DNSSEC Analyzer - blog.cscholz.io

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-08-17 06:59:34 UTC, NTP stratum 4

Analyzing DNSSEC problems for blog.cscholz.io

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 14358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakixDgTOkgG/PUzlEauAiKzlxGwezjqbKFPS wrY3qHmbbsSTY6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdlUReP+uhBWBfKI2aGwhRm QYR0zSmg7PGOde34c/rOItK1ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVLx/WUKQpU /nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXSaUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME 9JbYinBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs= ) ; Key ID = 41656 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20180831000000 20180810000000 19036 . dUxxznrl53tquC2i2qj6p7lrG7bwR9KZ+9I2t3Oo7ZLzEQFb6XY6rD2sKXxZt7v2tm9FVUjzITCN jWxzuaHYda0yDqplfccqkZUKrCQFq/VOiTENnzPm1j6D2dNzeEwbM3RAQaJpYOOFeFDFAgCgeMqX UfukMo8UW7AG3S3pO7w8KI/nKYIwnnQh0sx7vmydyQ1A11WRslOO8o2zxUEydUoHigm3ZZWE09k9 9fIftCBA7h7u2UvTreYkEdyvw5hhBCUCawC2WUILCPTEc35ubFvSJLniaTB3g08oYKbFuoLya7va pwySBpvO183Urx0UJs0z39HC33BMTrqHI6vmXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfaifSqh+9ItxYRCwuiY0FY2NkaEwd/zmyVvakixDgTOkgG/PUzlEauAiKzlxGwezjqbKFPS wrY3qHmbbsSTY6G8hZtna8k26eCwy59Chh573cu8qtBkmUIXMYG3fSdlUReP+uhBWBfKI2aGwhRm QYR0zSmg7PGOde34c/rOItK1ebJhjTAJ6TmnON7qMfk/lKvH4qOvYtzstLhr7Pn9ZOVLx/WUKQpU /nEyFyTduRbz1nZqkp6yMuHwWVsABK8lUYXSaUrDAsuMSldhafmR/A15BxNhv9M7mzJj7UH2RVME 9JbYinBEzWwW9GpnY+ZmBWgZiRVTaDuemCTJ5ZJWLRs= ) ; Key ID = 41656`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20180831000000 20180810000000 19036 . dUxxznrl53tquC2i2qj6p7lrG7bwR9KZ+9I2t3Oo7ZLzEQFb6XY6rD2sKXxZt7v2tm9FVUjzITCN jWxzuaHYda0yDqplfccqkZUKrCQFq/VOiTENnzPm1j6D2dNzeEwbM3RAQaJpYOOFeFDFAgCgeMqX UfukMo8UW7AG3S3pO7w8KI/nKYIwnnQh0sx7vmydyQ1A11WRslOO8o2zxUEydUoHigm3ZZWE09k9 9fIftCBA7h7u2UvTreYkEdyvw5hhBCUCawC2WUILCPTEc35ubFvSJLniaTB3g08oYKbFuoLya7va pwySBpvO183Urx0UJs0z39HC33BMTrqHI6vmXw== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=41656 is now in the chain-of-trust
	Query to i.root-servers.net for blog.cscholz.io/A
	Received 811 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (811 bytes) ;; HEADER SECTION ;; id = 4711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS c0.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS ns-a3.io. io. 172800 IN NS ns-a1.io. io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180830050000 20180817040000 41656 . Kb3eUeBUtn0rIyhteujQs7bgEIjXI4N6vUgLahF+9KnIdRtN5pB/nT6qINT+kwZQXBaxVK815x31 63kCw82Tosvuqf7k+p7QnBFC948LtFiTNtGg6UwFUd4g7YjBk402ZYJVlV4Rz3UUkzB6JLINPuu4 10/nyOcfySu4TdonLW/weyR/hCumCnHp9DButFOKnEdC7GHfsxUB/+7qE93pdRaeiBcnK3kZD168 QWT0Z8LwHKH6OcQZPymlpWuLsJs2PPrlWxOXChJtYGUq/NT5bwGa1+gl+JGUUWbwmOTqExGQLp9m +lTRgcPWpf+hQUQ0RY8JKu887ZzxtrSOKUPKzQ== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN A 65.22.163.17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN A 65.22.161.17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN A 65.22.162.17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ns-a3.io. 172800 IN A 74.116.178.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to k.root-servers.net for io/DNSKEY
	Received 798 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (798 bytes) ;; HEADER SECTION ;; id = 3214 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS c0.nic.io. io. 172800 IN NS ns-a1.io. io. 172800 IN NS ns-a3.io. io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180830050000 20180817040000 41656 . Kb3eUeBUtn0rIyhteujQs7bgEIjXI4N6vUgLahF+9KnIdRtN5pB/nT6qINT+kwZQXBaxVK815x31 63kCw82Tosvuqf7k+p7QnBFC948LtFiTNtGg6UwFUd4g7YjBk402ZYJVlV4Rz3UUkzB6JLINPuu4 10/nyOcfySu4TdonLW/weyR/hCumCnHp9DButFOKnEdC7GHfsxUB/+7qE93pdRaeiBcnK3kZD168 QWT0Z8LwHKH6OcQZPymlpWuLsJs2PPrlWxOXChJtYGUq/NT5bwGa1+gl+JGUUWbwmOTqExGQLp9m +lTRgcPWpf+hQUQ0RY8JKu887ZzxtrSOKUPKzQ== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN A 65.22.163.17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN A 65.22.161.17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN A 65.22.162.17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ns-a3.io. 172800 IN A 74.116.178.1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone io

	Checking DS between . and io
	Query to i.root-servers.net for io/DS
	Received 450 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (450 bytes) ;; HEADER SECTION ;; id = 6205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DS ;; ANSWER SECTION (4 records) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180830050000 20180817040000 41656 . Kb3eUeBUtn0rIyhteujQs7bgEIjXI4N6vUgLahF+9KnIdRtN5pB/nT6qINT+kwZQXBaxVK815x31 63kCw82Tosvuqf7k+p7QnBFC948LtFiTNtGg6UwFUd4g7YjBk402ZYJVlV4Rz3UUkzB6JLINPuu4 10/nyOcfySu4TdonLW/weyR/hCumCnHp9DButFOKnEdC7GHfsxUB/+7qE93pdRaeiBcnK3kZD168 QWT0Z8LwHKH6OcQZPymlpWuLsJs2PPrlWxOXChJtYGUq/NT5bwGa1+gl+JGUUWbwmOTqExGQLp9m +lTRgcPWpf+hQUQ0RY8JKu887ZzxtrSOKUPKzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for io in the . zone
	DS=64744/SHA-256 has algorithm RSASHA256
	DS=57355/SHA-1 has algorithm RSASHA256
	DS=57355/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`io. 86400 IN RRSIG ( DS 8 1 86400 20180830050000 20180817040000 41656 . Kb3eUeBUtn0rIyhteujQs7bgEIjXI4N6vUgLahF+9KnIdRtN5pB/nT6qINT+kwZQXBaxVK815x31 63kCw82Tosvuqf7k+p7QnBFC948LtFiTNtGg6UwFUd4g7YjBk402ZYJVlV4Rz3UUkzB6JLINPuu4 10/nyOcfySu4TdonLW/weyR/hCumCnHp9DButFOKnEdC7GHfsxUB/+7qE93pdRaeiBcnK3kZD168 QWT0Z8LwHKH6OcQZPymlpWuLsJs2PPrlWxOXChJtYGUq/NT5bwGa1+gl+JGUUWbwmOTqExGQLp9m +lTRgcPWpf+hQUQ0RY8JKu887ZzxtrSOKUPKzQ== )`
	RRSIG=41656 and DNSKEY=41656 verifies the DS RRset
	DS=64744/SHA-256 is now in the chain-of-trust
	DS=57355/SHA-1 is now in the chain-of-trust
	`io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 )`
	`io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9`
	`io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 )`
	Query to ns-a3.io for io/DNSKEY
	Received 1333 bytes from 74.116.178.1
	;; Answer received from 74.116.178.1 (1333 bytes) ;; HEADER SECTION ;; id = 15026 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (6 records) io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180906112907 20180816102907 17116 io. iuYKF7dvgPBgzlNp9X/kyh+GpMAad5htokJJ5aASz5TkzdNxIE56GKjn7biF2OIX60aDNJF71L/Z OZ1PazWW7UugWpr91UInIAd9pZMkWJja4aykeoMzxMeqWIlAUaCUjxCd6ky1N3zT00kh1OLSIKhD QpIUYrPbVplUEw4ynyo= ) io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180906112907 20180816102907 57355 io. oWz+94/kdpWGrvUYR6h9UXDGDgTpbZMYlVryG70lZQA1XYAAoxHnaVYTnuurFdLnyqkscNFGY0co EHE3bW4nZZ5tX8LA8BsLhFbwKTXyDT0vZNLEV6HUuSgVbAkAAkxx79cvPh+ehl+OR3lHSz/s8cgK b3TdZz//Gp5LlSXwGAweHA9zkDuJwV86HpVd5dhOrSWq/zlZe1Ri7k3enbALS4YWdE353QdFxVsM lHRJaOs74CKLCsJXt2gSRFx/aGgr3Sw14kfP0wBxKCJOV8++YXBOpedBdqU17pXOGAW8UjqoT27S uco63KXbWaPkAl+kXy3uCYLz+FsBXw+yLPeTyQ== ) io. 86400 IN DNSKEY ( 256 3 8 AwEAAcLtF0acBspt3iF2RWqh0La0Xv0oSo9TRSOyfe17Qh4dtHyE+5ue6uaKa9pqb+RPjTdYuQ+Z IFLd36xb5gAqh7j6MC8nnJPnxwl2opzeCIa+/X4X9pLVHN/+y27lZpoWV3+dHhEMbfZklGv8Ogtl fnZ7YWRKzAqyKoVWkDvTYOy7 ) ; Key ID = 17116 io. 86400 IN DNSKEY ( 256 3 8 BQEAAAAB6ggF1bt+xFtc74YMdWwTXSO1ztmexDeVTZHFvQFxNzwjnDSIwVpEYuxcOQQZsXTu44V0 jOuK9F1DSTWu5ZupW08yIkO6vp3BakEhjebxuo51GHvfNNEc81OcwscNn20e5EIE2kdnBKkdW/9G Z4I1jCNmsj64esj46HKFNpqWkx0= ) ; Key ID = 63407 io. 86400 IN DNSKEY ( 257 3 8 AwEAAdXClDBI9GCqAeERBHda3lBB3DXMWhfR+7LNwJv7DWIR2BwZk0zwFKnklvclDiEU5pM9HM6L qozITUplLjrthtobBwbY8lhjOicZuGe7L4EQJV3kZSkwFcdS5ojGkSNJfOZgJnCW8SNaap0koRvC w8ZqWGeIqep5kO9JfcffkMras5HCMEQL40WaVKnqMKthm+sVzVQ6D8ZytGLH0jQ7Vxfp/KRgR8id d79tOmOGj0CvrvkeVb5qS7/rEtturAivFIzUQi9/Ek53FWEkY+qkPMDBT40H8SEGASVUZCvDYwQa b1XyGFmOzFbVm9vCOZ9BYvYlsO9him80IU+d7R44orM= ) ; Key ID = 64744 io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for io
	`io. 86400 IN DNSKEY ( 256 3 8 AwEAAcLtF0acBspt3iF2RWqh0La0Xv0oSo9TRSOyfe17Qh4dtHyE+5ue6uaKa9pqb+RPjTdYuQ+Z IFLd36xb5gAqh7j6MC8nnJPnxwl2opzeCIa+/X4X9pLVHN/+y27lZpoWV3+dHhEMbfZklGv8Ogtl fnZ7YWRKzAqyKoVWkDvTYOy7 ) ; Key ID = 17116`
	`io. 86400 IN DNSKEY ( 256 3 8 BQEAAAAB6ggF1bt+xFtc74YMdWwTXSO1ztmexDeVTZHFvQFxNzwjnDSIwVpEYuxcOQQZsXTu44V0 jOuK9F1DSTWu5ZupW08yIkO6vp3BakEhjebxuo51GHvfNNEc81OcwscNn20e5EIE2kdnBKkdW/9G Z4I1jCNmsj64esj46HKFNpqWkx0= ) ; Key ID = 63407`
	`io. 86400 IN DNSKEY ( 257 3 8 AwEAAdXClDBI9GCqAeERBHda3lBB3DXMWhfR+7LNwJv7DWIR2BwZk0zwFKnklvclDiEU5pM9HM6L qozITUplLjrthtobBwbY8lhjOicZuGe7L4EQJV3kZSkwFcdS5ojGkSNJfOZgJnCW8SNaap0koRvC w8ZqWGeIqep5kO9JfcffkMras5HCMEQL40WaVKnqMKthm+sVzVQ6D8ZytGLH0jQ7Vxfp/KRgR8id d79tOmOGj0CvrvkeVb5qS7/rEtturAivFIzUQi9/Ek53FWEkY+qkPMDBT40H8SEGASVUZCvDYwQa b1XyGFmOzFbVm9vCOZ9BYvYlsO9him80IU+d7R44orM= ) ; Key ID = 64744`
	`io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355`
	DNSKEY=64744/SEP is now in the chain-of-trust
	DS=64744/SHA-256 verifies DNSKEY=64744/SEP
	DNSKEY=57355/SEP is now in the chain-of-trust
	DS=57355/SHA-1 verifies DNSKEY=57355/SEP
	DS=57355/SHA-256 verifies DNSKEY=57355/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180906112907 20180816102907 17116 io. iuYKF7dvgPBgzlNp9X/kyh+GpMAad5htokJJ5aASz5TkzdNxIE56GKjn7biF2OIX60aDNJF71L/Z OZ1PazWW7UugWpr91UInIAd9pZMkWJja4aykeoMzxMeqWIlAUaCUjxCd6ky1N3zT00kh1OLSIKhD QpIUYrPbVplUEw4ynyo= )`
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180906112907 20180816102907 57355 io. oWz+94/kdpWGrvUYR6h9UXDGDgTpbZMYlVryG70lZQA1XYAAoxHnaVYTnuurFdLnyqkscNFGY0co EHE3bW4nZZ5tX8LA8BsLhFbwKTXyDT0vZNLEV6HUuSgVbAkAAkxx79cvPh+ehl+OR3lHSz/s8cgK b3TdZz//Gp5LlSXwGAweHA9zkDuJwV86HpVd5dhOrSWq/zlZe1Ri7k3enbALS4YWdE353QdFxVsM lHRJaOs74CKLCsJXt2gSRFx/aGgr3Sw14kfP0wBxKCJOV8++YXBOpedBdqU17pXOGAW8UjqoT27S uco63KXbWaPkAl+kXy3uCYLz+FsBXw+yLPeTyQ== )`
	RRSIG=17116 and DNSKEY=17116 verifies the DNSKEY RRset
	RRSIG=57355 and DNSKEY=57355/SEP verifies the DNSKEY RRset
	DNSKEY=17116 is now in the chain-of-trust
	DNSKEY=63407 is now in the chain-of-trust
	Query to a0.nic.io for blog.cscholz.io/A
	Received 298 bytes from 2a01:8840:9e::17
	;; Answer received from 2a01:8840:9e::17 (298 bytes) ;; HEADER SECTION ;; id = 28966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS ns2.o-o-s.de. cscholz.io. 86400 IN NS ns3.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180906112907 20180816102907 17116 io. gHm8EZDzuUfv7w+QacTihmopfLB/YQ6+P3ty+Yl/tsRpv7s4jcPOfCpUmTwVwC3sXYkI3JOva5/R aHVDUo+BeZZYFrG6/jAwiubJSa6V2TlXy5G+wO+zjauhh8j/CJxtSf4pBzJaEeBhYsCAEJXvmDL4 k4Vq0iWoo58dxqYA0wU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-a1.io for cscholz.io/DNSKEY
	Received 301 bytes from 2001:678:4::1
	;; Answer received from 2001:678:4::1 (301 bytes) ;; HEADER SECTION ;; id = 40568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS ns2.o-o-s.de. cscholz.io. 86400 IN NS ns3.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180906112907 20180816102907 17116 io. gHm8EZDzuUfv7w+QacTihmopfLB/YQ6+P3ty+Yl/tsRpv7s4jcPOfCpUmTwVwC3sXYkI3JOva5/R aHVDUo+BeZZYFrG6/jAwiubJSa6V2TlXy5G+wO+zjauhh8j/CJxtSf4pBzJaEeBhYsCAEJXvmDL4 k4Vq0iWoo58dxqYA0wU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cscholz.io

cscholz.io

	Checking DS between io and cscholz.io
	Query to a0.nic.io for cscholz.io/DS
	Received 249 bytes from 2a01:8840:9e::17
	;; Answer received from 2a01:8840:9e::17 (249 bytes) ;; HEADER SECTION ;; id = 34948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DS ;; ANSWER SECTION (2 records) cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180906112907 20180816102907 17116 io. gHm8EZDzuUfv7w+QacTihmopfLB/YQ6+P3ty+Yl/tsRpv7s4jcPOfCpUmTwVwC3sXYkI3JOva5/R aHVDUo+BeZZYFrG6/jAwiubJSa6V2TlXy5G+wO+zjauhh8j/CJxtSf4pBzJaEeBhYsCAEJXvmDL4 k4Vq0iWoo58dxqYA0wU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cscholz.io in the io zone
	DS=5650/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180906112907 20180816102907 17116 io. gHm8EZDzuUfv7w+QacTihmopfLB/YQ6+P3ty+Yl/tsRpv7s4jcPOfCpUmTwVwC3sXYkI3JOva5/R aHVDUo+BeZZYFrG6/jAwiubJSa6V2TlXy5G+wO+zjauhh8j/CJxtSf4pBzJaEeBhYsCAEJXvmDL4 k4Vq0iWoo58dxqYA0wU= )`
	RRSIG=17116 and DNSKEY=17116 verifies the DS RRset
	DS=5650/SHA-256 is now in the chain-of-trust
	`cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 )`
	Query to ns3.o-o-s.de for cscholz.io/DNSKEY
	Received 1187 bytes from 92.51.135.226
	;; Answer received from 92.51.135.226 (1187 bytes) ;; HEADER SECTION ;; id = 32838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (4 records) cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049 cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650 cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200708000000 20180708152447 5650 cscholz.io. d2Etfot1r6JJ55y/AaxjnVRsc2WmBqnNK029Vx+w7HBAsQBoaeDGdbSaWYED4dhfbsJ9S2CYoVrY 8vMzhDaHuSJZCgqxBYDaEZ9tXkD1kOER3P3E4labKZfE4DgpR+PvkUTzn7QeePblClEw/7YrbCFM akl4IHQBPZeNaJIh5ahgJmwtbx9rb996z2NUCI7IgxMqfw3TXfYcs8DNWBwhzntdV1Lq3Jkpgj7e kGD3ljWefq9HD1G4RXGbfD4APlewnt9vMQulsFbqxXTVeY8Qxtaq2itJq9OimRzy/WJO8WomHmSS 0GHnlL+tVYIeWWGhA5PB9M81O73dlTcaVpY1pw== ) cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200708000000 20180708152447 23049 cscholz.io. B77UXyettjUFzQAAnSp1vxusm4gr0HvHKEsOmQPIeS06Qj0frHmT2JcWWquC5683Wn7RSmmwxwvj OsQQpOL7Tut+ZXlciz6eRxcTcncC/1YJY9PBSiDzyv12c1JpdWIDa3EH1iw7RuvKleSEENTuIyNL x93NBUbLxVZfvuJUFbjETzcKSVH7/WaoD4VRvEw0ZpAZtGA45d0O+FQvWuab5Zjh9Nh4h0RM0l+0 bgxPGZUx3yI3+WCXTrrIH+trdY+dO88r8CAawEmlHCJ4QXzJzV5mveLUH0/Tbqx3qfA4DP7LvJlZ MwH1l4m6XShh4eMH1UynkzKoqKwUgrugVgwaqA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cscholz.io
	`cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049`
	`cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650`
	DNSKEY=5650/SEP is now in the chain-of-trust
	DS=5650/SHA-256 verifies DNSKEY=5650/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200708000000 20180708152447 5650 cscholz.io. d2Etfot1r6JJ55y/AaxjnVRsc2WmBqnNK029Vx+w7HBAsQBoaeDGdbSaWYED4dhfbsJ9S2CYoVrY 8vMzhDaHuSJZCgqxBYDaEZ9tXkD1kOER3P3E4labKZfE4DgpR+PvkUTzn7QeePblClEw/7YrbCFM akl4IHQBPZeNaJIh5ahgJmwtbx9rb996z2NUCI7IgxMqfw3TXfYcs8DNWBwhzntdV1Lq3Jkpgj7e kGD3ljWefq9HD1G4RXGbfD4APlewnt9vMQulsFbqxXTVeY8Qxtaq2itJq9OimRzy/WJO8WomHmSS 0GHnlL+tVYIeWWGhA5PB9M81O73dlTcaVpY1pw== )`
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200708000000 20180708152447 23049 cscholz.io. B77UXyettjUFzQAAnSp1vxusm4gr0HvHKEsOmQPIeS06Qj0frHmT2JcWWquC5683Wn7RSmmwxwvj OsQQpOL7Tut+ZXlciz6eRxcTcncC/1YJY9PBSiDzyv12c1JpdWIDa3EH1iw7RuvKleSEENTuIyNL x93NBUbLxVZfvuJUFbjETzcKSVH7/WaoD4VRvEw0ZpAZtGA45d0O+FQvWuab5Zjh9Nh4h0RM0l+0 bgxPGZUx3yI3+WCXTrrIH+trdY+dO88r8CAawEmlHCJ4QXzJzV5mveLUH0/Tbqx3qfA4DP7LvJlZ MwH1l4m6XShh4eMH1UynkzKoqKwUgrugVgwaqA== )`
	RRSIG=5650 and DNSKEY=5650/SEP verifies the DNSKEY RRset
	RRSIG=23049 and DNSKEY=23049 verifies the DNSKEY RRset
	DNSKEY=23049 is now in the chain-of-trust
	Query to ns2.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (358 bytes) ;; HEADER SECTION ;; id = 4526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 92.51.135.226 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200708000000 20180708152447 23049 cscholz.io. m84/590zXbS6ujWjwCmaNK3VSEGn04gptSu79BS46t9tpYCAXVJqILrwBw9+S7AFEErKqLjBnqlt MKSsdgf7+QtR669pkojIJIRDKs+B57SuQiKnu/djBq/6tWP02f298ZnnK+A35WxNp7miCaSm8MPT EbnRsVla17ZGULv91yoTHUsbvudp5h6chgMqcbBa1D3SZHH1rq78nLZBJKTcC5ryJbgeYL13rse7 yI86j5BMsxuMk3tzZ07kxmYi/YLluIAvDhUGqBUMIwPJSqSbIjQS1sb5QH+cGp0nYV0zq+lb9SWI ZELbBam+22xQ9nUWlenrh/nGP3/WhrFkuqgnRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cscholz.io is authoritative for blog.cscholz.io
	Query to ns3.o-o-s.de for blog.cscholz.io/DNSKEY
	Received 749 bytes from 92.51.135.226
	;; Answer received from 92.51.135.226 (749 bytes) ;; HEADER SECTION ;; id = 43492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 60 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018070807 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 60 IN RRSIG ( SOA 8 2 2560 20200708000000 20180708152447 23049 cscholz.io. G43Ke7/5M2ppo17Hk+cKsgVpCRkVlViZwPyIuBzhIQL0vlQQAOpfAlfuZc72FkplD9SIgq8YHOGI M3xExw1ygE1EF4vo40FI3sXryXR9PlaxT/jQIV0VWNvOfiJfo6NuKdj2T48dm/57qPemyLKVXDf3 e+X4VdFRc8IpvEmYb4oyVzV65lpCKD9okxUvFY+GISnV7n0WG6FAr2ot3PFP1FNTHt+GZeNF9Bix yA5M7MPUZiG9oM7Ff1bxgX8TCmQ4HoqaDqTXDjR8lmext0SwqL2JI68TuWkTgHy3oeVIsLDG5jpl surZLEibxoufm7W6sXHbzds964AO3KJIcO/w8A== ) blog.cscholz.io. 60 IN NSEC _443._tcp.blog.cscholz.io. A RRSIG NSEC CAA blog.cscholz.io. 60 IN RRSIG ( NSEC 8 3 60 20200708000000 20180708152447 23049 cscholz.io. LrOUyvugMdqUdGX+EgG4UrKRJeWYwCEdtbpzebXyiXYTu9lCH2FpVa+WpY5PbB80c/olXVblrjw5 3O7dUk6WtIfPMVLR+pkXy8eQAWQL1JRog3zgPYyrbHG3hXRdq+MlvaozAcX5vcOddpvs6Ej9r/u2 JYOKKEHvYlcdcV7eiKKIrVaAIdwQ21ryI6GzqGhJ3jtxHxjMBamFUZUUsHTLzQnNt6uTDRVtxblW y+SoWruiLWJafkiqFTRH4UJUhslAGH8Op8H70wDopo6qgGZ+UL+D85DXcdyBx+LnPRfaoQF28W0C 3xA5e5JtzKZnb/fb16jetAW5jcSbziKgDcINnw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by cscholz.io zone
	Query to ns2.o-o-s.de for cscholz.io/SOA
	Received 396 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (396 bytes) ;; HEADER SECTION ;; id = 61744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018070807 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20200708000000 20180708152447 23049 cscholz.io. G43Ke7/5M2ppo17Hk+cKsgVpCRkVlViZwPyIuBzhIQL0vlQQAOpfAlfuZc72FkplD9SIgq8YHOGI M3xExw1ygE1EF4vo40FI3sXryXR9PlaxT/jQIV0VWNvOfiJfo6NuKdj2T48dm/57qPemyLKVXDf3 e+X4VdFRc8IpvEmYb4oyVzV65lpCKD9okxUvFY+GISnV7n0WG6FAr2ot3PFP1FNTHt+GZeNF9Bix yA5M7MPUZiG9oM7Ff1bxgX8TCmQ4HoqaDqTXDjR8lmext0SwqL2JI68TuWkTgHy3oeVIsLDG5jpl surZLEibxoufm7W6sXHbzds964AO3KJIcO/w8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.o-o-s.de for cscholz.io/SOA
	Received 396 bytes from 92.51.135.226
	;; Answer received from 92.51.135.226 (396 bytes) ;; HEADER SECTION ;; id = 48963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018070807 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20200708000000 20180708152447 23049 cscholz.io. G43Ke7/5M2ppo17Hk+cKsgVpCRkVlViZwPyIuBzhIQL0vlQQAOpfAlfuZc72FkplD9SIgq8YHOGI M3xExw1ygE1EF4vo40FI3sXryXR9PlaxT/jQIV0VWNvOfiJfo6NuKdj2T48dm/57qPemyLKVXDf3 e+X4VdFRc8IpvEmYb4oyVzV65lpCKD9okxUvFY+GISnV7n0WG6FAr2ot3PFP1FNTHt+GZeNF9Bix yA5M7MPUZiG9oM7Ff1bxgX8TCmQ4HoqaDqTXDjR8lmext0SwqL2JI68TuWkTgHy3oeVIsLDG5jpl surZLEibxoufm7W6sXHbzds964AO3KJIcO/w8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (358 bytes) ;; HEADER SECTION ;; id = 23065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 92.51.135.226 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200708000000 20180708152447 23049 cscholz.io. m84/590zXbS6ujWjwCmaNK3VSEGn04gptSu79BS46t9tpYCAXVJqILrwBw9+S7AFEErKqLjBnqlt MKSsdgf7+QtR669pkojIJIRDKs+B57SuQiKnu/djBq/6tWP02f298ZnnK+A35WxNp7miCaSm8MPT EbnRsVla17ZGULv91yoTHUsbvudp5h6chgMqcbBa1D3SZHH1rq78nLZBJKTcC5ryJbgeYL13rse7 yI86j5BMsxuMk3tzZ07kxmYi/YLluIAvDhUGqBUMIwPJSqSbIjQS1sb5QH+cGp0nYV0zq+lb9SWI ZELbBam+22xQ9nUWlenrh/nGP3/WhrFkuqgnRg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	blog.cscholz.io A RR has value 92.51.135.226
	Found 1 RRSIGs over A RRset
	`blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200708000000 20180708152447 23049 cscholz.io. m84/590zXbS6ujWjwCmaNK3VSEGn04gptSu79BS46t9tpYCAXVJqILrwBw9+S7AFEErKqLjBnqlt MKSsdgf7+QtR669pkojIJIRDKs+B57SuQiKnu/djBq/6tWP02f298ZnnK+A35WxNp7miCaSm8MPT EbnRsVla17ZGULv91yoTHUsbvudp5h6chgMqcbBa1D3SZHH1rq78nLZBJKTcC5ryJbgeYL13rse7 yI86j5BMsxuMk3tzZ07kxmYi/YLluIAvDhUGqBUMIwPJSqSbIjQS1sb5QH+cGp0nYV0zq+lb9SWI ZELbBam+22xQ9nUWlenrh/nGP3/WhrFkuqgnRg== )`
	RRSIG=23049 and DNSKEY=23049 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test blog.cscholz.io at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: