Skip to content

Instantly share code, notes, and snippets.

@Warchant

Warchant/DNSSEC validation for isc.org and os3.nl

Created August 31, 2016 08:52
Show Gist options
  • Save Warchant/8295485be59a734cfdbb20be024f4931 to your computer and use it in GitHub Desktop.
Save Warchant/8295485be59a734cfdbb20be024f4931 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
DNSSEC validation for isc.org and os3.nl
bogdan@ws1:~$ drill -T -k ~/sne/unbound/root.key isc.org
;; Number of trusted keys: 1
;; Domain: .
[T] . 172800 IN DNSKEY 257 3 8 ;{id = 19036 (ksk), size = 2048b}
. 172800 IN DNSKEY 256 3 8 ;{id = 46551 (zsk), size = 1024b}
Checking if signing key is trusted:
New key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Key is now trusted!
[T] org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982
org. 86400 IN DS 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5
;; Domain: org.
[T] org. 900 IN DNSKEY 256 3 7 ;{id = 48497 (zsk), size = 1024b}
org. 900 IN DNSKEY 256 3 7 ;{id = 2097 (zsk), size = 1024b}
org. 900 IN DNSKEY 257 3 7 ;{id = 9795 (ksk), size = 2048b}
org. 900 IN DNSKEY 257 3 7 ;{id = 17883 (ksk), size = 2048b}
Checking if signing key is trusted:
New key: org. 900 IN DNSKEY 256 3 7 AwEAAawfTgllXYOPE9V2azk7u8329qybWjwWGvFZAFz/y4KAj561zD8XNl14NHPbn9qPmHfmeUFDGBUiqvZ15FEidatHuOFm0Me0DmeQGUFicN0ZQTqme98rJ7/8c0f3lDrsP5+gCy/pzhF/O8YD0A1vPwCCuPIUcGkPtRpl8lncyNz/ ;{id = 2097 (zsk), size = 1024b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Trusted key: org. 900 IN DNSKEY 256 3 7 AwEAAYs0w85YCzaqqDF4SGMXtgTCBAIsn2qF6FCxO9vw39s2Py593y3jcPvu9zexauhfAJ1+etGzzM9+VRUUzVdR6+LXxu0l6VxH23AvJM1HT+YC6X0Zb+NqugCaJrqbrn/LJoWbB+7lzBTJQmXlS56Nf66IxIt7kbEMgn9q9tnNU9xz ;{id = 48497 (zsk), size = 1024b}
Trusted key: org. 900 IN DNSKEY 256 3 7 AwEAAawfTgllXYOPE9V2azk7u8329qybWjwWGvFZAFz/y4KAj561zD8XNl14NHPbn9qPmHfmeUFDGBUiqvZ15FEidatHuOFm0Me0DmeQGUFicN0ZQTqme98rJ7/8c0f3lDrsP5+gCy/pzhF/O8YD0A1vPwCCuPIUcGkPtRpl8lncyNz/ ;{id = 2097 (zsk), size = 1024b}
Key is now trusted!
Trusted key: org. 900 IN DNSKEY 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8gE9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXakK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJYyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGzdh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ;{id = 9795 (ksk), size = 2048b}
Trusted key: org. 900 IN DNSKEY 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPuxjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRHmhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ;{id = 17883 (ksk), size = 2048b}
[T] isc.org. 86400 IN DS 12892 5 1 982113d08b4c6a1d9f6aee1e2237aef69f3f9759
isc.org. 86400 IN DS 12892 5 2 f1e184c0e1d615d20eb3c223aced3b03c773dd952d5f0eb5c777586de18da6b5
;; Domain: isc.org.
[T] isc.org. 7200 IN DNSKEY 257 3 5 ;{id = 12892 (ksk), size = 2048b}
isc.org. 7200 IN DNSKEY 256 3 5 ;{id = 13953 (zsk), size = 1024b}
[T] isc.org. 60 IN A 149.20.64.69
;;[S] self sig OK; [B] bogus; [T] trusted
bogdan@ws1:~$ drill -T -k ~/sne/unbound/root.key os3.nl
;; Number of trusted keys: 1
;; Domain: .
[T] . 172800 IN DNSKEY 257 3 8 ;{id = 19036 (ksk), size = 2048b}
. 172800 IN DNSKEY 256 3 8 ;{id = 46551 (zsk), size = 1024b}
Checking if signing key is trusted:
New key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Key is now trusted!
[T] nl. 86400 IN DS 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22
;; Domain: nl.
[T] nl. 3600 IN DNSKEY 257 3 8 ;{id = 34112 (ksk), size = 2048b}
nl. 3600 IN DNSKEY 256 3 8 ;{id = 14028 (zsk), size = 1024b}
Checking if signing key is trusted:
New key: nl. 3600 IN DNSKEY 256 3 8 AwEAAcxYyTzufhcyp3987eUZ/xnayTG4Biz++RupCO2B9P55rcGjrWkBdo7Cp0XPls7jGtO7YWrna1dRbNGXtCgkeEyN0ThG2anPKbbDLrCx7XA6lJLSBKgLKq39l9wCdtsAlLMex7bDsjx298JZaGMkOQRSY8sFARROI1Fkl4Ll5GRT ;{id = 14028 (zsk), size = 1024b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ;{id = 19036 (ksk), size = 2048b}
Trusted key: . 172800 IN DNSKEY 256 3 8 AwEAAcCsATzyk1Hj1xabagAGWi9sZSbB+igdzDM8CMZ5fPcOb314yP9/lmvidoBuApPlMVwlz0lXaj6gzyjoOKBveoDD0VyHTqjCDg9UrcDoClNZciR2sHZoaMZp2yVNFyaC+7MkA8lsrCShieYPEowSjQdkvY5ONlEib/ATXdmAhfgB ;{id = 46551 (zsk), size = 1024b}
Trusted key: nl. 3600 IN DNSKEY 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6apjDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15esteKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJyxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ;{id = 34112 (ksk), size = 2048b}
Trusted key: nl. 3600 IN DNSKEY 256 3 8 AwEAAcxYyTzufhcyp3987eUZ/xnayTG4Biz++RupCO2B9P55rcGjrWkBdo7Cp0XPls7jGtO7YWrna1dRbNGXtCgkeEyN0ThG2anPKbbDLrCx7XA6lJLSBKgLKq39l9wCdtsAlLMex7bDsjx298JZaGMkOQRSY8sFARROI1Fkl4Ll5GRT ;{id = 14028 (zsk), size = 1024b}
Key is now trusted!
[T] os3.nl. 3600 IN DS 64426 5 2 28c5e04fc87d47bd9bbd2e27091a372768c3560795f26ebe097432578e86a6de
;; Domain: os3.nl.
[T] os3.nl. 21600 IN DNSKEY 257 3 5 ;{id = 64426 (ksk), size = 2048b}
os3.nl. 21600 IN DNSKEY 256 3 5 ;{id = 42048 (zsk), size = 1024b}
[T] os3.nl. 21600 IN A 145.100.96.70
;;[S] self sig OK; [B] bogus; [T] trusted
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment