DNSSEC/gov.acについて、ここに記述してください。
DSあり。 (省略)
- nic.ac は同居。
$ dnsq ns ac a.root-servers.net 2 ac: 368 bytes, 1+0+6+11 records, response, noerror query: 2 ac authority: ac 172800 NS c0.nic.ac authority: ac 172800 NS a0.nic.ac authority: ac 172800 NS b0.nic.ac authority: ac 172800 NS a2.nic.ac authority: ac 172800 NS ns-a1.ac authority: ac 172800 NS ns-a3.ac
$ dig +dnssec -t ns ac @a0.nic.ac ; <<>> DiG 9.11.2 <<>> +dnssec -t ns ac @a0.nic.ac ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 36243 ;; flags: qr aa rd; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 15 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;ac. IN NS ;; ANSWER SECTION: ac. 86400 IN NS b0.nic.ac. ac. 86400 IN NS ns-a3.ac. ac. 86400 IN NS c0.nic.ac. ac. 86400 IN NS ns-a1.ac. ac. 86400 IN NS a2.nic.ac. ac. 86400 IN NS a0.nic.ac. ac. 86400 IN RRSIG NS 8 1 86400 20180207211512 20180117201512 47590 ac. JU8h5b1BvnpZCkPfknGdGD38UhYG7PBeD3+oXCEmodR+D6nrntHSSAlB 32aBF7zi2l/+KeBcZevHKAopKLk2dHnVHdm4d3EMDzyqYOoXiz6LrSf7 50cdmnv07u9d4oFAfIoznVpwBHPjHXvQI725++7sy6N1EPld+78LuDg0 ftQ= ;; ADDITIONAL SECTION: a0.nic.ac. 300 IN A 65.22.160.1 a2.nic.ac. 300 IN A 65.22.163.1 b0.nic.ac. 300 IN A 65.22.161.1 c0.nic.ac. 300 IN A 65.22.162.1 ns-a1.ac. 86400 IN A 194.0.1.1 ns-a3.ac. 86400 IN A 74.116.178.1 a0.nic.ac. 300 IN AAAA 2a01:8840:9e::1 a2.nic.ac. 300 IN AAAA 2a01:8840:a1::1 b0.nic.ac. 300 IN AAAA 2a01:8840:9f::1 c0.nic.ac. 300 IN AAAA 2a01:8840:a0::1 ns-a1.ac. 86400 IN AAAA 2001:678:4::1 ns-a1.ac. 86400 IN RRSIG A 8 2 86400 20180207211512 20180117201512 47590 ac. c5xp/MrNvorZ+LgocrKQula6MM2lxnowtBnsdarHKHXWjxMPEO+lZWDv n7TxGIIqHNfoJuoRYlXKoIlq9O3sjUPW+aCYQ9aF6jrnilMDn4geRd7S 73W+ZLPO/82dNaAzq+2zXf7dWeIBnv6giILTRhAIdavn5N4KEvTLpt2B HqM= ns-a1.ac. 86400 IN RRSIG AAAA 8 2 86400 20180207211512 20180117201512 47590 ac. OBYrZCsSDpAK66q51S8Zk4j1IAZlqMzpUPM1ExQd/VlqSjZWIHLB+VO6 Vllb+yecP1MnDqBNyTVx6HWk5S/yACAVMU5YdCUdUkz0+rq/LNciAcrN wbYHy4H/GOfmPLR5du+k23o4Frn1TAO1SaD8Lc6dv2mnabrFGEgyS73B OfI= ns-a3.ac. 86400 IN RRSIG A 8 2 86400 20180207211512 20180117201512 47590 ac. GWG6cFEOnBH3bANKhdk1rUjZJjfbWAbEPwFJ9XrMdvi6fHBDNcWlzYQK 9+4W6/m3LrIaFcSCS+LUQHCBeXmniximVjFMv7KgYpfiIA+QYtw701zA Gq5FbWSMWxM9MH4jxC7btqCg/PWRLTfqlhFIdcTalQk69Kusjwm3OSaY ToE= ;; Query time: 169 msec ;; SERVER: 65.22.160.1#53(65.22.160.1) ;; WHEN: Thu Jan 18 20:57:34 JST 2018 ;; MSG SIZE rcvd: 1027
$ dig +dnssec -t ns nic.ac @ns-a1.ac ; <<>> DiG 9.11.2 <<>> +dnssec -t ns nic.ac @ns-a1.ac ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 450 ;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 9 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;nic.ac. IN NS ;; AUTHORITY SECTION: nic.ac. 86400 IN NS a0.nic.ac. nic.ac. 86400 IN NS a2.nic.ac. nic.ac. 86400 IN NS b0.nic.ac. nic.ac. 86400 IN NS c0.nic.ac. psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN NSEC3 1 1 1 D399EAAB Q1HNPEF2REI2EH77GTNLDDRDLOQH9HT6 NS SOA RRSIG DNSKEY NSEC3PARAM psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 900 IN RRSIG NSEC3 8 2 900 20180208113049 20180118103049 47590 ac. Aye+lEcyZRW3G0BUMB5F+Q2H99Ps5GFiDofdqJpbcz7i8I5Mv7Kt35VC 2NAHHcjiNDBFpztaBcmgBC3RXcUjpYktqGNR9oDUzflxnMdCe/2v5QMS M+5r75A6IIJcfyoG5+XDAbgz/x5I/2zy1ijP1HndR2CYeGOcQroMdwG7 hJc= 8h2829l1ovq30jmidmms6lvvb8psluvh.ac. 900 IN NSEC3 1 1 1 D399EAAB BKG2FHV4KDT3LKRLJ1D7TQOBV41NOF4T NS DS RRSIG 8h2829l1ovq30jmidmms6lvvb8psluvh.ac. 900 IN RRSIG NSEC3 8 2 900 20180207211512 20180117201512 47590 ac. B26ay35sGRB2FxR+NnBeSLPVDh7UjSUvgg195H536kAsyWG6EUSt9VRa wH9hNtLXEBU1Ycb0xYu4wNHc8x7JJ3W5c1wRLjqEKs6CIieVI4tvKd6u AXeTSxsGXa9EM9cgTrvCMpiTEaTf4LWpvZfdxqqnhuW79Celv9iQOps6 fFw= ;; ADDITIONAL SECTION: c0.nic.ac. 86400 IN A 65.22.162.1 c0.nic.ac. 86400 IN AAAA 2a01:8840:a0::1 a0.nic.ac. 86400 IN A 65.22.160.1 a0.nic.ac. 86400 IN AAAA 2a01:8840:9e::1 b0.nic.ac. 86400 IN A 65.22.161.1 b0.nic.ac. 86400 IN AAAA 2a01:8840:9f::1 a2.nic.ac. 86400 IN A 65.22.163.1 a2.nic.ac. 86400 IN AAAA 2a01:8840:a1::1 ;; Query time: 6 msec ;; SERVER: 194.0.1.1#53(194.0.1.1) ;; WHEN: Thu Jan 18 21:00:02 JST 2018 ;; MSG SIZE rcvd: 798
1. DNSSEC情報なし
$ dig +dnssec -t ns nic.ac @c0.nic.ac ; <<>> DiG 9.11.2 <<>> +dnssec -t ns nic.ac @c0.nic.ac ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 28189 ;; flags: qr aa rd; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 9 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;nic.ac. IN NS ;; ANSWER SECTION: nic.ac. 300 IN NS b0.nic.ac. nic.ac. 300 IN NS c0.nic.ac. nic.ac. 300 IN NS a2.nic.ac. nic.ac. 300 IN NS a0.nic.ac. ;; ADDITIONAL SECTION: a0.nic.ac. 300 IN A 65.22.160.1 a2.nic.ac. 300 IN A 65.22.163.1 b0.nic.ac. 300 IN A 65.22.161.1 c0.nic.ac. 300 IN A 65.22.162.1 a0.nic.ac. 300 IN AAAA 2a01:8840:9e::1 a2.nic.ac. 300 IN AAAA 2a01:8840:a1::1 b0.nic.ac. 300 IN AAAA 2a01:8840:9f::1 c0.nic.ac. 300 IN AAAA 2a01:8840:a0::1 ;; Query time: 168 msec ;; SERVER: 65.22.162.1#53(65.22.162.1) ;; WHEN: Thu Jan 18 21:02:13 JST 2018 ;; MSG SIZE rcvd: 279
$ dig -t a gov.ac +dnssec +nocd @127.0.0.1
; <<>> DiG 9.11.2 <<>> -t a gov.ac +dnssec +nocd @127.0.0.1 ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 39477 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 8, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;gov.ac. IN A ;; AUTHORITY SECTION: ac. 479 IN SOA a0.nic.ac. noc.afilias-nst.info. 1497206787 10800 3600 2764800 900 ac. 479 IN RRSIG SOA 8 1 86400 20180208113049 20180118103049 47590 ac. PL/4yZXAY3S14XWIstL2PWsdk7O3DjXvX7gh+sjoKzn+/Pq6djgHHaIY IfGbvIbSVJdePlKzy/qsV942qPP51yN2KH7Nz9DuW0XKuY/fRxQNXyi7 xrb0/Q17DwGS9XMVQxsabRQVndJqdv+cRKOhk5oeOQU3BXLm1yaC2wu+ ZG4= 0hgbikcb2fqiu4jrrj2veqs07bgsj5ua.ac. 479 IN RRSIG NSEC3 8 2 900 20180208001919 20180117231919 47590 ac. QEzfxnSETbhJi4Ahp9vVe/LcikMaCRCKNd0eEGKXiRUIEbI0TYGBr7q/ U/PxrWVUfr/MFHVCfMNjn4QbbO9/TebehJDRRuKlHkjiydVxDk50cTLq EkUranKt9hvCog+84y3be/Oq8nkxSsxvN6jJkjQ+XI0ZKjdXEnJG2xcU t3M= 0hgbikcb2fqiu4jrrj2veqs07bgsj5ua.ac. 479 IN NSEC3 1 1 1 D399EAAB 0VRQ99T0JHERJC9279H8TFCDBP5KG21H A RRSIG nhqkep5taetplji3190minnm7uoohc83.ac. 479 IN RRSIG NSEC3 8 2 900 20180207211512 20180117201512 47590 ac. REx0bAu7H7qT8s7fInhXLkN6U1gv3rDPF+vSbnp+C1P0rrxT3tWtm2Az M0UejEdhU6ckii2vONLd6pTHbhNuisLoBLP9wd4v0S5nBonhV7+mZWdI jUpDqzzvoGGM97DUsSlT7XCPG9DgOOYBgo5imBM8ZCwWjA5otHTar5D1 sYE= nhqkep5taetplji3190minnm7uoohc83.ac. 479 IN NSEC3 1 1 1 D399EAAB OFA8R107HBRHHSNN7RJI73T5K41MT3FH NS DS RRSIG psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 479 IN RRSIG NSEC3 8 2 900 20180208113049 20180118103049 47590 ac. Aye+lEcyZRW3G0BUMB5F+Q2H99Ps5GFiDofdqJpbcz7i8I5Mv7Kt35VC 2NAHHcjiNDBFpztaBcmgBC3RXcUjpYktqGNR9oDUzflxnMdCe/2v5QMS M+5r75A6IIJcfyoG5+XDAbgz/x5I/2zy1ijP1HndR2CYeGOcQroMdwG7 hJc= psdmd2tob59cu5phsqmpvkndffq25pgt.ac. 479 IN NSEC3 1 1 1 D399EAAB Q1HNPEF2REI2EH77GTNLDDRDLOQH9HT6 NS SOA RRSIG DNSKEY NSEC3PARAM ;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Thu Jan 18 20:55:04 JST 2018 ;; MSG SIZE rcvd: 996
2. ???
$ dig +dnssec ns ac @a2.nic.ac ; <<>> DiG 9.11.2 <<>> +dnssec ns ac @a2.nic.ac ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 253 ;; flags: qr aa rd; QUERY: 1, ANSWER: 7, AUTHORITY: 0, ADDITIONAL: 7 ;; WARNING: recursion requested but not available ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags: do; udp: 4096 ;; QUESTION SECTION: ;ac. IN NS ;; ANSWER SECTION: ac. 86400 IN NS a0.nic.ac. ac. 86400 IN NS c0.nic.ac. ac. 86400 IN NS ns-a1.ac. ac. 86400 IN NS b0.nic.ac. ac. 86400 IN NS a2.nic.ac. ac. 86400 IN NS ns-a3.ac. ac. 86400 IN RRSIG NS 8 1 86400 20180207211512 20180117201512 47590 ac. JU8h5b1BvnpZCkPfknGdGD38UhYG7PBeD3+oXCEmodR+D6nrntHSSAlB 32aBF7zi2l/+KeBcZevHKAopKLk2dHnVHdm4d3EMDzyqYOoXiz6LrSf7 50cdmnv07u9d4oFAfIoznVpwBHPjHXvQI725++7sy6N1EPld+78LuDg0 ftQ= ;; ADDITIONAL SECTION: ns-a1.ac. 86400 IN A 194.0.1.1 ns-a3.ac. 86400 IN A 74.116.178.1 ns-a1.ac. 86400 IN AAAA 2001:678:4::1 ns-a1.ac. 86400 IN RRSIG A 8 2 86400 20180207211512 20180117201512 47590 ac. c5xp/MrNvorZ+LgocrKQula6MM2lxnowtBnsdarHKHXWjxMPEO+lZWDv n7TxGIIqHNfoJuoRYlXKoIlq9O3sjUPW+aCYQ9aF6jrnilMDn4geRd7S 73W+ZLPO/82dNaAzq+2zXf7dWeIBnv6giILTRhAIdavn5N4KEvTLpt2B HqM= ns-a1.ac. 86400 IN RRSIG AAAA 8 2 86400 20180207211512 20180117201512 47590 ac. OBYrZCsSDpAK66q51S8Zk4j1IAZlqMzpUPM1ExQd/VlqSjZWIHLB+VO6 Vllb+yecP1MnDqBNyTVx6HWk5S/yACAVMU5YdCUdUkz0+rq/LNciAcrN wbYHy4H/GOfmPLR5du+k23o4Frn1TAO1SaD8Lc6dv2mnabrFGEgyS73B OfI= ns-a3.ac. 86400 IN RRSIG A 8 2 86400 20180207211512 20180117201512 47590 ac. GWG6cFEOnBH3bANKhdk1rUjZJjfbWAbEPwFJ9XrMdvi6fHBDNcWlzYQK 9+4W6/m3LrIaFcSCS+LUQHCBeXmniximVjFMv7KgYpfiIA+QYtw701zA Gq5FbWSMWxM9MH4jxC7btqCg/PWRLTfqlhFIdcTalQk69Kusjwm3OSaY ToE= ;; Query time: 84 msec ;; SERVER: 65.22.163.1#53(65.22.163.1) ;; WHEN: Thu Jan 18 21:31:57 JST 2018 ;; MSG SIZE rcvd: 851