DNSSEC Analyzer - hendrickx.be

Domain Name:

Time: 2021-04-21 05:01:35 UTC, NTP stratum 4

Analyzing DNSSEC problems for hendrickx.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 6050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210502000000 20210411000000 20326 . SjVAq5V3zP96wlXZKWIo3oDNvWyKnwmIl7/HSmnxJ77WX0dmpJxN+c7wTFGzMro6kuZCYAhZgsWb 3G7lBEAeiw/Y6hQGK1IdLMH4YMoSoxvdw6u0DkvxiodZUatJblMajeF0Rw8W67I4pwYpwOByZ+3W aTr/nk0sWFir7+1tNbWbPrUNb8E8pHFzW9g7vMATiFnM+jXmZVVbueGnzOSmjo34ow9iAQ7V1OcY VtHTxQVMbfNurnEbEi7XnqYtRacNUkvIv0Fpmb9Yi7wlhV/syyu61p3MMoLnSQydYfsI+may7SoH +I6NQk2a2d3Nvzh5nbNd++cu8aRGX3ZtfreUmQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for hendrickx.be/A
	Received 790 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (790 bytes) ;; HEADER SECTION ;; id = 32703 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS y.nsset.be. be. 172800 IN NS a.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . DvjY7+MgAgCBTxVmJSoY+Bc0qtFIk7iihzIMB6f5aYKFtPcPXrpJJxRI5PvfmS9Hx/0Ze5iIIOrs 1woa12bpQJWXjPBEwcdcL38R1CULkxtYDeNxrmQNjucpPL1P/hgkbugc4Lyo+ZIm8YnauQP6XbyX UvInKn33Bd+OS/J6Spa1xmadhr9HrriWKDgVEYTvnFHePFuWCzdErhYnPixlEsS3j9oJ1mgEv6MB 4aLmvxCz9LZzNtCJOsxWI+uhts2UklVXlcofKiNDS0JJ2wHsxw4W2JEnkz4jgQJXvLap8cm2q4Bf wV5oZmxSIw+5rajbmwOzy3wnNEHdq441OrydCg== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.root-servers.net for be/DNSKEY
	Received 780 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (780 bytes) ;; HEADER SECTION ;; id = 466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS z.nsset.be. be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . DvjY7+MgAgCBTxVmJSoY+Bc0qtFIk7iihzIMB6f5aYKFtPcPXrpJJxRI5PvfmS9Hx/0Ze5iIIOrs 1woa12bpQJWXjPBEwcdcL38R1CULkxtYDeNxrmQNjucpPL1P/hgkbugc4Lyo+ZIm8YnauQP6XbyX UvInKn33Bd+OS/J6Spa1xmadhr9HrriWKDgVEYTvnFHePFuWCzdErhYnPixlEsS3j9oJ1mgEv6MB 4aLmvxCz9LZzNtCJOsxWI+uhts2UklVXlcofKiNDS0JJ2wHsxw4W2JEnkz4jgQJXvLap8cm2q4Bf wV5oZmxSIw+5rajbmwOzy3wnNEHdq441OrydCg== ) ;; ADDITIONAL SECTION (13 records) z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone be

	Checking DS between . and be
	Query to g.root-servers.net for be/DS
	Timeout querying g.root-servers.net/192.112.36.4 for be/DS
	All Queries to g.root-servers.net for be/DS timed out or failed
	Query to e.root-servers.net for be/DS
	Received 414 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (414 bytes) ;; HEADER SECTION ;; id = 4405 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . DvjY7+MgAgCBTxVmJSoY+Bc0qtFIk7iihzIMB6f5aYKFtPcPXrpJJxRI5PvfmS9Hx/0Ze5iIIOrs 1woa12bpQJWXjPBEwcdcL38R1CULkxtYDeNxrmQNjucpPL1P/hgkbugc4Lyo+ZIm8YnauQP6XbyX UvInKn33Bd+OS/J6Spa1xmadhr9HrriWKDgVEYTvnFHePFuWCzdErhYnPixlEsS3j9oJ1mgEv6MB 4aLmvxCz9LZzNtCJOsxWI+uhts2UklVXlcofKiNDS0JJ2wHsxw4W2JEnkz4jgQJXvLap8cm2q4Bf wV5oZmxSIw+5rajbmwOzy3wnNEHdq441OrydCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20210503170000 20210420160000 14631 . DvjY7+MgAgCBTxVmJSoY+Bc0qtFIk7iihzIMB6f5aYKFtPcPXrpJJxRI5PvfmS9Hx/0Ze5iIIOrs 1woa12bpQJWXjPBEwcdcL38R1CULkxtYDeNxrmQNjucpPL1P/hgkbugc4Lyo+ZIm8YnauQP6XbyX UvInKn33Bd+OS/J6Spa1xmadhr9HrriWKDgVEYTvnFHePFuWCzdErhYnPixlEsS3j9oJ1mgEv6MB 4aLmvxCz9LZzNtCJOsxWI+uhts2UklVXlcofKiNDS0JJ2wHsxw4W2JEnkz4jgQJXvLap8cm2q4Bf wV5oZmxSIw+5rajbmwOzy3wnNEHdq441OrydCg== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to a.nsset.be for be/DNSKEY
	Received 1317 bytes from 194.0.6.1
	;; Answer received from 194.0.6.1 (1317 bytes) ;; HEADER SECTION ;; id = 47239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794 be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085 be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZaQBUfeRtgPV3SHJ1ZXGpV6omvHt+n44SFNTZSj/9e8nkhVsUGm5V3QwAJrowVo0FQ2FlIk fAcQlLZsvI1B3UZ2wTMllTxIaoNF5q5HCrXqwo75x4mvFq7R7B7I1Lm5kd6Y0TDehFCiW2MG9xYI SOaPp38sIvS8nmZIoe+4bnaz ) ; Key ID = 46794`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAehp/VQZQ3ZCVP8BrqPCYQmeHsW4uNuQO1Kw1RhcQ0a/NFqaaV3d/FrRZUFIWqa0RE4OSlBW cc+7/qSbUAdMzo6W3v7aTjJ9rtFhSMg2ifwCPXUxwFZJU1WygQGd3uvzk6WDc/rligxqt6UMZNBO pJUk6CFKO594+fhHzcCU1DaN ) ; Key ID = 59085`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAciBCrutW55uGBgldOoA0vDYUiQMv3hZvjzmXFyeyVycvWw/7fyKNnNWK+FdkiysFA8P/l8n hVSWkqVCEl4Y7fMlnJJdOc/KPElJHp3HRQWpbCqGqQNIghYZUw+CV/bSW7vgPTtspiELPsdrejgz kOYMIZllPmk2x8+QFDHU1XJX ) ; Key ID = 5955`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210705151529 20210318092223 52756 be. EKNYaR6rdgcDWaCWTd2iSQy6j95r0odWag/LeFGcULdNsfVia65y/sENfgnD8kzbbOQDbt2KZHwz pQ8Z0CgUnBibdzcNLjIFZ3SCaY0PsTqwLwAyadBS4Sxlz1cbCUQqtNqhAogj1OH+o+Ba58+eLkRM TOwGWgjhmHTmwOili2+BVucdusBy4hVEk8uQ7rmzYf4EJahEBbytqCXcm1jNWTHG/SEiF2Rc1Nt4 d1rfDAaCpAaSiicKTQHrWumzSFjk8lGfn+7cnPX0Tn6TXz/2zjzJ2YrmC0hOEcfiJIC4wKnzR46Y vezgBGMESdgKFpqm8/grgBmkbzRehvOZ7GEGlA== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=46794 is now in the chain-of-trust
	DNSKEY=59085 is now in the chain-of-trust
	DNSKEY=5955 is now in the chain-of-trust
	Query to a.nsset.be for hendrickx.be/A
	Received 380 bytes from 194.0.6.1
	;; Answer received from 194.0.6.1 (380 bytes) ;; HEADER SECTION ;; id = 56079 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Query to b.nsset.be for hendrickx.be/DNSKEY
	Received 380 bytes from 194.0.37.1
	;; Answer received from 194.0.37.1 (380 bytes) ;; HEADER SECTION ;; id = 41332 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) hendrickx.be. 86400 IN NS ns1.ghen.be. hendrickx.be. 86400 IN NS ns2.ghen.be. hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; ADDITIONAL SECTION (5 records) ns1.ghen.be. 86400 IN A 178.21.112.59 ns2.ghen.be. 86400 IN A 178.21.118.64 ns1.ghen.be. 86400 IN AAAA 2a02:2308::3be:0:1 ns2.ghen.be. 86400 IN AAAA 2a02:2308:20::3be:0:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1350 ;; option:
	Found child zone hendrickx.be

hendrickx.be

	Checking DS between be and hendrickx.be
	Query to z.nsset.be for hendrickx.be/DS
	Received 251 bytes from 194.0.25.36
	;; Answer received from 194.0.25.36 (251 bytes) ;; HEADER SECTION ;; id = 39578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DS ;; ANSWER SECTION (2 records) hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 ) hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for hendrickx.be in the be zone
	DS=3260/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`hendrickx.be. 86400 IN RRSIG ( DS 8 2 86400 20210513025451 20210420165640 59085 be. JUVlmb6cU7akKdMIZSoC1y0Ho96AXw687tX7ahVTyxcGEHlfLRdmDPt0Iulx8kklXhW7AfJUx2pS Sdob6JRbrDdEk25j/ZOyje2rnBDdZLfvmpCSxy5QMC8ImUEYwP5RgLwx+wYkrhvjnkKl2Y3aV0X8 QOWzcZc/8ngdCf17pOU= )`
	RRSIG=59085 and DNSKEY=59085 verifies the DS RRset
	DS=3260/SHA-256 is now in the chain-of-trust
	`hendrickx.be. 86400 IN DS ( 3260 13 2 a2e92a9b5d0c45800a6c3de9f34058a80a949dfbd94564baa9e71b76f0426974 )`
	Query to ns2.ghen.be for hendrickx.be/DNSKEY
	Received 229 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (229 bytes) ;; HEADER SECTION ;; id = 59418 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN DNSKEY ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260 hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. t/msHGiHZueag2pylYqvRXFc3tV6x5n2XJQITAa4sU/4BBeQyU09Jii/ZAUKdLqBlT9fTgRD9lF1 bL2oxuX5aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for hendrickx.be
	`hendrickx.be. 18000 IN DNSKEY ( 257 3 13 LENcyLSCdG6MXG9mgCE2t3zm1XaXIxO3p64vIcREO24uhHaRCSCj12fMyq6s3TyJeiSErLLJt8G7 ULQjCX6AHA== ) ; Key ID = 3260`
	DNSKEY=3260/SEP is now in the chain-of-trust
	DS=3260/SHA-256 verifies DNSKEY=3260/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`hendrickx.be. 18000 IN RRSIG ( DNSKEY 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. t/msHGiHZueag2pylYqvRXFc3tV6x5n2XJQITAa4sU/4BBeQyU09Jii/ZAUKdLqBlT9fTgRD9lF1 bL2oxuX5aw== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the DNSKEY RRset
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 8667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/SOA
	Received 347 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (347 bytes) ;; HEADER SECTION ;; id = 21336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN SOA ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN SOA ( ns1.ghen.be. ghen.telenet.be. 1618893061 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) hendrickx.be. 18000 IN RRSIG ( SOA 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. 1eEUNHArAMsOMlCUkyvrQINAiyrGMYc3iuSqUcZDvHGBTRhZ1bA3q+DCpr2Ey+d/GDRhRAB16BDc NVZ9Zop5dw== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.118.64
	;; Answer received from 178.21.118.64 (314 bytes) ;; HEADER SECTION ;; id = 15643 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

hendrickx.be

	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 14236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.ghen.be is authoritative for hendrickx.be
	Found RRSIG signed by hendrickx.be zone
	Query to ns1.ghen.be for hendrickx.be/A
	Received 314 bytes from 178.21.112.59
	;; Answer received from 178.21.112.59 (314 bytes) ;; HEADER SECTION ;; id = 47038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; hendrickx.be. IN A ;; ANSWER SECTION (2 records) hendrickx.be. 18000 IN A 178.21.112.59 hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== ) ;; AUTHORITY SECTION (3 records) hendrickx.be. 18000 IN NS ns1.ghen.be. hendrickx.be. 18000 IN NS ns2.ghen.be. hendrickx.be. 18000 IN RRSIG ( NS 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. m/oVKUiKq5IbSZmKESeidQrNrTw8v6rAemuOanxh3R+i3Te1MPgCRTAOt80t6iyyrYlPQa5Vh+ng R4s9OGNg1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	hendrickx.be A RR has value 178.21.112.59
	Found 1 RRSIGs over A RRset
	`hendrickx.be. 18000 IN RRSIG ( A 13 2 18000 20210504043101 20210420033101 3260 hendrickx.be. W5EKTYmObYiAJoZMtqyOIHXOoifSu42Gzi5nxOt0kUQ00JiwOXmE8C1Ur/Ngh8TZJOQbsMBJ7QFj ds7F4/7ccQ== )`
	RRSIG=3260 and DNSKEY=3260/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test hendrickx.be at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: