DNSSEC Analyzer - blog.cscholz.io

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-03-26 18:22:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for blog.cscholz.io

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (1139 bytes) ;; HEADER SECTION ;; id = 34407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=25266 is now in the chain-of-trust
	Query to g.root-servers.net for blog.cscholz.io/A
	Received 811 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (811 bytes) ;; HEADER SECTION ;; id = 16832 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS b0.nic.io. io. 172800 IN NS c0.nic.io. io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS ns-a1.io. io. 172800 IN NS ns-a3.io. io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20190408170000 20190326160000 16749 . O5lXe8Fr7ss7Tp/975QuP9o31CdP40Hxw9m249au0j+kXsobs6ml+4kpqZpfxXyAvhQOc5mMBNIG 1X9TbIigRnNjiMwEN9HmPkW5d/yUYPeh7aZHlSLsW5a9Wjc5S0L1V16N3jxGEkWn131ybo+yzQNK ATBN4PVaHFnGnsqopRuQRuuPBJ86OcJZ9Reyj1jpUq8MAJrdXFUoiAFZ6yWwkyiv0F16tQOgFHd2 gZYo8W7wQEwJnfkICdZJ+ePu3IxazpGZM2L7ZP939m5YpwUuLCSAafY8Cg/p4naYMaD+2xjBGalT hLa9/PHaxfQxuoUj2sj+/jORdFg2TaZb92Te8g== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a2.nic.io. 172800 IN A 65.22.163.17 b0.nic.io. 172800 IN A 65.22.161.17 c0.nic.io. 172800 IN A 65.22.162.17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a3.io. 172800 IN A 74.116.178.1 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for io/DNSKEY
	Received 798 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (798 bytes) ;; HEADER SECTION ;; id = 19618 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS c0.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS a0.nic.io. io. 172800 IN NS ns-a1.io. io. 172800 IN NS ns-a3.io. io. 172800 IN NS a2.nic.io. io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN RRSIG ( DS 8 1 86400 20190408170000 20190326160000 16749 . O5lXe8Fr7ss7Tp/975QuP9o31CdP40Hxw9m249au0j+kXsobs6ml+4kpqZpfxXyAvhQOc5mMBNIG 1X9TbIigRnNjiMwEN9HmPkW5d/yUYPeh7aZHlSLsW5a9Wjc5S0L1V16N3jxGEkWn131ybo+yzQNK ATBN4PVaHFnGnsqopRuQRuuPBJ86OcJZ9Reyj1jpUq8MAJrdXFUoiAFZ6yWwkyiv0F16tQOgFHd2 gZYo8W7wQEwJnfkICdZJ+ePu3IxazpGZM2L7ZP939m5YpwUuLCSAafY8Cg/p4naYMaD+2xjBGalT hLa9/PHaxfQxuoUj2sj+/jORdFg2TaZb92Te8g== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN A 65.22.163.17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN A 65.22.161.17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN A 65.22.162.17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ns-a3.io. 172800 IN A 74.116.178.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone io

	Checking DS between . and io
	Query to k.root-servers.net for io/DS
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for io/DS: 'IPv6 transport disabled'
	Received 450 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (450 bytes) ;; HEADER SECTION ;; id = 19458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DS ;; ANSWER SECTION (4 records) io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN RRSIG ( DS 8 1 86400 20190408170000 20190326160000 16749 . O5lXe8Fr7ss7Tp/975QuP9o31CdP40Hxw9m249au0j+kXsobs6ml+4kpqZpfxXyAvhQOc5mMBNIG 1X9TbIigRnNjiMwEN9HmPkW5d/yUYPeh7aZHlSLsW5a9Wjc5S0L1V16N3jxGEkWn131ybo+yzQNK ATBN4PVaHFnGnsqopRuQRuuPBJ86OcJZ9Reyj1jpUq8MAJrdXFUoiAFZ6yWwkyiv0F16tQOgFHd2 gZYo8W7wQEwJnfkICdZJ+ePu3IxazpGZM2L7ZP939m5YpwUuLCSAafY8Cg/p4naYMaD+2xjBGalT hLa9/PHaxfQxuoUj2sj+/jORdFg2TaZb92Te8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for io in the . zone
	DS=57355/SHA-256 has algorithm RSASHA256
	DS=64744/SHA-256 has algorithm RSASHA256
	DS=57355/SHA-1 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`io. 86400 IN RRSIG ( DS 8 1 86400 20190408170000 20190326160000 16749 . O5lXe8Fr7ss7Tp/975QuP9o31CdP40Hxw9m249au0j+kXsobs6ml+4kpqZpfxXyAvhQOc5mMBNIG 1X9TbIigRnNjiMwEN9HmPkW5d/yUYPeh7aZHlSLsW5a9Wjc5S0L1V16N3jxGEkWn131ybo+yzQNK ATBN4PVaHFnGnsqopRuQRuuPBJ86OcJZ9Reyj1jpUq8MAJrdXFUoiAFZ6yWwkyiv0F16tQOgFHd2 gZYo8W7wQEwJnfkICdZJ+ePu3IxazpGZM2L7ZP939m5YpwUuLCSAafY8Cg/p4naYMaD+2xjBGalT hLa9/PHaxfQxuoUj2sj+/jORdFg2TaZb92Te8g== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=57355/SHA-256 is now in the chain-of-trust
	DS=64744/SHA-256 is now in the chain-of-trust
	`io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 )`
	`io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 )`
	`io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9`
	Query to ns-a3.io for io/DNSKEY
	Received 907 bytes from 74.116.178.1
	;; Answer received from 74.116.178.1 (907 bytes) ;; HEADER SECTION ;; id = 25522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (4 records) io. 86400 IN DNSKEY ( 256 3 8 AwEAAfw/uyPLhwqWCUaZhJeJRamcS3dnGaDyMYzQw2U6cjDOnn65qER++Mw/+2rzLg0UtLSJ9rrI bI0lHdSXbGyIL/7wD+K+HOJbo9EPO1QosvrLypLDCp0avv3EK4O6njrYdQQojNTjy4bHiD2bYMH3 8+/hHjEM5krbEyq0I9fwBF39 ) ; Key ID = 11766 io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355 io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190415151630 20190325141630 57355 io. x9RpitNcuXdNv6EaNtcJMlXXK2euXwQIZ1q6k3a860VPbossaYgBZd4pdvqg/pdVrsFRCLrEJEjP aemXRdY+VVSXVl3sc85j9dwNhy40C746ddWmrId8o2grQbavNOueUdwF287aKoHaR3li3Jh6denw cpS9Jf26mxpbdshjAfn1i1l3PolGGcvYES8fJ/shFQrWQVldWaAtajd5R/aNswsAl3KF4frAB1Al gw40jQyvfmOQVHtUzepD1sw1f667dsU8iArM9CCcJhpisFBSIg8+7G3QnwZhK5Y7PH+Ufr8ck5E8 rhERIAefhENdgveveIeNP2UJhCTby4ppQiEugg== ) io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190415151630 20190325141630 11766 io. qxdq/ZHVwq1vC1yGqG/M3uHarjHoTw6kwBxBeF7rPKPRu0GT/S+CTEvXT5rxzzD5vfFt+h9xxBSp HHxJtXMvecCmBRFY7ItMz73Br5o9BgqqqlZ+dRso7u2dcvj69FmJ5C2j5uyyGWpmbqmeSi8oI+kB BWKPlNe4Ayzf1TtfAf0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for io
	`io. 86400 IN DNSKEY ( 256 3 8 AwEAAfw/uyPLhwqWCUaZhJeJRamcS3dnGaDyMYzQw2U6cjDOnn65qER++Mw/+2rzLg0UtLSJ9rrI bI0lHdSXbGyIL/7wD+K+HOJbo9EPO1QosvrLypLDCp0avv3EK4O6njrYdQQojNTjy4bHiD2bYMH3 8+/hHjEM5krbEyq0I9fwBF39 ) ; Key ID = 11766`
	`io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355`
	DNSKEY=57355/SEP is now in the chain-of-trust
	DS=57355/SHA-256 verifies DNSKEY=57355/SEP
	DS=57355/SHA-1 verifies DNSKEY=57355/SEP
	DS=64744/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190415151630 20190325141630 57355 io. x9RpitNcuXdNv6EaNtcJMlXXK2euXwQIZ1q6k3a860VPbossaYgBZd4pdvqg/pdVrsFRCLrEJEjP aemXRdY+VVSXVl3sc85j9dwNhy40C746ddWmrId8o2grQbavNOueUdwF287aKoHaR3li3Jh6denw cpS9Jf26mxpbdshjAfn1i1l3PolGGcvYES8fJ/shFQrWQVldWaAtajd5R/aNswsAl3KF4frAB1Al gw40jQyvfmOQVHtUzepD1sw1f667dsU8iArM9CCcJhpisFBSIg8+7G3QnwZhK5Y7PH+Ufr8ck5E8 rhERIAefhENdgveveIeNP2UJhCTby4ppQiEugg== )`
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190415151630 20190325141630 11766 io. qxdq/ZHVwq1vC1yGqG/M3uHarjHoTw6kwBxBeF7rPKPRu0GT/S+CTEvXT5rxzzD5vfFt+h9xxBSp HHxJtXMvecCmBRFY7ItMz73Br5o9BgqqqlZ+dRso7u2dcvj69FmJ5C2j5uyyGWpmbqmeSi8oI+kB BWKPlNe4Ayzf1TtfAf0= )`
	RRSIG=57355 and DNSKEY=57355/SEP verifies the DNSKEY RRset
	RRSIG=11766 and DNSKEY=11766 verifies the DNSKEY RRset
	DNSKEY=11766 is now in the chain-of-trust
	Query to c0.nic.io for blog.cscholz.io/A
	Error querying c0.nic.io/2a01:8840:a0:0:0:0:0:17 for blog.cscholz.io/A: 'IPv6 transport disabled'
	Received 299 bytes from 65.22.162.17
	;; Answer received from 65.22.162.17 (299 bytes) ;; HEADER SECTION ;; id = 749 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS mx02.o-o-s.de. cscholz.io. 86400 IN NS ns1.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20190415151630 20190325141630 11766 io. iGA7q4FGJbmvFCgMHppic3s9c1GOh7n+JkPFWAHrkrFUGXrFDb8EVZmB6qTsTlbeHF7J+MEtLNJG HEBGhu6bMyiWKs6h3KkCvT9OVq/aReRJQ2X4pb7lntrhhp9b4/c9ol7qCnErnyy4lZNmzilJ8YpG Lxr439Cit81sIVkYQYs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-a3.io for cscholz.io/DNSKEY
	Received 302 bytes from 74.116.178.1
	;; Answer received from 74.116.178.1 (302 bytes) ;; HEADER SECTION ;; id = 20143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS ns1.o-o-s.de. cscholz.io. 86400 IN NS mx02.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20190415151630 20190325141630 11766 io. iGA7q4FGJbmvFCgMHppic3s9c1GOh7n+JkPFWAHrkrFUGXrFDb8EVZmB6qTsTlbeHF7J+MEtLNJG HEBGhu6bMyiWKs6h3KkCvT9OVq/aReRJQ2X4pb7lntrhhp9b4/c9ol7qCnErnyy4lZNmzilJ8YpG Lxr439Cit81sIVkYQYs= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cscholz.io

cscholz.io

	Checking DS between io and cscholz.io
	Query to a2.nic.io for cscholz.io/DS
	Received 249 bytes from 65.22.163.17
	;; Answer received from 65.22.163.17 (249 bytes) ;; HEADER SECTION ;; id = 39079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DS ;; ANSWER SECTION (2 records) cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20190415151630 20190325141630 11766 io. iGA7q4FGJbmvFCgMHppic3s9c1GOh7n+JkPFWAHrkrFUGXrFDb8EVZmB6qTsTlbeHF7J+MEtLNJG HEBGhu6bMyiWKs6h3KkCvT9OVq/aReRJQ2X4pb7lntrhhp9b4/c9ol7qCnErnyy4lZNmzilJ8YpG Lxr439Cit81sIVkYQYs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cscholz.io in the io zone
	DS=5650/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20190415151630 20190325141630 11766 io. iGA7q4FGJbmvFCgMHppic3s9c1GOh7n+JkPFWAHrkrFUGXrFDb8EVZmB6qTsTlbeHF7J+MEtLNJG HEBGhu6bMyiWKs6h3KkCvT9OVq/aReRJQ2X4pb7lntrhhp9b4/c9ol7qCnErnyy4lZNmzilJ8YpG Lxr439Cit81sIVkYQYs= )`
	RRSIG=11766 and DNSKEY=11766 verifies the DS RRset
	DS=5650/SHA-256 is now in the chain-of-trust
	`cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 )`
	Query to mx02.o-o-s.de for cscholz.io/DNSKEY
	Received 1187 bytes from 194.55.14.102
	;; Answer received from 194.55.14.102 (1187 bytes) ;; HEADER SECTION ;; id = 21374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (4 records) cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049 cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650 cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210308000000 20190308051845 5650 cscholz.io. SSvv0e3wdI8IPA4Co7w6JBYIWjeESoJZT6RB4t/K3aiDZbzzsDnwYXZka0nUzeJCAmyT5WiSRcgn FzUbj82VzhDwqNeizg99wLfwJxBmCDL3IYeb+QYFIqQXtHVRNHal3Xp9DELOJQyo8BWpQqcf9Qq7 5ougpZU0dAJUkL9mh4SWcdNTPpbvmY9uDqF8GL67LlgJOcFOh7D7wuDG6j9EcgfB7HA9/Rewtnri 2a+fqwapOcLdHIIduEkzgRjP5dI+cSq3WLXXXKMRe8JM3vq1axJD9IM8CWScHBsKhWbFYBi46kL0 oVHe7kEu+Bpd8dBRu0IHX5edVcLYZAgz1p1sCA== ) cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210308000000 20190308051845 23049 cscholz.io. Ghv+/WPbjxliFcnPNqpgHb5P94u+H7qc3fOAgwTP1JfmX/yDo32PKI9zxTCN//bVwwab7dKNUXJk nbmmwqU+CxvKlZlUZtbVAWRY1SQajZw7/LxVZXlIjfIi1vG5U7fICjJzOuAZX+O6phIG7cFStksZ kV801XYh3V5oQumPAvIAc87JHqr2GKFOorhml9zqAlkDEjzs4ta4f9VVxoM4ZGf9Dxnb2I6YREhz oaqNbPKJ+Q/7FcjSEfm1Rc0DRJlykMkJhxtnuL1W/8my8Cqp8qjYuIymZJfC5Pp63ACgwErqmW1A geyR7Qu4u1udXMs/I1MvpwL7DGDhemc12YNuuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cscholz.io
	`cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049`
	`cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650`
	DNSKEY=5650/SEP is now in the chain-of-trust
	DS=5650/SHA-256 verifies DNSKEY=5650/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210308000000 20190308051845 5650 cscholz.io. SSvv0e3wdI8IPA4Co7w6JBYIWjeESoJZT6RB4t/K3aiDZbzzsDnwYXZka0nUzeJCAmyT5WiSRcgn FzUbj82VzhDwqNeizg99wLfwJxBmCDL3IYeb+QYFIqQXtHVRNHal3Xp9DELOJQyo8BWpQqcf9Qq7 5ougpZU0dAJUkL9mh4SWcdNTPpbvmY9uDqF8GL67LlgJOcFOh7D7wuDG6j9EcgfB7HA9/Rewtnri 2a+fqwapOcLdHIIduEkzgRjP5dI+cSq3WLXXXKMRe8JM3vq1axJD9IM8CWScHBsKhWbFYBi46kL0 oVHe7kEu+Bpd8dBRu0IHX5edVcLYZAgz1p1sCA== )`
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210308000000 20190308051845 23049 cscholz.io. Ghv+/WPbjxliFcnPNqpgHb5P94u+H7qc3fOAgwTP1JfmX/yDo32PKI9zxTCN//bVwwab7dKNUXJk nbmmwqU+CxvKlZlUZtbVAWRY1SQajZw7/LxVZXlIjfIi1vG5U7fICjJzOuAZX+O6phIG7cFStksZ kV801XYh3V5oQumPAvIAc87JHqr2GKFOorhml9zqAlkDEjzs4ta4f9VVxoM4ZGf9Dxnb2I6YREhz oaqNbPKJ+Q/7FcjSEfm1Rc0DRJlykMkJhxtnuL1W/8my8Cqp8qjYuIymZJfC5Pp63ACgwErqmW1A geyR7Qu4u1udXMs/I1MvpwL7DGDhemc12YNuuA== )`
	RRSIG=5650 and DNSKEY=5650/SEP verifies the DNSKEY RRset
	RRSIG=23049 and DNSKEY=23049 verifies the DNSKEY RRset
	DNSKEY=23049 is now in the chain-of-trust
	Query to mx02.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 194.55.14.102
	;; Answer received from 194.55.14.102 (358 bytes) ;; HEADER SECTION ;; id = 50863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 194.55.14.102 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20210308000000 20190308051845 23049 cscholz.io. Zb24HndXfjoJDDnpH9aaAgzKUklC400zgcKLJQau4prd8/vhtb2fTA+IhTqrHp4rSBYNh716qHLC N9ZwYhjcl1yz0gr+CkdCq5hm3LHxRKJw9gPBzj39ivGCxol9VpPnjtzaJOmMtBtRm4d4tCj8Pj7w UkaDVGBNTWnb0K0kDBYxokoPESi3/AEWdq6m9YHabVFx5Z9p4I5ba4AOLqt4Dz1SZF+TA2g7TbnI L/W4SbHUz2G8qrO6cf0ptvXcge4j3RVaNal53983NkxB0yK2dJt78O/RVBhduhaqbtihJ73aYuZy GUJjsGFJEFgTEVmZFLhsNzDanQnIRJEaJrzB9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cscholz.io is authoritative for blog.cscholz.io
	Query to ns1.o-o-s.de for blog.cscholz.io/DNSKEY
	Received 749 bytes from 37.24.77.127
	;; Answer received from 37.24.77.127 (749 bytes) ;; HEADER SECTION ;; id = 25264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 60 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2019030803 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 60 IN RRSIG ( SOA 8 2 2560 20210308000000 20190308051845 23049 cscholz.io. oIUBqLSraWLORDWaCj8wNx5s2lY+D0fBcor4B4Mr4DhsX+oQa+dupJ7MIVXyUs1qzKELT78b+ZHK GlF76o1yFKLS1NZfg5XWNzU85k0WtkMHnLSSA62OF5pnbjQyr9KqUrX2cWT7ypwidZI7CD9j/xrd VjXtPxUwRW0RgVeMlG0jRJwOAg/iHNKWcKTjIzZleZPSgqLkFEr4V/wQjigprgXJc1jbVbUAsaWL s3SKSI6jZICpRDpYOxzPLM0NKAAfDEkxB4ZbjW7S0vjpS/I/KydrhO19W1sTTPGSqnDCEIRv+BZl 3DspneFVIlccN6K8pt2LZMsnZmwVD4Ffq1DqLg== ) blog.cscholz.io. 60 IN NSEC _443._tcp.blog.cscholz.io. A RRSIG NSEC CAA blog.cscholz.io. 60 IN RRSIG ( NSEC 8 3 60 20210308000000 20190308051845 23049 cscholz.io. gP1PSpeK0O6wnVgTtXSmu2HQUYxoquwmZwKPe17jsYHNnoP4QUjpmt0tXQy3UT9x6ktaRPDyPhD8 0eJhQgsylsrDpDcGsVlAyrilgN8noYwrQNkXXXi99taP377ZYdKjjtgnwehq4SQiTk6kDe9zqbG2 xfiNd7n5r/9LYgAOoiYR9DKD8el8trNaODcmXzxO3qCsjqnRShadcNZZhjCrAblT9F+KTxt+LKeB DBNr45XGOmA6+Pxc+/1KqVoD9r85GewMz5FmmrP/I+G9ahBpyrQkBxoQxMg5VMsQqPRn9FFcrFOc IPxEcus03DIoGb60sIQjP7ma462CuXNbS2mZ2A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by cscholz.io zone
	Query to mx02.o-o-s.de for cscholz.io/SOA
	Received 396 bytes from 194.55.14.102
	;; Answer received from 194.55.14.102 (396 bytes) ;; HEADER SECTION ;; id = 43216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2019030803 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20210308000000 20190308051845 23049 cscholz.io. oIUBqLSraWLORDWaCj8wNx5s2lY+D0fBcor4B4Mr4DhsX+oQa+dupJ7MIVXyUs1qzKELT78b+ZHK GlF76o1yFKLS1NZfg5XWNzU85k0WtkMHnLSSA62OF5pnbjQyr9KqUrX2cWT7ypwidZI7CD9j/xrd VjXtPxUwRW0RgVeMlG0jRJwOAg/iHNKWcKTjIzZleZPSgqLkFEr4V/wQjigprgXJc1jbVbUAsaWL s3SKSI6jZICpRDpYOxzPLM0NKAAfDEkxB4ZbjW7S0vjpS/I/KydrhO19W1sTTPGSqnDCEIRv+BZl 3DspneFVIlccN6K8pt2LZMsnZmwVD4Ffq1DqLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.o-o-s.de for cscholz.io/SOA
	Received 1355 bytes from 37.24.77.127
	;; Answer received from 37.24.77.127 (1355 bytes) ;; HEADER SECTION ;; id = 48832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2019030803 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20210308000000 20190308051845 23049 cscholz.io. oIUBqLSraWLORDWaCj8wNx5s2lY+D0fBcor4B4Mr4DhsX+oQa+dupJ7MIVXyUs1qzKELT78b+ZHK GlF76o1yFKLS1NZfg5XWNzU85k0WtkMHnLSSA62OF5pnbjQyr9KqUrX2cWT7ypwidZI7CD9j/xrd VjXtPxUwRW0RgVeMlG0jRJwOAg/iHNKWcKTjIzZleZPSgqLkFEr4V/wQjigprgXJc1jbVbUAsaWL s3SKSI6jZICpRDpYOxzPLM0NKAAfDEkxB4ZbjW7S0vjpS/I/KydrhO19W1sTTPGSqnDCEIRv+BZl 3DspneFVIlccN6K8pt2LZMsnZmwVD4Ffq1DqLg== ) ;; AUTHORITY SECTION (3 records) cscholz.io. 3600 IN NS ns1.o-o-s.de. cscholz.io. 3600 IN NS mx02.o-o-s.de. cscholz.io. 3600 IN RRSIG ( NS 8 2 3600 20210308000000 20190308051845 23049 cscholz.io. O9fdqQGzI+xdzuwGzE3IibVWpvgjuctt5Pv4u4aD56sxzu2K4Uxbs/uOC4/yvo11PMzZbHsb5bHQ DHKZXXuwn0N7A0iGNCKj3EmtTs7kk4UATkESgmLgKrm9aZxVaWtX/iE25ZkI6gQ6CYCOzL6+Qx+q 1nuWWHm+z/OpmSO4b97Fe9YHJKKbjU4NYmK+PtZqBLGxxIOGHM+9rgzi62meSvTESJxRSwi1wjUZ VQ76430ulJJ+F4ya+FeYtGJBHkOUqYw+K5hK7cjmWnfV6b/VSER0UPiRJxzpKJf1/4Vp3ITSDe5u jIB9Wozhz90yand1Pv1aiYHsJ71jTQGDkQNuOw== ) ;; ADDITIONAL SECTION (5 records) ns1.o-o-s.de. 3600 IN A 37.24.77.127 mx02.o-o-s.de. 3600 IN A 194.55.14.102 ns1.o-o-s.de. 3600 IN RRSIG ( A 8 3 3600 20210308000000 20190308050922 36846 o-o-s.de. KvdUXzPjrqf8EmsgX2N3Xnr6MjSaxdjQSPE+L8dOpNOi3o4O5HqGst30QpdPyD/zYO67HZRS8rRZ 42XcoB+j2HJysXf+0s/p2RlBw87C/l7JafMYYc0OEBAXMkLmOY5eIQUuz+m6C9+dVUCWlaPeZPhG 5hJsse+PCEhxs37IfAdJ0VBcIMnHjygg1hdf1tF8HFc4AMGuvvWYPBNALlKDy2zAzPGtLvn84Kmf kWwvRr3NJ8A/PEbJdgyUnbVxA2FtBqkFpvyEydPlS4KCvMulalQWe1RXz1LitzilgC3+eFMWJ32b U9rK7eJIuN5XWMgKTd73X+mwTBRrs3jIDI8QJQ== ) mx02.o-o-s.de. 3600 IN RRSIG ( A 8 3 3600 20210308000000 20190308050922 36846 o-o-s.de. MHzzx8o+DhvClKrOKvRHsaReVF8iRA7TYmOjqjAUCY3OgyPHRRSXI89aWY21ADuDKjAr7/pBOqU2 LNbbNYMfiMBcKigDpCOYMYgohu+V3bUmTKx3XJu8AKtWfP7FEbHomKz5rk3OQRBqlzrKtNKpkxe8 gT/u2LM2uOdOhR/lZzmGLH6EG7vnvDCeV2oIpSYnnKU0LVSBJSAeh4ZWRVdQv6YUYdARcX1NWdXo 4GBMFxCTa5e09c4/rN9ypIgOf5OL2pAJP1m9xjE4Jb0d5BlbCdysxzlvpxWi+pl/Mp1Z683dqy7O pFo6zX6N6Bz21He80S63nB1XiLfGYFchsn0TCw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to mx02.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 194.55.14.102
	;; Answer received from 194.55.14.102 (358 bytes) ;; HEADER SECTION ;; id = 52991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 194.55.14.102 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20210308000000 20190308051845 23049 cscholz.io. Zb24HndXfjoJDDnpH9aaAgzKUklC400zgcKLJQau4prd8/vhtb2fTA+IhTqrHp4rSBYNh716qHLC N9ZwYhjcl1yz0gr+CkdCq5hm3LHxRKJw9gPBzj39ivGCxol9VpPnjtzaJOmMtBtRm4d4tCj8Pj7w UkaDVGBNTWnb0K0kDBYxokoPESi3/AEWdq6m9YHabVFx5Z9p4I5ba4AOLqt4Dz1SZF+TA2g7TbnI L/W4SbHUz2G8qrO6cf0ptvXcge4j3RVaNal53983NkxB0yK2dJt78O/RVBhduhaqbtihJ73aYuZy GUJjsGFJEFgTEVmZFLhsNzDanQnIRJEaJrzB9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	blog.cscholz.io A RR has value 194.55.14.102
	Found 1 RRSIGs over A RRset
	`blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20210308000000 20190308051845 23049 cscholz.io. Zb24HndXfjoJDDnpH9aaAgzKUklC400zgcKLJQau4prd8/vhtb2fTA+IhTqrHp4rSBYNh716qHLC N9ZwYhjcl1yz0gr+CkdCq5hm3LHxRKJw9gPBzj39ivGCxol9VpPnjtzaJOmMtBtRm4d4tCj8Pj7w UkaDVGBNTWnb0K0kDBYxokoPESi3/AEWdq6m9YHabVFx5Z9p4I5ba4AOLqt4Dz1SZF+TA2g7TbnI L/W4SbHUz2G8qrO6cf0ptvXcge4j3RVaNal53983NkxB0yK2dJt78O/RVBhduhaqbtihJ73aYuZy GUJjsGFJEFgTEVmZFLhsNzDanQnIRJEaJrzB9w== )`
	RRSIG=23049 and DNSKEY=23049 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test blog.cscholz.io at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: