DNSSEC Analyzer - www.overgang.no

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-05-19 20:24:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.overgang.no

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 20288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190601000000 20190511000000 20326 . BBKsvc63Wr9dUTkm8vyA1nDOLFA6Gne6B9Anf8FrvsdlVVphPIaUGK8QV3YX226h3N8jbZl4j+ar 4YIKS+G4yyx9VLY2PWHxz60If3gPhEeRXO0CvI81osmJydlpCe53HQwHxkyKR/Mvj7nr1PhyI4JV Y7/NJAAahuf9XEIkdxjn7fmFX4OYGVkxF7hdd5ykRg+fYTRQ5p074t/+PLz9NNxlnGmeVSs2P4WK Fmhh388ZTFzd8JlS2rA7lQD8JSGxot9hkemlX6+3TJd1nzXN2GMzR9LunJi87r/29OIilnhuyTqO 6dOiQFrxQz5F3rXUO9ET4KE8C29GaWJ8eEiWOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190601000000 20190511000000 20326 . BBKsvc63Wr9dUTkm8vyA1nDOLFA6Gne6B9Anf8FrvsdlVVphPIaUGK8QV3YX226h3N8jbZl4j+ar 4YIKS+G4yyx9VLY2PWHxz60If3gPhEeRXO0CvI81osmJydlpCe53HQwHxkyKR/Mvj7nr1PhyI4JV Y7/NJAAahuf9XEIkdxjn7fmFX4OYGVkxF7hdd5ykRg+fYTRQ5p074t/+PLz9NNxlnGmeVSs2P4WK Fmhh388ZTFzd8JlS2rA7lQD8JSGxot9hkemlX6+3TJd1nzXN2GMzR9LunJi87r/29OIilnhuyTqO 6dOiQFrxQz5F3rXUO9ET4KE8C29GaWJ8eEiWOw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to b.root-servers.net for www.overgang.no/A
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for www.overgang.no/A: 'IPv6 transport disabled'
	Received 726 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (726 bytes) ;; HEADER SECTION ;; id = 5248 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) no. 172800 IN NS njet.norid.no. no. 172800 IN NS not.norid.no. no. 172800 IN NS x.nic.no. no. 172800 IN NS y.nic.no. no. 172800 IN NS i.nic.no. no. 172800 IN NS z.nic.no. no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20190601170000 20190519160000 25266 . ifkzDt8MI89vrMEL+TBintS62qhyhJdpcuM4c0yfl2rBdT21NXhzS1DAtrQ6259nGFuukmuK3AhZ q9OvgALn+8p2oo2Nj/KfvcalzXJw4lGHsITpnRX0uNWnDwj750pzwK5BJ6kaT0BAh0e5Pj2FNJt1 68iaI9VECWYlRAEJlDTDbfUmutSqoylyCDzfuYBmWwIAhJSkZXgqVx3utno12HraXKOFfsV7LB5S tNkk8DYx8ldV3GeMYtcw6Tpzjy3G+BHKR+7A0LGlg5RFIxcWqyVfTaR/LB7WvHsxuNWFdzSXhzgi JgpGlorcueNIWRLOoqjtE1T16LEc2qD91ylrQA== ) ;; ADDITIONAL SECTION (12 records) i.nic.no. 172800 IN A 194.146.106.6 x.nic.no. 172800 IN A 128.39.8.40 y.nic.no. 172800 IN A 193.75.4.22 z.nic.no. 172800 IN A 158.38.8.133 not.norid.no. 172800 IN A 156.154.100.12 njet.norid.no. 172800 IN A 156.154.101.12 i.nic.no. 172800 IN AAAA 2001:67c:1010:1::53 x.nic.no. 172800 IN AAAA 2001:700:0:412f::40 y.nic.no. 172800 IN AAAA 2001:8c0:8200:1::2 z.nic.no. 172800 IN AAAA 2001:700:0:52d:158:38:8:133 not.norid.no. 172800 IN AAAA 2001:502:ad09::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for no/DNSKEY
	Received 713 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (713 bytes) ;; HEADER SECTION ;; id = 48037 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) no. 172800 IN NS i.nic.no. no. 172800 IN NS x.nic.no. no. 172800 IN NS y.nic.no. no. 172800 IN NS z.nic.no. no. 172800 IN NS not.norid.no. no. 172800 IN NS njet.norid.no. no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20190601170000 20190519160000 25266 . ifkzDt8MI89vrMEL+TBintS62qhyhJdpcuM4c0yfl2rBdT21NXhzS1DAtrQ6259nGFuukmuK3AhZ q9OvgALn+8p2oo2Nj/KfvcalzXJw4lGHsITpnRX0uNWnDwj750pzwK5BJ6kaT0BAh0e5Pj2FNJt1 68iaI9VECWYlRAEJlDTDbfUmutSqoylyCDzfuYBmWwIAhJSkZXgqVx3utno12HraXKOFfsV7LB5S tNkk8DYx8ldV3GeMYtcw6Tpzjy3G+BHKR+7A0LGlg5RFIxcWqyVfTaR/LB7WvHsxuNWFdzSXhzgi JgpGlorcueNIWRLOoqjtE1T16LEc2qD91ylrQA== ) ;; ADDITIONAL SECTION (12 records) i.nic.no. 172800 IN A 194.146.106.6 x.nic.no. 172800 IN A 128.39.8.40 y.nic.no. 172800 IN A 193.75.4.22 z.nic.no. 172800 IN A 158.38.8.133 not.norid.no. 172800 IN A 156.154.100.12 njet.norid.no. 172800 IN A 156.154.101.12 i.nic.no. 172800 IN AAAA 2001:67c:1010:1::53 x.nic.no. 172800 IN AAAA 2001:700:0:412f::40 y.nic.no. 172800 IN AAAA 2001:8c0:8200:1::2 z.nic.no. 172800 IN AAAA 2001:700:0:52d:158:38:8:133 not.norid.no. 172800 IN AAAA 2001:502:ad09::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone no

	Checking DS between . and no
	Query to b.root-servers.net for no/DS
	Received 366 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (366 bytes) ;; HEADER SECTION ;; id = 51499 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DS ;; ANSWER SECTION (2 records) no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20190601170000 20190519160000 25266 . ifkzDt8MI89vrMEL+TBintS62qhyhJdpcuM4c0yfl2rBdT21NXhzS1DAtrQ6259nGFuukmuK3AhZ q9OvgALn+8p2oo2Nj/KfvcalzXJw4lGHsITpnRX0uNWnDwj750pzwK5BJ6kaT0BAh0e5Pj2FNJt1 68iaI9VECWYlRAEJlDTDbfUmutSqoylyCDzfuYBmWwIAhJSkZXgqVx3utno12HraXKOFfsV7LB5S tNkk8DYx8ldV3GeMYtcw6Tpzjy3G+BHKR+7A0LGlg5RFIxcWqyVfTaR/LB7WvHsxuNWFdzSXhzgi JgpGlorcueNIWRLOoqjtE1T16LEc2qD91ylrQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for no in the . zone
	DS=29471/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`no. 86400 IN RRSIG ( DS 8 1 86400 20190601170000 20190519160000 25266 . ifkzDt8MI89vrMEL+TBintS62qhyhJdpcuM4c0yfl2rBdT21NXhzS1DAtrQ6259nGFuukmuK3AhZ q9OvgALn+8p2oo2Nj/KfvcalzXJw4lGHsITpnRX0uNWnDwj750pzwK5BJ6kaT0BAh0e5Pj2FNJt1 68iaI9VECWYlRAEJlDTDbfUmutSqoylyCDzfuYBmWwIAhJSkZXgqVx3utno12HraXKOFfsV7LB5S tNkk8DYx8ldV3GeMYtcw6Tpzjy3G+BHKR+7A0LGlg5RFIxcWqyVfTaR/LB7WvHsxuNWFdzSXhzgi JgpGlorcueNIWRLOoqjtE1T16LEc2qD91ylrQA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=29471/SHA-256 is now in the chain-of-trust
	`no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da )`
	Query to i.nic.no for no/DNSKEY
	Error querying i.nic.no/2001:67c:1010:1:0:0:0:53 for no/DNSKEY: 'IPv6 transport disabled'
	Received 745 bytes from 194.146.106.6
	;; Answer received from 194.146.106.6 (745 bytes) ;; HEADER SECTION ;; id = 61557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DNSKEY ;; ANSWER SECTION (3 records) no. 3600 IN DNSKEY ( 257 3 8 AwEAAZ/4Gp4JK9sYmX+LXKB8VpudlotL7/534h85e2QXzrgfFTP+5odzXGo4BaIpu2FgH64o/TiD tyVoRxcMEQqj7DouY/as/0OMWd3wVIzGTNdX62WzTgVpZe9tjDPbBb6NO5dNUwMpHfM0g+RuM+v4 KSH2Rj+kwCJoh34loFbE3+M8YmlTlrJiqJINE6XLw7PDIUpV+uM/qanoxBqHwRKfrRgQUH3v6zIl iDZj7VuCTACU77Fu8+v8L1C7Epz5HDa+wHa8RMSvNQA9HJwFwZE3pzWIVDV34CWVyua63wtdof9e 29gjhbkKqVMuQCdz49XmqhQQ0gYzYOGMZTnY/pskTVs= ) ; Key ID = 29471 no. 3600 IN DNSKEY ( 256 3 8 AwEAAZnRRglRMgWpqFnT3/gl2XbpAUNFXiC3+2XX12vB9IA2XygwcPD+PSRHr/LdSLr7kSt8AMew nIAO/oj0avFrvsOe3xCpyILfUPwsjF/IXw0eC8gJypLbT0+j/sX8gTqtz87GwfJHitrnKtaOwpoE dGJAJ1ziBGW82PW0YPHRe02L ) ; Key ID = 8025 no. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190530125122 20190518110713 29471 no. eQcvZBeKNeNOtBLfpT356f9JvRE/Az5R4ggXUaofpLlGCRXclrOrkbLWxO5Sl+PgCmxIhOwAAL7S nuCK9NPS1/bGMvB/m4gtVFnoMv/KrsLrOFmdsMcfSyxNo6/MTU0aAHElRol06l7BRoEejwOnEh6O RDuLI0JxAzoEwmcW1KhTnJdfl3vlEXxYpxO+mAT6jx9g1qs5ftnk4iE/kwXLWo/fyNsPopR9/g++ MF97XMMl7ss75mYDiO3hMPoBI2ZpWwtPnQkipcQ5LozSXCYcKb/if7qd/Jv7GzfOI2VpEZ8aFkbd aoCON5OFx6F/SrZNhw7UMCHe1SJU5WseZRBO9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for no
	`no. 3600 IN DNSKEY ( 257 3 8 AwEAAZ/4Gp4JK9sYmX+LXKB8VpudlotL7/534h85e2QXzrgfFTP+5odzXGo4BaIpu2FgH64o/TiD tyVoRxcMEQqj7DouY/as/0OMWd3wVIzGTNdX62WzTgVpZe9tjDPbBb6NO5dNUwMpHfM0g+RuM+v4 KSH2Rj+kwCJoh34loFbE3+M8YmlTlrJiqJINE6XLw7PDIUpV+uM/qanoxBqHwRKfrRgQUH3v6zIl iDZj7VuCTACU77Fu8+v8L1C7Epz5HDa+wHa8RMSvNQA9HJwFwZE3pzWIVDV34CWVyua63wtdof9e 29gjhbkKqVMuQCdz49XmqhQQ0gYzYOGMZTnY/pskTVs= ) ; Key ID = 29471`
	`no. 3600 IN DNSKEY ( 256 3 8 AwEAAZnRRglRMgWpqFnT3/gl2XbpAUNFXiC3+2XX12vB9IA2XygwcPD+PSRHr/LdSLr7kSt8AMew nIAO/oj0avFrvsOe3xCpyILfUPwsjF/IXw0eC8gJypLbT0+j/sX8gTqtz87GwfJHitrnKtaOwpoE dGJAJ1ziBGW82PW0YPHRe02L ) ; Key ID = 8025`
	DNSKEY=29471/SEP is now in the chain-of-trust
	DS=29471/SHA-256 verifies DNSKEY=29471/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`no. 3600 IN RRSIG ( DNSKEY 8 1 3600 20190530125122 20190518110713 29471 no. eQcvZBeKNeNOtBLfpT356f9JvRE/Az5R4ggXUaofpLlGCRXclrOrkbLWxO5Sl+PgCmxIhOwAAL7S nuCK9NPS1/bGMvB/m4gtVFnoMv/KrsLrOFmdsMcfSyxNo6/MTU0aAHElRol06l7BRoEejwOnEh6O RDuLI0JxAzoEwmcW1KhTnJdfl3vlEXxYpxO+mAT6jx9g1qs5ftnk4iE/kwXLWo/fyNsPopR9/g++ MF97XMMl7ss75mYDiO3hMPoBI2ZpWwtPnQkipcQ5LozSXCYcKb/if7qd/Jv7GzfOI2VpEZ8aFkbd aoCON5OFx6F/SrZNhw7UMCHe1SJU5WseZRBO9g== )`
	RRSIG=29471 and DNSKEY=29471/SEP verifies the DNSKEY RRset
	DNSKEY=8025 is now in the chain-of-trust
	Query to z.nic.no for www.overgang.no/A
	Received 664 bytes from 158.38.8.133
	;; Answer received from 158.38.8.133 (664 bytes) ;; HEADER SECTION ;; id = 41993 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) overgang.no. 7200 IN NS ns-cloud-d3.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d2.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d4.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d1.googledomains.com. ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 ghhrq8cgvc3enm2r0h68dlh9eaqeju7a NS SOA RRSIG DNSKEY NSEC3PARAM ) ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190602060558 20190519110328 8025 no. kCkkAFZeUazCI/sq273Tt7r/GSdThkzIqKECsDIYu1/0C4wQehTlNyPcYzMlBN6FQJEZJKwmDsGJ 4ZprIqsvCpwZ2ucfalVZh8j1yzhbGyy52OEZhC0XV9ZmYVPdahgB07Yr4tVxeWfjCkqjvv0U1eUo Xu8jcSNgxzcOLfb4fvU= ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 mp1kj7grv58s0shkhf39pjh93m6k7vm4 NS DS RRSIG ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190530161724 20190518150354 8025 no. htweyrvyeP7bwRiKvg9O1/qQASygzuFtcunD+wd4pMtU87+IidgK0+tsyqcYxSK/A9zlxPJOnM4z PMjlphClYsg4Rf7QFySFNEzb411NHjnxlggLsRTu/8MgZNyKLd8sx127Me+nylvTzdOusDwqolwj C7krtcUNI9X6LSau7aM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to z.nic.no for overgang.no/DNSKEY
	Error querying z.nic.no/2001:700:0:52d:158:38:8:133 for overgang.no/DNSKEY: 'IPv6 transport disabled'
	Received 660 bytes from 158.38.8.133
	;; Answer received from 158.38.8.133 (660 bytes) ;; HEADER SECTION ;; id = 41661 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) overgang.no. 7200 IN NS ns-cloud-d1.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d4.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d3.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d2.googledomains.com. ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 ghhrq8cgvc3enm2r0h68dlh9eaqeju7a NS SOA RRSIG DNSKEY NSEC3PARAM ) ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190602060558 20190519110328 8025 no. kCkkAFZeUazCI/sq273Tt7r/GSdThkzIqKECsDIYu1/0C4wQehTlNyPcYzMlBN6FQJEZJKwmDsGJ 4ZprIqsvCpwZ2ucfalVZh8j1yzhbGyy52OEZhC0XV9ZmYVPdahgB07Yr4tVxeWfjCkqjvv0U1eUo Xu8jcSNgxzcOLfb4fvU= ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 mp1kj7grv58s0shkhf39pjh93m6k7vm4 NS DS RRSIG ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190530161724 20190518150354 8025 no. htweyrvyeP7bwRiKvg9O1/qQASygzuFtcunD+wd4pMtU87+IidgK0+tsyqcYxSK/A9zlxPJOnM4z PMjlphClYsg4Rf7QFySFNEzb411NHjnxlggLsRTu/8MgZNyKLd8sx127Me+nylvTzdOusDwqolwj C7krtcUNI9X6LSau7aM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone overgang.no

overgang.no

	Checking DS between no and overgang.no
	Query to z.nic.no for overgang.no/DS
	Received 760 bytes from 158.38.8.133
	;; Answer received from 158.38.8.133 (760 bytes) ;; HEADER SECTION ;; id = 57373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 ghhrq8cgvc3enm2r0h68dlh9eaqeju7a NS SOA RRSIG DNSKEY NSEC3PARAM ) ghhrkp83hdhkp9i0dus256hgbc1vic08.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190602060558 20190519110328 8025 no. kCkkAFZeUazCI/sq273Tt7r/GSdThkzIqKECsDIYu1/0C4wQehTlNyPcYzMlBN6FQJEZJKwmDsGJ 4ZprIqsvCpwZ2ucfalVZh8j1yzhbGyy52OEZhC0XV9ZmYVPdahgB07Yr4tVxeWfjCkqjvv0U1eUo Xu8jcSNgxzcOLfb4fvU= ) no. 7200 IN SOA ( charm.norid.no. hostmaster.norid.no. 2019051966 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 7200 ;minimum ) no. 7200 IN RRSIG ( SOA 8 1 7200 20190602193148 20190519190354 8025 no. TuzQ2K0LWqe7ygQkT6pvCm726hMOIdvAwhsW1w4CLk/VdrVJ7iUtrHoIFPbWAmUORv15q1REuoJk ONnZ6cEKRBI8jpHZzsANRyhgF72sq31MaMxDJSxUPqT8DdIsSJlVs+7DU2HhlUYfIffCD2HwNmX4 HU/Me6zVa/kUQ3qrqgs= ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN NSEC3 ( 1 1 5 d2fa99b210e4b319 mp1kj7grv58s0shkhf39pjh93m6k7vm4 NS DS RRSIG ) mp1f1hsp5j67kr2r1lg2abes8sumgj2b.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20190530161724 20190518150354 8025 no. htweyrvyeP7bwRiKvg9O1/qQASygzuFtcunD+wd4pMtU87+IidgK0+tsyqcYxSK/A9zlxPJOnM4z PMjlphClYsg4Rf7QFySFNEzb411NHjnxlggLsRTu/8MgZNyKLd8sx127Me+nylvTzdOusDwqolwj C7krtcUNI9X6LSau7aM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for overgang.no in the no zone
	Query to ns-cloud-d3.googledomains.com for overgang.no/DNSKEY
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for overgang.no/DNSKEY: 'IPv6 transport disabled'
	Received 133 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (133 bytes) ;; HEADER SECTION ;; id = 40290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) overgang.no. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	No DNSKEY records found
	Query to ns-cloud-d1.googledomains.com for www.overgang.no/A
	Received 74 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (74 bytes) ;; HEADER SECTION ;; id = 55190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (2 records) www.overgang.no. 600 IN CNAME overgang.no. overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no is authoritative for www.overgang.no
	Query to ns-cloud-d1.googledomains.com for www.overgang.no/DNSKEY
	Received 151 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (151 bytes) ;; HEADER SECTION ;; id = 16960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN DNSKEY ;; ANSWER SECTION (1 record) www.overgang.no. 600 IN CNAME overgang.no. ;; AUTHORITY SECTION (1 record) overgang.no. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	www.overgang.no is a CNAME to overgang.no
	No RRSIGs found
	Query to ns-cloud-d3.googledomains.com for overgang.no/A
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for overgang.no/A: 'IPv6 transport disabled'
	Received 56 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (56 bytes) ;; HEADER SECTION ;; id = 31941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN A ;; ANSWER SECTION (1 record) overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no is authoritative for overgang.no
	Query to ns-cloud-d3.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (225 bytes) ;; HEADER SECTION ;; id = 49885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d1.googledomains.com/2001:4860:4802:32:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (225 bytes) ;; HEADER SECTION ;; id = 468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d4.googledomains.com/2001:4860:4802:38:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (225 bytes) ;; HEADER SECTION ;; id = 18025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for overgang.no/SOA
	Received 225 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (225 bytes) ;; HEADER SECTION ;; id = 26533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d3.googledomains.com for overgang.no/A
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for overgang.no/A: 'IPv6 transport disabled'
	Received 56 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (56 bytes) ;; HEADER SECTION ;; id = 37985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN A ;; ANSWER SECTION (1 record) overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no A RR has value 104.155.3.50
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.overgang.no at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: