[dns-operations] why root-servers only sign DNSKEY(257) RRSIG ?

Champion Xie xiejieling at gmail.com
Mon Nov 27 09:15:08 UTC 2017


;; ANSWER SECTION:
. 172800 IN* DNSKEY 257 *3 8 (
AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTO
iW1vkIbzxeF3+/4RgWOq7HrxRixHlFlExOLAJr5emLvN
7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5
LKyWbRd2n9WGe2R8PzgCmr3EgVLrjyBxWezF0jLHwVN8
efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7
pr+eoZG+SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLY
A4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnXGXws
9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU=
) ; KSK; alg = RSASHA256; key id = *20326*
. 172800 IN *DNSKEY 256* 3 8 (
AwEAAcRIZfxskdElMKgjwvWQO2bQe7EGAvX6zgIaqmbs
aMqmMrIpd1+bP7nyULLuL8jWnKAqcaVfal2yJD50gg5z
Fl5yW/F9dKNXXEFI7VEcGrPyG6/OrA9RBU8pGWm0qxps
Nm5UIgTU5IX7pb/0rBj67c/R7qln8sjH1ylsr4f1Y3R6
p/druiEalKasEjGKA9L2w9jzUQusWxM7fQx/T8c/3x3b
sjveD1dleQ6MJaCx4bpPXYZpqXmSvGn+T2v5350cBVAF
qVKhGbjxEyXAweem8cTU4L1p+DV7Ua11a1tMf0Tlu8pk
pLwh7NQIggIEhJwEhPeXE3E4C6Q2/PFENcoFERc=
) ; ZSK; alg = RSASHA256; key id =* 46809*
. 172800 IN *DNSKEY 257* 3 8 (
AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQ
bSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh
/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWA
JQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaDX6RS6CXp
oY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3
LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGO
Yl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8ONGc
LmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0=
) ; KSK; alg = RSASHA256; key id =* 19036*
. 172800 IN *RRSIG DNSKEY* 8 0 172800 (
20171211000000 20171120000000 *19036* .
SOC5UHvyhKSqpA7UMlak/U+qmBDFWB2P+nXH7IO3rBW0
pf9fyDBuAdjVvLuGnY/sXCHl1FxWmhj1qQAgX4pF2Fkz
k9G5hrx4hZ0vm1C1KGV2DuPY8Wbu/VnWeGm9Qlz+Bw8I
HxmpxZAcNNJde8Sgu45QXm1s1T5Dyj13dqGAIlFD1ftY
72Tjzl4W2FP0bN9T/uqWnh9wusZLvq90AL+4nFttQl2H
/kQbuBcnTxogJa1qyzDidzoNAkyXI0/m6tP88cQKxd7W
WnCx/dOaASaogqVsGxL5GyvYqb64s+2FpMVQJC0L4iTf
g7mJxl0trJliMpOfco9+7qfxrU6ogYdNOw== )



-- 
Best Regards!!
champion_xie
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.dns-oarc.net/pipermail/dns-operations/attachments/20171127/45972e62/attachment.html>


More information about the dns-operations mailing list