Sorry the API would look like the one below, with DNSKEY, not RRSIG

{

"af": 4,
"query_class": "IN",
"query_type": "DNSKEY",
"query_argument": "example.com",
"use_macros": false,
"description": "DNS measurement to",
"use_probe_resolver": true,
"resolve_on_probe": false,
"set_nsid_bit": false,
"protocol": "UDP",
"udp_payload_size": 512,
"retry": 0,
"skip_dns_check": false,
"include_qbuf": false,
"include_abuf": true,
"prepend_probe_id": false,
"set_rd_bit": false,
"set_do_bit": true,
"set_cd_bit": false,
"timeout": 5000,
"type": "dns"
}


On Jul 6, 2021, at 11:04 AM, pravicha <pravicha@masonlive.gmu.edu> wrote:

Hello,

Thank you for the quick response. I created the measurement on RIPE atlas portal. Please find the below image for reference, every time I check the Set DO bit field. I’ve also used the Rest API and the measurement looks like this,


"af": 4,
"query_class": "IN",
"query_type": "RRSIG",
"query_argument": "example.com",
"use_macros": false,
"description": "DNS measurement to",
"use_probe_resolver": true,
"resolve_on_probe": false,
"set_nsid_bit": false,
"protocol": "UDP",
"udp_payload_size": 512,
"retry": 0,
"skip_dns_check": false,
"include_qbuf": false,
"include_abuf": true,
"prepend_probe_id": false,
"set_rd_bit": false,
"set_do_bit": true,
"set_cd_bit": false,
"timeout": 5000,
"type": "dns"


<PastedGraphic-1.png>

Thanks

On Jul 6, 2021, at 10:59 AM, Philip Homburg <philip.homburg@ripe.net> wrote:

On 2021/07/06 16:18 , pravicha wrote:
The measurement ID is 31426231. I query for DNSKEY records, have the do bit set in this and yet don’t get back the RRSIGs.

Hi,

DNSSEC OK flag is false in this measurement. See https://atlas.ripe.net/measurements/31426231/#general and then 'DNS Specific Settings'. Maybe something went wrong in the creation of the measurement. What tool did you use?

Philip