DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-01-15 23:45:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gl

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1425 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1425 bytes) ;; HEADER SECTION ;; id = 33449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to k.root-servers.net for nl.gl/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for nl.gl/A: 'IPv6 transport disabled'
	Received 624 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (624 bytes) ;; HEADER SECTION ;; id = 53760 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gl. 172800 IN NS a.gl.dyntld.net. gl. 172800 IN NS a.nuuk.nic.gl. gl. 172800 IN NS b.gl.dyntld.net. gl. 172800 IN NS d.nic.gl. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20190128170000 20190115160000 16749 . fhQe44w82qGyCmZUcFrV1tjIHxqFX+hcrpSfd7VrtSMevkD9qqxLV7WY8VFKKjwv8si0WwuWbBpx u3LGSzgeWP1bJ4maoJvq6hJfD8wsg8Foh++PWuAIuClCY9MP1JVX+4p1O7Q1pADhx/El3KYkyoj8 pUxaEWAjPjXNsusaEoD+7dYc3m6F25oX5btCYKEWYFvAKBKWYcSbzDnJsdhaNgArDvwgPfGYaLHf d9JbhiiqYBxeUVn92q7zyEyLuPKs8cYhkrSayrcr8OFWzE2jcbkvFzQG8f033CIJv+u7OhUX6bmf ysghFEhgJest2CXEUk8lO795Pa6sTbMnvK0VAg== ) ;; ADDITIONAL SECTION (8 records) a.nuuk.nic.gl. 172800 IN A 194.177.224.13 d.nic.gl. 172800 IN A 204.61.216.49 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 a.gl.dyntld.net. 172800 IN A 162.88.52.8 a.gl.dyntld.net. 172800 IN AAAA 2600:2000:3000::8 b.gl.dyntld.net. 172800 IN A 162.88.53.8 b.gl.dyntld.net. 172800 IN AAAA 2600:2000:3001::8 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for gl/DNSKEY
	Received 600 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (600 bytes) ;; HEADER SECTION ;; id = 25425 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gl. 172800 IN NS d.nic.gl. gl. 172800 IN NS a.gl.dyntld.net. gl. 172800 IN NS b.gl.dyntld.net. gl. 172800 IN NS a.nuuk.nic.gl. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20190128170000 20190115160000 16749 . fhQe44w82qGyCmZUcFrV1tjIHxqFX+hcrpSfd7VrtSMevkD9qqxLV7WY8VFKKjwv8si0WwuWbBpx u3LGSzgeWP1bJ4maoJvq6hJfD8wsg8Foh++PWuAIuClCY9MP1JVX+4p1O7Q1pADhx/El3KYkyoj8 pUxaEWAjPjXNsusaEoD+7dYc3m6F25oX5btCYKEWYFvAKBKWYcSbzDnJsdhaNgArDvwgPfGYaLHf d9JbhiiqYBxeUVn92q7zyEyLuPKs8cYhkrSayrcr8OFWzE2jcbkvFzQG8f033CIJv+u7OhUX6bmf ysghFEhgJest2CXEUk8lO795Pa6sTbMnvK0VAg== ) ;; ADDITIONAL SECTION (8 records) a.gl.dyntld.net. 172800 IN A 162.88.52.8 a.nuuk.nic.gl. 172800 IN A 194.177.224.13 b.gl.dyntld.net. 172800 IN A 162.88.53.8 d.nic.gl. 172800 IN A 204.61.216.49 a.gl.dyntld.net. 172800 IN AAAA 2600:2000:3000::8 b.gl.dyntld.net. 172800 IN AAAA 2600:2000:3001::8 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gl

	Checking DS between . and gl
	Query to j.root-servers.net for gl/DS
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 9156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DS ;; ANSWER SECTION (2 records) gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20190128170000 20190115160000 16749 . fhQe44w82qGyCmZUcFrV1tjIHxqFX+hcrpSfd7VrtSMevkD9qqxLV7WY8VFKKjwv8si0WwuWbBpx u3LGSzgeWP1bJ4maoJvq6hJfD8wsg8Foh++PWuAIuClCY9MP1JVX+4p1O7Q1pADhx/El3KYkyoj8 pUxaEWAjPjXNsusaEoD+7dYc3m6F25oX5btCYKEWYFvAKBKWYcSbzDnJsdhaNgArDvwgPfGYaLHf d9JbhiiqYBxeUVn92q7zyEyLuPKs8cYhkrSayrcr8OFWzE2jcbkvFzQG8f033CIJv+u7OhUX6bmf ysghFEhgJest2CXEUk8lO795Pa6sTbMnvK0VAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gl in the . zone
	DS=11560/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gl. 86400 IN RRSIG ( DS 8 1 86400 20190128170000 20190115160000 16749 . fhQe44w82qGyCmZUcFrV1tjIHxqFX+hcrpSfd7VrtSMevkD9qqxLV7WY8VFKKjwv8si0WwuWbBpx u3LGSzgeWP1bJ4maoJvq6hJfD8wsg8Foh++PWuAIuClCY9MP1JVX+4p1O7Q1pADhx/El3KYkyoj8 pUxaEWAjPjXNsusaEoD+7dYc3m6F25oX5btCYKEWYFvAKBKWYcSbzDnJsdhaNgArDvwgPfGYaLHf d9JbhiiqYBxeUVn92q7zyEyLuPKs8cYhkrSayrcr8OFWzE2jcbkvFzQG8f033CIJv+u7OhUX6bmf ysghFEhgJest2CXEUk8lO795Pa6sTbMnvK0VAg== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=11560/SHA-256 is now in the chain-of-trust
	`gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa )`
	Query to a.gl.dyntld.net for gl/DNSKEY
	Error querying a.gl.dyntld.net/2600:2000:3000:0:0:0:0:8 for gl/DNSKEY: 'IPv6 transport disabled'
	Received 1149 bytes from 162.88.52.8
	;; Answer received from 162.88.52.8 (1149 bytes) ;; HEADER SECTION ;; id = 56659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (4 records) gl. 86400 IN DNSKEY ( 256 3 8 AwEAAbbGo18MCGQyg04lZPwYLun87j7Qdm1e3EaQHfEFlHBvsXIfr1CNA7vOW3IBjblTe6jswPHH F8eyV/PO8qs/6FWqUZO51P1T6EDtwXb/bVhnytT6IJkOBHP7f/pEwZSZqyZj1oaUik85ZRuHEZ80 EqdwJDJ2HZvcTQms9LPddn/sKHdwCl7rwT2j9vIQYEcrCiLnvGW0taRmOjgS1sofODsksK210H4s MwYTIXERB7fsgb3Namct691LDd9kRzcsIhWXaQmEmRa8xUlf9OjY8gktftFCGh0NpjHTmIMMDQNH 0Mu8tBoXASlWp0gfDXAvur/dGsTlF04Z65G0xFGMhBs= ) ; Key ID = 64161 gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560 gl. 86400 IN DNSKEY ( 256 3 8 AwEAAbvmvay5vwunOF6WBNwJi7ayQI1B6FFG3DKI+EcBWY8UEms/nUvUcTgMB66cqoSrcz08NiyE LOI3JZNuBVLxEcSyFxiw/D0kff6CrUv/Fimchzp0d2rYo4jFZE5RE8rtB9NWv77p3b0VlLEib//N CkJvMebrKGYX+daH5MkhhDIa0FE3cKwrJUQM+SzilaselgaxU/tJvuZSfdmsAG1ZCH3srVXWIhHh mRzqr9aTWYcZ62kxQKv6gagnD9SEQli1JysoKmIRgUH15Sr6xMTDO5ePhbWXGDhAKVZ1zSmisl42 xeoNYNqQ0qfsZfcsk9zbFghEIJ4yOoNbS9IydfrFltc= ) ; Key ID = 32866 gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190124000000 20190107000000 11560 gl. 6XWSuHcKnxtCw2UDYHFnt9bCYU9/60ng3nHpYQz99MrOnxXDvjCyC4sGHhXTf0aRw0/PGgC9SUlz 3TBaYLtIsGdFN00uPqTsWgxrENQeE62/3tMM15OV+k3kii5drScmS8PGTDYa6Do469w+xk8djMfH 5gELVXhPJoe2AqTDd61A0WuMjf11Z8rP2Wklr3h6n1gLYvBFMt7KdMw6itf7EkXz8SN+Tt6TqRPV 1GWusY4RtR/0yzvnWoKvjw3GF9BsyRhH1GtX83sSJvUPoIjbyaW7sU/QbHf8Vfhz5O44IM6q6QKk pM5uR2pKRJsy/0/RcXg7WZ3ekGmY8ZkCeou0PA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gl
	`gl. 86400 IN DNSKEY ( 256 3 8 AwEAAbbGo18MCGQyg04lZPwYLun87j7Qdm1e3EaQHfEFlHBvsXIfr1CNA7vOW3IBjblTe6jswPHH F8eyV/PO8qs/6FWqUZO51P1T6EDtwXb/bVhnytT6IJkOBHP7f/pEwZSZqyZj1oaUik85ZRuHEZ80 EqdwJDJ2HZvcTQms9LPddn/sKHdwCl7rwT2j9vIQYEcrCiLnvGW0taRmOjgS1sofODsksK210H4s MwYTIXERB7fsgb3Namct691LDd9kRzcsIhWXaQmEmRa8xUlf9OjY8gktftFCGh0NpjHTmIMMDQNH 0Mu8tBoXASlWp0gfDXAvur/dGsTlF04Z65G0xFGMhBs= ) ; Key ID = 64161`
	`gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560`
	`gl. 86400 IN DNSKEY ( 256 3 8 AwEAAbvmvay5vwunOF6WBNwJi7ayQI1B6FFG3DKI+EcBWY8UEms/nUvUcTgMB66cqoSrcz08NiyE LOI3JZNuBVLxEcSyFxiw/D0kff6CrUv/Fimchzp0d2rYo4jFZE5RE8rtB9NWv77p3b0VlLEib//N CkJvMebrKGYX+daH5MkhhDIa0FE3cKwrJUQM+SzilaselgaxU/tJvuZSfdmsAG1ZCH3srVXWIhHh mRzqr9aTWYcZ62kxQKv6gagnD9SEQli1JysoKmIRgUH15Sr6xMTDO5ePhbWXGDhAKVZ1zSmisl42 xeoNYNqQ0qfsZfcsk9zbFghEIJ4yOoNbS9IydfrFltc= ) ; Key ID = 32866`
	DNSKEY=11560/SEP is now in the chain-of-trust
	DS=11560/SHA-256 verifies DNSKEY=11560/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190124000000 20190107000000 11560 gl. 6XWSuHcKnxtCw2UDYHFnt9bCYU9/60ng3nHpYQz99MrOnxXDvjCyC4sGHhXTf0aRw0/PGgC9SUlz 3TBaYLtIsGdFN00uPqTsWgxrENQeE62/3tMM15OV+k3kii5drScmS8PGTDYa6Do469w+xk8djMfH 5gELVXhPJoe2AqTDd61A0WuMjf11Z8rP2Wklr3h6n1gLYvBFMt7KdMw6itf7EkXz8SN+Tt6TqRPV 1GWusY4RtR/0yzvnWoKvjw3GF9BsyRhH1GtX83sSJvUPoIjbyaW7sU/QbHf8Vfhz5O44IM6q6QKk pM5uR2pKRJsy/0/RcXg7WZ3ekGmY8ZkCeou0PA== )`
	RRSIG=11560 and DNSKEY=11560/SEP verifies the DNSKEY RRset
	DNSKEY=64161 is now in the chain-of-trust
	DNSKEY=32866 is now in the chain-of-trust
	Query to a.gl.dyntld.net for nl.gl/A
	Error querying a.gl.dyntld.net/2600:2000:3000:0:0:0:0:8 for nl.gl/A: 'IPv6 transport disabled'
	Received 866 bytes from 162.88.52.8
	;; Answer received from 162.88.52.8 (866 bytes) ;; HEADER SECTION ;; id = 15278 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns3.20dragons.com. DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN NSEC3 ( 1 1 10 1470454d e0h4ubm6qqk15o2sv41ar5opeecltbpt NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. smhptPvvWPKBRvpeQWvtHB9Cm1JGVDwPQIuoGP23kxkcFRUfh4V7m4EyD0uvbwubivWnYJwkrYB4 g2sRN6IL82SKifCplUoGVOD1RsCYUg4Rtihv7mmNQmSefrDWR+iZervtvyQD+EqyrInLq9yIbmuM wUXMCKyDVky0zWbzviioGSJUBDGXmEdcW6dqW+2ennHpM3/z9jxC7RZRESV+OaQ3VtURAzO5IlBA 8Ii6wtbgAMxZUcN5lrz6gBr1/qa1M+QixkawHRZZvrZIQRtvpl+uMYax42HmwwpI/KG1uPVwPc9Q Ecv4+n35lg6TH9PWEVudbLN8Z6qpvvoBlYHorA== ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN NSEC3 ( 1 1 10 1470454d csueeooqtkh3l0m0lrb438jr24njp1ek NS DS RRSIG ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. sDoRiWePwS/cDue9oNJ7GNnKO9jvqyqsU5/44mbnMXreQ5wJgdZiDzBGMO6Wd2C3/+ygqc150ACq J/s/V0zE+3ZqcD1IUp8iVra1SwkffsBFjc56vB28S8Tuk0omfBERKzfVXXm4pkNLS9whmOATpuYg 8daWMIAPvFkP4Y8d46ZlM7o3WpZF3B+WXwJ6u0HVhJrgoMGRNgtIpkkqJGCgx8GKBU/SA/Tc4eyC zZgFps+XDMaZWnslaN/1L7vUmPf/BNw/uK7BZdiSB3SjXBT0EjrpxzPOLMXaaT3emk9MKGmfs/FT Meo6hFfxyIaLGsVb33UFnzFOXN4eLSQO7Ja/YA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nuuk.nic.gl for nl.gl/DNSKEY
	Timeout querying a.nuuk.nic.gl/185.17.236.71 for nl.gl/DNSKEY
	All Queries to a.nuuk.nic.gl for nl.gl/DNSKEY timed out or failed
	Query to a.gl.dyntld.net for nl.gl/DNSKEY
	Error querying a.gl.dyntld.net/2600:2000:3000:0:0:0:0:8 for nl.gl/DNSKEY: 'IPv6 transport disabled'
	Received 866 bytes from 162.88.52.8
	;; Answer received from 162.88.52.8 (866 bytes) ;; HEADER SECTION ;; id = 59470 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns3.20dragons.com. nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN NSEC3 ( 1 1 10 1470454d e0h4ubm6qqk15o2sv41ar5opeecltbpt NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. smhptPvvWPKBRvpeQWvtHB9Cm1JGVDwPQIuoGP23kxkcFRUfh4V7m4EyD0uvbwubivWnYJwkrYB4 g2sRN6IL82SKifCplUoGVOD1RsCYUg4Rtihv7mmNQmSefrDWR+iZervtvyQD+EqyrInLq9yIbmuM wUXMCKyDVky0zWbzviioGSJUBDGXmEdcW6dqW+2ennHpM3/z9jxC7RZRESV+OaQ3VtURAzO5IlBA 8Ii6wtbgAMxZUcN5lrz6gBr1/qa1M+QixkawHRZZvrZIQRtvpl+uMYax42HmwwpI/KG1uPVwPc9Q Ecv4+n35lg6TH9PWEVudbLN8Z6qpvvoBlYHorA== ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN NSEC3 ( 1 1 10 1470454d csueeooqtkh3l0m0lrb438jr24njp1ek NS DS RRSIG ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. sDoRiWePwS/cDue9oNJ7GNnKO9jvqyqsU5/44mbnMXreQ5wJgdZiDzBGMO6Wd2C3/+ygqc150ACq J/s/V0zE+3ZqcD1IUp8iVra1SwkffsBFjc56vB28S8Tuk0omfBERKzfVXXm4pkNLS9whmOATpuYg 8daWMIAPvFkP4Y8d46ZlM7o3WpZF3B+WXwJ6u0HVhJrgoMGRNgtIpkkqJGCgx8GKBU/SA/Tc4eyC zZgFps+XDMaZWnslaN/1L7vUmPf/BNw/uK7BZdiSB3SjXBT0EjrpxzPOLMXaaT3emk9MKGmfs/FT Meo6hFfxyIaLGsVb33UFnzFOXN4eLSQO7Ja/YA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gl

nl.gl

	Checking DS between gl and nl.gl
	Query to d.nic.gl for nl.gl/DS
	Error querying d.nic.gl/2001:500:14:6049:ad:0:0:1 for nl.gl/DS: 'IPv6 transport disabled'
	Received 1132 bytes from 204.61.216.49
	;; Answer received from 204.61.216.49 (1132 bytes) ;; HEADER SECTION ;; id = 15088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN NSEC3 ( 1 1 10 1470454d e0h4ubm6qqk15o2sv41ar5opeecltbpt NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) DUM25OCCK901KNMGMH08HA48Q2OE9C5A.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. smhptPvvWPKBRvpeQWvtHB9Cm1JGVDwPQIuoGP23kxkcFRUfh4V7m4EyD0uvbwubivWnYJwkrYB4 g2sRN6IL82SKifCplUoGVOD1RsCYUg4Rtihv7mmNQmSefrDWR+iZervtvyQD+EqyrInLq9yIbmuM wUXMCKyDVky0zWbzviioGSJUBDGXmEdcW6dqW+2ennHpM3/z9jxC7RZRESV+OaQ3VtURAzO5IlBA 8Ii6wtbgAMxZUcN5lrz6gBr1/qa1M+QixkawHRZZvrZIQRtvpl+uMYax42HmwwpI/KG1uPVwPc9Q Ecv4+n35lg6TH9PWEVudbLN8Z6qpvvoBlYHorA== ) gl. 3600 IN SOA ( a.nuuk.nic.gl. gl-admin.tele.gl. 2019011518 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) gl. 3600 IN RRSIG ( SOA 8 1 86400 20190125020000 20190108020000 64161 gl. Q45xiSX9chJn9hU4D6L39gtwUB4NdNX7Ypt0HNFt7yUrLMbuf5G223SYdlqisX211FjrNlnVFiVN 8oAfLw0h6JmTWsYsdG9RYNQl364e/54SG/U9takzVIxEODBEvzbvYHT7m8mYUxxry1/Ihfgb4zIM KgCoAcq2hULHwaMlwG9RiKJodN6W9O4ftNONUGQB5ZGWFDUAJTNM6y8c/AVdLMGLGxdiH9xdvlka Ll/kr+VWSnLPxI5tR67DMOxvo3vYMfN3fIA93J0+psJ5BxYzj4ye3yXUrEBRAeYZexupYLWT+Y1d IKyUO6zLhPUj/8bo4HAsr8tpXF0AqBiawxtabA== ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN NSEC3 ( 1 1 10 1470454d csueeooqtkh3l0m0lrb438jr24njp1ek NS DS RRSIG ) C5KT3F845G6EILG68CGN1TIH3ABHQPA9.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190125020000 20190108020000 64161 gl. sDoRiWePwS/cDue9oNJ7GNnKO9jvqyqsU5/44mbnMXreQ5wJgdZiDzBGMO6Wd2C3/+ygqc150ACq J/s/V0zE+3ZqcD1IUp8iVra1SwkffsBFjc56vB28S8Tuk0omfBERKzfVXXm4pkNLS9whmOATpuYg 8daWMIAPvFkP4Y8d46ZlM7o3WpZF3B+WXwJ6u0HVhJrgoMGRNgtIpkkqJGCgx8GKBU/SA/Tc4eyC zZgFps+XDMaZWnslaN/1L7vUmPf/BNw/uK7BZdiSB3SjXBT0EjrpxzPOLMXaaT3emk9MKGmfs/FT Meo6hFfxyIaLGsVb33UFnzFOXN4eLSQO7Ja/YA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gl in the gl zone
	Query to ns3.20dragons.com for nl.gl/DNSKEY
	Received 215 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (215 bytes) ;; HEADER SECTION ;; id = 60688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509 nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 4509 nl.gl. 0Eq6dHtIDFlY0E48BwNUuOFSj3ZMd/yyCAqECBqeJti9odUCMgVv3WOF8RyGD6v66DoOoEbf4Pks PQZGUAE+mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for nl.gl
	`nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 4509 nl.gl. 0Eq6dHtIDFlY0E48BwNUuOFSj3ZMd/yyCAqECBqeJti9odUCMgVv3WOF8RyGD6v66DoOoEbf4Pks PQZGUAE+mw== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for nl.gl/A
	Received 151 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (151 bytes) ;; HEADER SECTION ;; id = 17368 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 4509 nl.gl. QIH4jAFaShVuhvqr+tTiCC3qJvDM6nmBsUBgAo89Vv5jc5WraTeP7rP7mrIeowvyzmiIs9e7L8lZ /Ow/pP7rXw== ) nl.gl. 86400 IN A 185.147.34.9 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gl is authoritative for nl.gl
	Found RRSIG signed by nl.gl zone
	Query to ns3.20dragons.com for nl.gl/SOA
	Received 195 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (195 bytes) ;; HEADER SECTION ;; id = 46768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 4509 nl.gl. 0VzkjBa3WaS99SU2kvTNGByG/ncyztQmfRDsY4nlwyQSCw6DikoFcNHIC4uao9SlYAc0la/JJAId IWH9euxoZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for nl.gl/SOA
	Received 195 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (195 bytes) ;; HEADER SECTION ;; id = 9610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 4509 nl.gl. 0VzkjBa3WaS99SU2kvTNGByG/ncyztQmfRDsY4nlwyQSCw6DikoFcNHIC4uao9SlYAc0la/JJAId IWH9euxoZA== ) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for nl.gl/SOA
	Received 195 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (195 bytes) ;; HEADER SECTION ;; id = 14446 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 4509 nl.gl. 0VzkjBa3WaS99SU2kvTNGByG/ncyztQmfRDsY4nlwyQSCw6DikoFcNHIC4uao9SlYAc0la/JJAId IWH9euxoZA== ) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.20dragons.com for nl.gl/SOA
	Timeout querying ns1.20dragons.com/23.94.166.82 for nl.gl/SOA
	All Queries to ns1.20dragons.com for nl.gl/SOA timed out or failed
	Query to ns3.20dragons.com for nl.gl/A
	Received 151 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (151 bytes) ;; HEADER SECTION ;; id = 45758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 4509 nl.gl. QIH4jAFaShVuhvqr+tTiCC3qJvDM6nmBsUBgAo89Vv5jc5WraTeP7rP7mrIeowvyzmiIs9e7L8lZ /Ow/pP7rXw== ) nl.gl. 86400 IN A 185.147.34.9 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gl A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`nl.gl. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 4509 nl.gl. QIH4jAFaShVuhvqr+tTiCC3qJvDM6nmBsUBgAo89Vv5jc5WraTeP7rP7mrIeowvyzmiIs9e7L8lZ /Ow/pP7rXw== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: