Interface: RRSIGRecord

Defined in: src/types.ts:518

RRSIG record - Resource Record Signature, contains DNSSEC signature for a resource record set.

Example

const record: RRSIGRecord = {
  type: "RRSIG",
  typeCovered: "A",
  algorithm: 8, // RSA/SHA-256
  labels: 2,
  originalTTL: 300,
  signatureExpiration: 1640995200,
  signatureInception: 1640908800,
  keyTag: 12345,
  signerName: "example.com",
  signature: "ABCDEF123456...",
  ttl: 300,
};

Extends

• BaseDNSRecord

Properties

ttl?

optional ttl?: number;

Defined in: src/types.ts:76

Time to live in seconds (optional)

Inherited from

BaseDNSRecord.ttl

---

algorithm

algorithm: number;

Defined in: src/types.ts:520

Cryptographic algorithm used

---

keyTag

keyTag: number;

Defined in: src/types.ts:522

Key tag of the DNSKEY RR that validates this signature

---

labels

labels: number;

Defined in: src/types.ts:524

Number of labels in the original RRSIG RR owner name

---

originalTTL

originalTTL: number;

Defined in: src/types.ts:526

Original TTL of the covered RRset

---

signature

signature: string;

Defined in: src/types.ts:528

Base64-encoded signature

---

signatureExpiration

signatureExpiration: number;

Defined in: src/types.ts:530

Signature expiration time (Unix timestamp)

---

signatureInception

signatureInception: number;

Defined in: src/types.ts:532

Signature inception time (Unix timestamp)

---

signerName

signerName: string;

Defined in: src/types.ts:534

Domain name of the signer

---

type

type: "RRSIG";

Defined in: src/types.ts:535

The type of DNS record

Overrides

BaseDNSRecord.type

---

typeCovered

typeCovered: string;

Defined in: src/types.ts:537

Type of RRset covered by this signature