CloudFlare external DNS

That’s fine. I don’t think it matters whose keys you use, as long as the ones that are actually in use correspond to the DS record that you set at your registrar. You’ll just have to ignore the box’s status checks about the DS record being incorrect configured.