This is a proof-of-concept of a utility to download DNS zone contents even when AXFR is disabled on the server, assuming DNSSEC is used. Optionally it can also verify all SIG RRs within a zone against the zone key. If you do not know what DNSSEC is, please refer to:
This program requires the Net::DNS and Net::DNS::SEC packages.
Source code is available via CVS (just press enter at the password prompt):
$ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/public-cvs login
Logging in to :pserver:anoncvs@yxa.extundo.com:2401/home/public-cvs
CVS password:
$ cvs -d :pserver:anoncvs@yxa.extundo.com:/home/public-cvs co walker
The CVS repository can also be access by using the HTML interface.
WALKER(1) User Contributed Perl Documentation WALKER(1)
NAME
walker - Retrieve a DNS zone using NXT traversal
SYNOPSIS
walker [-y] [-n] [ @nameserver ] zone
DESCRIPTION
walker retrieves a DNS zone from the default or supplied
name server and prints each record to the standard output.
AXFR is not used, instead the DNSSEC NXT record chain is
traversed. The zone must use DNSSEC. The output should
conform to the standard DNS master file format (but see
BUGS). Optionally, walker can also verify DNSSEC signa-
tures on the RRsets within the zone.
OPTIONS
@nameserver
Query nameserver instead of the default nameserver.
-y Additionally perform verification on each RRset within
the zone and print result of verification (in a zone
file comment).
-n When querying for NS records, ask the nameserver non-
recursively and print the NS records from the author-
ity section, instead of going through the full
resolver logic. It is only useful when you know that
the default name server (or the supplied specific
nameserver) can respond correctly, which it typically
only would if it is responsible for the zone. The
reason for this parameter is to improve speed when
used against an authorative server that would other-
wise recursively ask child servers for NS records.
AUTHOR
Simon Josefsson
BUGS
CNAME, CERT and/or SRV RRs is known to cause perl warnings
during verifications with some versions of Net::DNS and
Net::DNS::SEC. The cause is belived to be in Perl,
Net::DNS or Net::DNS::SEC. The reader is encouraged to
track down and fix these bugs.
SEE ALSO
perl(1), axfr, perldig, Net::DNS, Net::DNS::SEC,
resolv.conf
perl v5.6.1 2003-02-18 WALKER(1)
Here is how you would recover the zone file for "josefsson.org". Zone transfer of the zone is disabled, but it uses DNSSEC. The -y parameter is used as well, so walker prints out verification results in comments as well.
jas@latte:~/src/walker$ ./walker -y @yxa.extundo.com josefsson.org ;; Key used to verify signatures: ;; josefsson.org. 3600 IN KEY 256 3 1 ( ;; AQPFsXW3GQe5z4nvqG+V6tw3LdjDhzPXRBlI ;; +Nky26gpZlbXLMJJnJsAjaSOwy0p7Cwkb8Fy ;; L8QGGqrOtuDTILfr ;; ) ; Key ID = 8375 josefsson.org. 36000 IN SOA belsebub.onkel. jas.pdc.kth.se. ( 2002110703 ; Serial 10800 ; Refresh 3600 ; Retry 604800 ; Expire 36000 ) ; Minimum TTL ;; Getting NXT for josefsson.org josefsson.org. 36000 IN NXT _kerberos._tcp.josefsson.org A KEY LOC MX NS NXT SIG SOA TXT ;; Looking at type A for domain josefsson.org josefsson.org. 3600 IN A 217.13.230.178 josefsson.org. 3600 IN SIG A 1 2 3600 20021213071840 ( 20021113071840 8375 josefsson.org oCIOA9yQVKT7JdePedPB3+0gX92BzS0Und+uH09y+TV+x GtoRC+a9AN3Dq3djajgAuorqDoFjTA7W9hZdAw5Yw== ) ;; verify ok ;; Looking at type KEY for domain josefsson.org josefsson.org. 3600 IN KEY 256 3 1 ( AQPFsXW3GQe5z4nvqG+V6tw3LdjDhzPXRBlI +Nky26gpZlbXLMJJnJsAjaSOwy0p7Cwkb8Fy L8QGGqrOtuDTILfr ) ; Key ID = 8375 josefsson.org. 3600 IN SIG KEY 1 2 3600 20021213071839 ( 20021113071839 8375 josefsson.org nt3bpmfdENflBcBbfZJLhMpOYDMFm3BD+Hh/aXD/GMtFI MOYc1k9O4H/8elzyCBUa49T5STv2mM28af/jci0vQ== ) ;; verify ok ;; Looking at type LOC for domain josefsson.org josefsson.org. 3600 IN LOC 59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m josefsson.org. 3600 IN SIG LOC 1 2 3600 20021213071840 ( 20021113071840 8375 josefsson.org QYxhfmjGohCZPV5J7VX8cPeLleqmf/ZDHRHAht8VSsEPi iK+bLYhxLK7UvP+5ZR4YxVt+oKKr/iJBDiLTJ737g== ) ;; verify ok ;; Looking at type MX for domain josefsson.org josefsson.org. 3600 IN MX 20 terminal.2globe.net. josefsson.org. 3600 IN MX 4 yxa.extundo.com. josefsson.org. 3600 IN MX 6 syl.extundo.com. josefsson.org. 3600 IN MX 10 vic20.blipp.com. josefsson.org. 3600 IN SIG MX 1 2 3600 20021213071840 ( 20021113071840 8375 josefsson.org s/6lwftn4j6Ie+2Iyqr8MChrgQEghvpEDlEcWYNXAlDMR uHF3UAefEkgtaLeIOZu6ADqMw/iGNnS4sg8t8dxuw== ) ;; verify ok ;; Looking at type NS for domain josefsson.org josefsson.org. 36000 IN NS yxa.extundo.com. josefsson.org. 36000 IN NS vic20.blipp.com. josefsson.org. 36000 IN NS terminal.2globe.net. josefsson.org. 36000 IN NS syl.extundo.com. josefsson.org. 36000 IN SIG NS 1 2 36000 20021213071840 ( 20021113071840 8375 josefsson.org cNm6/SvoVkGwtkHyqzsfpLqiMiJJ2ukLtXGZsmFLEtNS+ c6/cTcBt1Qn2qSn0M8wVmj+9n/EBs3c2Mgw6aauSw== ) ;; verify ok ;; Looking at type NXT for domain josefsson.org josefsson.org. 36000 IN NXT _kerberos._tcp.josefsson.org A KEY LOC MX NS NXT SIG SOA TXT josefsson.org. 36000 IN SIG NXT 1 2 36000 20021213071840 ( 20021113071840 8375 josefsson.org Bnye5LOBl74qjaUExCQwS8OOpC5uYIWUquT183/L2CaXh jATdfXr3lXSnCKICd/hy5VH+Z3RTWZ8jT80sX2U4g== ) ;; verify ok ;; Looking at type SOA for domain josefsson.org josefsson.org. 36000 IN SIG SOA 1 2 36000 20021213071840 ( 20021113071840 8375 josefsson.org FZdaYMSl84AHxtdH2X6DKjTyQS+HQjUhFTN/ZD+n0/Wue +jEwqG3ud807a1wzMcOUry1BVCNXn5Ftz9Pt9IyYw== ) ;; verify ok ;; Looking at type TXT for domain josefsson.org josefsson.org. 3600 IN TXT "JOSEFSSON.ORG" josefsson.org. 3600 IN SIG TXT 1 2 3600 20021213071840 ( 20021113071840 8375 josefsson.org Sxf15F412DfBH+7K0Ng18mRuabCPf1+XSdtSsMThTBdtu l2Vbx6d9DIkAXEvtz4Do47U2wOS9tlIXOW/KkFVFA== ) ;; verify ok ;; Getting NXT for _kerberos._tcp.josefsson.org _kerberos._tcp.josefsson.org. 36000 IN NXT _kerberos._udp.josefsson.org NXT SIG SRV ;; Looking at type NXT for domain _kerberos._tcp.josefsson.org _kerberos._tcp.josefsson.org. 36000 IN NXT _kerberos._udp.josefsson.org NXT SIG SRV _kerberos._tcp.josefsson.org. 36000 IN SIG NXT 1 4 36000 20021213071840 ( 20021113071840 8375 josefsson.org J4nAOnux4aeJlfhsJHM7KrJNkBhXu8zmOiLQvTH02cFOX XvUTCsO2VzExs9IJqNpnZ8k8rRFPa+KYPwUma2p8A== ) ;; verify ok ;; Looking at type SRV for domain _kerberos._tcp.josefsson.org _kerberos._tcp.josefsson.org. 3600 IN SRV 0 0 88 latte.josefsson.org. _kerberos._tcp.josefsson.org. 3600 IN SIG SRV 1 4 3600 20021213071840 ( 20021113071840 8375 josefsson.org W9civ/AroKv91NJLWhORUUewUy0cjYLnFSOvJe7ElfRQ2 6ZierlkozGclzBR+vtX9Ijfb1XfDVuID5llkIsdQw== ) ;; cannot verify signature on SRVs, sorry ;; Getting NXT for _kerberos._udp.josefsson.org _kerberos._udp.josefsson.org. 36000 IN NXT barbar.josefsson.org NXT SIG SRV ;; Looking at type NXT for domain _kerberos._udp.josefsson.org _kerberos._udp.josefsson.org. 36000 IN NXT barbar.josefsson.org NXT SIG SRV _kerberos._udp.josefsson.org. 36000 IN SIG NXT 1 4 36000 20021213071840 ( 20021113071840 8375 josefsson.org pCi140w/7HxKlgIeTm5xTidCYjwtv+EyOwhochMImY1Ka Cp0uRxIovXpGqZn1dnbgUDa+oCjb63VJAK79sNBkQ== ) ;; verify ok ;; Looking at type SRV for domain _kerberos._udp.josefsson.org _kerberos._udp.josefsson.org. 3600 IN SRV 0 0 88 latte.josefsson.org. _kerberos._udp.josefsson.org. 3600 IN SIG SRV 1 4 3600 20021213071840 ( 20021113071840 8375 josefsson.org R+GENXYwbK3yj+IUdMKw21udDvFkPnJSyqMXHSigWhk0u xtykP+Wn+N5KkXywlldT7rXAy1xWZlRIpKIJ0VIcQ== ) ;; cannot verify signature on SRVs, sorry ;; Getting NXT for barbar.josefsson.org barbar.josefsson.org. 36000 IN NXT dnskeys.josefsson.org LOC NXT SIG ;; Looking at type LOC for domain barbar.josefsson.org barbar.josefsson.org. 3600 IN LOC 59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m barbar.josefsson.org. 3600 IN SIG LOC 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org Z4XuTY7kgYJCibPL91OBRhhK/rtX0ezKI0+2awHFbtn76 x88Cuzzp1PyHKlkCFeVwmmoa3evz94qqMKn3At4Jw== ) ;; verify ok ;; Looking at type NXT for domain barbar.josefsson.org barbar.josefsson.org. 36000 IN NXT dnskeys.josefsson.org LOC NXT SIG barbar.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org u80FzuSJdaxRV1x2g50A+tOy+BmFjSK+zlcT+HPKZ3ZGw 3fzryv507faNDqrNkO7wiAFC8acjO8m2eIWsFP4qA== ) ;; verify ok ;; Getting NXT for dnskeys.josefsson.org dnskeys.josefsson.org. 36000 IN NXT foo bar.josefsson.org KEY NS NXT SIG ;; Looking at type KEY for domain dnskeys.josefsson.org dnskeys.josefsson.org. 36000 IN KEY 49408 3 3 ( ) ; Key ID = 0 dnskeys.josefsson.org. 36000 IN SIG KEY 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org IErlqNgvm4ju5LvIGyd9BhS91zH1mlgR61oxD/LJuySL3 6QR7TkBIxOIHtpj3zXU/LVGx1XyQavFF5qepi/SjA== ) ;; verify ok ;; Looking at type NS for domain dnskeys.josefsson.org dnskeys.josefsson.org. 62 IN NS latte.josefsson.org. ;; no signature found ;; Looking at type NXT for domain dnskeys.josefsson.org dnskeys.josefsson.org. 36000 IN NXT foo bar.josefsson.org KEY NS NXT SIG dnskeys.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org GfzlMLda3+7fzIzRuXCTqKeeQQRmfMT/wgfHekWUU0j/r 05xLdlyQU/6pwUV8DB0lMOeHhLHnxTAQpl36Ms7jQ== ) ;; verify ok ;; Getting NXT for foo bar.josefsson.org foo bar.josefsson.org. 36000 IN NXT kerberos.josefsson.org NXT SIG TXT ;; Looking at type NXT for domain foo bar.josefsson.org foo bar.josefsson.org. 36000 IN NXT kerberos.josefsson.org NXT SIG TXT foo bar.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org Fa4rMkKMC+JFAHaouLjEv0WSH6ssLDKj5hZ8nnO+9HwEu CDNSLXy4lWy842z5AKmJ1MJoeLDYxW/XVNLRjVtaA== ) ;; verify ok ;; Looking at type TXT for domain foo bar.josefsson.org foo bar.josefsson.org. 3600 IN TXT "Med space" foo bar.josefsson.org. 3600 IN SIG TXT 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org SonbI43/hZ8F5ur3c8ntGsExT6FzfHdnKlv1Ly2KBcfTB Dn7Cdtv8THBGkdpGYOhIkwQbgzfn2PrIFTW/SVNfA== ) ;; verify ok ;; Getting NXT for kerberos.josefsson.org kerberos.josefsson.org. 36000 IN NXT kerberos-1.josefsson.org CNAME NXT SIG ;; Looking at type CNAME for domain kerberos.josefsson.org kerberos.josefsson.org. 3600 IN CNAME latte.josefsson.org. kerberos.josefsson.org. 3600 IN SIG CNAME 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org FOtgPTICVyBx8qug1mxl1FijMmBVLf3S4bptcDSsTZjN2 WYz7m7Y0l2TtANXqjA3NMwx8Vuxbgp/rqnFMj8rmQ== ) ;; cannot verify signature on CNAMEs, sorry ;; Looking at type NXT for domain kerberos.josefsson.org kerberos.josefsson.org. 36000 IN NXT kerberos-1.josefsson.org CNAME NXT SIG kerberos.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org EnJLW6I11XrpyoQ3UWuYw7T/18qK/UsWe+/mse/8Sufyx g+OGyEJxOZW+lwRd+ANAzXPUHyylDOcium4FP87BA== ) ;; verify ok ;; Getting NXT for kerberos-1.josefsson.org kerberos-1.josefsson.org. 36000 IN NXT krb4-realm.josefsson.org CNAME NXT SIG ;; Looking at type CNAME for domain kerberos-1.josefsson.org kerberos-1.josefsson.org. 3600 IN CNAME latte.josefsson.org. kerberos-1.josefsson.org. 3600 IN SIG CNAME 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org dDKAmhm5rh16CPfAxdSeplB06sNVZjD/gQEXBYwrMjYf6 +uRNc/DnLL/0b/zlODULjhjWRVIMOwskysclWFeKA== ) ;; cannot verify signature on CNAMEs, sorry ;; Looking at type NXT for domain kerberos-1.josefsson.org kerberos-1.josefsson.org. 36000 IN NXT krb4-realm.josefsson.org CNAME NXT SIG kerberos-1.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org UlROLo/vkp1MnN7di9SFb37v1jxeusTtmAgH/vS/a/DDv /lKzQ/w5NAf+uDWzqWCI3ehXh9W/WTX571+uHc3nA== ) ;; verify ok ;; Getting NXT for krb4-realm.josefsson.org krb4-realm.josefsson.org. 36000 IN NXT krb5-realm.josefsson.org NXT SIG TXT ;; Looking at type NXT for domain krb4-realm.josefsson.org krb4-realm.josefsson.org. 36000 IN NXT krb5-realm.josefsson.org NXT SIG TXT krb4-realm.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org skspRbvwsGl6MylTHe6xIRZQWrtb83MaKnk3blAyrlnoC eLKarUWRMfw6JU0CxBDLmwb7H0xiwodg8YKRn49DA== ) ;; verify ok ;; Looking at type TXT for domain krb4-realm.josefsson.org krb4-realm.josefsson.org. 3600 IN TXT "JOSEFSSON.ORG" krb4-realm.josefsson.org. 3600 IN SIG TXT 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org dN6kCD5CXhYobr6bDJooNu+SHcnBF0DFLM1HaQYIB7TA4 TCBAqmnSSS67gZWOpced2ReIsSiBK1L8Dp4GIhRVg== ) ;; verify ok ;; Getting NXT for krb5-realm.josefsson.org krb5-realm.josefsson.org. 36000 IN NXT latte.josefsson.org NXT SIG TXT ;; Looking at type NXT for domain krb5-realm.josefsson.org krb5-realm.josefsson.org. 36000 IN NXT latte.josefsson.org NXT SIG TXT krb5-realm.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org ZTzIAjRUuUd5KUxuAVE+yoizGLW2Srrcz7rBV5ee480Ib yhbHraCtRawuF3awjd7o/wqhQsbQI8Mb61tXza9Rg== ) ;; verify ok ;; Looking at type TXT for domain krb5-realm.josefsson.org krb5-realm.josefsson.org. 3600 IN TXT "JOSEFSSON.ORG" krb5-realm.josefsson.org. 3600 IN SIG TXT 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org Y8Ji4/Ev0tckf/ATs7m4Cm9PqECz+yp0iS3WnJBexFCav Uhfnx6ngNnbv4Hdx46WCOEUweQq3x+iaUrvo1YX5Q== ) ;; verify ok ;; Getting NXT for latte.josefsson.org latte.josefsson.org. 36000 IN NXT latte-eth1-dhcp128.josefsson.org A MX NXT SIG ;; Looking at type A for domain latte.josefsson.org latte.josefsson.org. 3600 IN A 217.208.172.73 latte.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org JzMGcs9WARCTxVotqyfz1e59OXteCjF+jN+YG0njybAoC 1mAOdZadTnsMKsfNPIlm07sHfPULZbz4qI2b+Phtg== ) ;; verify ok ;; Looking at type MX for domain latte.josefsson.org latte.josefsson.org. 3600 IN MX 20 syl.extundo.com. latte.josefsson.org. 3600 IN MX 10 yxa.extundo.com. latte.josefsson.org. 3600 IN SIG MX 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org HIwPhDNlRfWPH3nkxl1S3ynGfyLAEHztA3HpwchNoC6fl afh587OI8gb7EFJWOZs/1AS7pccM0g0EXpf8a3Aqg== ) ;; verify ok ;; Looking at type NXT for domain latte.josefsson.org latte.josefsson.org. 36000 IN NXT latte-eth1-dhcp128.josefsson.org A MX NXT SIG latte.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org p8uu5VBticGJ4z9lNJIFBaJqCBxG/T1j3Idpql+G3x+gR k6y0TiuXAIxAGl+kjTzrZJopC+QY7sYBPpov8aY8g== ) ;; verify ok ;; Getting NXT for latte-eth1-dhcp128.josefsson.org latte-eth1-dhcp128.josefsson.org. 36000 IN NXT latte-eth1-dhcp129.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth1-dhcp128.josefsson.org latte-eth1-dhcp128.josefsson.org. 3600 IN A 192.168.1.128 latte-eth1-dhcp128.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org HEDz5ali61iW3l5zvBQxq/XOjgbpnhbBGs+jqh17CufWf o4J0T14db/ec1k+vnIM12+kdVyuNn4H6ZjeQ+19dQ== ) ;; verify ok ;; Looking at type NXT for domain latte-eth1-dhcp128.josefsson.org latte-eth1-dhcp128.josefsson.org. 36000 IN NXT latte-eth1-dhcp129.josefsson.org A NXT SIG latte-eth1-dhcp128.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org idvefTCW1ZM/QbHJJe1fndblE+emNYBG0xFHYkUiPuaNx bt6hjoFTX/L5eecvifVd7N8lPTXx14wzfj/SIZuzg== ) ;; verify ok ;; Getting NXT for latte-eth1-dhcp129.josefsson.org latte-eth1-dhcp129.josefsson.org. 36000 IN NXT latte-eth1-dhcp130.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth1-dhcp129.josefsson.org latte-eth1-dhcp129.josefsson.org. 3600 IN A 192.168.1.129 latte-eth1-dhcp129.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org TSp0LzjM3DUUD+VdpxfLXA7BOXBEOIIxzBkAXAWeketY0 CZI9cd6EIco5tAl4IA4KKPMUwlH9D/1eH2p8w9IRg== ) ;; verify ok ;; Looking at type NXT for domain latte-eth1-dhcp129.josefsson.org latte-eth1-dhcp129.josefsson.org. 36000 IN NXT latte-eth1-dhcp130.josefsson.org A NXT SIG latte-eth1-dhcp129.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org m5HSwgp54mv8Pufs3ggTs8fJBzNZR3lKI62YMqSGVixBB 7pFDswSF4kh19mCP5KQd51MmW/Nywc9U4pZVWxo8g== ) ;; verify ok ;; Getting NXT for latte-eth1-dhcp130.josefsson.org latte-eth1-dhcp130.josefsson.org. 36000 IN NXT latte-eth2-dhcp128.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth1-dhcp130.josefsson.org latte-eth1-dhcp130.josefsson.org. 3600 IN A 192.168.1.130 latte-eth1-dhcp130.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org BWrNQnSbakdwHP4j60eyHfDtwB/9t98QqJd4V0SOPuPdD 3L+0tdOqYRlWRmd2sGOpgL50aLaNbXaihEz9/rSSg== ) ;; verify ok ;; Looking at type NXT for domain latte-eth1-dhcp130.josefsson.org latte-eth1-dhcp130.josefsson.org. 36000 IN NXT latte-eth2-dhcp128.josefsson.org A NXT SIG latte-eth1-dhcp130.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org gKf+9Ijzmvl47EHfgSAQ6tY17fl4JF392As3ohHuF4ugN F/qNQSSX1n+7DmBBaceaVZPxZFqdq4AY296ouAojA== ) ;; verify ok ;; Getting NXT for latte-eth2-dhcp128.josefsson.org latte-eth2-dhcp128.josefsson.org. 36000 IN NXT latte-eth2-dhcp129.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth2-dhcp128.josefsson.org latte-eth2-dhcp128.josefsson.org. 3600 IN A 192.168.2.128 latte-eth2-dhcp128.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org NpgsZHlg7+ZU+tGaDfEGGDRYubQFw7eaFqpyoLAi2gUN9 A9K8Jbb+CvOhFHyCRM1hVGGrJCEOwTRnDmSWziPPw== ) ;; verify ok ;; Looking at type NXT for domain latte-eth2-dhcp128.josefsson.org latte-eth2-dhcp128.josefsson.org. 36000 IN NXT latte-eth2-dhcp129.josefsson.org A NXT SIG latte-eth2-dhcp128.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org hNAP1LWw8MNAEypSTUaeN+myXBvBu23PcrA1ORPXUGlht 7Vo1mACtnoN/c/7pkG5TF8LMrxxsr0DiDymR1LrqQ== ) ;; verify ok ;; Getting NXT for latte-eth2-dhcp129.josefsson.org latte-eth2-dhcp129.josefsson.org. 36000 IN NXT latte-eth2-dhcp130.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth2-dhcp129.josefsson.org latte-eth2-dhcp129.josefsson.org. 3600 IN A 192.168.2.129 latte-eth2-dhcp129.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org FjCRQKEfew4BMLDgX0KHwBJe98+GSrkK8gGYlYMLce3Oi bBDxYzzPf0B2odxKIQ1+4DUKor2ueM4DP2OU4kNwQ== ) ;; verify ok ;; Looking at type NXT for domain latte-eth2-dhcp129.josefsson.org latte-eth2-dhcp129.josefsson.org. 36000 IN NXT latte-eth2-dhcp130.josefsson.org A NXT SIG latte-eth2-dhcp129.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org MAXgXLEIZDmwDB3cN5SjPDEpM5+P3x9b+ozxZe73066kf /cp6Yvl39vuzvo0j/OzRvYt7vOtC19f3cn/F0q/0g== ) ;; verify ok ;; Getting NXT for latte-eth2-dhcp130.josefsson.org latte-eth2-dhcp130.josefsson.org. 36000 IN NXT simon.josefsson.org A NXT SIG ;; Looking at type A for domain latte-eth2-dhcp130.josefsson.org latte-eth2-dhcp130.josefsson.org. 3600 IN A 192.168.2.130 latte-eth2-dhcp130.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org lpzu4/xC39VQZNHR3XgJnxv6bAmzU2sOzauaZPTZ5nwFt IWgDOn6ygUdaQHhIBIKQUHBsUXz2kU9PwOEQDZXQg== ) ;; verify ok ;; Looking at type NXT for domain latte-eth2-dhcp130.josefsson.org latte-eth2-dhcp130.josefsson.org. 36000 IN NXT simon.josefsson.org A NXT SIG latte-eth2-dhcp130.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org NBW+3HkbtRHetO3eaerG7yhiKBLJRLZg5wFZtx4MWWAwz QU3fa1CUrKiBXy4cCpHCvXQTWd6K42ovyKAP+Bvnw== ) ;; verify ok ;; Getting NXT for simon.josefsson.org simon.josefsson.org. 36000 IN NXT kerberos-iv.tcp.josefsson.org CERT NXT SIG ;; Looking at type CERT for domain simon.josefsson.org simon.josefsson.org. 3600 IN CERT PGP 0 0 mKsEPNUHKwEFALqJSBHn6Qk5ex138kwymxA3idCFoTi5Q6mVooEVVaYVfeDG+5uVT5rhTFDfDcT9SO0eIlfKOraSRnVEHyDDH2PAgJFxyneFELcmLUQ66D+m8z+ziGro6bcDSBBDMRkHIX6/kH/vnevjqivIld+j8WTcVX+SArcKyzgQ58uMTrfQdLqzh6D9sE/838+ZPZkabmKKWMVWccoaUbWGYOcNwO0ABim0IVNpbW9uIEpvc2Vmc3NvbiA8amFzQGV4dHVuZG8uY29tPojYBBMBAgAiBQI81QcrAhsDBQkB4TOABAsHAwIDFQIDAxYCAQIeAQIXgAAKCRDtoh6UtWVxb4jyBP0arTNzMTakDhO8BCE03d0iru6sCFJ2qQeh4UAFXy8KZ5ybtWJxFT/Q7xn0uXKujJ99cXhuy7icDR13wWkRKG20IjKiNv9yzQaNR36+m58mjZu1UDnGVm2PT9bELYmKTVoumi44QWgU5lgq5KZfWhsA5BQEqS5tp9k4CBBg36JCwjYxHfnWxymA1hSyMKPmgmPm6aFd+Lv9d3h5oTVs9TBOiEYEExECAAYFAj1Y8r8ACgkQV5Mp08AbKiIX9wCfR2rMiXdKzZB95acA5YSQ4MLQyygAn1Nv7M36SAofR/73WjqlPpVAQ+fRtCVTaW1vbiBKb3NlZnNzb24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+iNgEEwECACIFAj0lzz0CGwMFCQHhM4AECwcDAgMVAgMDFgIBAh4BAheAAAoJEO2iHpS1ZXFvt3ME/ijwFJCSNoY1AfCEm3AX6vRKUbjiy0MdemsqajXF6awcbIaeCwk3wVr9JOs1usu2/AQQDvz0sf/hEv6c3sMTYspD6+QzrRMUVbLm0fp+pRZKyaW1tO+/JIoOl8qsOwodkXPQ7CYFvSZhhkxdUwVOa6UtL6kOdCjQAy7DDQTzdcC/GxHQNVUNF5KcBWC7LMN6iAt0dAFEMaQz4t37CHq+DCyIRgQTEQIABgUCPVjywgAKCRBXkynTwBsqImY3AKCSCOO5LlNxmritUFY1i7VXBCUlZgCgll/6kE0G/NP3E6AdyzVwAzBPgUe4qwQ81Qd7AQUA2PTaoT8RNkFDlX7UCOB9vaRFxrX+dN7l6QO+O0Mg7dVdjItEnaaYkJ+r4LXecI47HogsUGExRdDYGT0Dq7aZ8GkC4UKPXc3q2KWQ3ib3wj3qnCGm3IX/I249ydYLAzQyWqMW09wLB5vxhPi4yjet4FTGWmtYUlGzDb7+6VZilYRTty0vhFF4cVXlO2R+vgPxFMvUc7o8WGDnQ3iyWAizkQAGKYjFBBgBAgAPBQI81Qd7AhsMBQkB4TOAAAoJEO2iHpS1ZXFvl2cE/3sB4hHGnvBI91WwHvrTJG29pgqXbZNa2FVzbwDju972kVdYT1FfVndE/bstRX3BT3/GNHXBgSXRNmZkVO7tQoqNReycUTTdExBeCsDO2p2QiQ5ijuD1HbOC2p0cptvKeNxsfKzwKP6U1CalYp6AV6DynqNqW4gpkIlHr+ZRM8/q8YfJblwCiYL8Bfh/jI/s2gI4lQimHGlBrIkG2vSgie7ADAAlAAEAAA4QBI0AAQAAADCCBIQwggPtoAMCAQICEC4QNwPfRoWdelUNpllhhTgwDQYJKoZIhvcNAQEEBQAwgcwxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMUYwRAYDVQQLEz13d3cudmVyaXNpZ24uY29tL3JlcG9zaXRvcnkvUlBBIEluY29ycC4gQnkgUmVmLixMSUFCLkxURChjKTk4MUgwRgYDVQQDEz9WZXJpU2lnbiBDbGFzcyAxIENBIEluZGl2aWR1YWwgU3Vic2NyaWJlci1QZXJzb25hIE5vdCBWYWxpZGF0ZWQwHhcNMDAwNjI2MDAwMDAwWhcNMDAwODI1MjM1OTU5WjCCAQgxFzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVzdCBOZXR3b3JrMUYwRAYDVQQLEz13d3cudmVyaXNpZ24uY29tL3JlcG9zaXRvcnkvUlBBIEluY29ycC4gYnkgUmVmLixMSUFCLkxURChjKTk4MR4wHAYDVQQLExVQZXJzb25hIE5vdCBWYWxpZGF0ZWQxJjAkBgNVBAsTHURpZ2l0YWwgSUQgQ2xhc3MgMSAtIE5ldHNjYXBlMRgwFgYDVQQDFA9TaW1vbiBKb3NlZnNzb24xIjAgBgkqhkiG9w0BCQEWE3NpbW9uQGpvc2Vmc3Nvbi5vcmcwgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAMkMzor+cUabyh3lkBKlEQvGLcQzxhnoYFlOP2Q95Pd7sL75EAfpfKbGWlEzJJd7o+EItFK2BhB9Zd9uUr2BPzmts60XE4gi50OMObfCxLpKi1QVSVWkTcwAVnvIY0433vt5D0Xc6VzNcPBkQjWE2+ZZpMtL/g9HKAw1EalA/LqlAgMBAAGjggEmMIIBIjAJBgNVHRMEAjAAMEQGA1UdIAQ9MDswOQYLYIZIAYb4RQEHAQgwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29tL3JwYTARBglghkgBhvhCAQEEBAMCB4AwgYYGCmCGSAGG+EUBBgMEeBZ2ZDQ2NTJiZDYzZjIwNDcwMjkyOTg3NjNjOWQyZjI3NTA2OWM3MzU5YmVkMWIwNTlkYTc1YmM0YmM5NzAxNzQ3ZGE1ZDVlNDE0MWJlYWRiMmJkMmU4ODMxN2FmN2JmNWQ1MTE0OTk3YTNiZjQ1ZjhmM2VhNDUwYzAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLnZlcmlzaWduLmNvbS9jbGFzczEuY3JsMA0GCSqGSIb3DQEBBAUAA4GBAAk4L1eekaTSQtnXRMHYFxRJAGmfa+SVkzX9lnb/i7+e3QVrgrLzrw/4oC+NZQgnVNSPR3nJvtn5zq9/KgYXJvO55nS6uTU+NlZdQZzOaPzbxTFCCTI357cupMVR5f7lRVkMRMrOrXckUrR4X8xPFaePIIFWZQhQN3W8ohGCckh2wAwAGAABAAAOEABhACUBAwAADhA9+YnQPdH80CC3CWpvc2Vmc3NvbgNvcmcAvK8Nse7HtLnPNugvfZqvZ8iIuJQedC3SK/gYCji+MpVYohfG9496kyV7Jx0E9xYAMRQLrrOnb/W435PqExoczsmcAAIAAQAAjKAAFQh0ZXJtaW5hbAYyZ2xvYmUDbmV0AMmcAAIAAQAAjKAAEQNzeWwHZXh0dW5kbwNjb20AyZwAAgABAACMoAAGA3l4YcocyZwAAgABAACMoAAOBXZpYzIwBWJsaXBwyiTJnAAYAAEAAIygAGEAAgECAACMoD35idA90fzQILcJam9zZWZzc29uA29yZwBw2br9K+hWQbC2QfKrOx+kuqIyIkna6Qu1cZmyYUsS01L5zr9xNwG3VCfapKfQzzBWaP72f8QGzdzYyDDppq5LyhgAAQABAAAHCAAE1CC9Zco1AAEAAQAABwgABNkN5rLJ9wABAAEAAqCsAATDsrfmynMAGQABAAAOEABGAQADAQEDxbF1txkHuc+J76hvlercNy3Yw4cz10QZSPjZMtuoKWZW1yzCSZybAI2kjsMtKewsJG/Bci/EBhqqzrbg0yC368pzABgAAQAADhAAYQAZAQIAAA4QPfmJzz3R/M8gtwlqb3NlZnNzb24Db3JnAJ7d26Zn3RDX5QXAW32SS4TKTmAzBZtwQ/h4f2lw/xjLRSDDmHNZPTuB//Hpc8ggVGuPU+Uk79pjNvGn/43ItL0AACkQAAAAgAAAAA== simon.josefsson.org. 3600 IN CERT PKIX 0 0 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 simon.josefsson.org. 3600 IN SIG CERT 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org vK8Nse7HtLnPNugvfZqvZ8iIuJQedC3SK/gYCji+MpVYo hfG9496kyV7Jx0E9xYAMRQLrrOnb/W435PqExoczg== ) ;; verify failure: RSA Verification failed ;; Looking at type NXT for domain simon.josefsson.org simon.josefsson.org. 36000 IN NXT kerberos-iv.tcp.josefsson.org CERT NXT SIG simon.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org sANJ4ZLKtbof9jj9EkbEosJfxrkjDUdh592kYfDuz6km6 Xq6uujPiBnR0RgwyiIfQxrqWW4wuSHM6QDzvNp44g== ) ;; verify ok ;; Getting NXT for kerberos-iv.tcp.josefsson.org kerberos-iv.tcp.josefsson.org. 36000 IN NXT kerberos-iv.udp.josefsson.org NXT SIG SRV ;; Looking at type NXT for domain kerberos-iv.tcp.josefsson.org kerberos-iv.tcp.josefsson.org. 36000 IN NXT kerberos-iv.udp.josefsson.org NXT SIG SRV kerberos-iv.tcp.josefsson.org. 36000 IN SIG NXT 1 4 36000 20021213071840 ( 20021113071840 8375 josefsson.org C2bvQUzyC4ZQgaM7bpJv7/PLhZvFSvHPTcNXT//YJKGgN Sy4mYaBpq2DJhHPghRsc/ZGCRLkCz6i9QCdfNtCwA== ) ;; verify ok ;; Looking at type SRV for domain kerberos-iv.tcp.josefsson.org kerberos-iv.tcp.josefsson.org. 3600 IN SRV 0 0 750 latte.josefsson.org. kerberos-iv.tcp.josefsson.org. 3600 IN SIG SRV 1 4 3600 20021213071840 ( 20021113071840 8375 josefsson.org Qm4uo6wcuvzIG9w9yUJto/4hpr1+UfJBMvBEyy9KYh3S0 nwEuCxNVPrV15VEeV2LNoF0F7juCfi4zgHvC3mHpw== ) ;; cannot verify signature on SRVs, sorry ;; Getting NXT for kerberos-iv.udp.josefsson.org kerberos-iv.udp.josefsson.org. 36000 IN NXT vic20.josefsson.org NXT SIG SRV ;; Looking at type NXT for domain kerberos-iv.udp.josefsson.org kerberos-iv.udp.josefsson.org. 36000 IN NXT vic20.josefsson.org NXT SIG SRV kerberos-iv.udp.josefsson.org. 36000 IN SIG NXT 1 4 36000 20021213071840 ( 20021113071840 8375 josefsson.org SQGRiGgvCnKYOx+gU5vF/JFIMTnCuKwjaY40x2rHkK6w4 7TqZVTAG2Cw6Yxnfpw1EJC3SHW56CyphD2vhczXNA== ) ;; verify ok ;; Looking at type SRV for domain kerberos-iv.udp.josefsson.org kerberos-iv.udp.josefsson.org. 3600 IN SRV 0 0 750 latte.josefsson.org. kerberos-iv.udp.josefsson.org. 3600 IN SIG SRV 1 4 3600 20021213071840 ( 20021113071840 8375 josefsson.org TwcW3Yi2WK45KC8laFkzcZqtaf1FXiZbBkUyQiqPhBcCo V5EPdAwfViNyaD1rfNQ+PEptiW/qONdWE1vZMP9iA== ) ;; cannot verify signature on SRVs, sorry ;; Getting NXT for vic20.josefsson.org vic20.josefsson.org. 36000 IN NXT www.josefsson.org A NXT SIG ;; Looking at type A for domain vic20.josefsson.org vic20.josefsson.org. 3600 IN A 212.214.21.196 vic20.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org WD85vlSb73k6K1S2VL+LytguxNbqv094sNUL5aFsYsuHP +QzxckdbqGJRCBoqcG7a8PjROSCOQrSUlCZzj9snQ== ) ;; verify ok ;; Looking at type NXT for domain vic20.josefsson.org vic20.josefsson.org. 36000 IN NXT www.josefsson.org A NXT SIG vic20.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org M5S8/ANKRIPpk4VxhCE9rSP99jvJ8f0bOM4fv1wA1sdRY Ezm6WYL46tHRqqNmj/ZVuXEXwKA6ZwMxxkqYTEDZg== ) ;; verify ok ;; Getting NXT for www.josefsson.org www.josefsson.org. 36000 IN NXT wwwkeys.josefsson.org A LOC NXT SIG ;; Looking at type A for domain www.josefsson.org www.josefsson.org. 3600 IN A 217.13.230.178 www.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org RjmcK7Fg2roS6GJRCcAxRsOd0Y7cRZ/Ch6p5RBDMbCa3j /oVLnTqYrkW9R43HoaJClPxZAfCyem3PAlSxh0zmQ== ) ;; verify ok ;; Looking at type LOC for domain www.josefsson.org www.josefsson.org. 3600 IN LOC 59 30 00.000 N 18 20 00.000 E 100.00m 2.00m 10000.00m 10.00m www.josefsson.org. 3600 IN SIG LOC 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org o2X4eEnJ5KKTqFlaQzCZJC782U2mnkjDJmLCJNfxMayaV M31Lb12wYUIyAbrfJvfwUba04wJ5WaObZD3nZrmxw== ) ;; verify ok ;; Looking at type NXT for domain www.josefsson.org www.josefsson.org. 36000 IN NXT wwwkeys.josefsson.org A LOC NXT SIG www.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org TJ5fB1UuKIdIsCCa84o/+NgoWkqAptuZF9cx8eBvyxrUZ M4/4My2gYsuGWcE6PqrVpZzFVJkeCpJ+cn0S5dkEg== ) ;; verify ok ;; Getting NXT for wwwkeys.josefsson.org wwwkeys.josefsson.org. 36000 IN NXT yxa.josefsson.org CNAME NXT SIG ;; Looking at type CNAME for domain wwwkeys.josefsson.org wwwkeys.josefsson.org. 3600 IN CNAME latte.josefsson.org. wwwkeys.josefsson.org. 3600 IN SIG CNAME 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org olnG5GudIlQJm+qOecXMl0uzfuItdWnZc94YPUAUbsKOi C+UxIYyq7wlFkkC502LueZ2eJg7Rq9q4L5cbkxPKA== ) ;; cannot verify signature on CNAMEs, sorry ;; Looking at type NXT for domain wwwkeys.josefsson.org wwwkeys.josefsson.org. 36000 IN NXT yxa.josefsson.org CNAME NXT SIG wwwkeys.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org tMmLbB5aYrCgq+ejiSH/t5wEVl/q/hPJNgJe5PW6xHkGR nxRUInbS0DvUoEmeGpELIo0VTbAGxDz8U/1RHoS6w== ) ;; verify ok ;; Getting NXT for yxa.josefsson.org yxa.josefsson.org. 36000 IN NXT josefsson.org A NXT SIG ;; Looking at type A for domain yxa.josefsson.org yxa.josefsson.org. 3600 IN A 217.13.230.178 yxa.josefsson.org. 3600 IN SIG A 1 3 3600 20021213071840 ( 20021113071840 8375 josefsson.org c0D4ONqQPxYCl9SNkWGOHgZhIfFb00GwvehuUUZJ5DbAu M3qhbr9q2uibnQOAic6U7wt7E60WCCPHSxgVlqjoA== ) ;; verify ok ;; Looking at type NXT for domain yxa.josefsson.org yxa.josefsson.org. 36000 IN NXT josefsson.org A NXT SIG yxa.josefsson.org. 36000 IN SIG NXT 1 3 36000 20021213071840 ( 20021113071840 8375 josefsson.org v1J/b3UhbHaXw+ZpoZ4wSZhqphDA33wdMsdGIcIkxkVGZ tHdAP6wL6Egqp/b5CEmcRM/b+mImJogJ0YsZjKmxg== ) ;; verify ok josefsson.org. 36000 IN SOA belsebub.onkel. jas.pdc.kth.se. ( 2002110703 ; Serial 10800 ; Refresh 3600 ; Retry 604800 ; Expire 36000 ) ; Minimum TTL jas@latte:~/src/walker$