DNSSEC Analyzer

Domain Name:

Time: 2019-10-08 14:11:01 UTC, NTP stratum 4

Analyzing DNSSEC problems for andy.pt

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (1139 bytes) ;; HEADER SECTION ;; id = 47509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20191022000000 20191001000000 20326 . L4I6XOk5ctd+SiQuN9lvmkS/ZaSPn6oLvbFJiIUYEJ6YhzLqenlKNA+Et3O+lyf5vPFdQQDRQLNK EoltST4POvmgXw8M40xLEK6Dw3UO2GII5GDYEiWhD3F1Oy7u9lqTDz3bJtlcdCWpwdGHCpGYIBce Hib35IyZ5lbmpk2EPFVv5aXyRVUWOKTrFIgG0uf4WOolgZJLFOni5iJTqNNNmM5VnzqXmXCQ8iKV XeTJphxgC7HayEwdqmHCEEZ1CSQDPlLG87AhGTV9OzZaZUx3ZL7GVnOHqjsWL1Ah40wHJCqPsD6A 6tH6DXZSQlTv275xqNYuda1PYlNg0fDtRYIbZw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbPwrxwtOMENWvblQbUFwBllR7ZtXsu9rg/LdyklKs9gU2GQTeOc59XjhuAPZ4WrT09z6YPL +vzIIJqnG3Hiru7hFUQ4pH0qsLNxrsuZrZYmXAKoVa9SXL1Ap0LygwrIugEk1G4v7Rk/Alt1jLUI E+ZymGtSEhIuGQdXrEmj3ffzXY13H42X4Ja3vJTn/WIQOXY7vwHXGDypSh9j0Tt0hknF1yVJCrIp fkhFWihMKNdMzMprD4bV+PDLRA5YSn3OPIeUnRn9qBUCN11LXQKb+W3Jg+m/5xQRQJzJ/qXgDh1+ aN+Mc9AstP29Y/ZLFmF6cKtL2zoUMN5I5QymeSkJJzc= ) ; Key ID = 22545`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20191022000000 20191001000000 20326 . L4I6XOk5ctd+SiQuN9lvmkS/ZaSPn6oLvbFJiIUYEJ6YhzLqenlKNA+Et3O+lyf5vPFdQQDRQLNK EoltST4POvmgXw8M40xLEK6Dw3UO2GII5GDYEiWhD3F1Oy7u9lqTDz3bJtlcdCWpwdGHCpGYIBce Hib35IyZ5lbmpk2EPFVv5aXyRVUWOKTrFIgG0uf4WOolgZJLFOni5iJTqNNNmM5VnzqXmXCQ8iKV XeTJphxgC7HayEwdqmHCEEZ1CSQDPlLG87AhGTV9OzZaZUx3ZL7GVnOHqjsWL1Ah40wHJCqPsD6A 6tH6DXZSQlTv275xqNYuda1PYlNg0fDtRYIbZw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	DNSKEY=22545 is now in the chain-of-trust
	Query to c.root-servers.net for andy.pt/A
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for andy.pt/A: 'IPv6 transport disabled'
	Received 1038 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (1038 bytes) ;; HEADER SECTION ;; id = 7548 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 13 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (13 records) pt. 172800 IN NS a.dns.pt. pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS sns-pb.isc.org. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 172800 IN NS ns2.nic.fr. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS f.dns.pt. pt. 172800 IN NS c.dns.pt. pt. 86400 IN DS ( 40995 7 2 abf415ed56e88c5f05434bbf62cdd90b574d6445a37ae5cc9b84638ab5b9e656 ) pt. 86400 IN DS 40995 7 1 43dedceeba41380680784aa531819a6ed8172b6d pt. 86400 IN RRSIG ( DS 8 1 86400 20191021050000 20191008040000 22545 . avCd+AVjzIbkDciq5sL4hzTVQA1X5O8Di6VmisvRc+11khp3QjPv6/2XOGjdptlTp2oXKy9tU6F4 LHghOZi5upS2HUiQ+g1mUkiApEPieNC3FBJ+lwC6hBLB4Pi/453jhbBSpkgL2rCS4yKkpBJQmDME o344E4ExJBXIZ15kl2CdTjfxWROkQXh60h5DDzIKsyFrLAMr+3zwcu04gqubU5q/aG+j4nnb782c ul4XGYntXVzpAR9DU9uPonjNW1d/HtzLIGQw+HV8ptX5Wrvk2nLFZCqCELug5gaR7lrkpQ8vaew5 hWL5qATP9xQBaHvDYiGNC0G+6EMhG7ZlklTxZg== ) ;; ADDITIONAL SECTION (21 records) a.dns.pt. 172800 IN A 185.39.208.1 b.dns.pt. 172800 IN A 194.0.25.23 c.dns.pt. 172800 IN A 204.61.216.105 d.dns.pt. 172800 IN A 185.39.210.1 e.dns.pt. 172800 IN A 193.136.192.64 f.dns.pt. 172800 IN A 162.88.45.1 g.dns.pt. 172800 IN A 193.136.2.226 ns.dns.br. 172800 IN A 200.160.0.5 ns2.nic.fr. 172800 IN A 192.93.0.4 sns-pb.isc.org. 172800 IN A 192.5.4.1 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 b.dns.pt. 172800 IN AAAA 2001:678:20::23 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 f.dns.pt. 172800 IN AAAA 2600:2000:3009::1 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for pt/DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for pt/DNSKEY: 'IPv6 transport disabled'
	Received 1033 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (1033 bytes) ;; HEADER SECTION ;; id = 18515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 13 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (13 records) pt. 172800 IN NS a.dns.pt. pt. 172800 IN NS sns-pb.isc.org. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS c.dns.pt. pt. 172800 IN NS f.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS ns2.nic.fr. pt. 86400 IN DS ( 40995 7 2 abf415ed56e88c5f05434bbf62cdd90b574d6445a37ae5cc9b84638ab5b9e656 ) pt. 86400 IN DS 40995 7 1 43dedceeba41380680784aa531819a6ed8172b6d pt. 86400 IN RRSIG ( DS 8 1 86400 20191021050000 20191008040000 22545 . avCd+AVjzIbkDciq5sL4hzTVQA1X5O8Di6VmisvRc+11khp3QjPv6/2XOGjdptlTp2oXKy9tU6F4 LHghOZi5upS2HUiQ+g1mUkiApEPieNC3FBJ+lwC6hBLB4Pi/453jhbBSpkgL2rCS4yKkpBJQmDME o344E4ExJBXIZ15kl2CdTjfxWROkQXh60h5DDzIKsyFrLAMr+3zwcu04gqubU5q/aG+j4nnb782c ul4XGYntXVzpAR9DU9uPonjNW1d/HtzLIGQw+HV8ptX5Wrvk2nLFZCqCELug5gaR7lrkpQ8vaew5 hWL5qATP9xQBaHvDYiGNC0G+6EMhG7ZlklTxZg== ) ;; ADDITIONAL SECTION (21 records) a.dns.pt. 172800 IN A 185.39.208.1 b.dns.pt. 172800 IN A 194.0.25.23 c.dns.pt. 172800 IN A 204.61.216.105 d.dns.pt. 172800 IN A 185.39.210.1 e.dns.pt. 172800 IN A 193.136.192.64 f.dns.pt. 172800 IN A 162.88.45.1 g.dns.pt. 172800 IN A 193.136.2.226 ns.dns.br. 172800 IN A 200.160.0.5 ns2.nic.fr. 172800 IN A 192.93.0.4 sns-pb.isc.org. 172800 IN A 192.5.4.1 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 b.dns.pt. 172800 IN AAAA 2001:678:20::23 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 f.dns.pt. 172800 IN AAAA 2600:2000:3009::1 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone pt

	Checking DS between . and pt
	Query to f.root-servers.net for pt/DS
	Received 402 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (402 bytes) ;; HEADER SECTION ;; id = 34589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DS ;; ANSWER SECTION (3 records) pt. 86400 IN DS 40995 7 1 43dedceeba41380680784aa531819a6ed8172b6d pt. 86400 IN DS ( 40995 7 2 abf415ed56e88c5f05434bbf62cdd90b574d6445a37ae5cc9b84638ab5b9e656 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20191021050000 20191008040000 22545 . avCd+AVjzIbkDciq5sL4hzTVQA1X5O8Di6VmisvRc+11khp3QjPv6/2XOGjdptlTp2oXKy9tU6F4 LHghOZi5upS2HUiQ+g1mUkiApEPieNC3FBJ+lwC6hBLB4Pi/453jhbBSpkgL2rCS4yKkpBJQmDME o344E4ExJBXIZ15kl2CdTjfxWROkQXh60h5DDzIKsyFrLAMr+3zwcu04gqubU5q/aG+j4nnb782c ul4XGYntXVzpAR9DU9uPonjNW1d/HtzLIGQw+HV8ptX5Wrvk2nLFZCqCELug5gaR7lrkpQ8vaew5 hWL5qATP9xQBaHvDYiGNC0G+6EMhG7ZlklTxZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for pt in the . zone
	DS=40995/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=40995/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`pt. 86400 IN RRSIG ( DS 8 1 86400 20191021050000 20191008040000 22545 . avCd+AVjzIbkDciq5sL4hzTVQA1X5O8Di6VmisvRc+11khp3QjPv6/2XOGjdptlTp2oXKy9tU6F4 LHghOZi5upS2HUiQ+g1mUkiApEPieNC3FBJ+lwC6hBLB4Pi/453jhbBSpkgL2rCS4yKkpBJQmDME o344E4ExJBXIZ15kl2CdTjfxWROkQXh60h5DDzIKsyFrLAMr+3zwcu04gqubU5q/aG+j4nnb782c ul4XGYntXVzpAR9DU9uPonjNW1d/HtzLIGQw+HV8ptX5Wrvk2nLFZCqCELug5gaR7lrkpQ8vaew5 hWL5qATP9xQBaHvDYiGNC0G+6EMhG7ZlklTxZg== )`
	RRSIG=22545 and DNSKEY=22545 verifies the DS RRset
	DS=40995/SHA-1 is now in the chain-of-trust
	`pt. 86400 IN DS 40995 7 1 43dedceeba41380680784aa531819a6ed8172b6d`
	`pt. 86400 IN DS ( 40995 7 2 abf415ed56e88c5f05434bbf62cdd90b574d6445a37ae5cc9b84638ab5b9e656 )`
	Query to ns2.nic.fr for pt/DNSKEY
	Error querying ns2.nic.fr/2001:660:3005:1:0:0:1:2 for pt/DNSKEY: 'IPv6 transport disabled'
	Received 745 bytes from 192.93.0.4
	;; Answer received from 192.93.0.4 (745 bytes) ;; HEADER SECTION ;; id = 50740 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option: ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (3 records) pt. 7200 IN DNSKEY ( 257 3 7 AwEAAbpphhprE6WdjgKbW7pqbQOPO75nZTeZ0tESnqGlQzdSrlzgTGfge6oC1NFK+iYfBZqsDt3R gT8Oe5PCe9Im2ZnsU9onP80jKPsCytc3c9daN8dytU2QJGZWOdu2n6V0ef+49zIcW2FgogL2wb+1 FOAFwoMfL4u3EDRiimrppaEPiQThcYo54U3jZSqiE3WKLdsSDupWPb1dTcS3UbvwsC83YYN9jxbU 20RR9XPPniFE8qv9/E3drCTdFzPgwWCQopCHiNwQFN5tcKQFc2U9kl70wy24uvCWAt9E86S/ngy0 FrTYQAiSjpeISq+AaH4F8BTNNkBRiUJoJP/orjI/A/k= ) ; Key ID = 40995 pt. 7200 IN DNSKEY ( 256 3 7 AwEAAb1Ar7cRPhwB69dVEKnQ40pJUzGsz+usD+JytR90nbG+AgK25/J/PNmyRwqyDEC1LyYxsqRo wBdxD1iZowdkZbd/xaR6Whebbbb1DiWQOVLqS20GDm5DZYFfbYlJ6wnWXTMGYWgPOOxOAjIbVPSp 5WFPgjp/RMBl46GlrKavSw4T ) ; Key ID = 21299 pt. 7200 IN RRSIG ( DNSKEY 7 1 7200 20191107000000 20190924000000 40995 pt. MQ8wF3rz96OgMPoYqD2kms4dtS1pxuHIV+gYB+IQR8W+KoQpyJKnlKrBVkToe183qvrVYFWPW8ig y/40bz30KD73SnoNOvIoTzx7Tdyz6xnEzdgH/j1wb/obtCEdTe32mOQmz+I3GpXw9Pro9h4J8S31 D0vt/Pg8PiYEVFHAQSF8kvm5nKkvniGhSoAxIvEmApGxmpZZP5LNG2W4OmCZr6Bn9n/uyyvfUa/D 8cb3Eu7TtY9bl9xSMf0TntJL4EHFOhMe6iqxHCsPwqIkr5WLjtEDMAZG9n7om88iM+QRmOBebJO+ pHg/hIOfVVz7vEWvUrXfxpFXGrY8m5cmwPhlmQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option:
	Found 2 DNSKEY records for pt
	`pt. 7200 IN DNSKEY ( 257 3 7 AwEAAbpphhprE6WdjgKbW7pqbQOPO75nZTeZ0tESnqGlQzdSrlzgTGfge6oC1NFK+iYfBZqsDt3R gT8Oe5PCe9Im2ZnsU9onP80jKPsCytc3c9daN8dytU2QJGZWOdu2n6V0ef+49zIcW2FgogL2wb+1 FOAFwoMfL4u3EDRiimrppaEPiQThcYo54U3jZSqiE3WKLdsSDupWPb1dTcS3UbvwsC83YYN9jxbU 20RR9XPPniFE8qv9/E3drCTdFzPgwWCQopCHiNwQFN5tcKQFc2U9kl70wy24uvCWAt9E86S/ngy0 FrTYQAiSjpeISq+AaH4F8BTNNkBRiUJoJP/orjI/A/k= ) ; Key ID = 40995`
	`pt. 7200 IN DNSKEY ( 256 3 7 AwEAAb1Ar7cRPhwB69dVEKnQ40pJUzGsz+usD+JytR90nbG+AgK25/J/PNmyRwqyDEC1LyYxsqRo wBdxD1iZowdkZbd/xaR6Whebbbb1DiWQOVLqS20GDm5DZYFfbYlJ6wnWXTMGYWgPOOxOAjIbVPSp 5WFPgjp/RMBl46GlrKavSw4T ) ; Key ID = 21299`
	DNSKEY=40995/SEP is now in the chain-of-trust
	DS=40995/SHA-1 verifies DNSKEY=40995/SEP
	DS=40995/SHA-256 verifies DNSKEY=40995/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pt. 7200 IN RRSIG ( DNSKEY 7 1 7200 20191107000000 20190924000000 40995 pt. MQ8wF3rz96OgMPoYqD2kms4dtS1pxuHIV+gYB+IQR8W+KoQpyJKnlKrBVkToe183qvrVYFWPW8ig y/40bz30KD73SnoNOvIoTzx7Tdyz6xnEzdgH/j1wb/obtCEdTe32mOQmz+I3GpXw9Pro9h4J8S31 D0vt/Pg8PiYEVFHAQSF8kvm5nKkvniGhSoAxIvEmApGxmpZZP5LNG2W4OmCZr6Bn9n/uyyvfUa/D 8cb3Eu7TtY9bl9xSMf0TntJL4EHFOhMe6iqxHCsPwqIkr5WLjtEDMAZG9n7om88iM+QRmOBebJO+ pHg/hIOfVVz7vEWvUrXfxpFXGrY8m5cmwPhlmQ== )`
	RRSIG=40995 and DNSKEY=40995/SEP verifies the DNSKEY RRset
	DNSKEY=21299 is now in the chain-of-trust
	Query to f.dns.pt for andy.pt/A
	Error querying f.dns.pt/2600:2000:3009:0:0:0:0:1 for andy.pt/A: 'IPv6 transport disabled'
	Received 344 bytes from 162.88.45.1
	;; Answer received from 162.88.45.1 (344 bytes) ;; HEADER SECTION ;; id = 12565 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) andy.PT. 7200 IN NS dns2.host-redirect.com. andy.PT. 7200 IN NS dns1.host-redirect.com. andy.PT. 7200 IN DS ( 38422 8 2 a169c0e79fdee96343685771a054428222b466f76584941c236ccd0054dd1740 ) andy.PT. 7200 IN DS 38422 8 1 02d256d50cc182359ba1ec39507eb7ff0b16da59 andy.PT. 7200 IN RRSIG ( DS 7 2 7200 20191018123029 20191008123029 21299 pt. WBv41sdBnviC1OIuvnf7DXPkbh9WEbhEvXtJHvJDrTkBkQ2htJTGd0Q2ZG2nSbShgbDgX4iLTmU/ hqrna3vsF4D+Y+pl2NSkuPX/eu3h2cG5PjQJRMwyQCRd8pQeBR6/tEeFDPObWiV0+KaYMudPldlr X3Not/zsXhTDpq0yq0c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sns-pb.isc.org for andy.pt/DNSKEY
	Error querying sns-pb.isc.org/2001:500:2e:0:0:0:0:1 for andy.pt/DNSKEY: 'IPv6 transport disabled'
	Received 337 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (337 bytes) ;; HEADER SECTION ;; id = 38369 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) andy.pt. 7200 IN NS dns1.host-redirect.com. andy.pt. 7200 IN NS dns2.host-redirect.com. andy.pt. 7200 IN DS 38422 8 1 02d256d50cc182359ba1ec39507eb7ff0b16da59 andy.pt. 7200 IN DS ( 38422 8 2 a169c0e79fdee96343685771a054428222b466f76584941c236ccd0054dd1740 ) andy.pt. 7200 IN RRSIG ( DS 7 2 7200 20191018123029 20191008123029 21299 pt. WBv41sdBnviC1OIuvnf7DXPkbh9WEbhEvXtJHvJDrTkBkQ2htJTGd0Q2ZG2nSbShgbDgX4iLTmU/ hqrna3vsF4D+Y+pl2NSkuPX/eu3h2cG5PjQJRMwyQCRd8pQeBR6/tEeFDPObWiV0+KaYMudPldlr X3Not/zsXhTDpq0yq0c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone andy.pt

andy.pt

	Checking DS between pt and andy.pt
	Query to d.dns.pt for andy.pt/DS
	Error querying d.dns.pt/2a04:6d82:0:0:0:0:0:1 for andy.pt/DS: 'IPv6 transport disabled'
	Received 282 bytes from 185.39.210.1
	;; Answer received from 185.39.210.1 (282 bytes) ;; HEADER SECTION ;; id = 50123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DS ;; ANSWER SECTION (3 records) andy.pt. 7200 IN DS 38422 8 1 02d256d50cc182359ba1ec39507eb7ff0b16da59 andy.pt. 7200 IN DS ( 38422 8 2 a169c0e79fdee96343685771a054428222b466f76584941c236ccd0054dd1740 ) andy.pt. 7200 IN RRSIG ( DS 7 2 7200 20191018123029 20191008123029 21299 pt. WBv41sdBnviC1OIuvnf7DXPkbh9WEbhEvXtJHvJDrTkBkQ2htJTGd0Q2ZG2nSbShgbDgX4iLTmU/ hqrna3vsF4D+Y+pl2NSkuPX/eu3h2cG5PjQJRMwyQCRd8pQeBR6/tEeFDPObWiV0+KaYMudPldlr X3Not/zsXhTDpq0yq0c= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for andy.pt in the pt zone
	DS=38422/SHA-1 has algorithm RSASHA256
	DS=38422/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`andy.pt. 7200 IN RRSIG ( DS 7 2 7200 20191018123029 20191008123029 21299 pt. WBv41sdBnviC1OIuvnf7DXPkbh9WEbhEvXtJHvJDrTkBkQ2htJTGd0Q2ZG2nSbShgbDgX4iLTmU/ hqrna3vsF4D+Y+pl2NSkuPX/eu3h2cG5PjQJRMwyQCRd8pQeBR6/tEeFDPObWiV0+KaYMudPldlr X3Not/zsXhTDpq0yq0c= )`
	RRSIG=21299 and DNSKEY=21299 verifies the DS RRset
	DS=38422/SHA-1 is now in the chain-of-trust
	`andy.pt. 7200 IN DS 38422 8 1 02d256d50cc182359ba1ec39507eb7ff0b16da59`
	`andy.pt. 7200 IN DS ( 38422 8 2 a169c0e79fdee96343685771a054428222b466f76584941c236ccd0054dd1740 )`
	Query to dns2.host-redirect.com for andy.pt/DNSKEY
	Error querying dns2.host-redirect.com/2001:4cc0:4:10:0:0:0:5 for andy.pt/DNSKEY: 'IPv6 transport disabled'
	Received 755 bytes from 194.8.30.2
	;; Answer received from 194.8.30.2 (755 bytes) ;; HEADER SECTION ;; id = 8206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (3 records) andy.pt. 3600 IN DNSKEY ( 257 3 8 AwEAAevmluMtE+zHcD03s/4yItsc0lQut28VTldrN0OwpD1xYpD2K1rCY4q35Funq4AOj2Fi1t5/ DOFBJsGbLKHVCEC7RT5MoF+FT3BblbOF/TIMDVbkdZzGlSaPxJ4hxCRsFQY9FBg0eTSLcjOk2aqd 9Yiyp6visiIaqThqJaK1/h+sbQblroDoNXR6YBxZh6Dd5BqOwad4fvLO3IT+RbPDmzwF5EaK9Och LQdaQxWwuXoUcP/ip6zuWhF8W24Qe7RBY9Jrf/gn57K2udzdxusaw/89aZRIvdFuDezTA2MZ+xGs KYJWlN8RP/N1l560R6nNDblpILxnNifUsiqr/kzV0tU= ) ; Key ID = 38422 andy.pt. 3600 IN RRSIG ( DNSKEY 8 2 3600 20191017000000 20190926000000 38422 andy.pt. dlttImOk8t23NSUK2opLonFpOiLndDnmIhjQ//4mGlXIbBLpP7Vx3Onokh0sBrl3VorWkbDDDAf4 dmfguC4h61fScJ9lQXrUpRE7jUa2LC7/6HRzIWPI3UFNUPd316wSX+72BOHV0ZQ9/anTqC7mudKP K8g46csGyoZKAvLv1B/BWnDL6xQ++HfjH+Exb4SBMyEl+/dE+k76GCCW0FWnvbyBtAJtORHrn/ve jlCgRfRFYlRs35kXtdlFbMOZkx7CqJJoi6MPiRQnshnmHkW8bQ69eLYsJYej7bkDWNudrXYDYpXU ehvHGNXKxTUsK3JvNuIxWfMvBJHhLKckEgZc9w== ) andy.pt. 3600 IN DNSKEY ( 256 3 8 AwEAAYCu1NHK5gh1p/gFhDB0kKnyN/QcIGcpN1nMd3PMjzUtxKM1ydMcQEmjAaRdocpa6V9kGg+O f55W4jsYuaiuf60Zzg8iPaoFnyipQsOpH1Sa0ZSrLdRQ8xYCorvzwRcE91LKhJat0Y4hmnYd3bes VmECqSHAjI3XNbTW+7yZwYcB ) ; Key ID = 36441 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for andy.pt
	`andy.pt. 3600 IN DNSKEY ( 257 3 8 AwEAAevmluMtE+zHcD03s/4yItsc0lQut28VTldrN0OwpD1xYpD2K1rCY4q35Funq4AOj2Fi1t5/ DOFBJsGbLKHVCEC7RT5MoF+FT3BblbOF/TIMDVbkdZzGlSaPxJ4hxCRsFQY9FBg0eTSLcjOk2aqd 9Yiyp6visiIaqThqJaK1/h+sbQblroDoNXR6YBxZh6Dd5BqOwad4fvLO3IT+RbPDmzwF5EaK9Och LQdaQxWwuXoUcP/ip6zuWhF8W24Qe7RBY9Jrf/gn57K2udzdxusaw/89aZRIvdFuDezTA2MZ+xGs KYJWlN8RP/N1l560R6nNDblpILxnNifUsiqr/kzV0tU= ) ; Key ID = 38422`
	`andy.pt. 3600 IN DNSKEY ( 256 3 8 AwEAAYCu1NHK5gh1p/gFhDB0kKnyN/QcIGcpN1nMd3PMjzUtxKM1ydMcQEmjAaRdocpa6V9kGg+O f55W4jsYuaiuf60Zzg8iPaoFnyipQsOpH1Sa0ZSrLdRQ8xYCorvzwRcE91LKhJat0Y4hmnYd3bes VmECqSHAjI3XNbTW+7yZwYcB ) ; Key ID = 36441`
	DNSKEY=38422/SEP is now in the chain-of-trust
	DS=38422/SHA-1 verifies DNSKEY=38422/SEP
	DS=38422/SHA-256 verifies DNSKEY=38422/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`andy.pt. 3600 IN RRSIG ( DNSKEY 8 2 3600 20191017000000 20190926000000 38422 andy.pt. dlttImOk8t23NSUK2opLonFpOiLndDnmIhjQ//4mGlXIbBLpP7Vx3Onokh0sBrl3VorWkbDDDAf4 dmfguC4h61fScJ9lQXrUpRE7jUa2LC7/6HRzIWPI3UFNUPd316wSX+72BOHV0ZQ9/anTqC7mudKP K8g46csGyoZKAvLv1B/BWnDL6xQ++HfjH+Exb4SBMyEl+/dE+k76GCCW0FWnvbyBtAJtORHrn/ve jlCgRfRFYlRs35kXtdlFbMOZkx7CqJJoi6MPiRQnshnmHkW8bQ69eLYsJYej7bkDWNudrXYDYpXU ehvHGNXKxTUsK3JvNuIxWfMvBJHhLKckEgZc9w== )`
	RRSIG=38422 and DNSKEY=38422/SEP verifies the DNSKEY RRset
	DNSKEY=36441 is now in the chain-of-trust
	Query to dns2.host-redirect.com for andy.pt/A
	Received 219 bytes from 194.8.30.2
	;; Answer received from 194.8.30.2 (219 bytes) ;; HEADER SECTION ;; id = 58611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (2 records) andy.pt. 300 IN RRSIG ( A 8 2 300 20191017000000 20190926000000 36441 andy.pt. STwhwJvrMfZrOctiaeLaCvpnDaLnzg7tmR6ZcnphSmWkDLCqEdJVldcPlKwOuLad5Vn9k1f8JHnj 80aqykxY+8zMCx9iePLRzz1xeduqFDs0UK6belYjacDdFRuIv+zIcmXPQiKqQXtEV/DVvmJ3y7JS Sx0dUSwl7JbLATk67hc= ) andy.pt. 300 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	andy.pt is authoritative for andy.pt
	Found RRSIG signed by andy.pt zone
	Query to dns1.host-redirect.com for andy.pt/SOA
	Received 272 bytes from 91.198.47.1
	;; Answer received from 91.198.47.1 (272 bytes) ;; HEADER SECTION ;; id = 8760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (2 records) andy.pt. 86400 IN SOA ( dns1.host-redirect.com. hostmaster.andy.pt. 2018020605 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 3600 ;minimum ) andy.pt. 86400 IN RRSIG ( SOA 8 2 86400 20191017000000 20190926000000 36441 andy.pt. GIwTjlaRH1AoJGAIcm6T72yJHUGC5evRLmPhHVqHlK6oe/0BgB+GGepCCB9gt38YjgNeaAlhoHak iFtd1AzW+RS+TYIf4zlCdnoTjgNjpKo7Gno2RJKCVHdKvvfDWECOg5a1K5AJOY9uLh71sGmmUdKp 7voWsRB19bBxhvEdN1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to dns2.host-redirect.com for andy.pt/SOA
	Received 272 bytes from 194.8.30.2
	;; Answer received from 194.8.30.2 (272 bytes) ;; HEADER SECTION ;; id = 40100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (2 records) andy.pt. 86400 IN SOA ( dns1.host-redirect.com. hostmaster.andy.pt. 2018020605 ;serial 3600 ;refresh 600 ;retry 604800 ;expire 3600 ;minimum ) andy.pt. 86400 IN RRSIG ( SOA 8 2 86400 20191017000000 20190926000000 36441 andy.pt. GIwTjlaRH1AoJGAIcm6T72yJHUGC5evRLmPhHVqHlK6oe/0BgB+GGepCCB9gt38YjgNeaAlhoHak iFtd1AzW+RS+TYIf4zlCdnoTjgNjpKo7Gno2RJKCVHdKvvfDWECOg5a1K5AJOY9uLh71sGmmUdKp 7voWsRB19bBxhvEdN1Y= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to dns2.host-redirect.com for andy.pt/A
	Error querying dns2.host-redirect.com/2001:4cc0:4:10:0:0:0:5 for andy.pt/A: 'IPv6 transport disabled'
	Received 219 bytes from 194.8.30.2
	;; Answer received from 194.8.30.2 (219 bytes) ;; HEADER SECTION ;; id = 31219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (2 records) andy.pt. 300 IN RRSIG ( A 8 2 300 20191017000000 20190926000000 36441 andy.pt. STwhwJvrMfZrOctiaeLaCvpnDaLnzg7tmR6ZcnphSmWkDLCqEdJVldcPlKwOuLad5Vn9k1f8JHnj 80aqykxY+8zMCx9iePLRzz1xeduqFDs0UK6belYjacDdFRuIv+zIcmXPQiKqQXtEV/DVvmJ3y7JS Sx0dUSwl7JbLATk67hc= ) andy.pt. 300 IN A 52.178.164.235 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	andy.pt A RR has value 52.178.164.235
	Found 1 RRSIGs over A RRset
	`andy.pt. 300 IN RRSIG ( A 8 2 300 20191017000000 20190926000000 36441 andy.pt. STwhwJvrMfZrOctiaeLaCvpnDaLnzg7tmR6ZcnphSmWkDLCqEdJVldcPlKwOuLad5Vn9k1f8JHnj 80aqykxY+8zMCx9iePLRzz1xeduqFDs0UK6belYjacDdFRuIv+zIcmXPQiKqQXtEV/DVvmJ3y7JS Sx0dUSwl7JbLATk67hc= )`
	RRSIG=36441 and DNSKEY=36441 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test andy.pt at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: