.dns.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . ToZdj3iXh0YizUMp+CXctxau5E5fnh0x8Tz4jKUMPq23Q2u4ZDndKKOh+Sr0KOGZbT416agJdvDd nYuZswBBn30y0upPUULckJsLbQbp7bqIp/ntt7ACTiX7z9i3ZDUgjeF/v4GvHD9SEYMBIDVEVWrm Y8a7AjwaU1CohcfpDrU/5CmEZQY0aUo1PBhJtasiyTTsz0cwlHAHOeR1XwzmDjzX7c3H+z9nCe+p KkY7d/kAYFbjJH8+nTWpVUsfLxDzGv9o4Z41ZNN93kAxWvjPnC5CkydY9xdHgwpiEJDnzfKVyU9P kAcLUXlCMlOWQkabHdg50Av7iXqZs5N6mShw1w== ) ;; ADDITIONAL SECTION (13 records) a.ns.dns.be. 172800 IN A 194.0.6.1 b.ns.dns.be. 172800 IN A 194.0.37.1 c.ns.dns.be. 172800 IN A 194.0.43.1 d.ns.dns.be. 172800 IN A 194.0.44.1 y.ns.dns.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.ns.dns.be. 172800 IN AAAA 2001:678:9::1 b.ns.dns.be. 172800 IN AAAA 2001:678:64::1 c.ns.dns.be. 172800 IN AAAA 2001:678:68::1 d.ns.dns.be. 172800 IN AAAA 2001:678:6c::1 y.ns.dns.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to h.root-servers.net for be/DS
	Received 414 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (414 bytes) ;; HEADER SECTION ;; id = 23900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . ToZdj3iXh0YizUMp+CXctxau5E5fnh0x8Tz4jKUMPq23Q2u4ZDndKKOh+Sr0KOGZbT416agJdvDd nYuZswBBn30y0upPUULckJsLbQbp7bqIp/ntt7ACTiX7z9i3ZDUgjeF/v4GvHD9SEYMBIDVEVWrm Y8a7AjwaU1CohcfpDrU/5CmEZQY0aUo1PBhJtasiyTTsz0cwlHAHOeR1XwzmDjzX7c3H+z9nCe+p KkY7d/kAYFbjJH8+nTWpVUsfLxDzGv9o4Z41ZNN93kAxWvjPnC5CkydY9xdHgwpiEJDnzfKVyU9P kAcLUXlCMlOWQkabHdg50Av7iXqZs5N6mShw1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20201218050000 20201205040000 26116 . ToZdj3iXh0YizUMp+CXctxau5E5fnh0x8Tz4jKUMPq23Q2u4ZDndKKOh+Sr0KOGZbT416agJdvDd nYuZswBBn30y0upPUULckJsLbQbp7bqIp/ntt7ACTiX7z9i3ZDUgjeF/v4GvHD9SEYMBIDVEVWrm Y8a7AjwaU1CohcfpDrU/5CmEZQY0aUo1PBhJtasiyTTsz0cwlHAHOeR1XwzmDjzX7c3H+z9nCe+p KkY7d/kAYFbjJH8+nTWpVUsfLxDzGv9o4Z41ZNN93kAxWvjPnC5CkydY9xdHgwpiEJDnzfKVyU9P kAcLUXlCMlOWQkabHdg50Av7iXqZs5N6mShw1w== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to c.ns.dns.be for be/DNSKEY
	Received 1317 bytes from 194.0.43.1
	;; Answer received from 194.0.43.1 (1317 bytes) ;; HEADER SECTION ;; id = 14658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 256 3 8 AwEAAdFsFKnR/bCO4L/cYN9ENbstzPIJ69dcQi1JqIVECG2BJprBkhBL5OqtFswhPC0Bbpfp0102 /L/260OXZFKrfD0JxTItWSO15ojfbaWbc0CIlIidxIgBm53KYURANjwfUuWukytm97RCxChn7sQi bz336FkEJ5Dn5TLqlIwo3A1d ) ; Key ID = 41553 be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN DNSKEY ( 256 3 8 AwEAAcTZXZx9bV6Z3eMJI07HLNy12hi4AO+mK9A458a2uV1roiB6Y2mbw6eVPL+mikqbkZA1d/hb VTmI39Yw8jvkPGhyHkjffuylqje/JKxp1YmL0Cb19cBepZ7N6ruqY3IHNlXLDBLB8LlOwsrId1dA aGtiQ2tikqkleOL7N4IqUKj7 ) ; Key ID = 32769 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210104232005 20200917083553 52756 be. IAeJ5upueLjdb/1lbUDs331nFN+TgJEzbxrnD5d82p21j7zuszgELakDWyDAQ6U3JobEKtiser/g ZK6V66YRgFLGF7DPjWDCXnvV1jBImBDe8cWzhJFP1nvd/hyNkhBcTVHfYLBKyQ0RLqLnPuyrC4v/ 8RGgDfjCEmNLON9JndXSgmYSbhotuxy9LPpOpuiaauWg4aLX/VtzcOej75WC0dLjI0dgrt2yI8JH S99DWensgYrYBFRn3O0jPOLFpCV5OEL7C9hwe9Nhx/BObxFrk4AFMxDZgSjWMfHMljMCdLrKg7o6 lRIRhiVNkKJ+CQLxwg9uwMqsp9pck+LnH5TeTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAdFsFKnR/bCO4L/cYN9ENbstzPIJ69dcQi1JqIVECG2BJprBkhBL5OqtFswhPC0Bbpfp0102 /L/260OXZFKrfD0JxTItWSO15ojfbaWbc0CIlIidxIgBm53KYURANjwfUuWukytm97RCxChn7sQi bz336FkEJ5Dn5TLqlIwo3A1d ) ; Key ID = 41553`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAcTZXZx9bV6Z3eMJI07HLNy12hi4AO+mK9A458a2uV1roiB6Y2mbw6eVPL+mikqbkZA1d/hb VTmI39Yw8jvkPGhyHkjffuylqje/JKxp1YmL0Cb19cBepZ7N6ruqY3IHNlXLDBLB8LlOwsrId1dA aGtiQ2tikqkleOL7N4IqUKj7 ) ; Key ID = 32769`
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210104232005 20200917083553 52756 be. IAeJ5upueLjdb/1lbUDs331nFN+TgJEzbxrnD5d82p21j7zuszgELakDWyDAQ6U3JobEKtiser/g ZK6V66YRgFLGF7DPjWDCXnvV1jBImBDe8cWzhJFP1nvd/hyNkhBcTVHfYLBKyQ0RLqLnPuyrC4v/ 8RGgDfjCEmNLON9JndXSgmYSbhotuxy9LPpOpuiaauWg4aLX/VtzcOej75WC0dLjI0dgrt2yI8JH S99DWensgYrYBFRn3O0jPOLFpCV5OEL7C9hwe9Nhx/BObxFrk4AFMxDZgSjWMfHMljMCdLrKg7o6 lRIRhiVNkKJ+CQLxwg9uwMqsp9pck+LnH5TeTQ== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=41553 is now in the chain-of-trust
	DNSKEY=46794 is now in the chain-of-trust
	DNSKEY=32769 is now in the chain-of-trust
	Query to y.ns.dns.be for hendrickx.be/A
	Received 382 bytes from 120.29.253.8
	;; Answer received from 120.29.253.8 (382 bytes) ;; HEADER SECTION ;; id = 35827 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20201223074023 20201202114551 41553 be. WeJ0Afc8fOl+v+HdEig+y2OEsVy32jzKIyVOg4oOx/JghuyYCXoiujYkm2mVRWuIMFmph6dpSPOd koPq71FOqPlscxO8ACCcopIHI78H0HZwBi6jQ484CcRKwuz26bggrfTB8/ZVttpnBfsdsJs99nqV wDXQ7bVzCNkhKaY8Xjw= ) ;; ADDITIONAL SECTION (5 records) ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.ns.dns.be for hendrickx.be/DNSKEY
	Received 380 bytes from 194.0.37.1
	;; Answer received from 194.0.37.1 (380 bytes) ;; HEADER SECTION ;; id = 51404 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20201223074023 20201202114551 41553 be. WeJ0Afc8fOl+v+HdEig+y2OEsVy32jzKIyVOg4oOx/JghuyYCXoiujYkm2mVRWuIMFmph6dpSPOd koPq71FOqPlscxO8ACCcopIHI78H0HZwBi6jQ484CcRKwuz26bggrfTB8/ZVttpnBfsdsJs99nqV wDXQ7bVzCNkhKaY8Xjw= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found child zone hendrickx.be

hendrickx.be

	Checking DS between be and hendrickx.be
	Query to z.nsset.be for hendrickx.be/DS
	Received 251 bytes from 194.0.25.36
	;; Answer received from 194.0.25.36 (251 bytes) ;; HEADER SECTION ;; id = 13642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DS ;; ANSWER SECTION (2 records) hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20201223074023 20201202114551 41553 be. WeJ0Afc8fOl+v+HdEig+y2OEsVy32jzKIyVOg4oOx/JghuyYCXoiujYkm2mVRWuIMFmph6dpSPOd koPq71FOqPlscxO8ACCcopIHI78H0HZwBi6jQ484CcRKwuz26bggrfTB8/ZVttpnBfsdsJs99nqV wDXQ7bVzCNkhKaY8Xjw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for hendrickx.be in the be zone
	DS=3260/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20201223074023 20201202114551 41553 be. WeJ0Afc8fOl+v+HdEig+y2OEsVy32jzKIyVOg4oOx/JghuyYCXoiujYkm2mVRWuIMFmph6dpSPOd koPq71FOqPlscxO8ACCcopIHI78H0HZwBi6jQ484CcRKwuz26bggrfTB8/ZVttpnBfsdsJs99nqV wDXQ7bVzCNkhKaY8Xjw= )`
	RRSIG=41553 and DNSKEY=41553 verifies the DS RRset
	DS=3260/SHA-256 is now in the chain-of-trust
	`hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 )`
	Query to ns1.ghen.be for hendrickx.be/DNSKEY
	Received 229 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (229 bytes) ;; HEADER SECTION ;; id = 50960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260 hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 5E5yl1zPtxv/i6NBpDBAuPKofCnayuweTu01D7ox/TD75Quvh+fy8fyTUOSzppIi8quXkA5wEuLR M8Q5GsgZtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for hendrickx.be
	`hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260`
	DNSKEY=3260/SEP is now in the chain-of-trust
	DS=3260/SHA-256 verifies DNSKEY=3260/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 5E5yl1zPtxv/i6NBpDBAuPKofCnayuweTu01D7ox/TD75Quvh+fy8fyTUOSzppIi8quXkA5wEuLR M8Q5GsgZtg== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the DNSKEY RRset
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 32660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. fiii7AXjyIPNCleCn5CiCpDrHcx4dscO7W2FXpbenvJCIniY2UE4/hRjJEFBj5JWX3S4ZBFbr91D zlid9IpHUA== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 8OmNIMfawW5Yu0hdU/w2jPTu+9A7+AvN6pMV2nY1ZqqD5puPlTq1C5njqaNJFPAaEQTml6gkna7A ZXWJSyCAkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns2.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (347 bytes) ;; HEADER SECTION ;; id = 22566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1606981970 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. XkqzQBnqRpHvy3WmfRinJjmuspfx64OrrH74G9EaacUN/DER+ICKW8hAKQvWI3N3oD7uFLSxG7n7 EwNwA7eNOg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 8OmNIMfawW5Yu0hdU/w2jPTu+9A7+AvN6pMV2nY1ZqqD5puPlTq1C5njqaNJFPAaEQTml6gkna7A ZXWJSyCAkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (347 bytes) ;; HEADER SECTION ;; id = 64653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1606981970 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. XkqzQBnqRpHvy3WmfRinJjmuspfx64OrrH74G9EaacUN/DER+ICKW8hAKQvWI3N3oD7uFLSxG7n7 EwNwA7eNOg== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 8OmNIMfawW5Yu0hdU/w2jPTu+9A7+AvN6pMV2nY1ZqqD5puPlTq1C5njqaNJFPAaEQTml6gkna7A ZXWJSyCAkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 42481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. fiii7AXjyIPNCleCn5CiCpDrHcx4dscO7W2FXpbenvJCIniY2UE4/hRjJEFBj5JWX3S4ZBFbr91D zlid9IpHUA== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. 8OmNIMfawW5Yu0hdU/w2jPTu+9A7+AvN6pMV2nY1ZqqD5puPlTq1C5njqaNJFPAaEQTml6gkna7A ZXWJSyCAkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20201217075250 20201203065250 3260 hendrickx.be. fiii7AXjyIPNCleCn5CiCpDrHcx4dscO7W2FXpbenvJCIniY2UE4/hRjJEFBj5JWX3S4ZBFbr91D zlid9IpHUA== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hendrickx.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: