DNSSEC Analyzer

Domain Name:

Time: 2020-02-28 06:10:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 51038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to k.root-servers.net for nl.gl/A
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for nl.gl/A: 'IPv6 transport disabled'
	Received 539 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (539 bytes) ;; HEADER SECTION ;; id = 60150 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gl. 172800 IN NS d.nic.gl. gl. 172800 IN NS a.nuuk.nic.gl. gl. 172800 IN NS ns.cocca.fr. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . h4CrHqwuSwbloiGadhbm34fIsOKrCD32lxykYkJNKecbS0FEq+H4AubWdsEr9ibA6h1y43+u5NFr Qmz4gkzg4ojVPyjZ6dZ6oQMPGXVGmWLigvlXvbkhxcLudgq1CycNIpLOrPlaqlnEmyJhKuk92MSQ PmGqa28LMeyLg5jXHMjWuzleFU5ggah9R0Uwy9KaPS13GgtCbzucrb6bSfheRmlt2sy6Xdl6vdbC nodo9ld6ebZBuW/ECltHolHJ+wfb6Ph0pxWeDncv7dqys8Y6mqSV1BvRVSxrysnc8nfxpGomYoPt UYFxoIkbj+yRCC9tNfbEq3y4GL4RHHvprLbRUw== ) ;; ADDITIONAL SECTION (6 records) d.nic.gl. 172800 IN A 204.61.216.49 a.nuuk.nic.gl. 172800 IN A 194.177.224.13 ns.cocca.fr. 172800 IN A 185.17.236.93 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for gl/DNSKEY
	Received 536 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (536 bytes) ;; HEADER SECTION ;; id = 40945 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 6 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gl. 172800 IN NS d.nic.gl. gl. 172800 IN NS a.nuuk.nic.gl. gl. 172800 IN NS ns.cocca.fr. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . h4CrHqwuSwbloiGadhbm34fIsOKrCD32lxykYkJNKecbS0FEq+H4AubWdsEr9ibA6h1y43+u5NFr Qmz4gkzg4ojVPyjZ6dZ6oQMPGXVGmWLigvlXvbkhxcLudgq1CycNIpLOrPlaqlnEmyJhKuk92MSQ PmGqa28LMeyLg5jXHMjWuzleFU5ggah9R0Uwy9KaPS13GgtCbzucrb6bSfheRmlt2sy6Xdl6vdbC nodo9ld6ebZBuW/ECltHolHJ+wfb6Ph0pxWeDncv7dqys8Y6mqSV1BvRVSxrysnc8nfxpGomYoPt UYFxoIkbj+yRCC9tNfbEq3y4GL4RHHvprLbRUw== ) ;; ADDITIONAL SECTION (6 records) a.nuuk.nic.gl. 172800 IN A 194.177.224.13 d.nic.gl. 172800 IN A 204.61.216.49 ns.cocca.fr. 172800 IN A 185.17.236.93 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gl

	Checking DS between . and gl
	Query to f.root-servers.net for gl/DS
	Received 366 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (366 bytes) ;; HEADER SECTION ;; id = 3117 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DS ;; ANSWER SECTION (2 records) gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . h4CrHqwuSwbloiGadhbm34fIsOKrCD32lxykYkJNKecbS0FEq+H4AubWdsEr9ibA6h1y43+u5NFr Qmz4gkzg4ojVPyjZ6dZ6oQMPGXVGmWLigvlXvbkhxcLudgq1CycNIpLOrPlaqlnEmyJhKuk92MSQ PmGqa28LMeyLg5jXHMjWuzleFU5ggah9R0Uwy9KaPS13GgtCbzucrb6bSfheRmlt2sy6Xdl6vdbC nodo9ld6ebZBuW/ECltHolHJ+wfb6Ph0pxWeDncv7dqys8Y6mqSV1BvRVSxrysnc8nfxpGomYoPt UYFxoIkbj+yRCC9tNfbEq3y4GL4RHHvprLbRUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for gl in the . zone
	DS=11560/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gl. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . h4CrHqwuSwbloiGadhbm34fIsOKrCD32lxykYkJNKecbS0FEq+H4AubWdsEr9ibA6h1y43+u5NFr Qmz4gkzg4ojVPyjZ6dZ6oQMPGXVGmWLigvlXvbkhxcLudgq1CycNIpLOrPlaqlnEmyJhKuk92MSQ PmGqa28LMeyLg5jXHMjWuzleFU5ggah9R0Uwy9KaPS13GgtCbzucrb6bSfheRmlt2sy6Xdl6vdbC nodo9ld6ebZBuW/ECltHolHJ+wfb6Ph0pxWeDncv7dqys8Y6mqSV1BvRVSxrysnc8nfxpGomYoPt UYFxoIkbj+yRCC9tNfbEq3y4GL4RHHvprLbRUw== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=11560/SHA-256 is now in the chain-of-trust
	`gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa )`
	Query to d.nic.gl for gl/DNSKEY
	Error querying d.nic.gl/2001:500:14:6049:ad:0:0:1 for gl/DNSKEY: 'IPv6 transport disabled'
	Received 873 bytes from 204.61.216.49
	;; Answer received from 204.61.216.49 (873 bytes) ;; HEADER SECTION ;; id = 56830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (3 records) gl. 86400 IN DNSKEY ( 256 3 8 AwEAAdROkscnfWuc9N+D0pIjlTAwv/2bqqsfoWL8aevRxY87HdcBhsmBW0VQaaIEa/fbkUhtrK5Q tzniHZNp8mIt3vI1t15up2nFNw5bKrClE0U3aaGqWbiLZO1FwJcZe72et4ufBOBgCNqP9MFenV7J YaDshC/Uo7znYSsOx7G/N9DbaEpgopBLgVsCcZE1b46xyJPivQDiMHVvZ5dzXedjsm1ASjUrmprG bifTxH167cCsuRmax8SMis2NEovbCQIah8Z3lGHxZtEzmy/zNceWYO/qzFOJenTzlfXsIjruW8MY AsDQsjMXM94rpt8Q6+2uvH/rnSgVjF/Qh5k3TC9eAY8= ) ; Key ID = 7095 gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560 gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200313180000 20200225180000 11560 gl. fQqqe5WL9cal1Sn4nohgFfs1st86S4IQYiUI28x9GjYYpLozKu2LyqHv9Qb+luOZViQscHITy5jb 1stFt77e5TqpSJaZNJT82oT1lTxgdBFmJw09tPa9VG8nh0abqUxhUbtlHiy9AsUIswvzbBK8gDqU 7UWFUlEbth/9xWWg0KTPlP6j+10SBrEasY3LSbxOsyGRo4LrxYoGsHfRzSkg/flT5OT5LMDOhJ9H brwUeeWGdr1kiEF2uud+6xp3eD2QTxPGqknx+7pRVyy4D2fTbcJtggYrW069EcDTi4Kgcy3Hzwy5 vlOvu+cF9DQhxgOqUIHhudwZ1jrpvEvEQbROMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for gl
	`gl. 86400 IN DNSKEY ( 256 3 8 AwEAAdROkscnfWuc9N+D0pIjlTAwv/2bqqsfoWL8aevRxY87HdcBhsmBW0VQaaIEa/fbkUhtrK5Q tzniHZNp8mIt3vI1t15up2nFNw5bKrClE0U3aaGqWbiLZO1FwJcZe72et4ufBOBgCNqP9MFenV7J YaDshC/Uo7znYSsOx7G/N9DbaEpgopBLgVsCcZE1b46xyJPivQDiMHVvZ5dzXedjsm1ASjUrmprG bifTxH167cCsuRmax8SMis2NEovbCQIah8Z3lGHxZtEzmy/zNceWYO/qzFOJenTzlfXsIjruW8MY AsDQsjMXM94rpt8Q6+2uvH/rnSgVjF/Qh5k3TC9eAY8= ) ; Key ID = 7095`
	`gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560`
	DNSKEY=11560/SEP is now in the chain-of-trust
	DS=11560/SHA-256 verifies DNSKEY=11560/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200313180000 20200225180000 11560 gl. fQqqe5WL9cal1Sn4nohgFfs1st86S4IQYiUI28x9GjYYpLozKu2LyqHv9Qb+luOZViQscHITy5jb 1stFt77e5TqpSJaZNJT82oT1lTxgdBFmJw09tPa9VG8nh0abqUxhUbtlHiy9AsUIswvzbBK8gDqU 7UWFUlEbth/9xWWg0KTPlP6j+10SBrEasY3LSbxOsyGRo4LrxYoGsHfRzSkg/flT5OT5LMDOhJ9H brwUeeWGdr1kiEF2uud+6xp3eD2QTxPGqknx+7pRVyy4D2fTbcJtggYrW069EcDTi4Kgcy3Hzwy5 vlOvu+cF9DQhxgOqUIHhudwZ1jrpvEvEQbROMA== )`
	RRSIG=11560 and DNSKEY=11560/SEP verifies the DNSKEY RRset
	DNSKEY=7095 is now in the chain-of-trust
	Query to a.nuuk.nic.gl for nl.gl/A
	Received 866 bytes from 194.177.224.13
	;; Answer received from 194.177.224.13 (866 bytes) ;; HEADER SECTION ;; id = 32348 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns3.20dragons.com. S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN NSEC3 ( 1 1 10 66902340 sealjnn5b17fogubco8o5554nvh17e2h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. vYXhP6b44b/3VlWfMqxihfkOLS4QWyvj1MjmzEqPx0WIxmNIqHzg1OEObEP81+n26ISMtoPz8FcA +4aPXoAm+bjpe93d80iK/29ORKZflDIbB3zBpCb9b3QcGeov2CzHDEgvukWndMskf597ZWs/pN1M DmeftpmLjM8fTa3yU3EEIR9TFX1gEIgJHIHoM4JGD+8bETrDWlTOmqSSq1yfANMxxr8/U0wycTjD iUbYEX5rF0NxFQBI0Zr6RT30t8tqc8elFAdpQB6M2QaNS2NrmwylY4UiWuXrCbZHno4M6b/9XXA+ mgVdHXxooC9j7CAcCqUQ6QzIkQqADnXQTj/66A== ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN NSEC3 ( 1 1 10 66902340 4lufrtrs7rel94di6pggphjqorgls9t9 NS DS RRSIG ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. ewFYhhaSxF13JYduhSTkjVREOGBtErv3qOFfXAchF/at3mpQHW+yc+PmBVsfNRmQeP+wO0kyq7GD OpDT1LPIWQNpidzhqXqoYYY3Bra30fL/Wtpz0Dda4Q8h/FY7bSvYXBKa+NDNmxZsHh+XzSItOJYW jce46L3uFbBXHfvffhXt5sMPjMTSskjRmCF7+Sju9PcKfjL0EEWnVJ8wC9yk6pLlf211qilm6BDx 2TOJhCE8/UpoCbVTyQLPTctH/49yj85uSfJCOCPnGBDdutE4Pe5UGD8SO3Mx2x3bvi1bEdAYh4N6 56lg7S/V5BbI49uFu2ffXS9vsKR6CEoyxwCrPQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.nic.gl for nl.gl/DNSKEY
	Received 866 bytes from 204.61.216.49
	;; Answer received from 204.61.216.49 (866 bytes) ;; HEADER SECTION ;; id = 44970 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns3.20dragons.com. S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN NSEC3 ( 1 1 10 66902340 sealjnn5b17fogubco8o5554nvh17e2h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. vYXhP6b44b/3VlWfMqxihfkOLS4QWyvj1MjmzEqPx0WIxmNIqHzg1OEObEP81+n26ISMtoPz8FcA +4aPXoAm+bjpe93d80iK/29ORKZflDIbB3zBpCb9b3QcGeov2CzHDEgvukWndMskf597ZWs/pN1M DmeftpmLjM8fTa3yU3EEIR9TFX1gEIgJHIHoM4JGD+8bETrDWlTOmqSSq1yfANMxxr8/U0wycTjD iUbYEX5rF0NxFQBI0Zr6RT30t8tqc8elFAdpQB6M2QaNS2NrmwylY4UiWuXrCbZHno4M6b/9XXA+ mgVdHXxooC9j7CAcCqUQ6QzIkQqADnXQTj/66A== ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN NSEC3 ( 1 1 10 66902340 4lufrtrs7rel94di6pggphjqorgls9t9 NS DS RRSIG ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. ewFYhhaSxF13JYduhSTkjVREOGBtErv3qOFfXAchF/at3mpQHW+yc+PmBVsfNRmQeP+wO0kyq7GD OpDT1LPIWQNpidzhqXqoYYY3Bra30fL/Wtpz0Dda4Q8h/FY7bSvYXBKa+NDNmxZsHh+XzSItOJYW jce46L3uFbBXHfvffhXt5sMPjMTSskjRmCF7+Sju9PcKfjL0EEWnVJ8wC9yk6pLlf211qilm6BDx 2TOJhCE8/UpoCbVTyQLPTctH/49yj85uSfJCOCPnGBDdutE4Pe5UGD8SO3Mx2x3bvi1bEdAYh4N6 56lg7S/V5BbI49uFu2ffXS9vsKR6CEoyxwCrPQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gl

nl.gl

	Checking DS between gl and nl.gl
	Query to a.nuuk.nic.gl for nl.gl/DS
	Received 1132 bytes from 194.177.224.13
	;; Answer received from 194.177.224.13 (1132 bytes) ;; HEADER SECTION ;; id = 4925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN NSEC3 ( 1 1 10 66902340 sealjnn5b17fogubco8o5554nvh17e2h NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) S5510S332KU3EPMBTTTPUIEDCV7DELFD.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. vYXhP6b44b/3VlWfMqxihfkOLS4QWyvj1MjmzEqPx0WIxmNIqHzg1OEObEP81+n26ISMtoPz8FcA +4aPXoAm+bjpe93d80iK/29ORKZflDIbB3zBpCb9b3QcGeov2CzHDEgvukWndMskf597ZWs/pN1M DmeftpmLjM8fTa3yU3EEIR9TFX1gEIgJHIHoM4JGD+8bETrDWlTOmqSSq1yfANMxxr8/U0wycTjD iUbYEX5rF0NxFQBI0Zr6RT30t8tqc8elFAdpQB6M2QaNS2NrmwylY4UiWuXrCbZHno4M6b/9XXA+ mgVdHXxooC9j7CAcCqUQ6QzIkQqADnXQTj/66A== ) gl. 3600 IN SOA ( a.nuuk.nic.gl. gl-admin.tele.gl. 2020022801 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) gl. 3600 IN RRSIG ( SOA 8 1 86400 20200306140000 20200218140000 7095 gl. FbgYt1w52eHED2q6oG0tLXyYsprdd6aaAXXQqeOOiFw75RD4Gu4IOwIS5WDsUFQmJRL4NCnSfD+z qz8B0InYRBp6rtKcRbGQ3oCJMArXESO3C5qLjbtRlYKu32tMaGqE06VPxS/BQk6cA6MB7scF6i0h 5tkMj2uJgK7x/11B2RZQ97iacVmgkSnhGJShCK/zMC3uHln4LTnqkPxTaeV/zCZXEYnlhnr79q6P qNDAQaYTAerrMQiyw5uIQFx/3QdpKStzZ+f8UD3lO7Gp8RcRuLQa3KJpQvowtUxtR9s2JZgxVWpi T9e9szghNOi7s3+tzBfmXvkXDxoi3SQi6ICBkA== ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN NSEC3 ( 1 1 10 66902340 4lufrtrs7rel94di6pggphjqorgls9t9 NS DS RRSIG ) 40OVIQ9J1C7E5E0ICE4MKVCKDTBN9NBM.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20200306140000 20200218140000 7095 gl. ewFYhhaSxF13JYduhSTkjVREOGBtErv3qOFfXAchF/at3mpQHW+yc+PmBVsfNRmQeP+wO0kyq7GD OpDT1LPIWQNpidzhqXqoYYY3Bra30fL/Wtpz0Dda4Q8h/FY7bSvYXBKa+NDNmxZsHh+XzSItOJYW jce46L3uFbBXHfvffhXt5sMPjMTSskjRmCF7+Sju9PcKfjL0EEWnVJ8wC9yk6pLlf211qilm6BDx 2TOJhCE8/UpoCbVTyQLPTctH/49yj85uSfJCOCPnGBDdutE4Pe5UGD8SO3Mx2x3bvi1bEdAYh4N6 56lg7S/V5BbI49uFu2ffXS9vsKR6CEoyxwCrPQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gl in the gl zone
	Query to ns1.20dragons.com for nl.gl/DNSKEY
	Error querying ns1.20dragons.com/2001:ac8:22:2:0:0:11fc:6413 for nl.gl/DNSKEY: 'IPv6 transport disabled'
	Received 215 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (215 bytes) ;; HEADER SECTION ;; id = 61292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509 nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 4509 nl.gl. eZeFm9sabvMlC978ramYVJZssvLqUZWfIiESFUZ7sZMT0XVaLbx4St6/284gr9CNVdxxXDrgrwRC GsWbTUygcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for nl.gl
	`nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 4509 nl.gl. eZeFm9sabvMlC978ramYVJZssvLqUZWfIiESFUZ7sZMT0XVaLbx4St6/284gr9CNVdxxXDrgrwRC GsWbTUygcg== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the DNSKEY RRset
	Query to ns4.20dragons.com for nl.gl/A
	Error querying ns4.20dragons.com/2a0b:c041:9:ef8:0:0:0:4444 for nl.gl/A: 'IPv6 transport disabled'
	Received 151 bytes from 185.246.130.161
	;; Answer received from 185.246.130.161 (151 bytes) ;; HEADER SECTION ;; id = 59740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 4509 nl.gl. ZJ5CWilCayQc77xrbPmQDOuyyrABTrhkD1PdEq/mjJrhyPCvQuj2Ln0vu4S5qKFVmVIS2RyR8La8 ycCq/8v3FA== ) nl.gl. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nl.gl is authoritative for nl.gl
	Found RRSIG signed by nl.gl zone
	Query to ns3.20dragons.com for nl.gl/SOA
	Received 195 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (195 bytes) ;; HEADER SECTION ;; id = 23126 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022710 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 4509 nl.gl. Xr//lIpZlbR2RFSeM3NmcZLgcbbft7PMzlx8/arROOGA83bwpil4quSer5/wYEThrKqqppj5at+x Uy5XvL0PhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.20dragons.com for nl.gl/SOA
	Received 195 bytes from 185.246.130.161
	;; Answer received from 185.246.130.161 (195 bytes) ;; HEADER SECTION ;; id = 41755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022710 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 4509 nl.gl. Xr//lIpZlbR2RFSeM3NmcZLgcbbft7PMzlx8/arROOGA83bwpil4quSer5/wYEThrKqqppj5at+x Uy5XvL0PhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.20dragons.com for nl.gl/SOA
	Error querying ns2.20dragons.com/2a0f:ca80:0:3:0:0:0:2222 for nl.gl/SOA: 'IPv6 transport disabled'
	Received 195 bytes from 5.253.86.161
	;; Answer received from 5.253.86.161 (195 bytes) ;; HEADER SECTION ;; id = 15332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022710 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 4509 nl.gl. Xr//lIpZlbR2RFSeM3NmcZLgcbbft7PMzlx8/arROOGA83bwpil4quSer5/wYEThrKqqppj5at+x Uy5XvL0PhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.20dragons.com for nl.gl/SOA
	Received 195 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (195 bytes) ;; HEADER SECTION ;; id = 35857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022710 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 4509 nl.gl. Xr//lIpZlbR2RFSeM3NmcZLgcbbft7PMzlx8/arROOGA83bwpil4quSer5/wYEThrKqqppj5at+x Uy5XvL0PhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.20dragons.com for nl.gl/A
	Error querying ns4.20dragons.com/2a0b:c041:9:ef8:0:0:0:4444 for nl.gl/A: 'IPv6 transport disabled'
	Received 151 bytes from 185.246.130.161
	;; Answer received from 185.246.130.161 (151 bytes) ;; HEADER SECTION ;; id = 10704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 4509 nl.gl. ZJ5CWilCayQc77xrbPmQDOuyyrABTrhkD1PdEq/mjJrhyPCvQuj2Ln0vu4S5qKFVmVIS2RyR8La8 ycCq/8v3FA== ) nl.gl. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nl.gl A RR has value 185.164.136.124
	Found 1 RRSIGs over A RRset
	`nl.gl. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 4509 nl.gl. ZJ5CWilCayQc77xrbPmQDOuyyrABTrhkD1PdEq/mjJrhyPCvQuj2Ln0vu4S5qKFVmVIS2RyR8La8 ycCq/8v3FA== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: