DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-26 11:55:05 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gy

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 18869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to b.root-servers.net for nl.gy/A
	Received 567 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (567 bytes) ;; HEADER SECTION ;; id = 7820 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for gy/DNSKEY
	Received 564 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (564 bytes) ;; HEADER SECTION ;; id = 221 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS sns-pb.isc.org. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS ns.cocca.fr. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gy

	Checking DS between . and gy
	Query to c.root-servers.net for gy/DS
	Received 705 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (705 bytes) ;; HEADER SECTION ;; id = 37722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2019042600 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20190509050000 20190426040000 25266 . eiMhWRksnwYhxBDE2QUwrFiVJcP5ZyXqoOjz3zrkSA6LK/Bz82Gn7Xns286S4M9YphW7yZUfZswW 0zlQMyxBoc0fSiTIErG0mJoSgfFojgjw3B9R8fmj6pAKtv+J88Hb7vdYvk12jgk7AVClz5WZ7Y2D uUiJ7lerHz7Cq279ES48Av/vk49n3ppwZfubaDLKaVLrCEgQ5zTZXPIzuFBSBlgXLRSyWQdrtH7D Y6aPMpNvHoitDBkR6XeofPC2XV5vY3YyCbDSSmmBqN417Tzo8TguQaTlFKxE6v6aFVN7LTv+qjlq WhkwANT9NSPCit3Gq1eMY/wUbCDrzmkABmSwCw== ) gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190509050000 20190426040000 25266 . QQrbRP0+0NOwLICk9yV7TIFKUnoAIGaIvOND5Yw1aSke9ldj55SrGzbLR0XLe8CzjtjGtLx+fo8P /Hbe/mFTHvh6jcYVlaSO7lLrSXyLzn2+KAgWKeqP2BnzypjT24vPN9L5iDiVJz8ax496XiBJ1JjO 8vJApKxc5Mc5amqrOfTWyydUy6ncLExgNMK1ZxZ+nh8hRnB12SBj7E4vVOFjSg4zrSiNAQaahM72 v8H25B48RGgkdtiXGi20B6KJr7B3dbaRxey+GhYYpt1ws2K8vnac8cnmAgQzEBeKpzuan5x2mM0h 9GzbnlrSQqdkyeudwg+TvxHCLi6bncdR9z0bhQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for gy in the . zone
	Query to gy-ns.anycast.pch.net for gy/DNSKEY
	Error querying gy-ns.anycast.pch.net/2001:500:14:6034:ad:0:0:1 for gy/DNSKEY: 'IPv6 transport disabled'
	Received 86 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (86 bytes) ;; HEADER SECTION ;; id = 41677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019042611 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns.cocca.fr for nl.gy/A
	Error querying ns.cocca.fr/2a03:dd40:3:0:0:0:0:93 for nl.gy/A: 'IPv6 transport disabled'
	Received 119 bytes from 185.17.236.93
	;; Answer received from 185.17.236.93 (119 bytes) ;; HEADER SECTION ;; id = 18111 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gy-ns.anycast.pch.net for nl.gy/DNSKEY
	Error querying gy-ns.anycast.pch.net/2001:500:14:6034:ad:0:0:1 for nl.gy/DNSKEY: 'IPv6 transport disabled'
	Received 119 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (119 bytes) ;; HEADER SECTION ;; id = 46042 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gy

nl.gy

	Checking DS between gy and nl.gy
	Query to gy-ns.anycast.pch.net for nl.gy/DS
	Received 89 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (89 bytes) ;; HEADER SECTION ;; id = 8549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019042611 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gy in the gy zone
	Query to ns4.20dragons.com for nl.gy/DNSKEY
	Received 215 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (215 bytes) ;; HEADER SECTION ;; id = 57262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 14643 nl.gy. OvoJYnBkprQ/ib/CO2jS3CQOvrOwid4hCg54loR8AWevZm1ztIQjulID7/ZjcuKvFDKjAt8KkXQl Z9I1k9HgSw== ) nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for nl.gy
	`nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 14643 nl.gy. OvoJYnBkprQ/ib/CO2jS3CQOvrOwid4hCg54loR8AWevZm1ztIQjulID7/ZjcuKvFDKjAt8KkXQl Z9I1k9HgSw== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the DNSKEY RRset
	Query to ns2.20dragons.com for nl.gy/A
	Timeout querying ns2.20dragons.com/155.254.33.250 for nl.gy/A
	All Queries to ns2.20dragons.com for nl.gy/A timed out or failed
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (151 bytes) ;; HEADER SECTION ;; id = 39074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.147.34.9 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 14643 nl.gy. QpQrIk9lOW+HEAqvhZQcg4tUP9mlnPGK5+QY2MFUT9dyc9/Ma5KFraBkC4iwCZuBcgUYFXHda7SY E66xlI9Zjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy is authoritative for nl.gy
	Found RRSIG signed by nl.gy zone
	Query to ns3.20dragons.com for nl.gy/SOA
	Received 195 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (195 bytes) ;; HEADER SECTION ;; id = 56895 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 14643 nl.gy. B2OJLeZhUYh7Dyc0CIgGJGURbYGfELZ/Gd2FGRFo01k/twAWJZZj3hF4mfO1mFDWi4nk6ctLFj9m TqXb7Lh3JQ== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042610 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for nl.gy/SOA
	Received 195 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (195 bytes) ;; HEADER SECTION ;; id = 37952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042610 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 14643 nl.gy. B2OJLeZhUYh7Dyc0CIgGJGURbYGfELZ/Gd2FGRFo01k/twAWJZZj3hF4mfO1mFDWi4nk6ctLFj9m TqXb7Lh3JQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns1.20dragons.com for nl.gy/SOA
	Timeout querying ns1.20dragons.com/23.94.166.82 for nl.gy/SOA
	All Queries to ns1.20dragons.com for nl.gy/SOA timed out or failed
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (151 bytes) ;; HEADER SECTION ;; id = 8616 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.147.34.9 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 14643 nl.gy. QpQrIk9lOW+HEAqvhZQcg4tUP9mlnPGK5+QY2MFUT9dyc9/Ma5KFraBkC4iwCZuBcgUYFXHda7SY E66xlI9Zjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 14643 nl.gy. QpQrIk9lOW+HEAqvhZQcg4tUP9mlnPGK5+QY2MFUT9dyc9/Ma5KFraBkC4iwCZuBcgUYFXHda7SY E66xlI9Zjw== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gy at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: