DNSSEC Analyzer - archido.nl

Domain Name:

Time: 2022-01-25 14:42:09 UTC, NTP stratum 16

Analyzing DNSSEC problems for archido.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 7201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to g.root-servers.net for archido.nl/A
	Received 566 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (566 octets) ;; HEADER SECTION ;; id = 42361 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . bzux6U8YkvUyj4DIIFa2bOjRksWFzOzXuzd2V807GrdLPz4dvDpD2tpEeEp7zsQOLftzt2FLhGah V4Z5COFBvcyzyDmN2pxPtf5msa9VqHKHrvfUZnADJ6LZd8MFD7xbKTJii2wII9aKbMUxDSd5ZRSA 02Te3d4Z5+YBNG5t2sxzw8ZYG0O/SYMZDihNe17jWxFavZaF+bXHdXioXHw1qSP+5zfrQFSww8Ro A1ozvUoOZcwpcYftuoJhYajLoZxFP98wy0YknpC5zFFPc7k5/V3OCtfLa4ZqMzTsaXpCxi2sSWZ8 GkR3uuVQcxBxeAzCtXvbd1AsBplBxAy26s5R0Q== ) ;; ADDITIONAL SECTION (7 records) ns3.dns.nl. 172800 IN A 194.0.25.24 ns2.dns.nl. 172800 IN A 194.146.106.42 ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.root-servers.net for nl/DNSKEY
	Received 556 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (556 octets) ;; HEADER SECTION ;; id = 40074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . bzux6U8YkvUyj4DIIFa2bOjRksWFzOzXuzd2V807GrdLPz4dvDpD2tpEeEp7zsQOLftzt2FLhGah V4Z5COFBvcyzyDmN2pxPtf5msa9VqHKHrvfUZnADJ6LZd8MFD7xbKTJii2wII9aKbMUxDSd5ZRSA 02Te3d4Z5+YBNG5t2sxzw8ZYG0O/SYMZDihNe17jWxFavZaF+bXHdXioXHw1qSP+5zfrQFSww8Ro A1ozvUoOZcwpcYftuoJhYajLoZxFP98wy0YknpC5zFFPc7k5/V3OCtfLa4ZqMzTsaXpCxi2sSWZ8 GkR3uuVQcxBxeAzCtXvbd1AsBplBxAy26s5R0Q== ) ;; ADDITIONAL SECTION (7 records) ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to k.root-servers.net for nl/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (366 octets) ;; HEADER SECTION ;; id = 58003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . bzux6U8YkvUyj4DIIFa2bOjRksWFzOzXuzd2V807GrdLPz4dvDpD2tpEeEp7zsQOLftzt2FLhGah V4Z5COFBvcyzyDmN2pxPtf5msa9VqHKHrvfUZnADJ6LZd8MFD7xbKTJii2wII9aKbMUxDSd5ZRSA 02Te3d4Z5+YBNG5t2sxzw8ZYG0O/SYMZDihNe17jWxFavZaF+bXHdXioXHw1qSP+5zfrQFSww8Ro A1ozvUoOZcwpcYftuoJhYajLoZxFP98wy0YknpC5zFFPc7k5/V3OCtfLa4ZqMzTsaXpCxi2sSWZ8 GkR3uuVQcxBxeAzCtXvbd1AsBplBxAy26s5R0Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . bzux6U8YkvUyj4DIIFa2bOjRksWFzOzXuzd2V807GrdLPz4dvDpD2tpEeEp7zsQOLftzt2FLhGah V4Z5COFBvcyzyDmN2pxPtf5msa9VqHKHrvfUZnADJ6LZd8MFD7xbKTJii2wII9aKbMUxDSd5ZRSA 02Te3d4Z5+YBNG5t2sxzw8ZYG0O/SYMZDihNe17jWxFavZaF+bXHdXioXHw1qSP+5zfrQFSww8Ro A1ozvUoOZcwpcYftuoJhYajLoZxFP98wy0YknpC5zFFPc7k5/V3OCtfLa4ZqMzTsaXpCxi2sSWZ8 GkR3uuVQcxBxeAzCtXvbd1AsBplBxAy26s5R0Q== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (745 octets) ;; HEADER SECTION ;; id = 407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220208093603 20220125103835 34112 nl. Yc52WeFDRqETFMqKsy3MI/TlZaWGU0B1gC+IZ+CDp+GZSQKELZ0dGTT+Kv195NZWeMIp2U1lYy9c iKIqlmfJQ5kR8Bb6YhNLwVEjMYB54YIH5j0P9eU0V0zGsaO2BZkoWGctM7GyYHoSH47YxtWs0SnM YMnDVUBYeqxnOJ5UESWqJYJIauaknNRiW/0N+yRKE8aVMB3f4/JivBWhdr8N+Q4SV+HEYR2NMbhD H+bHpJVsUp4pU7Edb8zdHjcxhn/YgLx/0a3lHz1A4OlIX7fkOq3W+CMNjr73XgBkoyHCTqbwQ5dT 0quP2BEAjegPYh1TXdS+XCOsd+mCIIooJfww1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220208093603 20220125103835 34112 nl. Yc52WeFDRqETFMqKsy3MI/TlZaWGU0B1gC+IZ+CDp+GZSQKELZ0dGTT+Kv195NZWeMIp2U1lYy9c iKIqlmfJQ5kR8Bb6YhNLwVEjMYB54YIH5j0P9eU0V0zGsaO2BZkoWGctM7GyYHoSH47YxtWs0SnM YMnDVUBYeqxnOJ5UESWqJYJIauaknNRiW/0N+yRKE8aVMB3f4/JivBWhdr8N+Q4SV+HEYR2NMbhD H+bHpJVsUp4pU7Edb8zdHjcxhn/YgLx/0a3lHz1A4OlIX7fkOq3W+CMNjr73XgBkoyHCTqbwQ5dT 0quP2BEAjegPYh1TXdS+XCOsd+mCIIooJfww1g== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=31851 is now in the chain-of-trust
	Query to ns1.dns.nl for archido.nl/A
	Received 303 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (303 octets) ;; HEADER SECTION ;; id = 37792 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) archido.nl. 3600 IN NS bob.ns.cloudflare.com. archido.nl. 3600 IN NS kiki.ns.cloudflare.com. archido.nl. 3600 IN DS ( 2371 13 2 4602d9f1827c184d4ccd6d2b282d60e553132e9f5b94189bf18e9d5f1231cf59 ) archido.nl. 3600 IN RRSIG ( DS 8 2 3600 20220203103502 20220120073955 31851 nl. W4RX+D1tFg8Sh/6DUFq8K+iaSM0Ma5unuWqx1W7EyykmszD9o8r6NYbTeIbM/V4zfmyK8MO5wW0+ 1USj0ASZqDKU+mU7b5R39YuOzFMITERXpuDOMMONo2mbpoPSzmWjAAQmcjdKb+sM0USrWAILU4Z5 TixYW3iOHSj54bVkKbk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.dns.nl for archido.nl/DNSKEY
	Received 303 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (303 octets) ;; HEADER SECTION ;; id = 31391 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) archido.nl. 3600 IN NS bob.ns.cloudflare.com. archido.nl. 3600 IN NS kiki.ns.cloudflare.com. archido.nl. 3600 IN DS ( 2371 13 2 4602d9f1827c184d4ccd6d2b282d60e553132e9f5b94189bf18e9d5f1231cf59 ) archido.nl. 3600 IN RRSIG ( DS 8 2 3600 20220203103502 20220120073955 31851 nl. W4RX+D1tFg8Sh/6DUFq8K+iaSM0Ma5unuWqx1W7EyykmszD9o8r6NYbTeIbM/V4zfmyK8MO5wW0+ 1USj0ASZqDKU+mU7b5R39YuOzFMITERXpuDOMMONo2mbpoPSzmWjAAQmcjdKb+sM0USrWAILU4Z5 TixYW3iOHSj54bVkKbk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone archido.nl

archido.nl

	Checking DS between nl and archido.nl
	Query to ns1.dns.nl for archido.nl/DS
	Received 249 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (249 octets) ;; HEADER SECTION ;; id = 27833 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN DS ;; ANSWER SECTION (2 records) archido.nl. 3600 IN DS ( 2371 13 2 4602d9f1827c184d4ccd6d2b282d60e553132e9f5b94189bf18e9d5f1231cf59 ) archido.nl. 3600 IN RRSIG ( DS 8 2 3600 20220203103502 20220120073955 31851 nl. W4RX+D1tFg8Sh/6DUFq8K+iaSM0Ma5unuWqx1W7EyykmszD9o8r6NYbTeIbM/V4zfmyK8MO5wW0+ 1USj0ASZqDKU+mU7b5R39YuOzFMITERXpuDOMMONo2mbpoPSzmWjAAQmcjdKb+sM0USrWAILU4Z5 TixYW3iOHSj54bVkKbk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for archido.nl in the nl zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`archido.nl. 3600 IN RRSIG ( DS 8 2 3600 20220203103502 20220120073955 31851 nl. W4RX+D1tFg8Sh/6DUFq8K+iaSM0Ma5unuWqx1W7EyykmszD9o8r6NYbTeIbM/V4zfmyK8MO5wW0+ 1USj0ASZqDKU+mU7b5R39YuOzFMITERXpuDOMMONo2mbpoPSzmWjAAQmcjdKb+sM0USrWAILU4Z5 TixYW3iOHSj54bVkKbk= )`
	RRSIG=31851 and DNSKEY=31851 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`archido.nl. 3600 IN DS ( 2371 13 2 4602d9f1827c184d4ccd6d2b282d60e553132e9f5b94189bf18e9d5f1231cf59 )`
	Query to kiki.ns.cloudflare.com for archido.nl/DNSKEY
	Received 305 bytes from 172.64.32.180
	;; Response received from 172.64.32.180 (305 octets) ;; HEADER SECTION ;; id = 16515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN DNSKEY ;; ANSWER SECTION (3 records) archido.nl. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 archido.nl. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 archido.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220313214000 20220111214000 2371 archido.nl. ESpk3B/Vh/rbLraDisQZqIEbUVTOhryqzV9n+PScDhKonqTuAo4zlKGtkguypwXTCRIIRFgIz0nu jykqOOH+mg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for archido.nl
	`archido.nl. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`archido.nl. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`archido.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220313214000 20220111214000 2371 archido.nl. ESpk3B/Vh/rbLraDisQZqIEbUVTOhryqzV9n+PScDhKonqTuAo4zlKGtkguypwXTCRIIRFgIz0nu jykqOOH+mg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to bob.ns.cloudflare.com for archido.nl/A
	Received 161 bytes from 108.162.193.104
	;; Response received from 108.162.193.104 (161 octets) ;; HEADER SECTION ;; id = 64594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (2 records) archido.nl. 300 IN A 84.247.9.186 archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. e6YDvdByC5nfFIpegxw2H1WCpZcuj7hLMzJnKuPCTfmpXVvHChwqMR61r5kSNPnWx3l8/L0vMZAx LJ2xkLR5vA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	bob.ns.cloudflare.com is authoritative for archido.nl
	Found RRSIG signed by archido.nl zone
	Query to kiki.ns.cloudflare.com for archido.nl/SOA
	Received 206 bytes from 172.64.32.180
	;; Response received from 172.64.32.180 (206 octets) ;; HEADER SECTION ;; id = 29360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN SOA ;; ANSWER SECTION (2 records) archido.nl. 3600 IN SOA ( bob.ns.cloudflare.com. dns.cloudflare.com. 2267509289 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) archido.nl. 3600 IN RRSIG ( SOA 13 2 3600 20220126154210 20220124134210 34505 archido.nl. K6PLf8zk2V5zvpC0QCmB5sWpPSYOrYYECt7bho69W+Wj4Eg/MSSLgdkHQCc4wrdg34ixidn/dJdB QOnQ//BkkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to bob.ns.cloudflare.com for archido.nl/A
	Received 161 bytes from 108.162.193.104
	;; Response received from 108.162.193.104 (161 octets) ;; HEADER SECTION ;; id = 3544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (2 records) archido.nl. 300 IN A 84.247.9.186 archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. hkGPr0hKbmwdJgAesyLHyZDs+jj8x22oaEV6+QVWW7xKGElv1ILjChrRujPFo9nWVFsKtkh7vZce CrGhwn6oyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	archido.nl A RR has value 84.247.9.186
	Found 1 RRSIGs over A RRset
	`archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. hkGPr0hKbmwdJgAesyLHyZDs+jj8x22oaEV6+QVWW7xKGElv1ILjChrRujPFo9nWVFsKtkh7vZce CrGhwn6oyg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

archido.nl

	Query to kiki.ns.cloudflare.com for archido.nl/A
	Received 161 bytes from 173.245.58.180
	;; Response received from 173.245.58.180 (161 octets) ;; HEADER SECTION ;; id = 3538 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (2 records) archido.nl. 300 IN A 84.247.9.186 archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. YgZr3PkCNcawBOmBL4ObmX9dIByoAq7kpDKB/L+xKV1FFdg7fIkuIaxZuFzyCUHT2ip0Hi1cfRGb cWeEuOY/uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	kiki.ns.cloudflare.com is authoritative for archido.nl
	Found RRSIG signed by archido.nl zone
	Query to kiki.ns.cloudflare.com for archido.nl/A
	Received 161 bytes from 108.162.192.180
	;; Response received from 108.162.192.180 (161 octets) ;; HEADER SECTION ;; id = 10407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; archido.nl. IN A ;; ANSWER SECTION (2 records) archido.nl. 300 IN A 84.247.9.186 archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. FQriQV737knnTwHAwXH3660wEi9k1H8bdasyXjvF1r3qMiUw3+nyLhW7odyOwofVyiIafIw3N+F9 vSqC7pSFbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	archido.nl A RR has value 84.247.9.186
	Found 1 RRSIGs over A RRset
	`archido.nl. 300 IN RRSIG ( A 13 2 300 20220126154210 20220124134210 34505 archido.nl. FQriQV737knnTwHAwXH3660wEi9k1H8bdasyXjvF1r3qMiUw3+nyLhW7odyOwofVyiIafIw3N+F9 vSqC7pSFbQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test archido.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: