DNSSEC Analyzer

Domain Name:

Time: 2019-09-19 17:05:52 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1139 bytes) ;; HEADER SECTION ;; id = 13672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191010000000 20190919000000 20326 . OcVKz5iMycVJP8n4f3IAAYG3AZFS3nh4t6nxMC2Jxg5uk2MyAlFUvAdvclTs15S2D9FP7aL+uQ9J aPSAaMv7opp8tOo5X5qEJjpaHTwXWjSgFeUMGhp2rtdCR1aTeIKlLd6g3JthDpEWV0ip6VQKqLNO Yx7gnaQc3j4SzK1q1YyjX/caO7m5We14vJNx0bmp4K/+U6SyKYuIu38IsHPUMbBO624MpRqW0etq cT3WiYCgGgFUTfYbr6aD4YSQPDAjII4N0yPJrBdDvbo2a3Nzvn2edq2zxRinnwWcqAqoymhZzr+h g7CTaLftqq2vTEXAtHSFk8JhLSlmciNm1S1xiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	DNSKEY=59944 is now in the chain-of-trust
	Query to i.root-servers.net for nl.gl/A
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for nl.gl/A: 'IPv6 transport disabled'
	Received 603 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (603 bytes) ;; HEADER SECTION ;; id = 64323 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gl. 172800 IN NS b.gl.dyntld.net. gl. 172800 IN NS a.nuuk.nic.gl. gl. 172800 IN NS a.gl.dyntld.net. gl. 172800 IN NS d.nic.gl. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . B9MhoKQNadOBHuM7I8KI7MpSmn7FKTbDfXqd7IOTsF2fISMzVlLzGbkRGTdtpCqhoaKtfyPrnTew gcYLFwDgtotDTXZfXQmT1GvU5iVLfWOJZnPFyFfgJOO+3zdxPOcL9guxgmmdtVuw5L6zCWPvjj52 lpKtIHEQigqfDJs+NzoEZhyKyqWJg1mjPex7ZYfqep/ZgGkTByacGl3wIRJBNifgHkdMy1H4tQ6G h1mLdCoWniG+A0HvcwtQLhvquACXg1BHuHwV3GUJzb83FN8faL7L7gCCb4YlY2RowXwlf39PDj0j 6cjGzmIiU0zpwucQJEhzXLoIJJN83swL3oIsFQ== ) ;; ADDITIONAL SECTION (8 records) a.gl.dyntld.net. 172800 IN A 162.88.52.8 a.gl.dyntld.net. 172800 IN AAAA 2600:2000:3000::8 a.nuuk.nic.gl. 172800 IN A 194.177.224.13 b.gl.dyntld.net. 172800 IN A 162.88.53.8 b.gl.dyntld.net. 172800 IN AAAA 2600:2000:3001::8 d.nic.gl. 172800 IN A 204.61.216.49 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for gl/DNSKEY
	Received 600 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (600 bytes) ;; HEADER SECTION ;; id = 23806 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gl. 172800 IN NS a.gl.dyntld.net. gl. 172800 IN NS a.nuuk.nic.gl. gl. 172800 IN NS b.gl.dyntld.net. gl. 172800 IN NS d.nic.gl. gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . B9MhoKQNadOBHuM7I8KI7MpSmn7FKTbDfXqd7IOTsF2fISMzVlLzGbkRGTdtpCqhoaKtfyPrnTew gcYLFwDgtotDTXZfXQmT1GvU5iVLfWOJZnPFyFfgJOO+3zdxPOcL9guxgmmdtVuw5L6zCWPvjj52 lpKtIHEQigqfDJs+NzoEZhyKyqWJg1mjPex7ZYfqep/ZgGkTByacGl3wIRJBNifgHkdMy1H4tQ6G h1mLdCoWniG+A0HvcwtQLhvquACXg1BHuHwV3GUJzb83FN8faL7L7gCCb4YlY2RowXwlf39PDj0j 6cjGzmIiU0zpwucQJEhzXLoIJJN83swL3oIsFQ== ) ;; ADDITIONAL SECTION (8 records) a.gl.dyntld.net. 172800 IN A 162.88.52.8 a.nuuk.nic.gl. 172800 IN A 194.177.224.13 b.gl.dyntld.net. 172800 IN A 162.88.53.8 d.nic.gl. 172800 IN A 204.61.216.49 a.gl.dyntld.net. 172800 IN AAAA 2600:2000:3000::8 b.gl.dyntld.net. 172800 IN AAAA 2600:2000:3001::8 d.nic.gl. 172800 IN AAAA 2001:500:14:6049:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gl

	Checking DS between . and gl
	Query to b.root-servers.net for gl/DS
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for gl/DS: 'IPv6 transport disabled'
	Received 366 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (366 bytes) ;; HEADER SECTION ;; id = 12661 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DS ;; ANSWER SECTION (2 records) gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa ) gl. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . B9MhoKQNadOBHuM7I8KI7MpSmn7FKTbDfXqd7IOTsF2fISMzVlLzGbkRGTdtpCqhoaKtfyPrnTew gcYLFwDgtotDTXZfXQmT1GvU5iVLfWOJZnPFyFfgJOO+3zdxPOcL9guxgmmdtVuw5L6zCWPvjj52 lpKtIHEQigqfDJs+NzoEZhyKyqWJg1mjPex7ZYfqep/ZgGkTByacGl3wIRJBNifgHkdMy1H4tQ6G h1mLdCoWniG+A0HvcwtQLhvquACXg1BHuHwV3GUJzb83FN8faL7L7gCCb4YlY2RowXwlf39PDj0j 6cjGzmIiU0zpwucQJEhzXLoIJJN83swL3oIsFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for gl in the . zone
	DS=11560/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gl. 86400 IN RRSIG ( DS 8 1 86400 20191002150000 20190919140000 59944 . B9MhoKQNadOBHuM7I8KI7MpSmn7FKTbDfXqd7IOTsF2fISMzVlLzGbkRGTdtpCqhoaKtfyPrnTew gcYLFwDgtotDTXZfXQmT1GvU5iVLfWOJZnPFyFfgJOO+3zdxPOcL9guxgmmdtVuw5L6zCWPvjj52 lpKtIHEQigqfDJs+NzoEZhyKyqWJg1mjPex7ZYfqep/ZgGkTByacGl3wIRJBNifgHkdMy1H4tQ6G h1mLdCoWniG+A0HvcwtQLhvquACXg1BHuHwV3GUJzb83FN8faL7L7gCCb4YlY2RowXwlf39PDj0j 6cjGzmIiU0zpwucQJEhzXLoIJJN83swL3oIsFQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=11560/SHA-256 is now in the chain-of-trust
	`gl. 86400 IN DS ( 11560 8 2 3d44df84c78a82e0e9824440f3e82b402551341dbff3bce72cd786435d15f1aa )`
	Query to a.nuuk.nic.gl for gl/DNSKEY
	Received 1149 bytes from 194.177.224.13
	;; Answer received from 194.177.224.13 (1149 bytes) ;; HEADER SECTION ;; id = 46148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gl. IN DNSKEY ;; ANSWER SECTION (4 records) gl. 86400 IN DNSKEY ( 256 3 8 AwEAAdskQE/NpwcXUCu/FCR7Aj+UUTHzIW7YNx+Jcrl9+6SbWnJlIGOE6vDWir6YSpxYa09vez3t 0Y+iOrvEk1tsHzsK/giBis26+3H8JkWJOQYS9rov3yVH0VD2I/J/YH/Hb4CuKkIGmHd6l1ikHBIz eEP/T77OmjBzTF2HTzu8yKn0M02e1j0gVGDOVrlBnR/CX3jiOgtvP8UO7ZKipE6Ajae9XsSaOZwm 5gR4ekIgRpd/dWN7eZDnutqtMsqtBn1cGEeW1iAFunh/kIZPmiK7sOSdVmbYFbq9J32aA4pFvthv LBYjvZ6lRqbcnOnFvqZNNehkbjqwuuh7nmNpFRi7np8= ) ; Key ID = 29041 gl. 86400 IN DNSKEY ( 256 3 8 AwEAAa+6AcE37ianw/CH3iXrEL9sjk1IYMIjx83mQSazbD8aiksw+GUqSbORFwM2p9L8docYpXB3 ZDbDMwFogq4LbQerMm8CVIK0UPBDvdRGK/IEw5CcB9EwYCsop7vBn4HiJuC2b4IMCZiqHwi5XcGZ mRYPLaGRaBXI17IrDLs3HdHrH4d+MH/rAmZYfWNDIGg3liGSEOooda4feKgtE6fLQrjoxbM2li9w cULPgUMhU5cFUS6au/uepmpbGooZ3VGnBHKNYR6rGUgd8qjReHmgucjJOEY9FHwIgGmsD+lx+Qa+ L/Ah9K3JgkOGqAf4FiX8UmiK4tck8Ii1+ykJNpa9Ctc= ) ; Key ID = 25170 gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560 gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190930120000 20190913120000 11560 gl. 9d4NGGIQEct2X5tX6MAXqe+9h4bHPN3BtxZZJVVnvLW+RAkhUJPU3E6WUbSLUqaXdLknOonNwRFG OA+R7KyJuCAq/ldgNYHPDLizODW64ZZHSpMJb8NnWnq5kCcyUtXi8YSGPf15H6j8JuV/Xk1LGqN2 w0DfZcF4LoaA/ycDrRo1zHDBL84AHiScpqSh2KtbeH0sz5dKx6bFa5hj1lAPY/nH6MwRRkFC9FKM yF76Wz3MQKoEgVQ5+zWW259rxkcuqFaRjAgUlkAAh4dU2BAolNZS1Di31zv7eXTlWBztlWNNf8Ju Tnh7pOXf+A3YHKlMAOm/UfS6TA8tlu5qi9/ZMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for gl
	`gl. 86400 IN DNSKEY ( 256 3 8 AwEAAdskQE/NpwcXUCu/FCR7Aj+UUTHzIW7YNx+Jcrl9+6SbWnJlIGOE6vDWir6YSpxYa09vez3t 0Y+iOrvEk1tsHzsK/giBis26+3H8JkWJOQYS9rov3yVH0VD2I/J/YH/Hb4CuKkIGmHd6l1ikHBIz eEP/T77OmjBzTF2HTzu8yKn0M02e1j0gVGDOVrlBnR/CX3jiOgtvP8UO7ZKipE6Ajae9XsSaOZwm 5gR4ekIgRpd/dWN7eZDnutqtMsqtBn1cGEeW1iAFunh/kIZPmiK7sOSdVmbYFbq9J32aA4pFvthv LBYjvZ6lRqbcnOnFvqZNNehkbjqwuuh7nmNpFRi7np8= ) ; Key ID = 29041`
	`gl. 86400 IN DNSKEY ( 256 3 8 AwEAAa+6AcE37ianw/CH3iXrEL9sjk1IYMIjx83mQSazbD8aiksw+GUqSbORFwM2p9L8docYpXB3 ZDbDMwFogq4LbQerMm8CVIK0UPBDvdRGK/IEw5CcB9EwYCsop7vBn4HiJuC2b4IMCZiqHwi5XcGZ mRYPLaGRaBXI17IrDLs3HdHrH4d+MH/rAmZYfWNDIGg3liGSEOooda4feKgtE6fLQrjoxbM2li9w cULPgUMhU5cFUS6au/uepmpbGooZ3VGnBHKNYR6rGUgd8qjReHmgucjJOEY9FHwIgGmsD+lx+Qa+ L/Ah9K3JgkOGqAf4FiX8UmiK4tck8Ii1+ykJNpa9Ctc= ) ; Key ID = 25170`
	`gl. 86400 IN DNSKEY ( 257 3 8 AwEAAfYm4+zwxY7gxb4XaVDGuNUKfR2Zcd9wYXI+JeL6NutecP8/5yejpYvyYrS9EoZKi1I/Zxy5 T0bhke0TfCwtX+1fjLqZYXhnqPbqRrFjRsMLEMx4BXnI4+jRKOx/Fq1RQHKJqnw+3k9peImXyxSs 79OzNKIbZHvYh/BYLjzGX2GUqRngvxjzfsPYpqV4vI3tpqTx5UpetxNLzMSPwZSI/rfDuRDZjP44 V1UjLkcZ2AmqSva6q92kb7zruhn6C0JocyPTOPPK1J08tSp/ur+AYLYLyxL8+v28i1i9c1UhtatX pnCHn8OGFmg2pC/Vv2Q8sTXjKs6DFQ4IGODOQdU2HqM= ) ; Key ID = 11560`
	DNSKEY=11560/SEP is now in the chain-of-trust
	DS=11560/SHA-256 verifies DNSKEY=11560/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190930120000 20190913120000 11560 gl. 9d4NGGIQEct2X5tX6MAXqe+9h4bHPN3BtxZZJVVnvLW+RAkhUJPU3E6WUbSLUqaXdLknOonNwRFG OA+R7KyJuCAq/ldgNYHPDLizODW64ZZHSpMJb8NnWnq5kCcyUtXi8YSGPf15H6j8JuV/Xk1LGqN2 w0DfZcF4LoaA/ycDrRo1zHDBL84AHiScpqSh2KtbeH0sz5dKx6bFa5hj1lAPY/nH6MwRRkFC9FKM yF76Wz3MQKoEgVQ5+zWW259rxkcuqFaRjAgUlkAAh4dU2BAolNZS1Di31zv7eXTlWBztlWNNf8Ju Tnh7pOXf+A3YHKlMAOm/UfS6TA8tlu5qi9/ZMA== )`
	RRSIG=11560 and DNSKEY=11560/SEP verifies the DNSKEY RRset
	DNSKEY=29041 is now in the chain-of-trust
	DNSKEY=25170 is now in the chain-of-trust
	Query to d.nic.gl for nl.gl/A
	Error querying d.nic.gl/2001:500:14:6049:ad:0:0:1 for nl.gl/A: 'IPv6 transport disabled'
	Received 866 bytes from 204.61.216.49
	;; Answer received from 204.61.216.49 (866 bytes) ;; HEADER SECTION ;; id = 31234 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns3.20dragons.com. nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 ppi1auv8j4vufm49ohjetor6k44hh4m3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. VVN8t2XHHaXS7NV0pKyC3gHSZwFoeWAmchX4oxB7r7XvWKRseDOWov/Eh/CIh6MGuV1JCDzNhxtU pX12I+0LU/drAGzrzSRbPCn9y3k8E80IWgdoKzymfAAO5irQSd6g6sqTifezp+CvOdfL6VHxUddG gIGQ5fbcVUeFGQz7Y/ydos38Dv8iIRtqwC03ajNFcJsv1UtzquSwTfC6yjQ0bJdGwMVfuhvfQ5a8 76AaHncy8eA2hTLe2PXvyNDhs1nW78NxDFVWaET3Zm1DVXymQGt7eccedBnaouBy7bmBL5e2KaZx 5fCNrea0V6CvZ5hPH95ogWaxzuLxnv5Z1CaylQ== ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 7tq6bt7cmfd06vu1lti0mtpbfjcpb33g NS DS RRSIG ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. jGegRdniCdZC0fDBdKEtcvML30KL1fylA8oR8Orj9UBAanRD5KlhIwK0PKy43xcQ+OcVgUgRW8Uf SAujAqrQosSejE3pB9h5BWSVUFpifFDcWTXd4VyiydAqyo5tufi8rYBscJ3tkq/NJSjnv8qJimhA b8/wWYWld/U4NCO354rGCjw2y3bqZwFyYXlIFQkaFVr2i2OeSWfRn/fhCqyIfxbzIskS97GSnpv9 0SLTNclpaWMku1v+QjrgKqoHRvLShmu9Bod4XoBT2Bf9Gc2AACkyFVn2SDMoems/ZtmaWteXJ10U qKKtuTAfLYyhSnbB4qNkFtUaItT6aFiS4Ecbkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.nic.gl for nl.gl/DNSKEY
	Error querying d.nic.gl/2001:500:14:6049:ad:0:0:1 for nl.gl/DNSKEY: 'IPv6 transport disabled'
	Received 866 bytes from 204.61.216.49
	;; Answer received from 204.61.216.49 (866 bytes) ;; HEADER SECTION ;; id = 17383 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) nl.gl. 86400 IN NS ns1.20dragons.com. nl.gl. 86400 IN NS ns2.20dragons.com. nl.gl. 86400 IN NS ns3.20dragons.com. nl.gl. 86400 IN NS ns4.20dragons.com. PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 ppi1auv8j4vufm49ohjetor6k44hh4m3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. VVN8t2XHHaXS7NV0pKyC3gHSZwFoeWAmchX4oxB7r7XvWKRseDOWov/Eh/CIh6MGuV1JCDzNhxtU pX12I+0LU/drAGzrzSRbPCn9y3k8E80IWgdoKzymfAAO5irQSd6g6sqTifezp+CvOdfL6VHxUddG gIGQ5fbcVUeFGQz7Y/ydos38Dv8iIRtqwC03ajNFcJsv1UtzquSwTfC6yjQ0bJdGwMVfuhvfQ5a8 76AaHncy8eA2hTLe2PXvyNDhs1nW78NxDFVWaET3Zm1DVXymQGt7eccedBnaouBy7bmBL5e2KaZx 5fCNrea0V6CvZ5hPH95ogWaxzuLxnv5Z1CaylQ== ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 7tq6bt7cmfd06vu1lti0mtpbfjcpb33g NS DS RRSIG ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. jGegRdniCdZC0fDBdKEtcvML30KL1fylA8oR8Orj9UBAanRD5KlhIwK0PKy43xcQ+OcVgUgRW8Uf SAujAqrQosSejE3pB9h5BWSVUFpifFDcWTXd4VyiydAqyo5tufi8rYBscJ3tkq/NJSjnv8qJimhA b8/wWYWld/U4NCO354rGCjw2y3bqZwFyYXlIFQkaFVr2i2OeSWfRn/fhCqyIfxbzIskS97GSnpv9 0SLTNclpaWMku1v+QjrgKqoHRvLShmu9Bod4XoBT2Bf9Gc2AACkyFVn2SDMoems/ZtmaWteXJ10U qKKtuTAfLYyhSnbB4qNkFtUaItT6aFiS4Ecbkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gl

nl.gl

	Checking DS between gl and nl.gl
	Query to a.nuuk.nic.gl for nl.gl/DS
	Received 1132 bytes from 194.177.224.13
	;; Answer received from 194.177.224.13 (1132 bytes) ;; HEADER SECTION ;; id = 13590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 ppi1auv8j4vufm49ohjetor6k44hh4m3 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) PLUG1H1O50E515I396J3ARSIKGAE4QPP.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. VVN8t2XHHaXS7NV0pKyC3gHSZwFoeWAmchX4oxB7r7XvWKRseDOWov/Eh/CIh6MGuV1JCDzNhxtU pX12I+0LU/drAGzrzSRbPCn9y3k8E80IWgdoKzymfAAO5irQSd6g6sqTifezp+CvOdfL6VHxUddG gIGQ5fbcVUeFGQz7Y/ydos38Dv8iIRtqwC03ajNFcJsv1UtzquSwTfC6yjQ0bJdGwMVfuhvfQ5a8 76AaHncy8eA2hTLe2PXvyNDhs1nW78NxDFVWaET3Zm1DVXymQGt7eccedBnaouBy7bmBL5e2KaZx 5fCNrea0V6CvZ5hPH95ogWaxzuLxnv5Z1CaylQ== ) gl. 3600 IN SOA ( a.nuuk.nic.gl. gl-admin.tele.gl. 2019091910 ;serial 7200 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) gl. 3600 IN RRSIG ( SOA 8 1 86400 20190930120000 20190913120000 29041 gl. HbjLFjB8HtkOQHSZo2tANACzMUF/j3YqtOJeHeu2H8ndp3glCnUOKCaWDQl/A9aMhQmAeuQkRWUG CQG+3i5XPasiRXky13Y8Gf/2Thgbxp2MkBVBuwNrP3sUskWVB7sVMfyDAk2USWYOofKgpSkx3WR6 /GpPwDcn3F97Ky0QeROgq4XAUg2PoQZqYyWy1sOaYBEVZjaV9sNpPUt52sqjOdfTDPkq9Kk8KhbY JNN3lyP78pehRhrko0dpg7tppgVdLnX/h1PYvXzcD0M9AZOLJzVA3VvfgnXG1/c5uhWYstBnaYfj mXb2n5Ejq8sjpgW5kkkpoQ7wPLOxYz2L2jxlhg== ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN NSEC3 ( 1 1 10 4dc23ad9 7tq6bt7cmfd06vu1lti0mtpbfjcpb33g NS DS RRSIG ) 7LKM9UOCB1BR8J0D6B96TR0M9QHNDMJE.gl. 3600 IN RRSIG ( NSEC3 8 2 3600 20190930120000 20190913120000 29041 gl. jGegRdniCdZC0fDBdKEtcvML30KL1fylA8oR8Orj9UBAanRD5KlhIwK0PKy43xcQ+OcVgUgRW8Uf SAujAqrQosSejE3pB9h5BWSVUFpifFDcWTXd4VyiydAqyo5tufi8rYBscJ3tkq/NJSjnv8qJimhA b8/wWYWld/U4NCO354rGCjw2y3bqZwFyYXlIFQkaFVr2i2OeSWfRn/fhCqyIfxbzIskS97GSnpv9 0SLTNclpaWMku1v+QjrgKqoHRvLShmu9Bod4XoBT2Bf9Gc2AACkyFVn2SDMoems/ZtmaWteXJ10U qKKtuTAfLYyhSnbB4qNkFtUaItT6aFiS4Ecbkg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gl in the gl zone
	Query to ns1.20dragons.com for nl.gl/DNSKEY
	Received 215 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (215 bytes) ;; HEADER SECTION ;; id = 63613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20191003000000 20190912000000 4509 nl.gl. oXPTysmQJ95+uovGzOQ8fORvdAueH4mFNDKqJzWPn+aCl6UwoqK3w73Y3G9HaDT25xqxD+NJX15e xs8wZL2n0Q== ) nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for nl.gl
	`nl.gl. 7200 IN DNSKEY ( 257 3 13 V9lJCCPDqjX/DdkGz8OYKuA4d6NxTqFsbtxrM2PttkfPGDxhziDM3PVc5iU9j06S1Xjgvf0DJpbn N9WAMEsq5A== ) ; Key ID = 4509`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gl. 7200 IN RRSIG ( DNSKEY 13 2 7200 20191003000000 20190912000000 4509 nl.gl. oXPTysmQJ95+uovGzOQ8fORvdAueH4mFNDKqJzWPn+aCl6UwoqK3w73Y3G9HaDT25xqxD+NJX15e xs8wZL2n0Q== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for nl.gl/A
	Error querying ns3.20dragons.com/2a04:92c7:e:73e:0:0:0:1001 for nl.gl/A: 'IPv6 transport disabled'
	ns3.20dragons.com returns REFUSED for nl.gl/A
	Query to ns2.20dragons.com for nl.gl/A
	Received 151 bytes from 107.172.60.68
	;; Answer received from 107.172.60.68 (151 bytes) ;; HEADER SECTION ;; id = 43122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 4509 nl.gl. fMlpDcrmEFL7VQrGvs4pRqo/mY71i69MRA6je3VqYyieq8sokwc6aOIp71AFO5iBsaOybXYVEFtZ wM23bF+9ug== ) nl.gl. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gl is authoritative for nl.gl
	Found RRSIG signed by nl.gl zone
	Query to ns4.20dragons.com for nl.gl/SOA
	Received 195 bytes from 107.172.234.158
	;; Answer received from 107.172.234.158 (195 bytes) ;; HEADER SECTION ;; id = 39167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 4509 nl.gl. j0d1e0FnJABeute7y2mnN0wiuBIzAqsrP0jxy3dXJM1KjP6/zIgVgXWv0NntAbNQDffaw6NEBcfz 8C/5nc3KFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for nl.gl/SOA
	Received 195 bytes from 107.172.60.68
	;; Answer received from 107.172.60.68 (195 bytes) ;; HEADER SECTION ;; id = 37874 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 4509 nl.gl. j0d1e0FnJABeute7y2mnN0wiuBIzAqsrP0jxy3dXJM1KjP6/zIgVgXWv0NntAbNQDffaw6NEBcfz 8C/5nc3KFw== ) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.20dragons.com for nl.gl/SOA
	Received 195 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (195 bytes) ;; HEADER SECTION ;; id = 56187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN SOA ;; ANSWER SECTION (2 records) nl.gl. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019091910 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gl. 3600 IN RRSIG ( SOA 13 2 3600 20191003000000 20190912000000 4509 nl.gl. j0d1e0FnJABeute7y2mnN0wiuBIzAqsrP0jxy3dXJM1KjP6/zIgVgXWv0NntAbNQDffaw6NEBcfz 8C/5nc3KFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for nl.gl/A
	Received 151 bytes from 107.172.60.68
	;; Answer received from 107.172.60.68 (151 bytes) ;; HEADER SECTION ;; id = 46023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gl. IN A ;; ANSWER SECTION (2 records) nl.gl. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 4509 nl.gl. fMlpDcrmEFL7VQrGvs4pRqo/mY71i69MRA6je3VqYyieq8sokwc6aOIp71AFO5iBsaOybXYVEFtZ wM23bF+9ug== ) nl.gl. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gl A RR has value 185.164.136.124
	Found 1 RRSIGs over A RRset
	`nl.gl. 86400 IN RRSIG ( A 13 2 86400 20191003000000 20190912000000 4509 nl.gl. fMlpDcrmEFL7VQrGvs4pRqo/mY71i69MRA6je3VqYyieq8sokwc6aOIp71AFO5iBsaOybXYVEFtZ wM23bF+9ug== )`
	RRSIG=4509 and DNSKEY=4509/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: