<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Menlo;
panose-1:2 11 6 9 3 8 4 2 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
mso-margin-top-alt:auto;
margin-right:0cm;
mso-margin-bottom-alt:auto;
margin-left:0cm;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Courier New";
color:windowtext;}
p.p1, li.p1, div.p1
{mso-style-name:p1;
margin:0cm;
margin-bottom:.0001pt;
background:white;
font-size:8.5pt;
font-family:Menlo;
color:black;}
p.p2, li.p2, div.p2
{mso-style-name:p2;
margin:0cm;
margin-bottom:.0001pt;
background:white;
font-size:8.5pt;
font-family:Menlo;
color:black;}
span.apple-tab-span
{mso-style-name:apple-tab-span;}
span.s1
{mso-style-name:s1;}
span.apple-converted-space
{mso-style-name:apple-converted-space;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:595.3pt 841.9pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="SV" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New"">I can query for SOA, but when querying for DNSKEY I get SERVFAIL.<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New"">Mats<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New"">###############<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">; <<>> DiG 9.10.6 <<>> avisi.net soa @162.159.26.4 +dns +norec +mult</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; global options: +cmd</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; Got answer:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20580</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; flags: qr aa ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; OPT PSEUDOSECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">; EDNS: version: 0, flags: do; udp: 512</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; QUESTION SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;avisi.net.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">IN SOA</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ANSWER SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">avisi.net.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">3600 IN</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">SOA ns1.dnsimple.com. admin.dnsimple.com. (</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">1494881373 ; serial</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">86400</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; refresh (1 day)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">7200 </span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; retry (2 hours)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">604800 </span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; expire (1 week)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">300</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">; minimum (5 minutes)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">avisi.net.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1">300 IN RRSIG SOA 8 2 3600 (</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">20180616180003 20180318180003 48360 avisi.net.</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">mWibMCt4gcKHZfRVJejPNmAGjmm5AmpWEKXQh32nkeTt</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">+EYwULu2QH5hQJkEVvdCLnfupeVFOjh6Y+iEzwvYi1eM</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">h+997fZRSB5zJkGimU3+gPrlJRh10mbfrOjKPFlb0Mqh</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">qfs5e7L1KoJH8cNvxs7CtObKkGYcxhZJ41JaD1U= )</span><o:p></o:p></p>
<p class="p1"><span class="s1">avisi.net.</span><span class="apple-tab-span">
</span><span class="s1">300 IN RRSIG SOA 8 2 3600 (</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">20180911190001 20180613190001 61413 avisi.net.</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">EAgrmduDlkA8dZdskSLwTBd5croc6gZXCXdlMOyCfr48</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">3Sd8L/rI0oFM7MGZ5KIQjwHhART7QCjIwPm9Ck4HAwFW</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">iZhoD6y8IUm6vX1JXxHd1ISX6gKy1vL7NxoAO5gQh3Ci</span><o:p></o:p></p>
<p class="p1"><span class="apple-tab-span"> </span><span class="s1">1w/hgi1jgM3qGZ9bU4+JgrBojvQHmywxdsaggKI= )</span><o:p></o:p></p>
<p class="p2"><o:p> </o:p></p>
<p class="p1"><span class="s1">;; Query time: 283 msec</span><o:p></o:p></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; SERVER: 162.159.26.4#53(162.159.26.4)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; WHEN: Fri Jun 15 14:06:11 CEST 2018</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; MSG SIZE</span></span><span class="apple-converted-space"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">rcvd: 434</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New"">###############<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">; <<>> DiG 9.10.6 <<>> avisi.net dnskey @162.159.26.4 +dns +norec +mult</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; global options: +cmd</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; Got answer:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 55158</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; flags: qr; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; OPT PSEUDOSECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">; EDNS: version: 0, flags: do; udp: 512</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; QUESTION SECTION:</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;avisi.net.</span></span><span class="apple-tab-span"><span lang="EN-US">
</span></span><span class="s1"><span lang="EN-US">IN DNSKEY</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p2"><span lang="EN-US"><o:p> </o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; Query time: 1700 msec</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; SERVER: 162.159.26.4#53(162.159.26.4)</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1"><span lang="EN-US">;; WHEN: Fri Jun 15 14:07:22 CEST 2018</span></span><span lang="EN-US"><o:p></o:p></span></p>
<p class="p1"><span class="s1">;; MSG SIZE</span><span class="apple-converted-space">
</span><span class="s1">rcvd: 38</span><o:p></o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<div>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New"">---<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New"">Mats Dufberg<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New"">DNS Specialist, IIS<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New"">Mobile: +46 73 065 3899<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;font-family:"Courier New"">https://www.iis.se/en/<o:p></o:p></span></p>
</div>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-family:"Courier New""><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black">dns-operations <dns-operations-bounces@dns-oarc.net> on behalf of Anthony Eden <anthony.eden@dnsimple.com><br>
<b>Date: </b>Friday, 15 June 2018 at 13:54<br>
<b>To: </b>"dns-operations@lists.dns-oarc.net" <dns-operations@dns-oarc.net><br>
<b>Subject: </b>[dns-operations] Question on DNSSEC Failures<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I have a zone where keys are currently in rotation[1], with the old keys (both KSK and ZSK) at 1024 bits and the new keys (both KSK and ZSK) at 2048 bits [2]. DNSSEC validating resolvers such as Google's public resolvers are currently returning
SERVFAIL. [3] <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I am trying to determine why the lookups are failing at resolvers. Is this due to the truncation and requirement to switch to TCP? Do I need to reduce the bit size to something between 1024 and 2048?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">-Anthony<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[1] DS lookup<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">; <<>> DiG 9.12.1 <<>> <a href="http://avisi.net">avisi.net</a> ds<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; global options: +cmd<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; Got answer:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54679<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; OPT PSEUDOSECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">; EDNS: version: 0, flags:; udp: 512<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; QUESTION SECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;<a href="http://avisi.net">avisi.net</a>. IN DS<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; ANSWER SECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 86399 IN DS 43144 8 2 FCED288098D07789ECF678130AB7067A0B4BC6A32AEB3CF6CBEDA915 BB17FAEF<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 86399 IN DS 814 8 2 55C0CDFA96D35060D4A16E747D4C82550BDF773684DEE151E798F7A8 D60BDF15<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; Query time: 48 msec<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; SERVER: 8.8.8.8#53(8.8.8.8)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; WHEN: Fri Jun 15 13:19:23 CEST 2018<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; MSG SIZE rcvd: 134<o:p></o:p></p>
</div>
<div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[2] DNSKEY lookup at authoritative<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">; <<>> DiG 9.12.1 <<>> @<a href="http://ns1.dnsimple.com">ns1.dnsimple.com</a>
<a href="http://avisi.net">avisi.net</a> dnskey<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">; (1 server found)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; global options: +cmd<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; Got answer:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53736<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; WARNING: recursion requested but not available<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; OPT PSEUDOSECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">; EDNS: version: 0, flags:; udp: 65535<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; QUESTION SECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;<a href="http://avisi.net">avisi.net</a>. IN DNSKEY<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; ANSWER SECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 3600 IN DNSKEY 256 3 8 AwEAAdGV37X55G9mrcdE5aGnGD8TN+3nL0Bh1tUor0Y2m/dzi+fw9mnc yxPEm+YXfq2fk0m0UCq/pUCKGJ3h+YJPiRayJnNGaqdrf5+N/sD3FkBV K/XbyxAJo6x+WmEIqLAG86X3CS/aLaMcJggABHbQvANgaCn0hRadSDnF
pRwAKGJN<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 3600 IN DNSKEY 256 3 8 AwEAAe28LyXeKkCAPssNxjizQV7tltdf7PbE/N9Cz+znIWq+cIqKS1th mOzCLSmvOfTCL3NuACotz5lmtshGrCrKTtUX6c29UZyqDGi+5CuioL81 is9SRdBZWCQMxHV7CmvXz/8CI5jfdNMKoIh1x3sq5YLe3P41HZL7PZAV
DSWrNmEf<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 3600 IN DNSKEY 257 3 8 AwEAAcdQiEoApNVhI9tnxpvwZOsVuskjGprvOm5l/eFaMGT8MEnf8iNd Qn8GPpmMMPyiLtby8u/NGKwMquqN+GC8vNxtL6X1aH56qk6CQ8hw0gzj tq7U7upD2aatzUyGM1pQg8mLyZmDxDOV7Go8+O7PeAzkd1MZk3O+OWft
DqEQ8daATqT+nFep7C5RB+UGch3oIKP/kgHQcOSkcYY5t/h07XmqjpcC PbR9ckhd7KnYgoigM4Pxy1gNbdffdlYqMCrv3j8k8BxdFkoYJAYwdwl8 s/mKFtH1wMInSSWrC3S57SbB5duvmutnhj6lfi+gpZpz9PLSNDl3WW+S hR/RXSMd8DM=<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><a href="http://avisi.net">avisi.net</a>. 3600 IN DNSKEY 257 3 8 AwEAAckqvGwehFdAuYYb+b8IgXEtgcsfeVRMfk2jde7WfXOMFwIwT8pH HOY0QXUNx0OFU5L9f2sMxWTUvp8EyW+F/lLgENBjDUzeUzMWMPp+EQUM TJKAwE3rnUTx8Zow6uZTy7FO6KvAI2wVi5KN0b7jXZZ97Z8S5uZ7S8Go
wt4t+fthOgQ/mPW7vVbvZSo5v3H7dqBFgIQGXgjsggCQeoSxS528pge/ 4ii4nx7TsbntAYBqfovIu3g46l2/nnOuUoNE7aOKYvC7SKPmrpAfnUUL j5E7704shGOM38XPOTvAkSl9NyqGM4ln0LgiFYLxO/m2tN0ySQVS4A5A SHFdR0Ai64E=<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; Query time: 50 msec<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; SERVER: 162.159.24.4#53(162.159.24.4)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; WHEN: Fri Jun 15 13:17:21 CEST 2018<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; MSG SIZE rcvd: 886<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">[3] DNSKEY lookup at resolver<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<div>
<p class="MsoNormal">; <<>> DiG 9.12.1 <<>> @<a href="http://8.8.8.8">8.8.8.8</a>
<a href="http://avisi.net">avisi.net</a> DNSKEY<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">; (1 server found)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; global options: +cmd<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; Got answer:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63216<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; OPT PSEUDOSECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">; EDNS: version: 0, flags:; udp: 512<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; QUESTION SECTION:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;<a href="http://avisi.net">avisi.net</a>. IN DNSKEY<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">;; Query time: 3708 msec<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; SERVER: 8.8.8.8#53(8.8.8.8)<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; WHEN: Fri Jun 15 13:18:46 CEST 2018<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">;; MSG SIZE rcvd: 38<o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">DNSimple.com<br>
<a href="http://dnsimple.com/" target="_blank">http://dnsimple.com/</a><br>
Twitter: @dnsimple<o:p></o:p></p>
</div>
</div>
</div>
</div>
</div>
</div>
</body>
</html>