[lacnog] Fwd: A.root-servers.net. DURZ
Francisco Arias
francisco en arias.com.mx
Jue Feb 11 06:05:01 BRST 2010
Ahora también el servidor raíz A está sirviendo la zona raíz firmada,
no verificable.
Saludos,
Francisco.
P.D. Al parecer los problemas para ver la zona firmada sobre IPv6 eran
sólo de propagación.
---------- Forwarded message ----------
From: Tony Finch <dot en dotat.at>
Date: 10 February 2010 11:44
Subject: [Dnssec-deployment] A.root-servers.net. DURZ
To: dnssec-deployment en dnssec-deployment.org
I saw the DURZ turn up on A.root-servers.net at about 18:00 UTC. However
a friend pointed out to me that it is still not available via IPv6:
; <<>> DiG 9.3.2 <<>> -6 +dnssec dnskey . @a.root-servers.net.
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22178
;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;. IN DNSKEY
;; AUTHORITY SECTION:
. 86400 IN SOA A.ROOT-SERVERS.NET.
NSTLD.VERISIGN-GRS.COM. 2010021001 1800 900 604800 86400
;; Query time: 80 msec
;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30)
;; WHEN: Wed Feb 10 19:39:03 2010
;; MSG SIZE rcvd: 103
; <<>> DiG 9.3.2 <<>> -4 +dnssec dnskey . @a.root-servers.net.
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57112
;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;. IN DNSKEY
;; ANSWER SECTION:
. 86400 IN DNSKEY 256 3 8
AwEAAa1Lh++++++++++++++++THIS/IS/AN/INVALID/KEY/AND/SHOU
LD/NOT/BE/USED/CONTACT/ROOTSIGN/AT/ICANN/DOT/ORG/FOR/MOR
E/INFORMATION+++++++++++++++++++++++++++++++++++++++++++ +++++++8
. 86400 IN DNSKEY 257 3 8
AwEAAawBe++++++++++++++++THIS/IS/AN/INVALID/KEY/AND/SHOU
LD/NOT/BE/USED/CONTACT/ROOTSIGN/AT/ICANN/DOT/ORG/FOR/MOR
E/INFORMATION+++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++
++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ++++++++++8=
. 86400 IN RRSIG DNSKEY 8 0 86400
20100224235959 20100210000000 19324 .
dgF9oKtxShTOdKdti6HjXf9duCs/u+SoBVP5cpQVgbGmU8t2+Q6QVOwR
mYVkIJIiTuCRpigOf0S9s7shHvh7bzcDh9P+QtWCWapBSKCveKaDqGdm
yAPSyiQU8pwFNpEiDYYhzxr+CNZz5582LgKi67DEb6BX7a3BAwZsvJvm
7swMhHOMS71+9ObDuhHacUQp0YzRRrNIZofliZNq/jZcZeWgTpjtLKQo
TUfehyr+UKPz/0w4shXtm98GfeIhT0Lm/n03T/5n8ESWyn5yCXef8cY6
a8ls64R4QJ3mMJvb2MZk37DFx2o82rQ3szwuX0Zn9MLwKjOLAtgthcYU C26svg==
;; Query time: 92 msec
;; SERVER: 198.41.0.4#53(198.41.0.4)
;; WHEN: Wed Feb 10 19:39:23 2010
;; MSG SIZE rcvd: 736
traceroute to a.root-servers.net. (198.41.0.4), 30 hops max, 40 byte packets
1 gw-808.net.cam.ac.uk (131.111.8.62) 0.274 ms 0.189 ms 0.199 ms
2 route-cent.route-enet.net.cam.ac.uk (192.153.213.193) 0.423 ms
0.335 ms 0.216 ms
3 gi5-0-0.camb-rbr3.eastnet.ja.net (193.63.107.157) 0.187 ms
0.202 ms 0.208 ms
4 po2-0.chel-rbr1.eastnet.ja.net (193.63.107.30) 2.313 ms 2.339
ms 2.328 ms
5 lond-sbr1.ja.net (146.97.40.45) 3.427 ms 3.426 ms 3.327 ms
6 so-6-0-0.lond-sbr4.ja.net (146.97.33.154) 3.707 ms 3.690 ms 3.704 ms
7 if-4-0-0.core4.LDN-London.as6453.net (80.231.76.37) 3.715 ms
3.627 ms 3.810 ms
8 if-13-1-0.mcore3.LDN-London.as6453.net (195.219.195.149) 3.922 ms
3.808 ms 3.987 ms
9 if-5-0-0.mcore3.L78-London.as6453.net (195.219.195.10) 4.207 ms
4.197 ms 4.474 ms
10 if-15-0-0-890.core2.NTO-NewYork.as6453.net (216.6.97.97) 100.524
ms 100.271 ms 100.021 ms
11 Vlan13.icore1.NTO-NewYork.as6453.net (216.6.97.6) 97.021 ms
97.146 ms 106.388 ms
12 ix-12-42.icore1.NTO-NewYork.as6453.net (209.58.26.18) 95.386 ms
95.138 ms 94.761 ms
13 * * *
traceroute to a.root-servers.net. (2001:503:ba3e::2:30), 30 hops max,
40 byte packets
1 gw-808.net.cam.ac.uk (2001:630:200:8080::1) 0.491 ms 0.266 ms 0.209 ms
2 2001:630:202:8000::19d (2001:630:202:8000::19d) 0.175 ms * *
3 2001:630:202:10::1e (2001:630:202:10::1e) 2.511 ms 2.384 ms 2.369 ms
4 2001:630:0:8040::505 (2001:630:0:8040::505) 3.598 ms 3.584 ms 3.473 ms
5 so-6-0-0.lond-sbr4.ja.net (2001:630:0:10::9a) 3.701 ms 3.722 ms
3.723 ms
6 2001:630:0:10::152 (2001:630:0:10::152) 3.722 ms 3.723 ms 3.722 ms
7 linx.he.net (2001:7f8:4::1b1b:1) 4.349 ms 14.742 ms 14.217 ms
8 10g-2-3.core1.ny4.ipv6.he.net (2001:470:0:3e::1) 72.134 ms
72.049 ms 80.269 ms
9 10g-2-3.core1.ash1.ipv6.he.net (2001:470:0:36::1) 78.261 ms
78.389 ms 86.010 ms
10 2001:504:0:2::2641:1 (2001:504:0:2::2641:1)(N!) 79.264 ms (N!)
79.507 ms (N!) 79.380 ms
Tony.
--
f.anthony.n.finch <dot en dotat.at> http://dotat.at/
GERMAN BIGHT HUMBER: SOUTHWEST 5 TO 7. MODERATE OR ROUGH. SQUALLY SHOWERS.
MODERATE OR GOOD.
Más información sobre la lista de distribución LACNOG