DNSSEC Analyzer - jobnet.dk

Domain Name:

Time: 2021-03-09 07:31:39 UTC, NTP stratum 4

Analyzing DNSSEC problems for jobnet.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 42522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210323000000 20210302000000 20326 . FNdtAv2V8CYbvlFqTS+GniRmB8onYYWV9Wi/o0nizx91+JlwGaHyh6ZcOkj9jy31+Mw6SlbOUKJx 1x2TzC8PG/gxf7piPBbdHDSdKvY1BczJLivM/BRu3+HKwAGVSPxrE+Uj682sFBGkcoi4jTXwrT/x pII8WSMQlvJrS6Db6jnaFzRVi1FXgfxVZaFmoxjuJg1azjEE6sqd+pS62QpnbI9bYniCwART2gOA 6S4102QbOw/3xGd+SeS91zFwdwec8N93per9eKWV1WidBpWexWcbOL92StJQyDjAPb77ieIojqk2 U8XNnMW7xVXwCY4aHU95iLY77CAtLM6CzyVRPg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to i.root-servers.net for jobnet.dk/A
	Received 799 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (799 bytes) ;; HEADER SECTION ;; id = 52891 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS d.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . VEBMF1auRMioHk2aYwdojEcFcGDsc10AegTtbBHTBVrhZki6e6wTPADu0pPrwY3EkLTGOZ7AF7xQ ZRFRImJNtqHZnn1RrpLGVIsfcyETpMou2OLPzwqQH7WcUbqQK1y3jfvDVsrnb6BYdGoyKLvh3UDj h1X1pBc8lx78xuoPgs58uH9pIoORgHzwD8hkH0tuPZFTi6hKxz3v1zirsAT6+X4mWzGWQo3wbIRx p+VFjVtMOQVRq85JJ4+8B+AG+WSZ9KDFtvmO/HS0OkZJox916i9+Do8p6Uhdb2xx+mPP28dXbHtM Dvk18lZlJWitNGNCPGSs4HDW88a/lJL6KpsUiA== ) ;; ADDITIONAL SECTION (15 records) s.nic.dk. 172800 IN A 193.176.144.15 p.nic.dk. 172800 IN A 194.0.47.42 l.nic.dk. 172800 IN A 192.38.7.242 d.nic.dk. 172800 IN A 185.159.198.45 c.nic.dk. 172800 IN A 194.0.46.53 b.nic.dk. 172800 IN A 193.163.102.222 a.nic.dk. 172800 IN A 212.88.78.122 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 c.nic.dk. 172800 IN AAAA 2001:678:74::53 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for dk/DNSKEY
	Received 790 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (790 bytes) ;; HEADER SECTION ;; id = 53232 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS d.nic.dk. dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . VEBMF1auRMioHk2aYwdojEcFcGDsc10AegTtbBHTBVrhZki6e6wTPADu0pPrwY3EkLTGOZ7AF7xQ ZRFRImJNtqHZnn1RrpLGVIsfcyETpMou2OLPzwqQH7WcUbqQK1y3jfvDVsrnb6BYdGoyKLvh3UDj h1X1pBc8lx78xuoPgs58uH9pIoORgHzwD8hkH0tuPZFTi6hKxz3v1zirsAT6+X4mWzGWQo3wbIRx p+VFjVtMOQVRq85JJ4+8B+AG+WSZ9KDFtvmO/HS0OkZJox916i9+Do8p6Uhdb2xx+mPP28dXbHtM Dvk18lZlJWitNGNCPGSs4HDW88a/lJL6KpsUiA== ) ;; ADDITIONAL SECTION (15 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 194.0.46.53 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 194.0.47.42 s.nic.dk. 172800 IN A 193.176.144.15 d.nic.dk. 172800 IN A 185.159.198.45 a.nic.dk. 172800 IN AAAA 2001:1580:0:180d::122 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN AAAA 2001:678:74::53 l.nic.dk. 172800 IN AAAA 2001:7f8:1f::1835:242:0 p.nic.dk. 172800 IN AAAA 2001:678:78:42:ad::53 s.nic.dk. 172800 IN AAAA 2a00:d78:0:102:193:176:144:15 d.nic.dk. 172800 IN AAAA 2620:10a:80ab::45 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone dk

	Checking DS between . and dk
	Query to l.root-servers.net for dk/DS
	Received 366 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (366 bytes) ;; HEADER SECTION ;; id = 14813 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b ) dk. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . VEBMF1auRMioHk2aYwdojEcFcGDsc10AegTtbBHTBVrhZki6e6wTPADu0pPrwY3EkLTGOZ7AF7xQ ZRFRImJNtqHZnn1RrpLGVIsfcyETpMou2OLPzwqQH7WcUbqQK1y3jfvDVsrnb6BYdGoyKLvh3UDj h1X1pBc8lx78xuoPgs58uH9pIoORgHzwD8hkH0tuPZFTi6hKxz3v1zirsAT6+X4mWzGWQo3wbIRx p+VFjVtMOQVRq85JJ4+8B+AG+WSZ9KDFtvmO/HS0OkZJox916i9+Do8p6Uhdb2xx+mPP28dXbHtM Dvk18lZlJWitNGNCPGSs4HDW88a/lJL6KpsUiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for dk in the . zone
	DS=9280/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20210322050000 20210309040000 42351 . VEBMF1auRMioHk2aYwdojEcFcGDsc10AegTtbBHTBVrhZki6e6wTPADu0pPrwY3EkLTGOZ7AF7xQ ZRFRImJNtqHZnn1RrpLGVIsfcyETpMou2OLPzwqQH7WcUbqQK1y3jfvDVsrnb6BYdGoyKLvh3UDj h1X1pBc8lx78xuoPgs58uH9pIoORgHzwD8hkH0tuPZFTi6hKxz3v1zirsAT6+X4mWzGWQo3wbIRx p+VFjVtMOQVRq85JJ4+8B+AG+WSZ9KDFtvmO/HS0OkZJox916i9+Do8p6Uhdb2xx+mPP28dXbHtM Dvk18lZlJWitNGNCPGSs4HDW88a/lJL6KpsUiA== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=9280/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 9280 13 2 3a93091a1a8a850e72a86ddad3c79b2e3d426cc275bc11980e85c0ac2854612b )`
	Query to d.nic.dk for dk/DNSKEY
	Received 289 bytes from 185.159.198.45
	;; Answer received from 185.159.198.45 (289 bytes) ;; HEADER SECTION ;; id = 27562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 13 gzyqRwO7guIK9eNn6txVZbuGpQUzN5p9A2x+iCOi6R7So6/HinHRFze14xP5N+g67+KqIOvrwGFx 4V/cgD6OZA== ) ; Key ID = 42151 dk. 86400 IN DNSKEY ( 257 3 13 w1A+x+9//7iXXrBx8IhIKtqNuyuWrWYvIdNzXhoiiHDKYhZek6oLzC1FXmqYsIU2R5DIL48bjhBB 1kL9oIpn6g== ) ; Key ID = 9280 dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210402162803 20210305145803 9280 dk. xcwDA16SDCCz1JTofx4Daj3mujHGLILSygKuEJBP8WXb3fim+HiGT0FD3jTX8ROdNrMwD+XuwyZU /grv51aVAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 13 gzyqRwO7guIK9eNn6txVZbuGpQUzN5p9A2x+iCOi6R7So6/HinHRFze14xP5N+g67+KqIOvrwGFx 4V/cgD6OZA== ) ; Key ID = 42151`
	`dk. 86400 IN DNSKEY ( 257 3 13 w1A+x+9//7iXXrBx8IhIKtqNuyuWrWYvIdNzXhoiiHDKYhZek6oLzC1FXmqYsIU2R5DIL48bjhBB 1kL9oIpn6g== ) ; Key ID = 9280`
	DNSKEY=9280/SEP is now in the chain-of-trust
	DS=9280/SHA-256 verifies DNSKEY=9280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210402162803 20210305145803 9280 dk. xcwDA16SDCCz1JTofx4Daj3mujHGLILSygKuEJBP8WXb3fim+HiGT0FD3jTX8ROdNrMwD+XuwyZU /grv51aVAg== )`
	RRSIG=9280 and DNSKEY=9280/SEP verifies the DNSKEY RRset
	DNSKEY=42151 is now in the chain-of-trust
	Query to p.nic.dk for jobnet.dk/A
	Received 361 bytes from 194.0.47.42
	;; Answer received from 194.0.47.42 (361 bytes) ;; HEADER SECTION ;; id = 53093 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jobnet.dk. 86400 IN NS ns2.sitnet.dk. jobnet.dk. 86400 IN NS ns3.sitnet.dk. jobnet.dk. 7200 IN DS 28768 5 1 eccf5746aead858c736ee6e036c2ec052761450b jobnet.dk. 7200 IN DS ( 28768 5 2 fe92b64b8479edf63f160562d98cec9ad2cf22452ee79fda344f0f9716875704 ) jobnet.dk. 7200 IN DS ( 28768 5 4 a474779c4f14c0136f4bd95d00bc5f65f1202d756d1acca5189f847295f13488 3d8c96f111503e8da465c845249dc476 ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20210401172405 20210304155405 42151 dk. B0CUolKRhx3ghTUG1WiJ9kH59c0qabpol6rJrrtFKDzA4FE8JiBHrhER5pT/fgLA7huDVrfX2lY/ Au0kp03BvA== ) ;; ADDITIONAL SECTION (3 records) ns3.sitnet.dk. 86400 IN A 188.64.157.27 ns2.sitnet.dk. 86400 IN A 188.64.157.26 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.nic.dk for jobnet.dk/DNSKEY
	Received 359 bytes from 192.38.7.242
	;; Answer received from 192.38.7.242 (359 bytes) ;; HEADER SECTION ;; id = 33439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) jobnet.dk. 86400 IN NS ns2.sitnet.dk. jobnet.dk. 86400 IN NS ns3.sitnet.dk. jobnet.dk. 7200 IN DS 28768 5 1 eccf5746aead858c736ee6e036c2ec052761450b jobnet.dk. 7200 IN DS ( 28768 5 2 fe92b64b8479edf63f160562d98cec9ad2cf22452ee79fda344f0f9716875704 ) jobnet.dk. 7200 IN DS ( 28768 5 4 a474779c4f14c0136f4bd95d00bc5f65f1202d756d1acca5189f847295f13488 3d8c96f111503e8da465c845249dc476 ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20210401172405 20210304155405 42151 dk. B0CUolKRhx3ghTUG1WiJ9kH59c0qabpol6rJrrtFKDzA4FE8JiBHrhER5pT/fgLA7huDVrfX2lY/ Au0kp03BvA== ) ;; ADDITIONAL SECTION (3 records) ns2.sitnet.dk. 86400 IN A 188.64.157.26 ns3.sitnet.dk. 86400 IN A 188.64.157.27 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone jobnet.dk

jobnet.dk

	Checking DS between dk and jobnet.dk
	Query to a.nic.dk for jobnet.dk/DS
	Received 284 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (284 bytes) ;; HEADER SECTION ;; id = 42286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DS ;; ANSWER SECTION (4 records) jobnet.dk. 7200 IN DS 28768 5 1 eccf5746aead858c736ee6e036c2ec052761450b jobnet.dk. 7200 IN DS ( 28768 5 2 fe92b64b8479edf63f160562d98cec9ad2cf22452ee79fda344f0f9716875704 ) jobnet.dk. 7200 IN DS ( 28768 5 4 a474779c4f14c0136f4bd95d00bc5f65f1202d756d1acca5189f847295f13488 3d8c96f111503e8da465c845249dc476 ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20210401172405 20210304155405 42151 dk. B0CUolKRhx3ghTUG1WiJ9kH59c0qabpol6rJrrtFKDzA4FE8JiBHrhER5pT/fgLA7huDVrfX2lY/ Au0kp03BvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for jobnet.dk in the dk zone
	DS=28768/SHA-1 has algorithm RSASHA1
	DS=28768/SHA-256 has algorithm RSASHA1
	DS=28768/SHA-384 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20210401172405 20210304155405 42151 dk. B0CUolKRhx3ghTUG1WiJ9kH59c0qabpol6rJrrtFKDzA4FE8JiBHrhER5pT/fgLA7huDVrfX2lY/ Au0kp03BvA== )`
	RRSIG=42151 and DNSKEY=42151 verifies the DS RRset
	DS=28768/SHA-1 is now in the chain-of-trust
	`jobnet.dk. 7200 IN DS 28768 5 1 eccf5746aead858c736ee6e036c2ec052761450b`
	`jobnet.dk. 7200 IN DS ( 28768 5 2 fe92b64b8479edf63f160562d98cec9ad2cf22452ee79fda344f0f9716875704 )`
	`jobnet.dk. 7200 IN DS ( 28768 5 4 a474779c4f14c0136f4bd95d00bc5f65f1202d756d1acca5189f847295f13488 3d8c96f111503e8da465c845249dc476 )`
	Query to ns2.sitnet.dk for jobnet.dk/DNSKEY
	Received 1501 bytes from 188.64.157.26
	;; Answer received from 188.64.157.26 (1501 bytes) ;; HEADER SECTION ;; id = 7662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DNSKEY ;; ANSWER SECTION (6 records) jobnet.dk. 172800 IN DNSKEY ( 256 3 5 AwEAAdyvsdbVCdqkrEOhppQJnu2SVzvwqdKaXQ6qI0sI04QoKTZmBtd0KZO+ZqbhMunlKoCEfYaT my+p9fB0IEj3FVTK6n2Esb85KOF9kcpWgBmR8Z4CWANI7o+4qHP1Q2fQa6jZYD0wxFmvLxf5HCgP oIY4OF+UWobdTPrNeKgz2dMx ) ; Key ID = 14907 jobnet.dk. 172800 IN DNSKEY ( 257 3 5 AwEAAdZjPvQwEgLkqHHi09p2g7L84Al1KXWGLD9ITr63NNMbAyT2bK2YZEoJwMX/qmNMmOPMjuiZ fATS3WPPGkd+/2vYOkJ2VZJMu17MHVwQStt9F/gcwzmsnEfypeihS3zzQTHW8Tkw/hb7dWE2r/L8 pp+w94lovPcbQfhyJcd507Xbu/Y3EIeo6Vq5us/LJz4MR1BKpukx4SDz77y11Ep+Tjwkp2T3+ghi lB7YMegdXdu1DOl2Vb+OZbiKDfw+I3EJjuHZF5kxe5fgE7X5rAfg2fXHmYYam7UxGFEPfyhh8B5L OqzKZR+QzsTvC+N7SgyYewJsLY4h2/cWW1vbI95MzwU= ) ; Key ID = 24586 jobnet.dk. 172800 IN DNSKEY ( 257 3 5 AwEAAb4oCH9CT4do1QnpaKHTxHBxkpTwb01uEV1mpiKhj+x2wcS1SqLDYqT3g0JIQcHGj9N9Fq1Z BcAuVP8BKdRF/AHhcX6QW9hBm4brnEnxPqkByASBtkY0cZYgMiFsnSGwxc2+m5KJ1zz1UA+wz3cw 8q4ayWDXgki0KYdFcaf3sb0piIEwqJYmP96YdDMkctJxcQ9jOxZm57E5UPbjTBQGdV362WNtXWNz uWsbXiZfFEx6UDHP4VQL+tzQwPIybsSn+QMQ1nVkwfICI36L/9/4QBco96CsctgKVbzCQgYXGNi9 X9nvAQRE/UrY32pLRC6z/ju/wdybsn5vOB5DTAZ4aOM= ) ; Key ID = 28768 jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 14907 jobnet.dk. h+KT3deWqyhEh4TpyD1oF+jFdnun+AC4sV+5ot5yask+V0yNl61PUYEWMFqJr/N/8YPzXK6Ub+q+ mA6VyPz3l64+s46GLtzcDMuNmG5eEWJY3ZsMH6UwuYJhyymDr4A3uJnqkH6vj/3+aL5IYwYLWdBr //3qwzhJPLFcpNDs2Cg= ) jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 28768 jobnet.dk. kBkbcheHyVjS5E5zQQo/kl00YzjSw0Om6n/VO/qKJzZsjXBdOL/7F9xojOVf6hZ/w/w2thVEbnAP 0+T4hK9IUN3Jr7AWBDZgm6slGzlY7N5tnONwXpmzRhKFPQoGnbdGZUvuALK0wz4nYX0spiyyNf+O tp2Ou2Trr+1tG9hO6EWxWroVoHk1hoiGcwMoAnkEm1IT7LBF9DL37TJdEbhF2o1ep8eyVZbQcpPH 1ZI4jWmwQw8n5CXbl37OsrJNL9CY4gOqKUi/KevM5IKOxmolh49lVsmgqhbtLL8C1DO9aLPL/5LR V3G8nFMKpzO3Ffe6yhGCxj+Ta7RgMKH3XAmFKw== ) jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 24586 jobnet.dk. GTYQLLibZDiVQHYc8XGOi2zo9Y3+Sc86SO2+LFijEDkc47MdKs4+CXm5tcf14ct68YkLYog9YpM5 iYHU+N/MjG+knx2D4YPqd72asIILr6oucjwsAK3EIgQu9mPvpUunPBdPgYGdptacTMOrrDOHpIY3 /VhrD2uXdZWEOnKHm8CaxqiD4Rswal+sMsErgiJ9V2t+HSYRQKvX4g98ht5+qTQR9H/7+gPYyXVY EoOAyruVsDVht63wQqPSvZs2xJ60O7ad8WrVAFXs2P4Dncf8bM8qPGi/Zd00e6jI/YFloL/e4G3V JfvANBnLofEGWTWey3hzLNe2zE8rjE1cmFCltg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for jobnet.dk
	`jobnet.dk. 172800 IN DNSKEY ( 256 3 5 AwEAAdyvsdbVCdqkrEOhppQJnu2SVzvwqdKaXQ6qI0sI04QoKTZmBtd0KZO+ZqbhMunlKoCEfYaT my+p9fB0IEj3FVTK6n2Esb85KOF9kcpWgBmR8Z4CWANI7o+4qHP1Q2fQa6jZYD0wxFmvLxf5HCgP oIY4OF+UWobdTPrNeKgz2dMx ) ; Key ID = 14907`
	`jobnet.dk. 172800 IN DNSKEY ( 257 3 5 AwEAAdZjPvQwEgLkqHHi09p2g7L84Al1KXWGLD9ITr63NNMbAyT2bK2YZEoJwMX/qmNMmOPMjuiZ fATS3WPPGkd+/2vYOkJ2VZJMu17MHVwQStt9F/gcwzmsnEfypeihS3zzQTHW8Tkw/hb7dWE2r/L8 pp+w94lovPcbQfhyJcd507Xbu/Y3EIeo6Vq5us/LJz4MR1BKpukx4SDz77y11Ep+Tjwkp2T3+ghi lB7YMegdXdu1DOl2Vb+OZbiKDfw+I3EJjuHZF5kxe5fgE7X5rAfg2fXHmYYam7UxGFEPfyhh8B5L OqzKZR+QzsTvC+N7SgyYewJsLY4h2/cWW1vbI95MzwU= ) ; Key ID = 24586`
	`jobnet.dk. 172800 IN DNSKEY ( 257 3 5 AwEAAb4oCH9CT4do1QnpaKHTxHBxkpTwb01uEV1mpiKhj+x2wcS1SqLDYqT3g0JIQcHGj9N9Fq1Z BcAuVP8BKdRF/AHhcX6QW9hBm4brnEnxPqkByASBtkY0cZYgMiFsnSGwxc2+m5KJ1zz1UA+wz3cw 8q4ayWDXgki0KYdFcaf3sb0piIEwqJYmP96YdDMkctJxcQ9jOxZm57E5UPbjTBQGdV362WNtXWNz uWsbXiZfFEx6UDHP4VQL+tzQwPIybsSn+QMQ1nVkwfICI36L/9/4QBco96CsctgKVbzCQgYXGNi9 X9nvAQRE/UrY32pLRC6z/ju/wdybsn5vOB5DTAZ4aOM= ) ; Key ID = 28768`
	DNSKEY=28768/SEP is now in the chain-of-trust
	DS=28768/SHA-1 verifies DNSKEY=28768/SEP
	DS=28768/SHA-256 verifies DNSKEY=28768/SEP
	DS=28768/SHA-384 verifies DNSKEY=28768/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 14907 jobnet.dk. h+KT3deWqyhEh4TpyD1oF+jFdnun+AC4sV+5ot5yask+V0yNl61PUYEWMFqJr/N/8YPzXK6Ub+q+ mA6VyPz3l64+s46GLtzcDMuNmG5eEWJY3ZsMH6UwuYJhyymDr4A3uJnqkH6vj/3+aL5IYwYLWdBr //3qwzhJPLFcpNDs2Cg= )`
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 28768 jobnet.dk. kBkbcheHyVjS5E5zQQo/kl00YzjSw0Om6n/VO/qKJzZsjXBdOL/7F9xojOVf6hZ/w/w2thVEbnAP 0+T4hK9IUN3Jr7AWBDZgm6slGzlY7N5tnONwXpmzRhKFPQoGnbdGZUvuALK0wz4nYX0spiyyNf+O tp2Ou2Trr+1tG9hO6EWxWroVoHk1hoiGcwMoAnkEm1IT7LBF9DL37TJdEbhF2o1ep8eyVZbQcpPH 1ZI4jWmwQw8n5CXbl37OsrJNL9CY4gOqKUi/KevM5IKOxmolh49lVsmgqhbtLL8C1DO9aLPL/5LR V3G8nFMKpzO3Ffe6yhGCxj+Ta7RgMKH3XAmFKw== )`
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 5 2 172800 20210313034935 20210309032359 24586 jobnet.dk. GTYQLLibZDiVQHYc8XGOi2zo9Y3+Sc86SO2+LFijEDkc47MdKs4+CXm5tcf14ct68YkLYog9YpM5 iYHU+N/MjG+knx2D4YPqd72asIILr6oucjwsAK3EIgQu9mPvpUunPBdPgYGdptacTMOrrDOHpIY3 /VhrD2uXdZWEOnKHm8CaxqiD4Rswal+sMsErgiJ9V2t+HSYRQKvX4g98ht5+qTQR9H/7+gPYyXVY EoOAyruVsDVht63wQqPSvZs2xJ60O7ad8WrVAFXs2P4Dncf8bM8qPGi/Zd00e6jI/YFloL/e4G3V JfvANBnLofEGWTWey3hzLNe2zE8rjE1cmFCltg== )`
	RRSIG=14907 and DNSKEY=14907 verifies the DNSKEY RRset
	RRSIG=28768 and DNSKEY=28768/SEP verifies the DNSKEY RRset
	RRSIG=24586 and DNSKEY=24586/SEP verifies the DNSKEY RRset
	DNSKEY=14907 is now in the chain-of-trust
	DNSKEY=24586/SEP is now in the chain-of-trust
	Query to ns2.sitnet.dk for jobnet.dk/A
	Received 435 bytes from 188.64.157.26
	;; Answer received from 188.64.157.26 (435 bytes) ;; HEADER SECTION ;; id = 62962 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 300 IN A 131.165.62.49 jobnet.dk. 300 IN RRSIG ( A 5 2 300 20210312220043 20210308215442 14907 jobnet.dk. qMmThFY54xyjuKzx/AbfHgYXUk8PzcMbiTUNrLz2apOrJNLgV5W3oj8ZM+SljBzzNPoeGdGZFFjP dKz6nMUE+jOpjfukXP/mw++ydNhTu1ReXfd84Cs2US0b1niTCesKBO3g/O4A6MAKeeestbDMhrf3 otK7Hpe9HInLRLQGZlw= ) ;; AUTHORITY SECTION (3 records) jobnet.dk. 3600 IN NS ns3.sitnet.dk. jobnet.dk. 3600 IN NS ns2.sitnet.dk. jobnet.dk. 3600 IN RRSIG ( NS 5 2 3600 20210312103802 20210308102301 14907 jobnet.dk. C5iKlpgzeAacl9cHqDxbvCA+qhRZY/tRgsn4t9Krd6X664YVFMgQIOHBXUYb4G4ExUymEPeHhVBt tt6kVFkXmz/f4t/6zbBqgn6N3FNglk1Ep3VDxLZoQejpXNwU1XGmk55JIROR8jwqRsbwnT5wywC8 CG1c5tEOtApun8im25A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	jobnet.dk is authoritative for jobnet.dk
	Found RRSIG signed by jobnet.dk zone
	Query to ns3.sitnet.dk for jobnet.dk/SOA
	Received 477 bytes from 188.64.157.27
	;; Answer received from 188.64.157.27 (477 bytes) ;; HEADER SECTION ;; id = 57849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN SOA ;; ANSWER SECTION (2 records) jobnet.dk. 3600 IN SOA ( ns2.sitnet.dk. hostmaster.statens-it.dk. 14097 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) jobnet.dk. 3600 IN RRSIG ( SOA 5 2 3600 20210313072559 20210309062559 14907 jobnet.dk. oxS+9OyI1kARWAFjVvqh3RZNp873PF78vJg80DO+R6E0NFOjMmZHiP6Zb+VT8qtc+aJYowZ18RIy k9XYRXgaRMEQ4puV7f8Y1hNVxtvM9UpShsmcHSu4as0RnPg5wSERg93swsf7rzYVJo0Gj6eaHXV8 LSkEvk6mCj6cUEmV9Lw= ) ;; AUTHORITY SECTION (3 records) jobnet.dk. 3600 IN NS ns3.sitnet.dk. jobnet.dk. 3600 IN NS ns2.sitnet.dk. jobnet.dk. 3600 IN RRSIG ( NS 5 2 3600 20210312103802 20210308102301 14907 jobnet.dk. C5iKlpgzeAacl9cHqDxbvCA+qhRZY/tRgsn4t9Krd6X664YVFMgQIOHBXUYb4G4ExUymEPeHhVBt tt6kVFkXmz/f4t/6zbBqgn6N3FNglk1Ep3VDxLZoQejpXNwU1XGmk55JIROR8jwqRsbwnT5wywC8 CG1c5tEOtApun8im25A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.sitnet.dk for jobnet.dk/SOA
	Received 477 bytes from 188.64.157.26
	;; Answer received from 188.64.157.26 (477 bytes) ;; HEADER SECTION ;; id = 2088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN SOA ;; ANSWER SECTION (2 records) jobnet.dk. 3600 IN SOA ( ns2.sitnet.dk. hostmaster.statens-it.dk. 14097 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) jobnet.dk. 3600 IN RRSIG ( SOA 5 2 3600 20210313072559 20210309062559 14907 jobnet.dk. oxS+9OyI1kARWAFjVvqh3RZNp873PF78vJg80DO+R6E0NFOjMmZHiP6Zb+VT8qtc+aJYowZ18RIy k9XYRXgaRMEQ4puV7f8Y1hNVxtvM9UpShsmcHSu4as0RnPg5wSERg93swsf7rzYVJo0Gj6eaHXV8 LSkEvk6mCj6cUEmV9Lw= ) ;; AUTHORITY SECTION (3 records) jobnet.dk. 3600 IN NS ns3.sitnet.dk. jobnet.dk. 3600 IN NS ns2.sitnet.dk. jobnet.dk. 3600 IN RRSIG ( NS 5 2 3600 20210312103802 20210308102301 14907 jobnet.dk. C5iKlpgzeAacl9cHqDxbvCA+qhRZY/tRgsn4t9Krd6X664YVFMgQIOHBXUYb4G4ExUymEPeHhVBt tt6kVFkXmz/f4t/6zbBqgn6N3FNglk1Ep3VDxLZoQejpXNwU1XGmk55JIROR8jwqRsbwnT5wywC8 CG1c5tEOtApun8im25A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.sitnet.dk for jobnet.dk/A
	Received 435 bytes from 188.64.157.26
	;; Answer received from 188.64.157.26 (435 bytes) ;; HEADER SECTION ;; id = 22971 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 300 IN A 131.165.62.49 jobnet.dk. 300 IN RRSIG ( A 5 2 300 20210312220043 20210308215442 14907 jobnet.dk. qMmThFY54xyjuKzx/AbfHgYXUk8PzcMbiTUNrLz2apOrJNLgV5W3oj8ZM+SljBzzNPoeGdGZFFjP dKz6nMUE+jOpjfukXP/mw++ydNhTu1ReXfd84Cs2US0b1niTCesKBO3g/O4A6MAKeeestbDMhrf3 otK7Hpe9HInLRLQGZlw= ) ;; AUTHORITY SECTION (3 records) jobnet.dk. 3600 IN NS ns3.sitnet.dk. jobnet.dk. 3600 IN NS ns2.sitnet.dk. jobnet.dk. 3600 IN RRSIG ( NS 5 2 3600 20210312103802 20210308102301 14907 jobnet.dk. C5iKlpgzeAacl9cHqDxbvCA+qhRZY/tRgsn4t9Krd6X664YVFMgQIOHBXUYb4G4ExUymEPeHhVBt tt6kVFkXmz/f4t/6zbBqgn6N3FNglk1Ep3VDxLZoQejpXNwU1XGmk55JIROR8jwqRsbwnT5wywC8 CG1c5tEOtApun8im25A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	jobnet.dk A RR has value 131.165.62.49
	Found 1 RRSIGs over A RRset
	`jobnet.dk. 300 IN RRSIG ( A 5 2 300 20210312220043 20210308215442 14907 jobnet.dk. qMmThFY54xyjuKzx/AbfHgYXUk8PzcMbiTUNrLz2apOrJNLgV5W3oj8ZM+SljBzzNPoeGdGZFFjP dKz6nMUE+jOpjfukXP/mw++ydNhTu1ReXfd84Cs2US0b1niTCesKBO3g/O4A6MAKeeestbDMhrf3 otK7Hpe9HInLRLQGZlw= )`
	RRSIG=14907 and DNSKEY=14907 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jobnet.dk at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: