DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-01-16 00:11:54 UTC, NTP stratum 4

Analyzing DNSSEC problems for ii.am

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1425 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1425 bytes) ;; HEADER SECTION ;; id = 23510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to a.root-servers.net for ii.am/A
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ii.am/A: 'IPv6 transport disabled'
	Received 724 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (724 bytes) ;; HEADER SECTION ;; id = 11887 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) am. 172800 IN NS ns-pch.amnic.net. am. 172800 IN NS ns-cdn.amnic.net. am. 172800 IN NS ns-pri.nic.am. am. 172800 IN NS fork.sth.dnsnode.net. am. 172800 IN NS sns-pb.isc.org. am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190128230000 20190115220000 16749 . GcfrDq56SbsUk9AkbNFlI9DOV175zHkrSzASB4Hy4cfEV8lrLpaZoiGz2igzKWUzlUmvZv+3qVtz jgiZ/MBG660X/YAnoTQgqlqd1zN03u2VTG7/iEE2eQrJaSQMDLvaCgq2iT4Pc1LCdSmSIMDtQIbZ dSI81Mi1pH65Pr/Mb561Q8ZwZWMUOF/AB9adFfY7xzd9XhVkyXMhaMP7kFLQB1Vvug1xGfcMPE37 n4vyJEibQkHV28VXTBxEaXuJF+rg/e2iF/4nP3WODlfyH9vFtECnLoLFEOb25On0yIM1Cvht3SF7 lu6M4fZVwiySYHQuLAG8W1YfhScIW1JEHwjx/w== ) ;; ADDITIONAL SECTION (11 records) ns-pch.amnic.net. 172800 IN A 204.61.216.96 ns-pch.amnic.net. 172800 IN AAAA 2001:500:14:6096:ad::1 ns-cdn.amnic.net. 172800 IN A 194.0.1.26 ns-cdn.amnic.net. 172800 IN AAAA 2001:678:4::1a ns-pri.nic.am. 172800 IN A 195.43.75.53 ns-pri.nic.am. 172800 IN AAAA 2001:7f9:8:53::1 fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 sns-pb.isc.org. 172800 IN A 192.5.4.1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for am/DNSKEY
	Received 721 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (721 bytes) ;; HEADER SECTION ;; id = 60186 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) am. 172800 IN NS ns-pri.nic.am. am. 172800 IN NS ns-pch.amnic.net. am. 172800 IN NS ns-cdn.amnic.net. am. 172800 IN NS sns-pb.isc.org. am. 172800 IN NS fork.sth.dnsnode.net. am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190128230000 20190115220000 16749 . GcfrDq56SbsUk9AkbNFlI9DOV175zHkrSzASB4Hy4cfEV8lrLpaZoiGz2igzKWUzlUmvZv+3qVtz jgiZ/MBG660X/YAnoTQgqlqd1zN03u2VTG7/iEE2eQrJaSQMDLvaCgq2iT4Pc1LCdSmSIMDtQIbZ dSI81Mi1pH65Pr/Mb561Q8ZwZWMUOF/AB9adFfY7xzd9XhVkyXMhaMP7kFLQB1Vvug1xGfcMPE37 n4vyJEibQkHV28VXTBxEaXuJF+rg/e2iF/4nP3WODlfyH9vFtECnLoLFEOb25On0yIM1Cvht3SF7 lu6M4fZVwiySYHQuLAG8W1YfhScIW1JEHwjx/w== ) ;; ADDITIONAL SECTION (11 records) fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 ns-cdn.amnic.net. 172800 IN A 194.0.1.26 ns-pch.amnic.net. 172800 IN A 204.61.216.96 ns-pri.nic.am. 172800 IN A 195.43.75.53 sns-pb.isc.org. 172800 IN A 192.5.4.1 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 ns-cdn.amnic.net. 172800 IN AAAA 2001:678:4::1a ns-pch.amnic.net. 172800 IN AAAA 2001:500:14:6096:ad::1 ns-pri.nic.am. 172800 IN AAAA 2001:7f9:8:53::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone am

	Checking DS between . and am
	Query to h.root-servers.net for am/DS
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for am/DS: 'IPv6 transport disabled'
	Received 366 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (366 bytes) ;; HEADER SECTION ;; id = 14047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DS ;; ANSWER SECTION (2 records) am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190128230000 20190115220000 16749 . GcfrDq56SbsUk9AkbNFlI9DOV175zHkrSzASB4Hy4cfEV8lrLpaZoiGz2igzKWUzlUmvZv+3qVtz jgiZ/MBG660X/YAnoTQgqlqd1zN03u2VTG7/iEE2eQrJaSQMDLvaCgq2iT4Pc1LCdSmSIMDtQIbZ dSI81Mi1pH65Pr/Mb561Q8ZwZWMUOF/AB9adFfY7xzd9XhVkyXMhaMP7kFLQB1Vvug1xGfcMPE37 n4vyJEibQkHV28VXTBxEaXuJF+rg/e2iF/4nP3WODlfyH9vFtECnLoLFEOb25On0yIM1Cvht3SF7 lu6M4fZVwiySYHQuLAG8W1YfhScIW1JEHwjx/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for am in the . zone
	DS=17214/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`am. 86400 IN RRSIG ( DS 8 1 86400 20190128230000 20190115220000 16749 . GcfrDq56SbsUk9AkbNFlI9DOV175zHkrSzASB4Hy4cfEV8lrLpaZoiGz2igzKWUzlUmvZv+3qVtz jgiZ/MBG660X/YAnoTQgqlqd1zN03u2VTG7/iEE2eQrJaSQMDLvaCgq2iT4Pc1LCdSmSIMDtQIbZ dSI81Mi1pH65Pr/Mb561Q8ZwZWMUOF/AB9adFfY7xzd9XhVkyXMhaMP7kFLQB1Vvug1xGfcMPE37 n4vyJEibQkHV28VXTBxEaXuJF+rg/e2iF/4nP3WODlfyH9vFtECnLoLFEOb25On0yIM1Cvht3SF7 lu6M4fZVwiySYHQuLAG8W1YfhScIW1JEHwjx/w== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=17214/SHA-256 is now in the chain-of-trust
	`am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 )`
	Query to ns-pri.nic.am for am/DNSKEY
	Error querying ns-pri.nic.am/2001:7f9:8:53:0:0:0:1 for am/DNSKEY: 'IPv6 transport disabled'
	Received 1331 bytes from 195.43.75.53
	;; Answer received from 195.43.75.53 (1331 bytes) ;; HEADER SECTION ;; id = 40752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DNSKEY ;; ANSWER SECTION (6 records) am. 43200 IN DNSKEY ( 256 3 7 AwEAAat6Ow01qdyixEkhA4r1IhPPmUpdmaV3EYEcmeIComLSMRokR5InU94RxZjX2YrloQtoRx7Q M9LOgOMq3oo00A4Ayl7i6HsLy00l4m9N/e0mNUFtWUKgjy1B9ObfOgskUX4spOheBXn8ZiS/jWeV Xw8L/QsBuTUv2uDmpbfc/hOB ) ; Key ID = 63218 am. 43200 IN DNSKEY ( 257 3 7 AwEAAZawAjd4056P/UPnGBlTtawBwkgrGCZswWE5pN8qkpDpUrbmxX53+NkmVHVL3fCtNfILPNdq jmcXG0jbBlRlRSwc41nZQ10e1O+8D5EIUNaAt1c80PLiRgn9vTDhJptIfudlvsA0UUeVyqLa57/Q 2I/8EGvD4rPvRdFHHtTCyISsnk60C+UsD50o3jn65PY0nTlw8iMEz9Y2Wbx9GM+Kd2ETUQ0gtEVZ Ctw2yjfByalW0tzf6eE46l275dv2Y9KMG+eDK/iTl/79vytpLJADzyxnjSMTfBBWHtwQuOaNXYhU 3Zpcr8HlMgewDN6LogCA1gWBP4vT+LjghmWz8sQAXaU= ) ; Key ID = 9804 am. 43200 IN DNSKEY ( 257 3 7 AwEAAav/lMWuShAz1S6ZefOKR5Ljb4BBdxuzDgTWuxEB3ZovY4HSo6ywuD86I5LCnqNEHtgx6PdV D1SJbyPOWeckBTPzdiXsHOaL4/UX+DIqoE7UdysGQ4iFlZtqAMDhnHYlkgAXgLO3NKJyE7NDlUfm 9b2SOrEdQ5ZzkDU7KOQVPMgL++FSPs+HmmwHT018qllSduwpzwbWyBYOSuhadSgvZFXen6cC+5hv HjZuKqcP04QLU4XcLXnpNiAmHWweCV5hwvmwR4zBGw2Qrja7t8CvawmJ/iM6Aty2iy624JUTQI70 DOHJEUu5RcdYpf4tgutz9yl+eZBXzXXxH35cjg0uYHc= ) ; Key ID = 17214 am. 43200 IN DNSKEY ( 256 3 7 AwEAAb6lRua98m6d43WokdcQ5p1Olk3guwZbCuK94bG2XKUqzYtR5BzCs9/DsJlvY+voLhhGUf3X UF0vBf0nJcecwXyZq9bVmpUF6ugz8+f5ojMJbjgYmVF/Y1OyBH9xSvKqMf4DUgr4h5N+MGULXZjr wgcl+ywtdUCDy6ncGq4r1kJ3 ) ; Key ID = 45188 am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190124184024 20190114190100 63218 am. b0FbY5szG6UZXvTPwEwxSUnN7Gm8OuWpKBk541OFrSTUbJahF3BUZanHftemdhwb2GPwvEwW8SME ac0cjOAqxMOCd3ycOjjzcWsBehA36iVSsNuL4EXnHKmH2IXhxQAWu8q2X5XKubSQplbGNmZzbvGt +HxUVLHFJrnveAGuY/E= ) am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190124185938 20190114190100 17214 am. A997x9+7lekLp07Ws2domFI7YkNF/rwId0p/58RpW4A+AKhMsszel8SQDOJ3vAqAdvan7/YxRGJQ 63yjQzQgnPBmQL8bfe4h7iU4MmnNY6MNNpkPMcdA2YEQB/BO6XLO+PyzZP/HX7Eub9jChFz3B/IQ tP3FJ4qLzpudRHQIo6B6C34E6TqRZ0a5+RvRbaqqgsOspsrcqXQ5+VcI6MY7bBnWArs2ezidakuV TbUHt1rkwB04UiZh1nExsKegST/hjOroHoijFEeKoyQ+6xMZlAP0mZIxyBL/0Zhgwp0YzY0YcCut lMgDonPiOvt4K45Hpguzy7QmQ97f3vVEaP5wAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for am
	`am. 43200 IN DNSKEY ( 256 3 7 AwEAAat6Ow01qdyixEkhA4r1IhPPmUpdmaV3EYEcmeIComLSMRokR5InU94RxZjX2YrloQtoRx7Q M9LOgOMq3oo00A4Ayl7i6HsLy00l4m9N/e0mNUFtWUKgjy1B9ObfOgskUX4spOheBXn8ZiS/jWeV Xw8L/QsBuTUv2uDmpbfc/hOB ) ; Key ID = 63218`
	`am. 43200 IN DNSKEY ( 257 3 7 AwEAAZawAjd4056P/UPnGBlTtawBwkgrGCZswWE5pN8qkpDpUrbmxX53+NkmVHVL3fCtNfILPNdq jmcXG0jbBlRlRSwc41nZQ10e1O+8D5EIUNaAt1c80PLiRgn9vTDhJptIfudlvsA0UUeVyqLa57/Q 2I/8EGvD4rPvRdFHHtTCyISsnk60C+UsD50o3jn65PY0nTlw8iMEz9Y2Wbx9GM+Kd2ETUQ0gtEVZ Ctw2yjfByalW0tzf6eE46l275dv2Y9KMG+eDK/iTl/79vytpLJADzyxnjSMTfBBWHtwQuOaNXYhU 3Zpcr8HlMgewDN6LogCA1gWBP4vT+LjghmWz8sQAXaU= ) ; Key ID = 9804`
	`am. 43200 IN DNSKEY ( 257 3 7 AwEAAav/lMWuShAz1S6ZefOKR5Ljb4BBdxuzDgTWuxEB3ZovY4HSo6ywuD86I5LCnqNEHtgx6PdV D1SJbyPOWeckBTPzdiXsHOaL4/UX+DIqoE7UdysGQ4iFlZtqAMDhnHYlkgAXgLO3NKJyE7NDlUfm 9b2SOrEdQ5ZzkDU7KOQVPMgL++FSPs+HmmwHT018qllSduwpzwbWyBYOSuhadSgvZFXen6cC+5hv HjZuKqcP04QLU4XcLXnpNiAmHWweCV5hwvmwR4zBGw2Qrja7t8CvawmJ/iM6Aty2iy624JUTQI70 DOHJEUu5RcdYpf4tgutz9yl+eZBXzXXxH35cjg0uYHc= ) ; Key ID = 17214`
	`am. 43200 IN DNSKEY ( 256 3 7 AwEAAb6lRua98m6d43WokdcQ5p1Olk3guwZbCuK94bG2XKUqzYtR5BzCs9/DsJlvY+voLhhGUf3X UF0vBf0nJcecwXyZq9bVmpUF6ugz8+f5ojMJbjgYmVF/Y1OyBH9xSvKqMf4DUgr4h5N+MGULXZjr wgcl+ywtdUCDy6ncGq4r1kJ3 ) ; Key ID = 45188`
	DNSKEY=17214/SEP is now in the chain-of-trust
	DS=17214/SHA-256 verifies DNSKEY=17214/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190124184024 20190114190100 63218 am. b0FbY5szG6UZXvTPwEwxSUnN7Gm8OuWpKBk541OFrSTUbJahF3BUZanHftemdhwb2GPwvEwW8SME ac0cjOAqxMOCd3ycOjjzcWsBehA36iVSsNuL4EXnHKmH2IXhxQAWu8q2X5XKubSQplbGNmZzbvGt +HxUVLHFJrnveAGuY/E= )`
	`am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190124185938 20190114190100 17214 am. A997x9+7lekLp07Ws2domFI7YkNF/rwId0p/58RpW4A+AKhMsszel8SQDOJ3vAqAdvan7/YxRGJQ 63yjQzQgnPBmQL8bfe4h7iU4MmnNY6MNNpkPMcdA2YEQB/BO6XLO+PyzZP/HX7Eub9jChFz3B/IQ tP3FJ4qLzpudRHQIo6B6C34E6TqRZ0a5+RvRbaqqgsOspsrcqXQ5+VcI6MY7bBnWArs2ezidakuV TbUHt1rkwB04UiZh1nExsKegST/hjOroHoijFEeKoyQ+6xMZlAP0mZIxyBL/0Zhgwp0YzY0YcCut lMgDonPiOvt4K45Hpguzy7QmQ97f3vVEaP5wAg== )`
	RRSIG=63218 and DNSKEY=63218 verifies the DNSKEY RRset
	RRSIG=17214 and DNSKEY=17214/SEP verifies the DNSKEY RRset
	DNSKEY=63218 is now in the chain-of-trust
	DNSKEY=9804/SEP is now in the chain-of-trust
	DNSKEY=45188 is now in the chain-of-trust
	Query to ns-cdn.amnic.net for ii.am/A
	Error querying ns-cdn.amnic.net/2001:678:4:0:0:0:0:1a for ii.am/A: 'IPv6 transport disabled'
	Received 589 bytes from 194.0.1.26
	;; Answer received from 194.0.1.26 (589 bytes) ;; HEADER SECTION ;; id = 56503 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ii.am. 43200 IN NS ns1.20dragons.com. ii.am. 43200 IN NS ns2.20dragons.com. mch4b9jr7olvn96tjdhr1se2ctcn7s94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) mch4b9jr7olvn96tjdhr1se2ctcn7s94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106040608 63218 am. JzcPSt7Ua2nNY1wBJZawdf8oxHPNoa91YouyOmJ4NIcOOASwbpbkNT92jkN3Pk8NoxoUfw5OURhP +vtPTG1ZhW9QxcqBUT1Uhqj3W3V/5qeGa1f40X3MyJrL2+qFvb/aaWzvcJAw/9GF6ZYw79AOBXdx KCGXmO+YSjuwoEtfw1s= ) q3reenlubj2etfd3n54uqtge424u6q5n.am. 7200 IN NSEC3 ( 1 1 10 bed68c t71r34rcqd6vruob5pnv9qmlkrnuk5dc A AAAA RRSIG ) q3reenlubj2etfd3n54uqtge424u6q5n.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106042258 63218 am. cVksRLyPf7FGACsaViMbcTJABEyD/a4YYqYKAqT4FUW2DGGnESr+uSBqe4ljOzz2kaupayu2+kER AW9a2LejIuzHGevr5ccCBgmqHTRopL+fzBXynt2Un2v/CNUs9IsQGeLnXJkEM/zKWQYbnkZ4wvSL aCYQdcdqghfB2Rk0GnM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sns-pb.isc.org for ii.am/DNSKEY
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for ii.am/DNSKEY: 'IPv6 transport disabled'
	Received 572 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (572 bytes) ;; HEADER SECTION ;; id = 48416 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ii.am. 43200 IN NS ns1.20dragons.com. ii.am. 43200 IN NS ns2.20dragons.com. MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106040608 63218 am. JzcPSt7Ua2nNY1wBJZawdf8oxHPNoa91YouyOmJ4NIcOOASwbpbkNT92jkN3Pk8NoxoUfw5OURhP +vtPTG1ZhW9QxcqBUT1Uhqj3W3V/5qeGa1f40X3MyJrL2+qFvb/aaWzvcJAw/9GF6ZYw79AOBXdx KCGXmO+YSjuwoEtfw1s= ) Q3REENLUBJ2ETFD3N54UQTGE424U6Q5N.am. 7200 IN NSEC3 ( 1 1 10 bed68c t71r34rcqd6vruob5pnv9qmlkrnuk5dc A AAAA RRSIG ) Q3REENLUBJ2ETFD3N54UQTGE424U6Q5N.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106042258 63218 am. cVksRLyPf7FGACsaViMbcTJABEyD/a4YYqYKAqT4FUW2DGGnESr+uSBqe4ljOzz2kaupayu2+kER AW9a2LejIuzHGevr5ccCBgmqHTRopL+fzBXynt2Un2v/CNUs9IsQGeLnXJkEM/zKWQYbnkZ4wvSL aCYQdcdqghfB2Rk0GnM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ii.am

ii.am

	Checking DS between am and ii.am
	Query to ns-pri.nic.am for ii.am/DS
	Received 745 bytes from 195.43.75.53
	;; Answer received from 195.43.75.53 (745 bytes) ;; HEADER SECTION ;; id = 56412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106040608 63218 am. JzcPSt7Ua2nNY1wBJZawdf8oxHPNoa91YouyOmJ4NIcOOASwbpbkNT92jkN3Pk8NoxoUfw5OURhP +vtPTG1ZhW9QxcqBUT1Uhqj3W3V/5qeGa1f40X3MyJrL2+qFvb/aaWzvcJAw/9GF6ZYw79AOBXdx KCGXmO+YSjuwoEtfw1s= ) am. 7200 IN SOA ( ns-pri.nic.am. dns.amnic.net. 1547596803 ;serial 43200 ;refresh 7200 ;retry 1728000 ;expire 7200 ;minimum ) am. 7200 IN RRSIG ( SOA 7 1 43200 20190215000006 20190115230006 63218 am. l6LU0EgsYKTt6NfUSzxp4X8H7grgFie/Xg7X3bm6xpQQE9bRHZaYSCkRmRPBQROamIrp7KFEUzOC gpp8bpoF0KENOD1CbPEwNH7i/LFW5BU2ujNz5A109p6EqoFRWD2UOBsk7J7h6pqqRdcTLa7Tx+aX NzLlMivDEDqA/gAudOY= ) Q3REENLUBJ2ETFD3N54UQTGE424U6Q5N.am. 7200 IN NSEC3 ( 1 1 10 bed68c t71r34rcqd6vruob5pnv9qmlkrnuk5dc A AAAA RRSIG ) Q3REENLUBJ2ETFD3N54UQTGE424U6Q5N.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190205044826 20190106042258 63218 am. cVksRLyPf7FGACsaViMbcTJABEyD/a4YYqYKAqT4FUW2DGGnESr+uSBqe4ljOzz2kaupayu2+kER AW9a2LejIuzHGevr5ccCBgmqHTRopL+fzBXynt2Un2v/CNUs9IsQGeLnXJkEM/zKWQYbnkZ4wvSL aCYQdcdqghfB2Rk0GnM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for ii.am in the am zone
	Query to ns2.20dragons.com for ii.am/DNSKEY
	Received 215 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (215 bytes) ;; HEADER SECTION ;; id = 46833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN DNSKEY ;; ANSWER SECTION (2 records) ii.am. 7200 IN DNSKEY ( 257 3 13 G2Cj32l3ppsVIT6+7B1EI0PmTD6/LXGSWO1O/LpgO4aJ6GwXa5subSqhMTrP22Y7093IB4LUJ1U9 GI3Yc8X3iQ== ) ; Key ID = 21633 ii.am. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 21633 ii.am. PXRpUaqIduNwl5XjD0MrQvMG556U+VHPWpnCuvLUjG0Ha9raK4OjWKf+wyvOz+/p3jPwCdCh/Az1 fJn76J9JjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for ii.am
	`ii.am. 7200 IN DNSKEY ( 257 3 13 G2Cj32l3ppsVIT6+7B1EI0PmTD6/LXGSWO1O/LpgO4aJ6GwXa5subSqhMTrP22Y7093IB4LUJ1U9 GI3Yc8X3iQ== ) ; Key ID = 21633`
	Found 1 RRSIGs over DNSKEY RRset
	`ii.am. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 21633 ii.am. PXRpUaqIduNwl5XjD0MrQvMG556U+VHPWpnCuvLUjG0Ha9raK4OjWKf+wyvOz+/p3jPwCdCh/Az1 fJn76J9JjQ== )`
	RRSIG=21633 and DNSKEY=21633/SEP verifies the DNSKEY RRset
	Query to ns2.20dragons.com for ii.am/A
	Received 151 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (151 bytes) ;; HEADER SECTION ;; id = 6325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN A ;; ANSWER SECTION (2 records) ii.am. 86400 IN A 185.147.34.9 ii.am. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 21633 ii.am. DFWp62fF9hYuEnEUSXCxfIX/xTOZlHxAl8wJJmdAliiADTR9eoDD6orS1bkornxU92PG0Ux9DLYb Wor0RbdVog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	ii.am is authoritative for ii.am
	Found RRSIG signed by ii.am zone
	Query to ns2.20dragons.com for ii.am/SOA
	Received 195 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (195 bytes) ;; HEADER SECTION ;; id = 431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN SOA ;; ANSWER SECTION (2 records) ii.am. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 21633 ii.am. NhFJ55cxRgdJkwmbRWE2Cmk/CRRiB6inaY82fenFWhNRa7DEMpuIKGsWZ0h1sJCQMWCM3i85Iien H9qaqknheA== ) ii.am. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011509 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.20dragons.com for ii.am/SOA
	Timeout querying ns1.20dragons.com/23.94.166.82 for ii.am/SOA
	All Queries to ns1.20dragons.com for ii.am/SOA timed out or failed
	Query to ns2.20dragons.com for ii.am/A
	Received 151 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (151 bytes) ;; HEADER SECTION ;; id = 9495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; ii.am. IN A ;; ANSWER SECTION (2 records) ii.am. 86400 IN A 185.147.34.9 ii.am. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 21633 ii.am. DFWp62fF9hYuEnEUSXCxfIX/xTOZlHxAl8wJJmdAliiADTR9eoDD6orS1bkornxU92PG0Ux9DLYb Wor0RbdVog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	ii.am A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`ii.am. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 21633 ii.am. DFWp62fF9hYuEnEUSXCxfIX/xTOZlHxAl8wJJmdAliiADTR9eoDD6orS1bkornxU92PG0Ux9DLYb Wor0RbdVog== )`
	RRSIG=21633 and DNSKEY=21633/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ii.am at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: