DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-26 11:37:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for aa.am

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 41631 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to m.root-servers.net for aa.am/A
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for aa.am/A: 'IPv6 transport disabled'
	Received 724 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (724 bytes) ;; HEADER SECTION ;; id = 41700 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aa.am. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) am. 172800 IN NS sns-pb.isc.org. am. 172800 IN NS ns-cdn.amnic.net. am. 172800 IN NS ns-pri.nic.am. am. 172800 IN NS ns-pch.amnic.net. am. 172800 IN NS fork.sth.dnsnode.net. am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . Jb/SWhUiRmfp6wdv45aE730QRpGKhlJYaFzF2tvAffzQlrSj57Hca6L8w2MUTKC/t/d5p+QO2Dib lzpwmiNgyt7d/VAPVw+pmlnRjQjvR3vekitPqgg9o6iiatq8/jm0IOOEkVpheRudPKFMw3ViBH/9 Z3aR74MNB4H2Ev+7Qj3ATvYLRMV4Cr8Rhu8U9qFDD5aHePKb4es4v9rbH9XPa+JWh+X0AL1Jocww PJcMg5L3G5aIQ2t7+VJhUyc/PDXdhGI19S0hdM7yNsXAXhz706XyGpZlqbi7iWY2zckeYxRd8TSh r/Pp6tln0FlpHoUU58i2MQRGZVC0Z/bMeUIiYA== ) ;; ADDITIONAL SECTION (11 records) fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 ns-cdn.amnic.net. 172800 IN A 194.0.1.26 ns-pch.amnic.net. 172800 IN A 204.61.216.96 ns-pri.nic.am. 172800 IN A 195.43.75.53 sns-pb.isc.org. 172800 IN A 192.5.4.1 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 ns-cdn.amnic.net. 172800 IN AAAA 2001:678:4::1a ns-pch.amnic.net. 172800 IN AAAA 2001:500:14:6096:ad::1 ns-pri.nic.am. 172800 IN AAAA 2001:7f9:8:53::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for am/DNSKEY
	Received 721 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (721 bytes) ;; HEADER SECTION ;; id = 26463 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) am. 172800 IN NS fork.sth.dnsnode.net. am. 172800 IN NS ns-cdn.amnic.net. am. 172800 IN NS ns-pch.amnic.net. am. 172800 IN NS ns-pri.nic.am. am. 172800 IN NS sns-pb.isc.org. am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . Jb/SWhUiRmfp6wdv45aE730QRpGKhlJYaFzF2tvAffzQlrSj57Hca6L8w2MUTKC/t/d5p+QO2Dib lzpwmiNgyt7d/VAPVw+pmlnRjQjvR3vekitPqgg9o6iiatq8/jm0IOOEkVpheRudPKFMw3ViBH/9 Z3aR74MNB4H2Ev+7Qj3ATvYLRMV4Cr8Rhu8U9qFDD5aHePKb4es4v9rbH9XPa+JWh+X0AL1Jocww PJcMg5L3G5aIQ2t7+VJhUyc/PDXdhGI19S0hdM7yNsXAXhz706XyGpZlqbi7iWY2zckeYxRd8TSh r/Pp6tln0FlpHoUU58i2MQRGZVC0Z/bMeUIiYA== ) ;; ADDITIONAL SECTION (11 records) fork.sth.dnsnode.net. 172800 IN A 77.72.229.254 ns-cdn.amnic.net. 172800 IN A 194.0.1.26 ns-pch.amnic.net. 172800 IN A 204.61.216.96 ns-pri.nic.am. 172800 IN A 195.43.75.53 sns-pb.isc.org. 172800 IN A 192.5.4.1 fork.sth.dnsnode.net. 172800 IN AAAA 2a01:3f0:0:306::53 ns-cdn.amnic.net. 172800 IN AAAA 2001:678:4::1a ns-pch.amnic.net. 172800 IN AAAA 2001:500:14:6096:ad::1 ns-pri.nic.am. 172800 IN AAAA 2001:7f9:8:53::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone am

	Checking DS between . and am
	Query to d.root-servers.net for am/DS
	Received 366 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (366 bytes) ;; HEADER SECTION ;; id = 56798 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DS ;; ANSWER SECTION (2 records) am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 ) am. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . Jb/SWhUiRmfp6wdv45aE730QRpGKhlJYaFzF2tvAffzQlrSj57Hca6L8w2MUTKC/t/d5p+QO2Dib lzpwmiNgyt7d/VAPVw+pmlnRjQjvR3vekitPqgg9o6iiatq8/jm0IOOEkVpheRudPKFMw3ViBH/9 Z3aR74MNB4H2Ev+7Qj3ATvYLRMV4Cr8Rhu8U9qFDD5aHePKb4es4v9rbH9XPa+JWh+X0AL1Jocww PJcMg5L3G5aIQ2t7+VJhUyc/PDXdhGI19S0hdM7yNsXAXhz706XyGpZlqbi7iWY2zckeYxRd8TSh r/Pp6tln0FlpHoUU58i2MQRGZVC0Z/bMeUIiYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for am in the . zone
	DS=17214/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`am. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . Jb/SWhUiRmfp6wdv45aE730QRpGKhlJYaFzF2tvAffzQlrSj57Hca6L8w2MUTKC/t/d5p+QO2Dib lzpwmiNgyt7d/VAPVw+pmlnRjQjvR3vekitPqgg9o6iiatq8/jm0IOOEkVpheRudPKFMw3ViBH/9 Z3aR74MNB4H2Ev+7Qj3ATvYLRMV4Cr8Rhu8U9qFDD5aHePKb4es4v9rbH9XPa+JWh+X0AL1Jocww PJcMg5L3G5aIQ2t7+VJhUyc/PDXdhGI19S0hdM7yNsXAXhz706XyGpZlqbi7iWY2zckeYxRd8TSh r/Pp6tln0FlpHoUU58i2MQRGZVC0Z/bMeUIiYA== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=17214/SHA-256 is now in the chain-of-trust
	`am. 86400 IN DS ( 17214 7 2 db89a581e597dce4c06596aec0ad6bd0163542362412d816ecbf4f8805cf8892 )`
	Query to ns-pch.amnic.net for am/DNSKEY
	Error querying ns-pch.amnic.net/2001:500:14:6096:ad:0:0:1 for am/DNSKEY: 'IPv6 transport disabled'
	Received 1479 bytes from 204.61.216.96
	;; Answer received from 204.61.216.96 (1479 bytes) ;; HEADER SECTION ;; id = 38181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; am. IN DNSKEY ;; ANSWER SECTION (7 records) am. 43200 IN DNSKEY ( 257 3 7 AwEAAav/lMWuShAz1S6ZefOKR5Ljb4BBdxuzDgTWuxEB3ZovY4HSo6ywuD86I5LCnqNEHtgx6PdV D1SJbyPOWeckBTPzdiXsHOaL4/UX+DIqoE7UdysGQ4iFlZtqAMDhnHYlkgAXgLO3NKJyE7NDlUfm 9b2SOrEdQ5ZzkDU7KOQVPMgL++FSPs+HmmwHT018qllSduwpzwbWyBYOSuhadSgvZFXen6cC+5hv HjZuKqcP04QLU4XcLXnpNiAmHWweCV5hwvmwR4zBGw2Qrja7t8CvawmJ/iM6Aty2iy624JUTQI70 DOHJEUu5RcdYpf4tgutz9yl+eZBXzXXxH35cjg0uYHc= ) ; Key ID = 17214 am. 43200 IN DNSKEY ( 257 3 7 AwEAAZawAjd4056P/UPnGBlTtawBwkgrGCZswWE5pN8qkpDpUrbmxX53+NkmVHVL3fCtNfILPNdq jmcXG0jbBlRlRSwc41nZQ10e1O+8D5EIUNaAt1c80PLiRgn9vTDhJptIfudlvsA0UUeVyqLa57/Q 2I/8EGvD4rPvRdFHHtTCyISsnk60C+UsD50o3jn65PY0nTlw8iMEz9Y2Wbx9GM+Kd2ETUQ0gtEVZ Ctw2yjfByalW0tzf6eE46l275dv2Y9KMG+eDK/iTl/79vytpLJADzyxnjSMTfBBWHtwQuOaNXYhU 3Zpcr8HlMgewDN6LogCA1gWBP4vT+LjghmWz8sQAXaU= ) ; Key ID = 9804 am. 43200 IN DNSKEY ( 256 3 7 AwEAAd0q8E6gcT+IfKbc3zM/D6ewrjbXnJiWws5my2xWg82uC7u6lq8F4Hb2MCkaI37m8G9xb5VP /KAyxE2JOa505Hx7uqTgbiyyzfpCUuzwpCLJXOV8823FBwDQyB53hsRjZT+P71Kt6z9zSBKV6vu5 nFYHNPabNAn+kUptrwfYOQ07 ) ; Key ID = 50405 am. 43200 IN DNSKEY ( 256 3 7 AwEAAcGT2gyuRzMIPBdk8jE8wySW8OskSLz0gxYAAPVjg1e5YY+3CnCPmkyFNevpWXgyNfIGgopK i+Uj2PgSsY7qDPt0yAjbv/9iy8Wkn9gkzP9iI5yGSCNv5lsyQNUBwXXQivzfBJfapEMIH1xJwv0T NKhQXoZHgAfRFpDlegntPar3 ) ; Key ID = 62195 am. 43200 IN DNSKEY ( 256 3 7 AwEAAa7d2gSYl+hPCEEvNEiD6nciku7d+XkDRsEXEjlT5V25DkAnyGaWO3ighd0zlVhSdOC1Dxap 2mkavRW5CU+3BWYlM1Uw3CzKf64fVB7OQWAvAcXBbPU5NzCGUvDGasyE90uGolN/0ULY/ZzDQbUE FWgFR3BTq0T4gHuOrKvw/aeL ) ; Key ID = 55337 am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190505171324 20190425190100 55337 am. Kn4Kepbs/TrNmvtAfjS6Q9UcPmAy7uLeLY2qMWdkL4kta9mU2d8MsY6dj2HJ+UnHlM1mgjmvXxci NKggix7uX/3Z7IS8V3vthJmzKs9dswEvUY+J6ZIrRugOwWpNYlPhPgA9aQRo99rwrf49sc4ueTPT +KwM0LyHo/dQMhpjynw= ) am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190505181935 20190425190100 17214 am. GXoHW9qoNl0wHi/jMdUMD9r21sf/lVUIfscMA+AxugMhmJ7GIKZ5WFC/r96jdUoAnuCANgjGCjH+ SkjJsB8MTzZ9d3zyPcLf6VIx8H3Rr45Jy/ee8C4F02/wTnt1mn+QsfGCqUZnd3YnywzKHlT/6Kgu 3GecASWeN8/gkbbLYWnQX3suuJFj8TI9Ta1+gGz4lh5l3Xb/2QiHVssVbojtJRp/pK+8O812Puzs 5kGBpxSZyYskFfUX87fGC9C4hq3VnmKiWJ5HvwE8N3trVUed18v8+0fxjfXcHt3oqU90qTPPNem+ Wv7EUnErNMsDVadFjI8OcYIc6rRQkos8EAooag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 5 DNSKEY records for am
	`am. 43200 IN DNSKEY ( 257 3 7 AwEAAav/lMWuShAz1S6ZefOKR5Ljb4BBdxuzDgTWuxEB3ZovY4HSo6ywuD86I5LCnqNEHtgx6PdV D1SJbyPOWeckBTPzdiXsHOaL4/UX+DIqoE7UdysGQ4iFlZtqAMDhnHYlkgAXgLO3NKJyE7NDlUfm 9b2SOrEdQ5ZzkDU7KOQVPMgL++FSPs+HmmwHT018qllSduwpzwbWyBYOSuhadSgvZFXen6cC+5hv HjZuKqcP04QLU4XcLXnpNiAmHWweCV5hwvmwR4zBGw2Qrja7t8CvawmJ/iM6Aty2iy624JUTQI70 DOHJEUu5RcdYpf4tgutz9yl+eZBXzXXxH35cjg0uYHc= ) ; Key ID = 17214`
	`am. 43200 IN DNSKEY ( 257 3 7 AwEAAZawAjd4056P/UPnGBlTtawBwkgrGCZswWE5pN8qkpDpUrbmxX53+NkmVHVL3fCtNfILPNdq jmcXG0jbBlRlRSwc41nZQ10e1O+8D5EIUNaAt1c80PLiRgn9vTDhJptIfudlvsA0UUeVyqLa57/Q 2I/8EGvD4rPvRdFHHtTCyISsnk60C+UsD50o3jn65PY0nTlw8iMEz9Y2Wbx9GM+Kd2ETUQ0gtEVZ Ctw2yjfByalW0tzf6eE46l275dv2Y9KMG+eDK/iTl/79vytpLJADzyxnjSMTfBBWHtwQuOaNXYhU 3Zpcr8HlMgewDN6LogCA1gWBP4vT+LjghmWz8sQAXaU= ) ; Key ID = 9804`
	`am. 43200 IN DNSKEY ( 256 3 7 AwEAAd0q8E6gcT+IfKbc3zM/D6ewrjbXnJiWws5my2xWg82uC7u6lq8F4Hb2MCkaI37m8G9xb5VP /KAyxE2JOa505Hx7uqTgbiyyzfpCUuzwpCLJXOV8823FBwDQyB53hsRjZT+P71Kt6z9zSBKV6vu5 nFYHNPabNAn+kUptrwfYOQ07 ) ; Key ID = 50405`
	`am. 43200 IN DNSKEY ( 256 3 7 AwEAAcGT2gyuRzMIPBdk8jE8wySW8OskSLz0gxYAAPVjg1e5YY+3CnCPmkyFNevpWXgyNfIGgopK i+Uj2PgSsY7qDPt0yAjbv/9iy8Wkn9gkzP9iI5yGSCNv5lsyQNUBwXXQivzfBJfapEMIH1xJwv0T NKhQXoZHgAfRFpDlegntPar3 ) ; Key ID = 62195`
	`am. 43200 IN DNSKEY ( 256 3 7 AwEAAa7d2gSYl+hPCEEvNEiD6nciku7d+XkDRsEXEjlT5V25DkAnyGaWO3ighd0zlVhSdOC1Dxap 2mkavRW5CU+3BWYlM1Uw3CzKf64fVB7OQWAvAcXBbPU5NzCGUvDGasyE90uGolN/0ULY/ZzDQbUE FWgFR3BTq0T4gHuOrKvw/aeL ) ; Key ID = 55337`
	DNSKEY=17214/SEP is now in the chain-of-trust
	DS=17214/SHA-256 verifies DNSKEY=17214/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190505171324 20190425190100 55337 am. Kn4Kepbs/TrNmvtAfjS6Q9UcPmAy7uLeLY2qMWdkL4kta9mU2d8MsY6dj2HJ+UnHlM1mgjmvXxci NKggix7uX/3Z7IS8V3vthJmzKs9dswEvUY+J6ZIrRugOwWpNYlPhPgA9aQRo99rwrf49sc4ueTPT +KwM0LyHo/dQMhpjynw= )`
	`am. 43200 IN RRSIG ( DNSKEY 7 1 43200 20190505181935 20190425190100 17214 am. GXoHW9qoNl0wHi/jMdUMD9r21sf/lVUIfscMA+AxugMhmJ7GIKZ5WFC/r96jdUoAnuCANgjGCjH+ SkjJsB8MTzZ9d3zyPcLf6VIx8H3Rr45Jy/ee8C4F02/wTnt1mn+QsfGCqUZnd3YnywzKHlT/6Kgu 3GecASWeN8/gkbbLYWnQX3suuJFj8TI9Ta1+gGz4lh5l3Xb/2QiHVssVbojtJRp/pK+8O812Puzs 5kGBpxSZyYskFfUX87fGC9C4hq3VnmKiWJ5HvwE8N3trVUed18v8+0fxjfXcHt3oqU90qTPPNem+ Wv7EUnErNMsDVadFjI8OcYIc6rRQkos8EAooag== )`
	RRSIG=55337 and DNSKEY=55337 verifies the DNSKEY RRset
	RRSIG=17214 and DNSKEY=17214/SEP verifies the DNSKEY RRset
	DNSKEY=9804/SEP is now in the chain-of-trust
	DNSKEY=50405 is now in the chain-of-trust
	DNSKEY=62195 is now in the chain-of-trust
	DNSKEY=55337 is now in the chain-of-trust
	Query to ns-pri.nic.am for aa.am/A
	Error querying ns-pri.nic.am/2001:7f9:8:53:0:0:0:1 for aa.am/A: 'IPv6 transport disabled'
	Received 896 bytes from 195.43.75.53
	;; Answer received from 195.43.75.53 (896 bytes) ;; HEADER SECTION ;; id = 51853 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aa.am. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) aa.am. 43200 IN NS ns1.20dragons.com. aa.am. 43200 IN NS ns2.20dragons.com. MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505172506 20190425190100 55337 am. DIAgFoUbqpyCillFrv53MWdzzmMSwemzNIWcSkEVgMOK1QoDAhddIXBDNLXNyQ82rIdQzDFDKzC1 EuJmSVmQOyohwaMoDyzCuuOT65tKkHyPIJtgesj+qTdwqwi+r/SLh9ipQiZu7rPv+H01JFMNEzGi dT8rVNAaFeGFvHYTIiA= ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522165429 20190422165241 62195 am. Re6hPobMfbHtc8MduZBilzM/NPAedsxgCEk+lbn19pSVERFDBBztQpifEe3TdQANe8JkwOEbDsXf uAqTvBajvdJ9yKog5MvQ15JdgRi8UToO/4VmpDn2oAdWDlymMjwvUMMH/r0BW04X8Kyv0zvRhXsL PKuGs27pedD7MNyqYKQ= ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN NSEC3 ( 1 1 10 bed68c 31vcnkn0sv5qmmhm1235211v4fnicsed NS DS RRSIG ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505183831 20190425190100 55337 am. YKk9nmLsBla+1KI+9ccr+y6qDMrL0N2pZBrfrblcFEx2k8d6YNlG+KEXkcCI2/RdlWU0Icbzx3W+ E3lHB/Gx0vQWOaJy5ChGFOShYAmiEsNJndHmfU3+0Mx2/ZY8ZCgJtvZ6/I3otNQhriQp1r8642xq YkoW4rPDWMkxdgZRAlI= ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522185200 20190422175447 62195 am. iT/q5n3NIxSVo/sYlFICHmDYjoyvKqzHxWCZBri1lbwtR8mWj8/7TMrLmJ5RWBczaHW3VdqXmmJE aJxMRY9zta5iwv4HYVnHeMmqCx1C3sXTaiegmN2psxN7KjWUK4JNWhZKg2rcHIwxVIE8iApqgPds 2q0VsYzR8VVnn5Xuwa4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-cdn.amnic.net for aa.am/DNSKEY
	Error querying ns-cdn.amnic.net/2001:678:4:0:0:0:0:1a for aa.am/DNSKEY: 'IPv6 transport disabled'
	Received 913 bytes from 194.0.1.26
	;; Answer received from 194.0.1.26 (913 bytes) ;; HEADER SECTION ;; id = 63220 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aa.am. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) aa.am. 43200 IN NS ns1.20dragons.com. aa.am. 43200 IN NS ns2.20dragons.com. mch4b9jr7olvn96tjdhr1se2ctcn7s94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) mch4b9jr7olvn96tjdhr1se2ctcn7s94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505172506 20190425190100 55337 am. DIAgFoUbqpyCillFrv53MWdzzmMSwemzNIWcSkEVgMOK1QoDAhddIXBDNLXNyQ82rIdQzDFDKzC1 EuJmSVmQOyohwaMoDyzCuuOT65tKkHyPIJtgesj+qTdwqwi+r/SLh9ipQiZu7rPv+H01JFMNEzGi dT8rVNAaFeGFvHYTIiA= ) mch4b9jr7olvn96tjdhr1se2ctcn7s94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522165429 20190422165241 62195 am. Re6hPobMfbHtc8MduZBilzM/NPAedsxgCEk+lbn19pSVERFDBBztQpifEe3TdQANe8JkwOEbDsXf uAqTvBajvdJ9yKog5MvQ15JdgRi8UToO/4VmpDn2oAdWDlymMjwvUMMH/r0BW04X8Kyv0zvRhXsL PKuGs27pedD7MNyqYKQ= ) u1h2gbg17osqoos8qnusgb8qk8m11nq0.am. 7200 IN NSEC3 ( 1 1 10 bed68c 31vcnkn0sv5qmmhm1235211v4fnicsed NS DS RRSIG ) u1h2gbg17osqoos8qnusgb8qk8m11nq0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505183831 20190425190100 55337 am. YKk9nmLsBla+1KI+9ccr+y6qDMrL0N2pZBrfrblcFEx2k8d6YNlG+KEXkcCI2/RdlWU0Icbzx3W+ E3lHB/Gx0vQWOaJy5ChGFOShYAmiEsNJndHmfU3+0Mx2/ZY8ZCgJtvZ6/I3otNQhriQp1r8642xq YkoW4rPDWMkxdgZRAlI= ) u1h2gbg17osqoos8qnusgb8qk8m11nq0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522185200 20190422175447 62195 am. iT/q5n3NIxSVo/sYlFICHmDYjoyvKqzHxWCZBri1lbwtR8mWj8/7TMrLmJ5RWBczaHW3VdqXmmJE aJxMRY9zta5iwv4HYVnHeMmqCx1C3sXTaiegmN2psxN7KjWUK4JNWhZKg2rcHIwxVIE8iApqgPds 2q0VsYzR8VVnn5Xuwa4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone aa.am

aa.am

	Checking DS between am and aa.am
	Query to fork.sth.dnsnode.net for aa.am/DS
	Received 1069 bytes from 77.72.229.254
	;; Answer received from 77.72.229.254 (1069 bytes) ;; HEADER SECTION ;; id = 37691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aa.am. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN NSEC3 ( 1 1 10 bed68c mffpcrfetfeg61jrthlpveq7q3an438d NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505172506 20190425190100 55337 am. DIAgFoUbqpyCillFrv53MWdzzmMSwemzNIWcSkEVgMOK1QoDAhddIXBDNLXNyQ82rIdQzDFDKzC1 EuJmSVmQOyohwaMoDyzCuuOT65tKkHyPIJtgesj+qTdwqwi+r/SLh9ipQiZu7rPv+H01JFMNEzGi dT8rVNAaFeGFvHYTIiA= ) MCH4B9JR7OLVN96TJDHR1SE2CTCN7S94.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522165429 20190422165241 62195 am. Re6hPobMfbHtc8MduZBilzM/NPAedsxgCEk+lbn19pSVERFDBBztQpifEe3TdQANe8JkwOEbDsXf uAqTvBajvdJ9yKog5MvQ15JdgRi8UToO/4VmpDn2oAdWDlymMjwvUMMH/r0BW04X8Kyv0zvRhXsL PKuGs27pedD7MNyqYKQ= ) am. 7200 IN SOA ( ns-pri.nic.am. dns.amnic.net. 1556277603 ;serial 43200 ;refresh 7200 ;retry 1728000 ;expire 7200 ;minimum ) am. 7200 IN RRSIG ( SOA 7 1 43200 20190526112006 20190426102006 55337 am. erbhq216vvk1EPBEltuhekCpJ/kE1QrcEzgMF4xU4axhKpYw2iHaGfCZUt0zQcYNeSZm+iBAoa5I oOBDO4eJROuZgQF9aqRsY48dFd5+1lGvjNn8TzfWW5zy5b1F2BgJ72U6NraE3727xMXgMx/Vteet uedW6taFTKiQzubq43M= ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN NSEC3 ( 1 1 10 bed68c 31vcnkn0sv5qmmhm1235211v4fnicsed NS DS RRSIG ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190505183831 20190425190100 55337 am. YKk9nmLsBla+1KI+9ccr+y6qDMrL0N2pZBrfrblcFEx2k8d6YNlG+KEXkcCI2/RdlWU0Icbzx3W+ E3lHB/Gx0vQWOaJy5ChGFOShYAmiEsNJndHmfU3+0Mx2/ZY8ZCgJtvZ6/I3otNQhriQp1r8642xq YkoW4rPDWMkxdgZRAlI= ) U1H2GBG17OSQOOS8QNUSGB8QK8M11NQ0.am. 7200 IN RRSIG ( NSEC3 7 2 7200 20190522185200 20190422175447 62195 am. iT/q5n3NIxSVo/sYlFICHmDYjoyvKqzHxWCZBri1lbwtR8mWj8/7TMrLmJ5RWBczaHW3VdqXmmJE aJxMRY9zta5iwv4HYVnHeMmqCx1C3sXTaiegmN2psxN7KjWUK4JNWhZKg2rcHIwxVIE8iApqgPds 2q0VsYzR8VVnn5Xuwa4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for aa.am in the am zone
	Query to ns2.20dragons.com for aa.am/DNSKEY
	Timeout querying ns2.20dragons.com/155.254.33.250 for aa.am/DNSKEY
	All Queries to ns2.20dragons.com for aa.am/DNSKEY timed out or failed
	Query to ns1.20dragons.com for aa.am/DNSKEY
	Timeout querying ns1.20dragons.com/23.94.166.82 for aa.am/DNSKEY
	All Queries to ns1.20dragons.com for aa.am/DNSKEY timed out or failed
	Failed to get DNSKEY RR set for zone aa.am
	No response from aa.am nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test aa.am at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: