DNSSEC Debugger

Domain Name:

Time: 2024-07-27 03:25:06 UTC

Analyzing DNSSEC problems for 1day.sk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 41474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to m.root-servers.net for 1day.sk/A
	Received 797 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 797 octets ;; HEADER SECTION ;; id = 16568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . c56pQV5ydzupagSzRUR2LyI/oaJFBpddaX6c9irfXJHcLMIn5+K6cjwsDQWPN6hXDkOvwKwHCfdA poVyUNnch7oeHKvajYGoXFC+9qivDnUA+yTdUk1qoLb6rBa4OJk49uwQcXs2d9uJHaoTllgSy96M wZpXlsj4SHl6YYGQruO3Da4TabL++HO5aESWXDG0CI55H6g1PavlC5K0X0Xs8/3grcOad0RICETI faL2uY2/fqIru2q4hmFVXiI+qYVM1xwdjBgzrlkxvj5I3ueAuujHifiE0kLw//0EI2RQMNAs1EoV JljerOWvSLve4VdmRl+45jlT+zx08D4ZXJ9/6w== ) ;; ADDITIONAL SECTION (15 records) h.tld.sk. 172800 IN A 212.18.249.16 g.tld.sk. 172800 IN A 212.18.248.16 f.tld.sk. 172800 IN A 185.24.64.16 e.tld.sk. 172800 IN A 194.169.218.16 c.tld.sk. 172800 IN A 195.12.159.1 b.tld.sk. 172800 IN A 84.245.96.1 a.tld.sk. 172800 IN A 194.0.45.1 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 a.tld.sk. 172800 IN AAAA 2001:678:70::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for sk/DNSKEY
	Received 790 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 790 octets ;; HEADER SECTION ;; id = 53515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . c56pQV5ydzupagSzRUR2LyI/oaJFBpddaX6c9irfXJHcLMIn5+K6cjwsDQWPN6hXDkOvwKwHCfdA poVyUNnch7oeHKvajYGoXFC+9qivDnUA+yTdUk1qoLb6rBa4OJk49uwQcXs2d9uJHaoTllgSy96M wZpXlsj4SHl6YYGQruO3Da4TabL++HO5aESWXDG0CI55H6g1PavlC5K0X0Xs8/3grcOad0RICETI faL2uY2/fqIru2q4hmFVXiI+qYVM1xwdjBgzrlkxvj5I3ueAuujHifiE0kLw//0EI2RQMNAs1EoV JljerOWvSLve4VdmRl+45jlT+zx08D4ZXJ9/6w== ) ;; ADDITIONAL SECTION (15 records) a.tld.sk. 172800 IN A 194.0.45.1 a.tld.sk. 172800 IN AAAA 2001:678:70::1 b.tld.sk. 172800 IN A 84.245.96.1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 c.tld.sk. 172800 IN A 195.12.159.1 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 e.tld.sk. 172800 IN A 194.169.218.16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN A 185.24.64.16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN A 212.18.248.16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN A 212.18.249.16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Found child zone sk

	Checking DS between . and sk
	Query to e.root-servers.net for sk/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 46410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DS ;; ANSWER SECTION (2 records) sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . c56pQV5ydzupagSzRUR2LyI/oaJFBpddaX6c9irfXJHcLMIn5+K6cjwsDQWPN6hXDkOvwKwHCfdA poVyUNnch7oeHKvajYGoXFC+9qivDnUA+yTdUk1qoLb6rBa4OJk49uwQcXs2d9uJHaoTllgSy96M wZpXlsj4SHl6YYGQruO3Da4TabL++HO5aESWXDG0CI55H6g1PavlC5K0X0Xs8/3grcOad0RICETI faL2uY2/fqIru2q4hmFVXiI+qYVM1xwdjBgzrlkxvj5I3ueAuujHifiE0kLw//0EI2RQMNAs1EoV JljerOWvSLve4VdmRl+45jlT+zx08D4ZXJ9/6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sk in the . zone
	DS=2324/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sk. 86400 IN RRSIG ( DS 8 1 86400 20240808170000 20240726160000 20038 . c56pQV5ydzupagSzRUR2LyI/oaJFBpddaX6c9irfXJHcLMIn5+K6cjwsDQWPN6hXDkOvwKwHCfdA poVyUNnch7oeHKvajYGoXFC+9qivDnUA+yTdUk1qoLb6rBa4OJk49uwQcXs2d9uJHaoTllgSy96M wZpXlsj4SHl6YYGQruO3Da4TabL++HO5aESWXDG0CI55H6g1PavlC5K0X0Xs8/3grcOad0RICETI faL2uY2/fqIru2q4hmFVXiI+qYVM1xwdjBgzrlkxvj5I3ueAuujHifiE0kLw//0EI2RQMNAs1EoV JljerOWvSLve4VdmRl+45jlT+zx08D4ZXJ9/6w== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2324/SHA-256 is now in the chain-of-trust
	`sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 )`
	Query to f.tld.sk for sk/DNSKEY
	Received 627 bytes from 185.24.64.16
	;; Response received from [185.24.64.16] 627 octets ;; HEADER SECTION ;; id = 34473 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (7 records) sk. 3600 IN DNSKEY ( 256 3 13 IGW/FZP9PlW5YqbTme33lvzkHLgMMcEeTBapDs5spbKfpuG/fI/C8ZyCbWrxdX8Xeoiv6mkTEkzu 6O8mRe+NIQ== ) ; Key ID = 35356 sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311 sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324 sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267 sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492 sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 2324 sk. 5F4Ri7G/OeVO9n5Bv9a2UnIUsc6mT4S4XFu8tmAOz3LK6NVtGx6nrKqrugHxyzPFkcNzex0hNdY1 GQ1eUqO9Dw== ) sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 38311 sk. HJDutctoq4L9gOFA9xAkCv/XtLkWnWbyDhZILOcBP0QQgvJmvzPC0WpOFTNiWrbipkgc969cUx0V 9cU2jiZM6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for sk
	`sk. 3600 IN DNSKEY ( 256 3 13 IGW/FZP9PlW5YqbTme33lvzkHLgMMcEeTBapDs5spbKfpuG/fI/C8ZyCbWrxdX8Xeoiv6mkTEkzu 6O8mRe+NIQ== ) ; Key ID = 35356`
	`sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311`
	`sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324`
	`sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267`
	`sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492`
	DNSKEY=2324/SEP is now in the chain-of-trust
	DS=2324/SHA-256 verifies DNSKEY=2324/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 2324 sk. 5F4Ri7G/OeVO9n5Bv9a2UnIUsc6mT4S4XFu8tmAOz3LK6NVtGx6nrKqrugHxyzPFkcNzex0hNdY1 GQ1eUqO9Dw== )`
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 38311 sk. HJDutctoq4L9gOFA9xAkCv/XtLkWnWbyDhZILOcBP0QQgvJmvzPC0WpOFTNiWrbipkgc969cUx0V 9cU2jiZM6A== )`
	RRSIG=2324 and DNSKEY=2324/SEP verifies the DNSKEY RRset
	RRSIG=38311 and DNSKEY=38311/SEP verifies the DNSKEY RRset
	DNSKEY=35356 is now in the chain-of-trust
	DNSKEY=38311/SEP is now in the chain-of-trust
	DNSKEY=39267 is now in the chain-of-trust
	DNSKEY=34492 is now in the chain-of-trust
	Query to e.tld.sk for 1day.sk/A
	Received 447 bytes from 194.169.218.16
	;; Response received from [194.169.218.16] 447 octets ;; HEADER SECTION ;; id = 40753 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 1day.sk. 3600 IN NS nile.ns.cloudflare.com. 1day.sk. 3600 IN NS robin.ns.cloudflare.com. h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN NSEC3 ( 1 1 0 - r7ebfrjjsko5b0segvt0rp8a3bpemtf4 NS DS RRSIG ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731154003 20240701065137 34492 sk. pekEtR+aURqY+WX7qQuKAXIohhLApoK0SDu1rJvCr/HeDS7aKd8jIA401IbCUCoe5h6BXb97+BwQ xnEJO5r0Hw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.tld.sk for 1day.sk/DNSKEY
	Received 447 bytes from 185.24.64.16
	;; Response received from [185.24.64.16] 447 octets ;; HEADER SECTION ;; id = 5578 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 1day.sk. 3600 IN NS nile.ns.cloudflare.com. 1day.sk. 3600 IN NS robin.ns.cloudflare.com. h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN NSEC3 ( 1 1 0 - r7ebfrjjsko5b0segvt0rp8a3bpemtf4 NS DS RRSIG ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731154003 20240701065137 34492 sk. pekEtR+aURqY+WX7qQuKAXIohhLApoK0SDu1rJvCr/HeDS7aKd8jIA401IbCUCoe5h6BXb97+BwQ xnEJO5r0Hw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone 1day.sk

1day.sk

	Checking DS between sk and 1day.sk
	Query to g.tld.sk for 1day.sk/DS
	Received 549 bytes from 212.18.248.16
	;; Response received from [212.18.248.16] 549 octets ;; HEADER SECTION ;; id = 39008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sk. 3600 IN SOA ( m.tld.sk. hostmaster.sk-nic.sk. 2018120609 ;serial 60 ;refresh 300 ;retry 3600000 ;expire 3600 ;minimum ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN NSEC3 ( 1 1 0 - r7ebfrjjsko5b0segvt0rp8a3bpemtf4 NS DS RRSIG ) sk. 3600 IN RRSIG ( SOA 13 1 3600 20240825155131 20240727011847 34492 sk. gPjxDXth9FEbfKoEetlCwlC9oJX8vrOiqhCsHsdWSleVt2HleBNS9JCPwoIzhRwauh3SVlhD7zhd he2fPeZQpg== ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) r7e61uel4tnqbna2gk2jgo3877jstcng.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731154003 20240701065137 34492 sk. pekEtR+aURqY+WX7qQuKAXIohhLApoK0SDu1rJvCr/HeDS7aKd8jIA401IbCUCoe5h6BXb97+BwQ xnEJO5r0Hw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for 1day.sk in the sk zone
	Query to robin.ns.cloudflare.com for 1day.sk/DNSKEY
	Received 98 bytes from 172.64.32.218
	;; Response received from [172.64.32.218] 98 octets ;; HEADER SECTION ;; id = 10243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) 1day.sk. 1800 IN SOA ( nile.ns.cloudflare.com. dns.cloudflare.com. 2345446909 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to nile.ns.cloudflare.com for 1day.sk/A
	Received 68 bytes from 172.64.33.214
	;; Response received from [172.64.33.214] 68 octets ;; HEADER SECTION ;; id = 35571 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (2 records) 1day.sk. 300 IN A 104.21.37.172 1day.sk. 300 IN A 172.67.210.198 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nile.ns.cloudflare.com is authoritative for 1day.sk
	Query to robin.ns.cloudflare.com for 1day.sk/SOA
	Received 98 bytes from 172.64.32.218
	;; Response received from [172.64.32.218] 98 octets ;; HEADER SECTION ;; id = 37706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN SOA ;; ANSWER SECTION (1 record) 1day.sk. 1800 IN SOA ( nile.ns.cloudflare.com. dns.cloudflare.com. 2345446909 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nile.ns.cloudflare.com for 1day.sk/A
	Received 68 bytes from 172.64.33.214
	;; Response received from [172.64.33.214] 68 octets ;; HEADER SECTION ;; id = 49131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (2 records) 1day.sk. 300 IN A 172.67.210.198 1day.sk. 300 IN A 104.21.37.172 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	1day.sk A RR has value 172.67.210.198
	1day.sk A RR has value 104.21.37.172
	No RRSIGs found

1day.sk

	Query to robin.ns.cloudflare.com for 1day.sk/A
	Received 68 bytes from 173.245.58.218
	;; Response received from [173.245.58.218] 68 octets ;; HEADER SECTION ;; id = 57251 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (2 records) 1day.sk. 300 IN A 172.67.210.198 1day.sk. 300 IN A 104.21.37.172 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	robin.ns.cloudflare.com is authoritative for 1day.sk
	Query to robin.ns.cloudflare.com for 1day.sk/A
	Received 68 bytes from 172.64.32.218
	;; Response received from [172.64.32.218] 68 octets ;; HEADER SECTION ;; id = 65463 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; 1day.sk. IN A ;; ANSWER SECTION (2 records) 1day.sk. 300 IN A 172.67.210.198 1day.sk. 300 IN A 104.21.37.172 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	1day.sk A RR has value 172.67.210.198
	1day.sk A RR has value 104.21.37.172
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 1day.sk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: