DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-01-15 23:26:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for nl.gy

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1425 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1425 bytes) ;; HEADER SECTION ;; id = 32598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== ) . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 385 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19164`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	DNSKEY=19164/SEP is revoked
	Found 2 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 19164 . PGhKgCU6lDn7Hoq0sNiQW8VWxEhrg367CtT7WruS+RgzHfhc0jPd4gbbnUL2s2mCvAQO6GN9nkbV JADavUL/ST0TE61KOSy+bZ03wSUh2DS6OZ/ccfoaqGE/LBnhGrim2zz500Yt3akOTZfn56A9WeUz ekuDYdVbXh6mvsN/NvRy7yqwCoLvQGERIjxhIKktssr/DemKKmfzdHCpM5BuP84MWklv53gwq2wt KIMjuQn3pxZMBdtfAxHsT9TkyR1DrzqgrjtAfYaqPA6rKUQUF2PBta1/7GdHjOvmk8q30Zy9HWVI OstWgtJ39nd/3+xmpanuZ8XzbHDrjRi0v60k2g== )`
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190201000000 20190111000000 20326 . Un0dZnpfRYoUo71b8ywnIF8RzcIeEboMTCAlZXUYx23xAACVyg4KHgucuYhgxyXC29QRXF/d2n/v ewjW3OdI+AWh3HoSCyYq2yWaM3+8MR1IsBpZTbkAiE2ijwzIJy+dB0FJGKC64e2g/xNmFjQJD/Hd m96rbAcrW2A4WBuSmKg8qlhe60ynfx+qCn296n2ad5JBeeG2chakM8CflJKYbetrCJhraQt7rZMh eloo/M8WgcKuK+/o73VeJnG5+omWvstzUTOdjZoEkPqkttFShnP3CAUaziQUcEZ8uMGKhCGq9yUa ELrceoM2Dh8/YyzKXboVcJyw/29plrCJYHKduw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=19164/SEP is now in the chain-of-trust
	Query to a.root-servers.net for nl.gy/A
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for nl.gy/A: 'IPv6 transport disabled'
	Received 567 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (567 bytes) ;; HEADER SECTION ;; id = 36046 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190128170000 20190115160000 16749 . CmcyIW1raYxDWSUh95m3wUAzOsNOebWFk3zbnA3j4ZR8fFttRb6UEQyLkOT2v+pTne0wPcnGogL3 ytwXtVYwtq7LXYQZNuhP973Y2YIiVrxmPg2VvyuXJ636YN8FX/8rK11lwGScvOpd6IE5A+cUSWBR vP/pxVR6eQv3/x9+5PNY0E9VQGL7XDE09C08C3MeuorXJZ2Sfp0vGODg0kJa58IYiply+lZYV1jJ 8i49r3/czi9MZJa1sv0H68v1cjqBKOgZ9is/2A58s/eqkBxQOgSd8zj0PLUl/d9Qci+6Ka+nxF/h q9JQfaRBTYA56ItUSaCERw39Z1acYlLzOzzMWg== ) ;; ADDITIONAL SECTION (7 records) ns.cocca.fr. 172800 IN A 185.17.236.93 gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 sns-pb.isc.org. 172800 IN A 192.5.4.1 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for gy/DNSKEY
	Received 564 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (564 bytes) ;; HEADER SECTION ;; id = 36232 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) gy. 172800 IN NS gy-ns.anycast.pch.net. gy. 172800 IN NS ns.cocca.fr. gy. 172800 IN NS sns-pb.isc.org. gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190128170000 20190115160000 16749 . CmcyIW1raYxDWSUh95m3wUAzOsNOebWFk3zbnA3j4ZR8fFttRb6UEQyLkOT2v+pTne0wPcnGogL3 ytwXtVYwtq7LXYQZNuhP973Y2YIiVrxmPg2VvyuXJ636YN8FX/8rK11lwGScvOpd6IE5A+cUSWBR vP/pxVR6eQv3/x9+5PNY0E9VQGL7XDE09C08C3MeuorXJZ2Sfp0vGODg0kJa58IYiply+lZYV1jJ 8i49r3/czi9MZJa1sv0H68v1cjqBKOgZ9is/2A58s/eqkBxQOgSd8zj0PLUl/d9Qci+6Ka+nxF/h q9JQfaRBTYA56ItUSaCERw39Z1acYlLzOzzMWg== ) ;; ADDITIONAL SECTION (7 records) gy-ns.anycast.pch.net. 172800 IN A 204.61.216.34 gy-ns.anycast.pch.net. 172800 IN AAAA 2001:500:14:6034:ad::1 ns.cocca.fr. 172800 IN A 185.17.236.93 ns.cocca.fr. 172800 IN AAAA 2a03:dd40:3::93 sns-pb.isc.org. 172800 IN A 192.5.4.1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone gy

	Checking DS between . and gy
	Query to b.root-servers.net for gy/DS
	Received 705 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (705 bytes) ;; HEADER SECTION ;; id = 51035 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2019011501 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20190128170000 20190115160000 16749 . HFVC9MHqxBtDMee+SxbggWpU8w+ImQO//ynBi2hke035qY3/M0jigq6Bl4bX7abcjhsqb94Y6ivi UM2CJOw7rH0YqJJxwaARCuJOpu8U9kseqZLf5bOktA509fULcqfYZSnm9SLcXA1pERguoHUVS7+P y990bd4Hm2RrLEJ6YqtywML4dstQXqnMqf1e0lFNe00RFalVN0fOiqE6iFePLLO/XrPNKwyiDky5 XkR4qvQUY1TjWwnnKKVrcnBh62Aab8EgJTEsNqy9cF9iEJ9hIhS7pbuToX97lzIZEPyPEaHzW1i0 GwPZPtEB0Lve1fMt6e+4MqTIEhxb1OTZOqc9MQ== ) gy. 86400 IN NSEC hair. NS RRSIG NSEC gy. 86400 IN RRSIG ( NSEC 8 1 86400 20190128170000 20190115160000 16749 . CmcyIW1raYxDWSUh95m3wUAzOsNOebWFk3zbnA3j4ZR8fFttRb6UEQyLkOT2v+pTne0wPcnGogL3 ytwXtVYwtq7LXYQZNuhP973Y2YIiVrxmPg2VvyuXJ636YN8FX/8rK11lwGScvOpd6IE5A+cUSWBR vP/pxVR6eQv3/x9+5PNY0E9VQGL7XDE09C08C3MeuorXJZ2Sfp0vGODg0kJa58IYiply+lZYV1jJ 8i49r3/czi9MZJa1sv0H68v1cjqBKOgZ9is/2A58s/eqkBxQOgSd8zj0PLUl/d9Qci+6Ka+nxF/h q9JQfaRBTYA56ItUSaCERw39Z1acYlLzOzzMWg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for gy in the . zone
	Query to gy-ns.anycast.pch.net for gy/DNSKEY
	Error querying gy-ns.anycast.pch.net/2001:500:14:6034:ad:0:0:1 for gy/DNSKEY: 'IPv6 transport disabled'
	Received 86 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (86 bytes) ;; HEADER SECTION ;; id = 22430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019011523 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to gy-ns.anycast.pch.net for nl.gy/A
	Received 119 bytes from 204.61.216.34
	;; Answer received from 204.61.216.34 (119 bytes) ;; HEADER SECTION ;; id = 31958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. nl.gy. 86400 IN NS ns2.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sns-pb.isc.org for nl.gy/DNSKEY
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for nl.gy/DNSKEY: 'IPv6 transport disabled'
	Received 119 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (119 bytes) ;; HEADER SECTION ;; id = 17965 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) nl.gy. 86400 IN NS ns1.20dragons.com. nl.gy. 86400 IN NS ns2.20dragons.com. nl.gy. 86400 IN NS ns4.20dragons.com. nl.gy. 86400 IN NS ns3.20dragons.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl.gy

nl.gy

	Checking DS between gy and nl.gy
	Query to sns-pb.isc.org for nl.gy/DS
	Received 91 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (91 bytes) ;; HEADER SECTION ;; id = 27315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gy. 38400 IN SOA ( soa.registry.gy. admin.registry.gy. 2019011523 ;serial 1800 ;refresh 3600 ;retry 604800 ;expire 38400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for nl.gy in the gy zone
	Query to ns4.20dragons.com for nl.gy/DNSKEY
	Received 215 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (215 bytes) ;; HEADER SECTION ;; id = 59093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN DNSKEY ;; ANSWER SECTION (2 records) nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 14643 nl.gy. QMGmMAR7l4AWGgEKNYrWIrrt6Vx12/kR5IAVQxaIieUCqgoBsINQ6EH/+6QSs5DD5IIahO+8yY/w Bqd6BbfdYg== ) nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for nl.gy
	`nl.gy. 7200 IN DNSKEY ( 257 3 13 tmJgDx8pE2MdfCR4VRzRatbklsF63FHywQ824aFqP32cwRlSZWxwxd0tbJRDv54HObZ5Bz2SvK/x +jBiNBy1FQ== ) ; Key ID = 14643`
	Found 1 RRSIGs over DNSKEY RRset
	`nl.gy. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190124000000 20190103000000 14643 nl.gy. QMGmMAR7l4AWGgEKNYrWIrrt6Vx12/kR5IAVQxaIieUCqgoBsINQ6EH/+6QSs5DD5IIahO+8yY/w Bqd6BbfdYg== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the DNSKEY RRset
	Query to ns1.20dragons.com for nl.gy/A
	Timeout querying ns1.20dragons.com/23.94.166.82 for nl.gy/A
	All Queries to ns1.20dragons.com for nl.gy/A timed out or failed
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (151 bytes) ;; HEADER SECTION ;; id = 35437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.147.34.9 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 14643 nl.gy. 4hiVzo0TGW10QGfBQ3omyApJ65XQxVwFbA9WU8ji++JZvkRsqJ5JqcgjC9VX+lIq8yhvhry8jwIT MWI9fuH47g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy is authoritative for nl.gy
	Found RRSIG signed by nl.gy zone
	Query to ns3.20dragons.com for nl.gy/SOA
	Received 195 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (195 bytes) ;; HEADER SECTION ;; id = 57077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 14643 nl.gy. JWBZgyXs3kqiLbiNLf9XwCygivpeAbyItTHnW4+IPE3Yh2n8hb8VlRx/M4ble7RiC+e8L8+ENcDC 14yYDhO/xQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for nl.gy/SOA
	Received 195 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (195 bytes) ;; HEADER SECTION ;; id = 7279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 14643 nl.gy. JWBZgyXs3kqiLbiNLf9XwCygivpeAbyItTHnW4+IPE3Yh2n8hb8VlRx/M4ble7RiC+e8L8+ENcDC 14yYDhO/xQ== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns2.20dragons.com for nl.gy/SOA
	Received 195 bytes from 155.254.33.250
	;; Answer received from 155.254.33.250 (195 bytes) ;; HEADER SECTION ;; id = 35899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN SOA ;; ANSWER SECTION (2 records) nl.gy. 3600 IN RRSIG ( SOA 13 2 3600 20190124000000 20190103000000 14643 nl.gy. JWBZgyXs3kqiLbiNLf9XwCygivpeAbyItTHnW4+IPE3Yh2n8hb8VlRx/M4ble7RiC+e8L8+ENcDC 14yYDhO/xQ== ) nl.gy. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019011510 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for nl.gy/A
	Received 151 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (151 bytes) ;; HEADER SECTION ;; id = 9613 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; nl.gy. IN A ;; ANSWER SECTION (2 records) nl.gy. 86400 IN A 185.147.34.9 nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 14643 nl.gy. 4hiVzo0TGW10QGfBQ3omyApJ65XQxVwFbA9WU8ji++JZvkRsqJ5JqcgjC9VX+lIq8yhvhry8jwIT MWI9fuH47g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	nl.gy A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`nl.gy. 86400 IN RRSIG ( A 13 2 86400 20190124000000 20190103000000 14643 nl.gy. 4hiVzo0TGW10QGfBQ3omyApJ65XQxVwFbA9WU8ji++JZvkRsqJ5JqcgjC9VX+lIq8yhvhry8jwIT MWI9fuH47g== )`
	RRSIG=14643 and DNSKEY=14643/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nl.gy at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: