DNSSEC Analyzer - www.overgang.no

Domain Name:

Time: 2019-10-19 04:15:10 UTC, NTP stratum 4

Analyzing DNSSEC problems for www.overgang.no

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 56879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191101000000 20191011000000 20326 . m7mvEdeqXKN9sp0nUBhJUWTdurOlW0ruL9Ot1xceZaaYAV5Yz0UbwAWwcu6Sjf9rtridZ4jOuVmU FHaVeRJtA5v8jhU6mPveHVSppdtMQjGqeCQnq683EArww37WBaULfIb6Rr5BE1Gwgk93O2WwFRWH MW2csoFTIhYDNQ1SfIUkYSp3VR04r4o5mtuwhwvjAgvFpRN9qpwIYG7lWhThrJW1hTyqEoP9YY5n zs3jEYYJJ3JNU+SopJSoQ/5/vIerMovD28y4d8IHs/A0gqlSaW7Dg3kQvh0gZU6u117tjz20QuJu nD6J+MraIGpYBMgaPZvEDbCmbCGOtqKqsrX5tw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=22545 is now in the chain-of-trust
	Query to g.root-servers.net for www.overgang.no/A
	Received 726 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (726 bytes) ;; HEADER SECTION ;; id = 47453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) no. 172800 IN NS not.norid.no. no. 172800 IN NS njet.norid.no. no. 172800 IN NS z.nic.no. no. 172800 IN NS i.nic.no. no. 172800 IN NS y.nic.no. no. 172800 IN NS x.nic.no. no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . NZh33cPBsqtBvaivesasOsNnyGofo7I4nh3yhQa1t1sav5zyD71+JF09wzYUewfggcyuL199MT3/ pX0jQ5vvGQIob7BfqQUSA9bcyQJwfnuGVVHj1DQapdHXf/5aFplmU0EUNR0Ccnz35zAeGwC50+HG JfqatqeDUyBovT5DkzvJxMgGmXRg4guxM6xcdPaKK6ggEL2nFlzieKh/HnFNIQLZHJrHU2c5OUsE bZN5gv9gVzV4Ie0NPULg6vWUBwoNukDq32aQx3S6/3vpDEUis/3B+XplMhw0rYILc0tOv9RcDTnX FNyaHeMRYr7Fn6v5dT/ZjSA7ja1CH8NxdtMUZg== ) ;; ADDITIONAL SECTION (12 records) i.nic.no. 172800 IN A 194.146.106.6 x.nic.no. 172800 IN A 128.39.8.40 y.nic.no. 172800 IN A 193.75.4.22 z.nic.no. 172800 IN A 158.38.8.133 not.norid.no. 172800 IN A 156.154.100.12 njet.norid.no. 172800 IN A 156.154.101.12 i.nic.no. 172800 IN AAAA 2001:67c:1010:1::53 x.nic.no. 172800 IN AAAA 2001:700:0:412f::40 y.nic.no. 172800 IN AAAA 2001:8c0:8200:1::2 z.nic.no. 172800 IN AAAA 2001:700:0:52d:158:38:8:133 not.norid.no. 172800 IN AAAA 2001:502:ad09::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for no/DNSKEY
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for no/DNSKEY: 'IPv6 transport disabled'
	Received 713 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (713 bytes) ;; HEADER SECTION ;; id = 10590 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) no. 172800 IN NS not.norid.no. no. 172800 IN NS x.nic.no. no. 172800 IN NS y.nic.no. no. 172800 IN NS i.nic.no. no. 172800 IN NS njet.norid.no. no. 172800 IN NS z.nic.no. no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . NZh33cPBsqtBvaivesasOsNnyGofo7I4nh3yhQa1t1sav5zyD71+JF09wzYUewfggcyuL199MT3/ pX0jQ5vvGQIob7BfqQUSA9bcyQJwfnuGVVHj1DQapdHXf/5aFplmU0EUNR0Ccnz35zAeGwC50+HG JfqatqeDUyBovT5DkzvJxMgGmXRg4guxM6xcdPaKK6ggEL2nFlzieKh/HnFNIQLZHJrHU2c5OUsE bZN5gv9gVzV4Ie0NPULg6vWUBwoNukDq32aQx3S6/3vpDEUis/3B+XplMhw0rYILc0tOv9RcDTnX FNyaHeMRYr7Fn6v5dT/ZjSA7ja1CH8NxdtMUZg== ) ;; ADDITIONAL SECTION (12 records) i.nic.no. 172800 IN A 194.146.106.6 x.nic.no. 172800 IN A 128.39.8.40 y.nic.no. 172800 IN A 193.75.4.22 z.nic.no. 172800 IN A 158.38.8.133 not.norid.no. 172800 IN A 156.154.100.12 njet.norid.no. 172800 IN A 156.154.101.12 i.nic.no. 172800 IN AAAA 2001:67c:1010:1::53 x.nic.no. 172800 IN AAAA 2001:700:0:412f::40 y.nic.no. 172800 IN AAAA 2001:8c0:8200:1::2 z.nic.no. 172800 IN AAAA 2001:700:0:52d:158:38:8:133 not.norid.no. 172800 IN AAAA 2001:502:ad09::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone no

	Checking DS between . and no
	Query to k.root-servers.net for no/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for no/DS: 'IPv6 transport disabled'
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 63940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DS ;; ANSWER SECTION (2 records) no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da ) no. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . NZh33cPBsqtBvaivesasOsNnyGofo7I4nh3yhQa1t1sav5zyD71+JF09wzYUewfggcyuL199MT3/ pX0jQ5vvGQIob7BfqQUSA9bcyQJwfnuGVVHj1DQapdHXf/5aFplmU0EUNR0Ccnz35zAeGwC50+HG JfqatqeDUyBovT5DkzvJxMgGmXRg4guxM6xcdPaKK6ggEL2nFlzieKh/HnFNIQLZHJrHU2c5OUsE bZN5gv9gVzV4Ie0NPULg6vWUBwoNukDq32aQx3S6/3vpDEUis/3B+XplMhw0rYILc0tOv9RcDTnX FNyaHeMRYr7Fn6v5dT/ZjSA7ja1CH8NxdtMUZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for no in the . zone
	DS=29471/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`no. 86400 IN RRSIG ( DS 8 1 86400 20191031170000 20191018160000 22545 . NZh33cPBsqtBvaivesasOsNnyGofo7I4nh3yhQa1t1sav5zyD71+JF09wzYUewfggcyuL199MT3/ pX0jQ5vvGQIob7BfqQUSA9bcyQJwfnuGVVHj1DQapdHXf/5aFplmU0EUNR0Ccnz35zAeGwC50+HG JfqatqeDUyBovT5DkzvJxMgGmXRg4guxM6xcdPaKK6ggEL2nFlzieKh/HnFNIQLZHJrHU2c5OUsE bZN5gv9gVzV4Ie0NPULg6vWUBwoNukDq32aQx3S6/3vpDEUis/3B+XplMhw0rYILc0tOv9RcDTnX FNyaHeMRYr7Fn6v5dT/ZjSA7ja1CH8NxdtMUZg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=29471/SHA-256 is now in the chain-of-trust
	`no. 86400 IN DS ( 29471 8 2 915ede46ea5324ff86b11c9ed4e9c814ae8c462c165e5380a3999d90418841da )`
	Query to not.norid.no for no/DNSKEY
	Error querying not.norid.no/2001:502:ad09:0:0:0:0:12 for no/DNSKEY: 'IPv6 transport disabled'
	Received 745 bytes from 156.154.100.12
	;; Answer received from 156.154.100.12 (745 bytes) ;; HEADER SECTION ;; id = 190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; no. IN DNSKEY ;; ANSWER SECTION (3 records) no. 3600 IN DNSKEY ( 257 3 8 AwEAAZ/4Gp4JK9sYmX+LXKB8VpudlotL7/534h85e2QXzrgfFTP+5odzXGo4BaIpu2FgH64o/TiD tyVoRxcMEQqj7DouY/as/0OMWd3wVIzGTNdX62WzTgVpZe9tjDPbBb6NO5dNUwMpHfM0g+RuM+v4 KSH2Rj+kwCJoh34loFbE3+M8YmlTlrJiqJINE6XLw7PDIUpV+uM/qanoxBqHwRKfrRgQUH3v6zIl iDZj7VuCTACU77Fu8+v8L1C7Epz5HDa+wHa8RMSvNQA9HJwFwZE3pzWIVDV34CWVyua63wtdof9e 29gjhbkKqVMuQCdz49XmqhQQ0gYzYOGMZTnY/pskTVs= ) ; Key ID = 29471 no. 3600 IN DNSKEY ( 256 3 8 AwEAAaqBvgP+MWIdoJtsM59Ppn2yxm1PbTeB3ZqYN/S1kwMbuLs/inFmCaUBqg8LtU8/D+vwV/eS VbU7lcdBFYqwVKCbaUFcR+jgjWf0y0R/kMChvAV7LmdxQu2yzZOA0F9+TTiapSB8m1UW8R+LwDGG ZxBbjgwJL/OWcyIV81ZhOWkr ) ; Key ID = 14551 no. 3600 IN RRSIG ( DNSKEY 8 1 3600 20191031153436 20191019030337 29471 no. YleHGItpxfK56ZhIR4xNwSDEam6Iop6M67ZFo6+eKpl4sij1TZIB/BnUzw1qdryBPq7ZPsFG9X3S SwnyqnF5wJiiRgXRlrMUvC8iUiETCXRPVRQoLIt5LgCqjJEEbEx6PgPOJcIOtk9B8ZP9ODU6706S rt4rEQdho9r20/iSXKgG9UmRyKhowdoTw8LaTpWXz9YFaDmsSYN41/ckb00/pp0HoOYjqdQUnyQU Bz38hVcaSQNBcskr+UVsEe4H0xMKz1eebUnNdgBPqI476CZYhBqT4Lewl7iD6lVf53gR8uR6u+1U MOMwN/mPRaOJqlbZXyF1ClGRN29axkUt5EKM4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for no
	`no. 3600 IN DNSKEY ( 257 3 8 AwEAAZ/4Gp4JK9sYmX+LXKB8VpudlotL7/534h85e2QXzrgfFTP+5odzXGo4BaIpu2FgH64o/TiD tyVoRxcMEQqj7DouY/as/0OMWd3wVIzGTNdX62WzTgVpZe9tjDPbBb6NO5dNUwMpHfM0g+RuM+v4 KSH2Rj+kwCJoh34loFbE3+M8YmlTlrJiqJINE6XLw7PDIUpV+uM/qanoxBqHwRKfrRgQUH3v6zIl iDZj7VuCTACU77Fu8+v8L1C7Epz5HDa+wHa8RMSvNQA9HJwFwZE3pzWIVDV34CWVyua63wtdof9e 29gjhbkKqVMuQCdz49XmqhQQ0gYzYOGMZTnY/pskTVs= ) ; Key ID = 29471`
	`no. 3600 IN DNSKEY ( 256 3 8 AwEAAaqBvgP+MWIdoJtsM59Ppn2yxm1PbTeB3ZqYN/S1kwMbuLs/inFmCaUBqg8LtU8/D+vwV/eS VbU7lcdBFYqwVKCbaUFcR+jgjWf0y0R/kMChvAV7LmdxQu2yzZOA0F9+TTiapSB8m1UW8R+LwDGG ZxBbjgwJL/OWcyIV81ZhOWkr ) ; Key ID = 14551`
	DNSKEY=29471/SEP is now in the chain-of-trust
	DS=29471/SHA-256 verifies DNSKEY=29471/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`no. 3600 IN RRSIG ( DNSKEY 8 1 3600 20191031153436 20191019030337 29471 no. YleHGItpxfK56ZhIR4xNwSDEam6Iop6M67ZFo6+eKpl4sij1TZIB/BnUzw1qdryBPq7ZPsFG9X3S SwnyqnF5wJiiRgXRlrMUvC8iUiETCXRPVRQoLIt5LgCqjJEEbEx6PgPOJcIOtk9B8ZP9ODU6706S rt4rEQdho9r20/iSXKgG9UmRyKhowdoTw8LaTpWXz9YFaDmsSYN41/ckb00/pp0HoOYjqdQUnyQU Bz38hVcaSQNBcskr+UVsEe4H0xMKz1eebUnNdgBPqI476CZYhBqT4Lewl7iD6lVf53gR8uR6u+1U MOMwN/mPRaOJqlbZXyF1ClGRN29axkUt5EKM4Q== )`
	RRSIG=29471 and DNSKEY=29471/SEP verifies the DNSKEY RRset
	DNSKEY=14551 is now in the chain-of-trust
	Query to not.norid.no for www.overgang.no/A
	Received 664 bytes from 156.154.100.12
	;; Answer received from 156.154.100.12 (664 bytes) ;; HEADER SECTION ;; id = 22870 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) overgang.no. 7200 IN NS ns-cloud-d4.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d3.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d1.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d2.googledomains.com. rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 rjalifgds7fj7l9u6njqi2ndimeg9q6p NS SOA RRSIG DNSKEY NSEC3PARAM ) rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191031100014 20191018110404 14551 no. jmsnRofweEnR5LvKJC9O6XdktZD+A/nc6c08x7MwoSDE4nl+RinGnac8nv/TG4mAS47Lnovk8vVX QvV8qZ7Ka7T5hygP2aJnv/jBSzviitX2/b3MLZ2fAZ9WnaJdJq0U1ya6QIA87DchFG4y9luhDgav PGx4CM+AgqCaWoP0CLI= ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 jb5k7gpsq5s763msv3opptinnt0ogtse NS DS RRSIG ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191029203542 20191016030335 14551 no. Sj3UEokxcyUmr9tRHp5E7s4FuX/x+lzesksDwNh9nbxn0drhNf0SV4NdzMqgFkqEBnEbpcHy522e ssnmCXiDUH5GGXtR9HGtM3Z4sPF3JpcHpTBUIk907JV10HmGvdXKQq+7Ny4yyXG+NqwFxL89VpCI 6XQzG9s8NGJpm7ee/v8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to not.norid.no for overgang.no/DNSKEY
	Received 660 bytes from 156.154.100.12
	;; Answer received from 156.154.100.12 (660 bytes) ;; HEADER SECTION ;; id = 44452 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) overgang.no. 7200 IN NS ns-cloud-d3.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d4.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d2.googledomains.com. overgang.no. 7200 IN NS ns-cloud-d1.googledomains.com. rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 rjalifgds7fj7l9u6njqi2ndimeg9q6p NS SOA RRSIG DNSKEY NSEC3PARAM ) rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191031100014 20191018110404 14551 no. jmsnRofweEnR5LvKJC9O6XdktZD+A/nc6c08x7MwoSDE4nl+RinGnac8nv/TG4mAS47Lnovk8vVX QvV8qZ7Ka7T5hygP2aJnv/jBSzviitX2/b3MLZ2fAZ9WnaJdJq0U1ya6QIA87DchFG4y9luhDgav PGx4CM+AgqCaWoP0CLI= ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 jb5k7gpsq5s763msv3opptinnt0ogtse NS DS RRSIG ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191029203542 20191016030335 14551 no. Sj3UEokxcyUmr9tRHp5E7s4FuX/x+lzesksDwNh9nbxn0drhNf0SV4NdzMqgFkqEBnEbpcHy522e ssnmCXiDUH5GGXtR9HGtM3Z4sPF3JpcHpTBUIk907JV10HmGvdXKQq+7Ny4yyXG+NqwFxL89VpCI 6XQzG9s8NGJpm7ee/v8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone overgang.no

overgang.no

	Checking DS between no and overgang.no
	Query to not.norid.no for overgang.no/DS
	Error querying not.norid.no/2001:502:ad09:0:0:0:0:12 for overgang.no/DS: 'IPv6 transport disabled'
	Received 760 bytes from 156.154.100.12
	;; Answer received from 156.154.100.12 (760 bytes) ;; HEADER SECTION ;; id = 1450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 rjalifgds7fj7l9u6njqi2ndimeg9q6p NS SOA RRSIG DNSKEY NSEC3PARAM ) rjail001qb19s4a2ksrchlu7m6g7e5l5.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191031100014 20191018110404 14551 no. jmsnRofweEnR5LvKJC9O6XdktZD+A/nc6c08x7MwoSDE4nl+RinGnac8nv/TG4mAS47Lnovk8vVX QvV8qZ7Ka7T5hygP2aJnv/jBSzviitX2/b3MLZ2fAZ9WnaJdJq0U1ya6QIA87DchFG4y9luhDgav PGx4CM+AgqCaWoP0CLI= ) no. 7200 IN SOA ( charm.norid.no. hostmaster.norid.no. 2019101909 ;serial 7200 ;refresh 1800 ;retry 2419200 ;expire 7200 ;minimum ) no. 7200 IN RRSIG ( SOA 8 1 7200 20191031220949 20191019030337 14551 no. LdRSii3xa5QCmydsecyxBSBGSjuHHXH8q89PFQICLWOTKP0FtpCxJZB0bbUYXVQh7YJ6+BPqkC05 lst2NWIaTYh8qfAp5JA+VOoQb+0Wx/E4gSTYLYr+BjGrao4lTPL1sKrpNv812nROF/Bp2QmwgKMH RQhSHqTFN+H8kJ+e/dE= ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN NSEC3 ( 1 1 5 746b675629979000 jb5k7gpsq5s763msv3opptinnt0ogtse NS DS RRSIG ) jb5fk3go2rl1v66ond97ethkgb88qftm.no. 7200 IN RRSIG ( NSEC3 8 2 7200 20191029203542 20191016030335 14551 no. Sj3UEokxcyUmr9tRHp5E7s4FuX/x+lzesksDwNh9nbxn0drhNf0SV4NdzMqgFkqEBnEbpcHy522e ssnmCXiDUH5GGXtR9HGtM3Z4sPF3JpcHpTBUIk907JV10HmGvdXKQq+7Ny4yyXG+NqwFxL89VpCI 6XQzG9s8NGJpm7ee/v8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for overgang.no in the no zone
	Query to ns-cloud-d3.googledomains.com for overgang.no/DNSKEY
	Received 133 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (133 bytes) ;; HEADER SECTION ;; id = 34704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) overgang.no. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	No DNSKEY records found
	Query to ns-cloud-d2.googledomains.com for www.overgang.no/A
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for www.overgang.no/A: 'IPv6 transport disabled'
	Received 74 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (74 bytes) ;; HEADER SECTION ;; id = 41811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN A ;; ANSWER SECTION (2 records) www.overgang.no. 600 IN CNAME overgang.no. overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no is authoritative for www.overgang.no
	Query to ns-cloud-d3.googledomains.com for www.overgang.no/DNSKEY
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for www.overgang.no/DNSKEY: 'IPv6 transport disabled'
	Received 151 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (151 bytes) ;; HEADER SECTION ;; id = 2395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; www.overgang.no. IN DNSKEY ;; ANSWER SECTION (1 record) www.overgang.no. 600 IN CNAME overgang.no. ;; AUTHORITY SECTION (1 record) overgang.no. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	www.overgang.no is a CNAME to overgang.no
	No RRSIGs found
	Query to ns-cloud-d2.googledomains.com for overgang.no/A
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for overgang.no/A: 'IPv6 transport disabled'
	Received 56 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (56 bytes) ;; HEADER SECTION ;; id = 31314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN A ;; ANSWER SECTION (1 record) overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no is authoritative for overgang.no
	Query to ns-cloud-d1.googledomains.com for overgang.no/SOA
	Received 225 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (225 bytes) ;; HEADER SECTION ;; id = 58615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d3.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d3.googledomains.com/2001:4860:4802:36:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (225 bytes) ;; HEADER SECTION ;; id = 53515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d4.googledomains.com/2001:4860:4802:38:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (225 bytes) ;; HEADER SECTION ;; id = 7822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for overgang.no/SOA
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for overgang.no/SOA: 'IPv6 transport disabled'
	Received 225 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (225 bytes) ;; HEADER SECTION ;; id = 3160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN SOA ;; ANSWER SECTION (1 record) overgang.no. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 2 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (4 records) overgang.no. 21600 IN NS ns-cloud-d1.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d2.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d3.googledomains.com. overgang.no. 21600 IN NS ns-cloud-d4.googledomains.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for overgang.no/A
	Error querying ns-cloud-d2.googledomains.com/2001:4860:4802:34:0:0:0:6d for overgang.no/A: 'IPv6 transport disabled'
	Received 56 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (56 bytes) ;; HEADER SECTION ;; id = 50487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; overgang.no. IN A ;; ANSWER SECTION (1 record) overgang.no. 600 IN A 104.155.3.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	overgang.no A RR has value 104.155.3.50
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.overgang.no at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: