DNSSEC Analyzer - _adsp._domainkey.rubenkerkhof.com

Domain Name:

Time: 2021-03-19 02:31:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for _adsp._domainkey.rubenkerkhof.com

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 43304 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to b.root-servers.net for _adsp._domainkey.rubenkerkhof.com/A
	Received 1193 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (1193 bytes) ;; HEADER SECTION ;; id = 45110 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; _adsp._domainkey.rubenkerkhof.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for com/DNSKEY
	Received 1163 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1163 bytes) ;; HEADER SECTION ;; id = 15734 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) com. 172800 IN NS a.gtld-servers.net. com. 172800 IN NS b.gtld-servers.net. com. 172800 IN NS c.gtld-servers.net. com. 172800 IN NS d.gtld-servers.net. com. 172800 IN NS e.gtld-servers.net. com. 172800 IN NS f.gtld-servers.net. com. 172800 IN NS g.gtld-servers.net. com. 172800 IN NS h.gtld-servers.net. com. 172800 IN NS i.gtld-servers.net. com. 172800 IN NS j.gtld-servers.net. com. 172800 IN NS k.gtld-servers.net. com. 172800 IN NS l.gtld-servers.net. com. 172800 IN NS m.gtld-servers.net. com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone com

com

	Checking DS between . and com
	Query to g.root-servers.net for com/DS
	Received 367 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (367 bytes) ;; HEADER SECTION ;; id = 14708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DS ;; ANSWER SECTION (2 records) com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 ) com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for com in the . zone
	DS=30909/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`com. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . TKSxuNOqTK+qEK9KUcp19+zX6Kx8CVTQzxJMpQ74pgr5P7IjSdpiqQG2ibnwDCSueqAToWJkr73Y fMMhQBGHks5T+vFMM0nOu0sR7kfw2rdlX3OmMMQwxMCsxVoNesppiyiVx9AWt5LwYvc2acdEucRJ Ngs2Bwwd8Bfghyo89hJKDNZky/qJqFCP5UMV/zmT0grLqJ4QI3TrXHtqh4B6GIGqvMr8bQDarhAL uEVIjpiDBi3c/y1Bgn5ksw+j5D0tOhcBnFcX7HM0lc5tW96ZR+N2zEIR8cW6cAwHHj4ebE4sh0qg 9OJxUIeCvtfT6Aiquf0MxczrGLu0YARjhg1iRg== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=30909/SHA-256 is now in the chain-of-trust
	`com. 86400 IN DS ( 30909 8 2 e2d3c916f6deeac73294e8268fb5885044a833fc5459588f4a9184cfc41a5766 )`
	Query to b.gtld-servers.net for com/DNSKEY
	Received 777 bytes from 192.33.14.30
	;; Answer received from 192.33.14.30 (777 bytes) ;; HEADER SECTION ;; id = 40688 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; com. IN DNSKEY ;; ANSWER SECTION (3 records) com. 86400 IN DNSKEY ( 256 3 8 AwEAAdAVrRxtpC0gruiqnbm//BTq3/HF/wPuR0vYU+P+GDXYa0kDbdeKsp55Lz/adyaX/SOzgd0i sSwP/Y1yN2kTqXAqNz7UmjlqBVc56qphFWgrA4gDoEsMg2rc5tIVezF6m82rxh2/ptnS85ML2IqC tuqGsqVBVceboC/hVzKayw6iahADbcvvU+U7M1AnmnteJ0I4CQNifNqS3LiAsgOLN6c= ) ; Key ID = 58540 com. 86400 IN DNSKEY ( 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7 VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/tagg zHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZb qMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQ Hd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/ ) ; Key ID = 30909 com. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210326192421 20210311191921 30909 com. YpYXRAvKagAr2qGhjEGwm3erq112DHWnYAxfLjGb/Oh3wZXUgEoup2faQGoiVLf5gScUCQOYbwSP Eu+vtA94EYsF0fBzHOb+At5+EaAZbxmT2r3NauE2LooalKmgjQUn/xw3NDxAyFKb+ag39o7QnhGm Uy1CDaEZ/LEYmiwifGuP7/1XihIsYFVx6cWSxeg507ySPvqFeHzezj78d0dx+lxZi7EMxsxnProT 1dRrOJmM3BNOP4gRbFivWCFFtsJxvLT+dLKPqhgF939suH0jh/usjg6yswVorp7klrAxToHvZhpY WxJ8sW90WtNWsCx7dSbAnclWMvLum70SVrUZAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for com
	`com. 86400 IN DNSKEY ( 256 3 8 AwEAAdAVrRxtpC0gruiqnbm//BTq3/HF/wPuR0vYU+P+GDXYa0kDbdeKsp55Lz/adyaX/SOzgd0i sSwP/Y1yN2kTqXAqNz7UmjlqBVc56qphFWgrA4gDoEsMg2rc5tIVezF6m82rxh2/ptnS85ML2IqC tuqGsqVBVceboC/hVzKayw6iahADbcvvU+U7M1AnmnteJ0I4CQNifNqS3LiAsgOLN6c= ) ; Key ID = 58540`
	`com. 86400 IN DNSKEY ( 257 3 8 AQPDzldNmMvZFX4NcNJ0uEnKDg7tmv/F3MyQR0lpBmVcNcsIszxNFxsBfKNW9JYCYqpik8366LE7 VbIcNRzfp2h9OO8HRl+H+E08zauK8k7evWEmu/6od+2boggPoiEfGNyvNPaSI7FOIroDsnw/tagg zHRX1Z7SOiOiPWPNIwSUyWOZ79VmcQ1GLkC6NlYvG3HwYmynQv6oFwGv/KELSw7ZSdrbTQ0HXvZb qMUI7BaMskmvgm1G7oKZ1YiF7O9ioVNc0+7ASbqmZN7Z98EGU/Qh2K/BgUe8Hs0XVcdPKrtyYnoQ Hd2ynKPcMMlTEih2/2HDHjRPJ2aywIpKNnv4oPo/ ) ; Key ID = 30909`
	DNSKEY=30909/SEP is now in the chain-of-trust
	DS=30909/SHA-256 verifies DNSKEY=30909/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`com. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210326192421 20210311191921 30909 com. YpYXRAvKagAr2qGhjEGwm3erq112DHWnYAxfLjGb/Oh3wZXUgEoup2faQGoiVLf5gScUCQOYbwSP Eu+vtA94EYsF0fBzHOb+At5+EaAZbxmT2r3NauE2LooalKmgjQUn/xw3NDxAyFKb+ag39o7QnhGm Uy1CDaEZ/LEYmiwifGuP7/1XihIsYFVx6cWSxeg507ySPvqFeHzezj78d0dx+lxZi7EMxsxnProT 1dRrOJmM3BNOP4gRbFivWCFFtsJxvLT+dLKPqhgF939suH0jh/usjg6yswVorp7klrAxToHvZhpY WxJ8sW90WtNWsCx7dSbAnclWMvLum70SVrUZAw== )`
	RRSIG=30909 and DNSKEY=30909/SEP verifies the DNSKEY RRset
	DNSKEY=58540 is now in the chain-of-trust
	Query to d.gtld-servers.net for _adsp._domainkey.rubenkerkhof.com/A
	Received 810 bytes from 192.31.80.30
	;; Answer received from 192.31.80.30 (810 bytes) ;; HEADER SECTION ;; id = 51690 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; _adsp._domainkey.rubenkerkhof.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rubenkerkhof.com. 172800 IN NS ns1.digitalocean.com. rubenkerkhof.com. 172800 IN NS ns2.digitalocean.com. rubenkerkhof.com. 172800 IN NS ns3.digitalocean.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 ( 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210325044039 20210318033039 58540 com. yb26/u3Pyd12e3pkIGjKKoWs+8gYcVu+g4TJYw1igY233mZvg8jK4g7Mnhlu8Yr316TB5OyztbH2 KGai+kF/chRQ5uVuxA+zJrGZt/bwNH2TswiSTxIoYxl1deMFEmP8CI3SF7G8uIRaWjvt9o+hKWLC cv7N3sLyx2/SHGRPDKsCJAqeVB4+CXMqfUbfSJlbhwpNjR+LpJW38BC0DylM6Q== ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN NSEC3 ( 1 1 0 - fto4comdpvtv7fbgbspbcmqhlkstrbop NS DS RRSIG ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210324060531 20210317045531 58540 com. o5NAAnowD1GQmCioZKFwPPHb7avdxXnFhyuXwCEUxJzK5JHkq/+s11KlczJ2CkhAGoXT7iJqULgu xOYOV5usfSYIj44TiOgvj8GuJ3Zs50GDOfREd8o2yaf9Zt9mhHf1JCkFs3Dglz9whP4UTUMdPsDb MdRH1mcqqoR29xvJ7Snkla9MkNloh4WOFUgBNHE+8QUJ4HinIZIxzRan1xRd1A== ) ;; ADDITIONAL SECTION (7 records) ns1.digitalocean.com. 172800 IN A 173.245.58.51 ns1.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::adf5:3a33 ns2.digitalocean.com. 172800 IN A 173.245.59.41 ns2.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::adf5:3b29 ns3.digitalocean.com. 172800 IN A 198.41.222.173 ns3.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::c629:dead ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.gtld-servers.net for rubenkerkhof.com/DNSKEY
	Received 793 bytes from 192.35.51.30
	;; Answer received from 192.35.51.30 (793 bytes) ;; HEADER SECTION ;; id = 25475 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rubenkerkhof.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rubenkerkhof.com. 172800 IN NS ns1.digitalocean.com. rubenkerkhof.com. 172800 IN NS ns2.digitalocean.com. rubenkerkhof.com. 172800 IN NS ns3.digitalocean.com. CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 ( 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210325044039 20210318033039 58540 com. yb26/u3Pyd12e3pkIGjKKoWs+8gYcVu+g4TJYw1igY233mZvg8jK4g7Mnhlu8Yr316TB5OyztbH2 KGai+kF/chRQ5uVuxA+zJrGZt/bwNH2TswiSTxIoYxl1deMFEmP8CI3SF7G8uIRaWjvt9o+hKWLC cv7N3sLyx2/SHGRPDKsCJAqeVB4+CXMqfUbfSJlbhwpNjR+LpJW38BC0DylM6Q== ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN NSEC3 ( 1 1 0 - fto4comdpvtv7fbgbspbcmqhlkstrbop NS DS RRSIG ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210324060531 20210317045531 58540 com. o5NAAnowD1GQmCioZKFwPPHb7avdxXnFhyuXwCEUxJzK5JHkq/+s11KlczJ2CkhAGoXT7iJqULgu xOYOV5usfSYIj44TiOgvj8GuJ3Zs50GDOfREd8o2yaf9Zt9mhHf1JCkFs3Dglz9whP4UTUMdPsDb MdRH1mcqqoR29xvJ7Snkla9MkNloh4WOFUgBNHE+8QUJ4HinIZIxzRan1xRd1A== ) ;; ADDITIONAL SECTION (7 records) ns1.digitalocean.com. 172800 IN A 173.245.58.51 ns1.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::adf5:3a33 ns2.digitalocean.com. 172800 IN A 173.245.59.41 ns2.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::adf5:3b29 ns3.digitalocean.com. 172800 IN A 198.41.222.173 ns3.digitalocean.com. 172800 IN AAAA 2400:cb00:2049:1::c629:dead ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone rubenkerkhof.com

rubenkerkhof.com

	Checking DS between com and rubenkerkhof.com
	Query to i.gtld-servers.net for rubenkerkhof.com/DS
	Received 862 bytes from 192.43.172.30
	;; Answer received from 192.43.172.30 (862 bytes) ;; HEADER SECTION ;; id = 3562 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rubenkerkhof.com. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN NSEC3 ( 1 1 0 - ck0q1gin43n1arrc9osm6qpqr81h5m9a NS SOA RRSIG DNSKEY NSEC3PARAM ) CK0POJMG874LJREF7EFN8430QVIT8BSM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210325044039 20210318033039 58540 com. yb26/u3Pyd12e3pkIGjKKoWs+8gYcVu+g4TJYw1igY233mZvg8jK4g7Mnhlu8Yr316TB5OyztbH2 KGai+kF/chRQ5uVuxA+zJrGZt/bwNH2TswiSTxIoYxl1deMFEmP8CI3SF7G8uIRaWjvt9o+hKWLC cv7N3sLyx2/SHGRPDKsCJAqeVB4+CXMqfUbfSJlbhwpNjR+LpJW38BC0DylM6Q== ) com. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1616121069 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) com. 900 IN RRSIG ( SOA 8 1 900 20210326023109 20210319012109 58540 com. zDiUzpL2N5/0D8COrQDEKY7NoqHHOaf8PxU3nuIwnfLw1frGLoe/d1kS6dqbFJfxptGFbbPSt142 FOJn+llfC2Un8u5vxH7zLoX2Gp31pVhsGgqe5sqL/IJvS3A/SKukAL/NbbwVTyXlOwPVW1zpggkO r1KU+aZm973e3xauyMfoTIBSJsVUKUGUeSAJ8gacdYnqtjRNRb+O0fiFKDKOEA== ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN NSEC3 ( 1 1 0 - fto4comdpvtv7fbgbspbcmqhlkstrbop NS DS RRSIG ) FTO3MH0E93GBFE9SKQOHNVHK3MUHDEJM.com. 86400 IN RRSIG ( NSEC3 8 2 86400 20210324060531 20210317045531 58540 com. o5NAAnowD1GQmCioZKFwPPHb7avdxXnFhyuXwCEUxJzK5JHkq/+s11KlczJ2CkhAGoXT7iJqULgu xOYOV5usfSYIj44TiOgvj8GuJ3Zs50GDOfREd8o2yaf9Zt9mhHf1JCkFs3Dglz9whP4UTUMdPsDb MdRH1mcqqoR29xvJ7Snkla9MkNloh4WOFUgBNHE+8QUJ4HinIZIxzRan1xRd1A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for rubenkerkhof.com in the com zone
	Query to ns1.digitalocean.com for rubenkerkhof.com/DNSKEY
	Received 109 bytes from 173.245.58.51
	;; Answer received from 173.245.58.51 (109 bytes) ;; HEADER SECTION ;; id = 54243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rubenkerkhof.com. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rubenkerkhof.com. 1800 IN SOA ( ns1.digitalocean.com. hostmaster.rubenkerkhof.com. 1615745498 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns3.digitalocean.com for _adsp._domainkey.rubenkerkhof.com/A
	Received 126 bytes from 198.41.222.173
	;; Answer received from 198.41.222.173 (126 bytes) ;; HEADER SECTION ;; id = 36708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; _adsp._domainkey.rubenkerkhof.com. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rubenkerkhof.com. 1800 IN SOA ( ns1.digitalocean.com. hostmaster.rubenkerkhof.com. 1615745498 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Zone rubenkerkhof.com (198.41.222.173) returns NXDOMAIN for _adsp._domainkey.rubenkerkhof.com
	No NSEC records in response

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _adsp._domainkey.rubenkerkhof.com at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: