[dns-operations] org/DNSKEY RR not found

[Mark Andrews]

In message <CAGfsgR1JwEUkXHxXRAghi19MGACRckeV1AqEn0ZD2Ncc0DXr9A at mail.gmail.com>, Jim Popovitch writes:
> Hello!
> 
> I've been learning/playing around with DNSSEC and I've run across this
> error using dnsviz.net.  I'm assuming that there's nothing I can do
> about it, but also wondering if this is really a major or minor thing
> (dnsviz codes it "red").
> 
> org/DNSKEY (alg 7, id 12023): The DNSKEY RR was not found in the
> DNSKEY RRset returned by one or more servers. (199.249.112.1,
> 2001:500:40::1)
> 
> org/DNSKEY (alg 7, id 13104): The DNSKEY RR was not found in the
> DNSKEY RRset returned by one or more servers. (199.19.53.1,
> 199.19.54.1, 199.19.56.1, 199.19.57.1, 199.249.120.1, 2001:500:b::1,
> 2001:500:c::1, 2001:500:e::1, 2001:500:f::1, 2001:500:48::1)
> 
> -Jim P.
> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
> dns-jobs mailing list
> https://lists.dns-oarc.net/mailman/listinfo/dns-jobs

It's just a key rollover.  It's only a error if there are still
records that are in caches which are still signed by those keys
and don't have other valid signatures.

Inconsistent RRset != error unless it is a persistant condition.

Mark
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org