DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-02-21 03:14:03 UTC, NTP stratum 4

Analyzing DNSSEC problems for kg

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 1425 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1425 bytes) ;; HEADER SECTION ;; id = 23039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 19164 . eyvOQiC637051ggBwNwq0Kle0vatTO4HrfxgLlRcVDWGZeYVoDRGkqPiCyC1K1HvUrRQHB8vbXfd hrVfXJpjh9e1+Uf403++n6J94wMi2UlAmUkNwo6ROE9JcT4QFpQrUj1TPqY9DpdRrRUYgAPl/PNC vKwIvbwSt4I070PLGGPeumOIPCeZr7YMt8ewiCS3uwOUJB6bk8qUo4tQeL5pkPpmFgozw2v7JT/8 nTZfbu6T0+9GmqRDxvizFVZ8lQRKZZif+Ilyb+Lz7j2XHiI0JszLEQ5vQKLKEtBtyHwcL7ZPgbN/ mpN9ik8h/Jx0H1hjhaS+jSCBBulq+hde8GFH0A== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190313000000 20190220000000 20326 . bKvs4iBtsS7x4UItBsNxJnGzKUowmON76AJt6DQlUjcDXdmNUGW0DNfwz91UCnfonlNeG09mCbRF zhfrgNiE2Niu0Qxh+EcygOjuy1uObcPgFBUsKp201u0WFQwrUl4O0NQfPY5Fa01e44v1u+L/yj2W K4gW2BKfW+5d9GIJhWRAPYWphOiG0+G1MUlWQ45cS07wu2X90+UDREw0prI0c4yJ9OiI6OnSvUvD hoyIgf5oHHYPieU7qu/aaiY8MdyJgfIelmFA65VzLDsTAHGoaagxJEolJehWSJl6AhY0mIs6lF2W XVCtEQbdLocsuCXln3w/n8jO2oJBotQ7S6E4bQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to m.root-servers.net for kg/A
	Received 518 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (518 bytes) ;; HEADER SECTION ;; id = 57707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) kg. 172800 IN NS kg.cctld.authdns.ripe.net. kg. 172800 IN NS ns.kg. kg. 86400 IN DS 49954 5 1 285c47ca00e9416e0c6bd6f7317bf57b0ee1cc7d kg. 86400 IN DS ( 49954 5 2 9166ca43b29f27bc7cc8b758f7027724ea2b860dbe49cf08a2763ea0e95e8754 ) kg. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . FyzW0/BaBr0uLAU9dB1ebKTPZTkC7dZ+Pp5II5eH1qmU9t6/ITfNJVFVwYJ2e8b3uChN8e8bKGmx XkNGiRfbPSrM1N6ab8jyG1YmoLIiLbQGazezf+2T0/lufB0Owxne5epY77K408f42uXlRmU1+CeG H6Xda8l8BgkQMWKrK6f8EYPypgZ0DfUvHQBR24eRLVOi8QPYt0JLtTsu80YXgm0/h5WS9A0QI/mZ njugU9U/MwFoz9KES7HfT1Vn3mMs/XqQdq+tEaaJl9s//hK0XzR3/rbl5xi/WD/kJdeR0oXKq2lL FWGSNnHEMjqITjLlblcbLnmijOGUo6yXMlhVSg== ) ;; ADDITIONAL SECTION (4 records) kg.cctld.authdns.ripe.net. 172800 IN A 193.0.9.84 ns.kg. 172800 IN A 195.38.160.36 kg.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::84 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for kg/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for kg/DNSKEY: 'IPv6 transport disabled'
	Received 518 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (518 bytes) ;; HEADER SECTION ;; id = 18652 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) kg. 172800 IN NS ns.kg. kg. 172800 IN NS kg.cctld.authdns.ripe.net. kg. 86400 IN DS ( 49954 5 2 9166ca43b29f27bc7cc8b758f7027724ea2b860dbe49cf08a2763ea0e95e8754 ) kg. 86400 IN DS 49954 5 1 285c47ca00e9416e0c6bd6f7317bf57b0ee1cc7d kg. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . FyzW0/BaBr0uLAU9dB1ebKTPZTkC7dZ+Pp5II5eH1qmU9t6/ITfNJVFVwYJ2e8b3uChN8e8bKGmx XkNGiRfbPSrM1N6ab8jyG1YmoLIiLbQGazezf+2T0/lufB0Owxne5epY77K408f42uXlRmU1+CeG H6Xda8l8BgkQMWKrK6f8EYPypgZ0DfUvHQBR24eRLVOi8QPYt0JLtTsu80YXgm0/h5WS9A0QI/mZ njugU9U/MwFoz9KES7HfT1Vn3mMs/XqQdq+tEaaJl9s//hK0XzR3/rbl5xi/WD/kJdeR0oXKq2lL FWGSNnHEMjqITjLlblcbLnmijOGUo6yXMlhVSg== ) ;; ADDITIONAL SECTION (4 records) kg.cctld.authdns.ripe.net. 172800 IN A 193.0.9.84 ns.kg. 172800 IN A 195.38.160.36 kg.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::84 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone kg

	Checking DS between . and kg
	Query to e.root-servers.net for kg/DS
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for kg/DS: 'IPv6 transport disabled'
	Received 402 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (402 bytes) ;; HEADER SECTION ;; id = 24531 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN DS ;; ANSWER SECTION (3 records) kg. 86400 IN DS 49954 5 1 285c47ca00e9416e0c6bd6f7317bf57b0ee1cc7d kg. 86400 IN DS ( 49954 5 2 9166ca43b29f27bc7cc8b758f7027724ea2b860dbe49cf08a2763ea0e95e8754 ) kg. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . FyzW0/BaBr0uLAU9dB1ebKTPZTkC7dZ+Pp5II5eH1qmU9t6/ITfNJVFVwYJ2e8b3uChN8e8bKGmx XkNGiRfbPSrM1N6ab8jyG1YmoLIiLbQGazezf+2T0/lufB0Owxne5epY77K408f42uXlRmU1+CeG H6Xda8l8BgkQMWKrK6f8EYPypgZ0DfUvHQBR24eRLVOi8QPYt0JLtTsu80YXgm0/h5WS9A0QI/mZ njugU9U/MwFoz9KES7HfT1Vn3mMs/XqQdq+tEaaJl9s//hK0XzR3/rbl5xi/WD/kJdeR0oXKq2lL FWGSNnHEMjqITjLlblcbLnmijOGUo6yXMlhVSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for kg in the . zone
	DS=49954/SHA-1 has algorithm RSASHA1
	DS=49954/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`kg. 86400 IN RRSIG ( DS 8 1 86400 20190305180000 20190220170000 16749 . FyzW0/BaBr0uLAU9dB1ebKTPZTkC7dZ+Pp5II5eH1qmU9t6/ITfNJVFVwYJ2e8b3uChN8e8bKGmx XkNGiRfbPSrM1N6ab8jyG1YmoLIiLbQGazezf+2T0/lufB0Owxne5epY77K408f42uXlRmU1+CeG H6Xda8l8BgkQMWKrK6f8EYPypgZ0DfUvHQBR24eRLVOi8QPYt0JLtTsu80YXgm0/h5WS9A0QI/mZ njugU9U/MwFoz9KES7HfT1Vn3mMs/XqQdq+tEaaJl9s//hK0XzR3/rbl5xi/WD/kJdeR0oXKq2lL FWGSNnHEMjqITjLlblcbLnmijOGUo6yXMlhVSg== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=49954/SHA-1 is now in the chain-of-trust
	`kg. 86400 IN DS 49954 5 1 285c47ca00e9416e0c6bd6f7317bf57b0ee1cc7d`
	`kg. 86400 IN DS ( 49954 5 2 9166ca43b29f27bc7cc8b758f7027724ea2b860dbe49cf08a2763ea0e95e8754 )`
	Query to kg.cctld.authdns.ripe.net for kg/DNSKEY
	Error querying kg.cctld.authdns.ripe.net/2001:67c:e0:0:0:0:0:84 for kg/DNSKEY: 'IPv6 transport disabled'
	Received 651 bytes from 193.0.9.84
	;; Answer received from 193.0.9.84 (651 bytes) ;; HEADER SECTION ;; id = 24670 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN DNSKEY ;; ANSWER SECTION (4 records) kg. 86400 IN DNSKEY ( 256 3 5 AwEAAcSK2d/6w7v21X6BBZwV91h33873M17DeYueCbcqOXtP+Dfzsce3wW9BUoJbOchPGfweXUik Yk10RwQOU//S+6ax2bQmrag/pmlFfQaoejEXggB2WhDWp+qLsGVodzv5OzuV7teplRRBhAAltoQk jXn1ce6rh0GyEG+7SxpXSK3B ) ; Key ID = 49950 kg. 86400 IN DNSKEY ( 257 3 5 AwEAAeaExCq4ADTB68hLo+qZkKXkS1w0oV5ZFlzg/2rSSujAhW/cvFHD0DDSQtNpjuNZ3vtuFSiJ IRq4ftMQFxTVd1jGtxvbthDBo8KoU3gecf0rIksjiQF8EgceSJocZH7lwqxRSzHG7jq0TEcsHITD HRgNVjo1C52CNqYZ7keAwVev ) ; Key ID = 49954 kg. 86400 IN RRSIG ( DNSKEY 5 1 86400 20191231235959 20190220210002 49950 kg. H1pV4hl9cNsri7a+CAMMA4SnQ+kHuGCFs19gJxMLiRajCM/Mjhv/v6qGud4g5dXGPi2C53cjDdii q2ylHX6iiV9fM+2At7Vb3Z0hW9MZzaCcBbBPVYwAP78cAexVEDCSR96utGrSkCu5TGEfUVmJ3hNV BgUXkIyYKmqQpm4y7AM= ) kg. 86400 IN RRSIG ( DNSKEY 5 1 86400 20191231235959 20190220210002 49954 kg. 5kpcoK7PBjx/5jW+HPHJQ1IItYID/ptbF0q/O8Ni8y4EABq7Wel7C2eMN0N3XruqQehNuiyKaHFH c7K9gJ9FxRQt/YziH2xhk6YJDj53wl4c3B0JrD+pg1A17YTxqFC38gL6vpH4Qvhsc/ait9nCRDaZ +JucPUqkqTqVPXidlU8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for kg
	`kg. 86400 IN DNSKEY ( 256 3 5 AwEAAcSK2d/6w7v21X6BBZwV91h33873M17DeYueCbcqOXtP+Dfzsce3wW9BUoJbOchPGfweXUik Yk10RwQOU//S+6ax2bQmrag/pmlFfQaoejEXggB2WhDWp+qLsGVodzv5OzuV7teplRRBhAAltoQk jXn1ce6rh0GyEG+7SxpXSK3B ) ; Key ID = 49950`
	`kg. 86400 IN DNSKEY ( 257 3 5 AwEAAeaExCq4ADTB68hLo+qZkKXkS1w0oV5ZFlzg/2rSSujAhW/cvFHD0DDSQtNpjuNZ3vtuFSiJ IRq4ftMQFxTVd1jGtxvbthDBo8KoU3gecf0rIksjiQF8EgceSJocZH7lwqxRSzHG7jq0TEcsHITD HRgNVjo1C52CNqYZ7keAwVev ) ; Key ID = 49954`
	DNSKEY=49954/SEP is now in the chain-of-trust
	DS=49954/SHA-1 verifies DNSKEY=49954/SEP
	DS=49954/SHA-256 verifies DNSKEY=49954/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`kg. 86400 IN RRSIG ( DNSKEY 5 1 86400 20191231235959 20190220210002 49950 kg. H1pV4hl9cNsri7a+CAMMA4SnQ+kHuGCFs19gJxMLiRajCM/Mjhv/v6qGud4g5dXGPi2C53cjDdii q2ylHX6iiV9fM+2At7Vb3Z0hW9MZzaCcBbBPVYwAP78cAexVEDCSR96utGrSkCu5TGEfUVmJ3hNV BgUXkIyYKmqQpm4y7AM= )`
	`kg. 86400 IN RRSIG ( DNSKEY 5 1 86400 20191231235959 20190220210002 49954 kg. 5kpcoK7PBjx/5jW+HPHJQ1IItYID/ptbF0q/O8Ni8y4EABq7Wel7C2eMN0N3XruqQehNuiyKaHFH c7K9gJ9FxRQt/YziH2xhk6YJDj53wl4c3B0JrD+pg1A17YTxqFC38gL6vpH4Qvhsc/ait9nCRDaZ +JucPUqkqTqVPXidlU8= )`
	RRSIG=49950 and DNSKEY=49950 verifies the DNSKEY RRset
	RRSIG=49954 and DNSKEY=49954/SEP verifies the DNSKEY RRset
	DNSKEY=49950 is now in the chain-of-trust
	Query to kg.cctld.authdns.ripe.net for kg/A
	Error querying kg.cctld.authdns.ripe.net/2001:67c:e0:0:0:0:0:84 for kg/A: 'IPv6 transport disabled'
	Received 433 bytes from 193.0.9.84
	;; Answer received from 193.0.9.84 (433 bytes) ;; HEADER SECTION ;; id = 25919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) kg. 86400 IN SOA ( ns.kg. adm.infotel.kg. 1550700002 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) kg. 86400 IN RRSIG ( SOA 5 1 86400 20191231235959 20190220210002 49950 kg. WFJeoi2QFsx+/N/sqRJpjeYXygp0pVjc/apdVSut3foyFPPmUw4aJCnaTj7vKsqCTaix5ts9fQ5j 5Ef/36x9ZRCP3DOS2yKfB1uOvSOYLS4cYBNSiB4qryXKil5n0vjuIjlCiIDEsXo9a7wZnwkwjRuK KjrgGC7Srlz9YVxGWys= ) kg. 86400 IN NSEC -.kg. NS SOA RRSIG NSEC DNSKEY kg. 86400 IN RRSIG ( NSEC 5 1 86400 20191231235959 20190220210002 49950 kg. DfMfeOMYwzg366Zo4ckXWhz28TgHBPiBjlVDH0j1wr4X7Kcu12E81HKxa5SAfVOQ/wuzeffc9VFB MaAU3rd3SGiflflkvR1pVATXLgDrNjti408XDtwr2JdyzlzjY3BfyTUTFwXQl1hRNIVuSjl02/7e +wJYKPZOLuA2HSnwFH8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	kg is authoritative for kg
	Found RRSIG signed by kg zone
	Query to ns.kg for kg/SOA
	Received 672 bytes from 195.38.160.36
	;; Answer received from 195.38.160.36 (672 bytes) ;; HEADER SECTION ;; id = 44481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN SOA ;; ANSWER SECTION (2 records) kg. 86400 IN SOA ( ns.kg. adm.infotel.kg. 1550718002 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) kg. 86400 IN RRSIG ( SOA 5 1 86400 20191231235959 20190221020001 49950 kg. lc/PM1yaQb02tddOh2e+ag5YzqdXlzMWQbR3v4an4u9e39zIdaRYfBzac8OaZRgPq7P2H3pwjbJY r/0aBhfIKVj/hMwjHq/8EZqZlPRN1KUyUj7LdQENXfUxWkYQxCyxyJ/djFGw4k90R1PX9xVhA3Kf 88LNjMnVnj9rmzR14Cg= ) ;; AUTHORITY SECTION (4 records) kg. 86400 IN NS KG.CCTLD.AUTHDNS.RIPE.NET. kg. 86400 IN NS AS.ASIAINFO.KG. kg. 86400 IN NS ns.kg. kg. 86400 IN RRSIG ( NS 5 1 86400 20191231235959 20190221020001 49950 kg. FT5GdmaxEH8W7ul5HTrB6c5idmE5LeqpcUru3Jnd2MlMNueOlwIDgavH+9LMc+qHNVA05wliRG0d z29QDGE6OhnwXed8/CuHGQURR9kRR3a8Y+ast1C1lNylOJ31zNLkTwZ2+hEP0rXXShl0dwvIEMxc +o5+h0QW7shhvZrIAkU= ) ;; ADDITIONAL SECTION (3 records) NS.KG. 86400 IN A 195.38.160.36 NS.KG. 86400 IN RRSIG ( A 5 2 86400 20191231235959 20190221020001 49950 kg. CsvzH9+2kHO86lhyI4RfEAKNVUNyRSNr2pyGVI2ClJjlhs9mtU6A7Ni0CDVY+uc+MhF5h3bH5o2j e5Vc6zax+Px1S2RMa0tN6ImQXf4m8dLThpyQECaf0q9fYNocPVigXuxbe5NPW/IsMVpDH6P7aH2k 3XOhIpdn5Q8I8JcsS1A= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to kg.cctld.authdns.ripe.net for kg/SOA
	Error querying kg.cctld.authdns.ripe.net/2001:67c:e0:0:0:0:0:84 for kg/SOA: 'IPv6 transport disabled'
	Received 244 bytes from 193.0.9.84
	;; Answer received from 193.0.9.84 (244 bytes) ;; HEADER SECTION ;; id = 46163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN SOA ;; ANSWER SECTION (2 records) kg. 86400 IN SOA ( ns.kg. adm.infotel.kg. 1550700002 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) kg. 86400 IN RRSIG ( SOA 5 1 86400 20191231235959 20190220210002 49950 kg. WFJeoi2QFsx+/N/sqRJpjeYXygp0pVjc/apdVSut3foyFPPmUw4aJCnaTj7vKsqCTaix5ts9fQ5j 5Ef/36x9ZRCP3DOS2yKfB1uOvSOYLS4cYBNSiB4qryXKil5n0vjuIjlCiIDEsXo9a7wZnwkwjRuK KjrgGC7Srlz9YVxGWys= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	kg.cctld.authdns.ripe.net serial (1550700002) differs from ns.kg serial (1550718002)
	Query to kg.cctld.authdns.ripe.net for kg/A
	Error querying kg.cctld.authdns.ripe.net/2001:67c:e0:0:0:0:0:84 for kg/A: 'IPv6 transport disabled'
	Received 433 bytes from 193.0.9.84
	;; Answer received from 193.0.9.84 (433 bytes) ;; HEADER SECTION ;; id = 29517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; kg. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) kg. 86400 IN SOA ( ns.kg. adm.infotel.kg. 1550700002 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) kg. 86400 IN RRSIG ( SOA 5 1 86400 20191231235959 20190220210002 49950 kg. WFJeoi2QFsx+/N/sqRJpjeYXygp0pVjc/apdVSut3foyFPPmUw4aJCnaTj7vKsqCTaix5ts9fQ5j 5Ef/36x9ZRCP3DOS2yKfB1uOvSOYLS4cYBNSiB4qryXKil5n0vjuIjlCiIDEsXo9a7wZnwkwjRuK KjrgGC7Srlz9YVxGWys= ) kg. 86400 IN NSEC -.kg. NS SOA RRSIG NSEC DNSKEY kg. 86400 IN RRSIG ( NSEC 5 1 86400 20191231235959 20190220210002 49950 kg. DfMfeOMYwzg366Zo4ckXWhz28TgHBPiBjlVDH0j1wr4X7Kcu12E81HKxa5SAfVOQ/wuzeffc9VFB MaAU3rd3SGiflflkvR1pVATXLgDrNjti408XDtwr2JdyzlzjY3BfyTUTFwXQl1hRNIVuSjl02/7e +wJYKPZOLuA2HSnwFH8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`kg. 86400 IN RRSIG ( NSEC 5 1 86400 20191231235959 20190220210002 49950 kg. DfMfeOMYwzg366Zo4ckXWhz28TgHBPiBjlVDH0j1wr4X7Kcu12E81HKxa5SAfVOQ/wuzeffc9VFB MaAU3rd3SGiflflkvR1pVATXLgDrNjti408XDtwr2JdyzlzjY3BfyTUTFwXQl1hRNIVuSjl02/7e +wJYKPZOLuA2HSnwFH8= )`
	RRSIG=49950 and DNSKEY=49950 verifies the NSEC RRset
	NSEC proves no records of type A exist for kg
	Found 1 RRSIGs over SOA RRset
	`kg. 86400 IN RRSIG ( SOA 5 1 86400 20191231235959 20190220210002 49950 kg. WFJeoi2QFsx+/N/sqRJpjeYXygp0pVjc/apdVSut3foyFPPmUw4aJCnaTj7vKsqCTaix5ts9fQ5j 5Ef/36x9ZRCP3DOS2yKfB1uOvSOYLS4cYBNSiB4qryXKil5n0vjuIjlCiIDEsXo9a7wZnwkwjRuK KjrgGC7Srlz9YVxGWys= )`
	RRSIG=49950 and DNSKEY=49950 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test kg at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: