[dnssec-deployment] Some DNSSec statics

[Lutz Donnerhacke]

Overview of 1459 signed zones:
   1084  -14 Entry Point
      8   +1 broken chain
    237  +15 chained
    130   +8 unreachable

Top 10 autonomous systems injecting DNSSec zones:
    440      AS15725
    386   -1 AS3265
     70      AS3333
     69      AS3557
     45      AS16350
     43  +11 AS3245
     31   -1 AS25537
     27      AS24776
     23      AS39570
     17      AS36810

Top 10 TLD containing DNSSec zones:
    359      NL
    242      ARPA
    219      DE
    212   -1 COM
     70      SE
     64      ORG
     54      NET
     44  +11 BG
     33      RU
     26      INFO

568 (-9) weak keys:
Top 10 autonomous systems injecting weak keys:
    354   -6 AS3265 
     31      AS25537 
     27      AS24776 
     13      AS3216 
     12      AS29632 
     10      AS7132 
      7      AS20943 
      6      AS8228 
      5      AS23342 
      5      AS8683 

8 (+1) broken DS chains:
  42.32.198.in-addr.arpa, wesh.netsec.tislabs.com, badds.dnssec.jp
  hostcount.ripe.net, k.ripe.net, ris.ripe.net, jelte.nlnetlabs.nl
  bitstring.se

14 (+2) parent DS to unsigned zones:
  128.111.89.in-addr.arpa, 129.111.89.in-addr.arpa, 131.111.89.in-addr.arpa
  132.111.89.in-addr.arpa, 133.111.89.in-addr.arpa, 134.111.89.in-addr.arpa
  135.111.89.in-addr.arpa, 136.111.89.in-addr.arpa, 137.111.89.in-addr.arpa
  138.111.89.in-addr.arpa, 139.111.89.in-addr.arpa, 140.111.89.in-addr.arpa
  mike.netsec.tislabs.com, ldap.trstech.net

17 (-7) unnecessary islands:
  64-26.0.149.193.in-addr.arpa, 0.68.193.in-addr.arpa
  241.75.217.in-addr.arpa, 3.1.6.0.0.1.6.0.1.0.0.2.ip6.arpa
  7.f.3.0.8.3.8.0.1.0.0.2.ip6.arpa, amstel.bg, badnxt.dnssec.jp
  nods-ns.test.dnssec-tools.org, autonomica.se, cafax.se, echo-lan.se
  hooden.se, nning.se, shinkuro.se, skabb.se, staver.se, zkt.se

130 (+8) unreachable zones:
Top 10 autonomous systems containing unreachable zones:
     45      AS16350  
      5   +5 AS3265  
      4      AS10370  
      4      AS5537  
      2      AS7132  
      2      AS9150  
      2      AS40009  
      2   +1 AS20857  
      2      AS3561  
      1      AS39003  


-- 
Detailed list: https://www.iks-jena.de/leistungen/dnssec.php