DNSSEC Analyzer - blog.cscholz.io

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-04-25 18:02:06 UTC, NTP stratum 4

Analyzing DNSSEC problems for blog.cscholz.io

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1139 bytes) ;; HEADER SECTION ;; id = 45087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20180512000000 20180421000000 19036 . e9I0U9vHrWZQN2v3aqxnHdq9BUCO8NG+4kNsaADxOndT9bJpUneAYfDz4EJwJggjPjt6ms3Bh2pG JVOmfnRS5LQWLBKCgi+4p/vXVajWlZmIDvRrDhyYAS9ktrRLqHvXVZhx+udfvXoFuZnWSKVDFMI2 fIL9wniJKCUdQ+nu0a/iEsDBEVmwWw7T428yIQ6+NjvYQ36cf5mbchX58CBM7KfUGnsQLIAP5tnk HM4kdIDbGCr78RCE916blRKETrbqtNi4hHIAscesJfRJsBZ+TlhouyQie/SjGnvRULjADS5lCWKL DBRUIMzOomK4Tekrdrxk1DwcpL68xAHt5D19Iw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdU4aKlDgEpXWWpH5aXHJZI1Vm9Cm42mGAsqkz3akFctS6zsZHC3pNNMug99fKa7OW+tRHIw ZEc//mX8Jt6bcw5bPgRHG6u2eT8vUpbXDPVs1ICGR6FhlwFWEOyxbIIiDfd7Eq6eALk5RNcauyE+ /ZP+VdrhWZDeEWZRrPBLjByBWTHl+v/f+xvTJ3Stcq2tEqnzS2CCOr6RTJepprYhu+5Yl6aRZmEV BK27WCW1Zrk1LekJvJXfcyKSKk19C5M5JWX58px6nB1IS0pMs6aCIK2yaQQVNUEg9XyQzBSv/rMx VNNy3VAqOjvh+OASpLMm4GECbSSe8jtjwG0I78sfMZc= ) ; Key ID = 39570`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20180512000000 20180421000000 19036 . e9I0U9vHrWZQN2v3aqxnHdq9BUCO8NG+4kNsaADxOndT9bJpUneAYfDz4EJwJggjPjt6ms3Bh2pG JVOmfnRS5LQWLBKCgi+4p/vXVajWlZmIDvRrDhyYAS9ktrRLqHvXVZhx+udfvXoFuZnWSKVDFMI2 fIL9wniJKCUdQ+nu0a/iEsDBEVmwWw7T428yIQ6+NjvYQ36cf5mbchX58CBM7KfUGnsQLIAP5tnk HM4kdIDbGCr78RCE916blRKETrbqtNi4hHIAscesJfRJsBZ+TlhouyQie/SjGnvRULjADS5lCWKL DBRUIMzOomK4Tekrdrxk1DwcpL68xAHt5D19Iw== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=39570 is now in the chain-of-trust
	Query to b.root-servers.net for blog.cscholz.io/A
	Received 811 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (811 bytes) ;; HEADER SECTION ;; id = 2818 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS a2.nic.io. io. 172800 IN NS a0.nic.io. io. 172800 IN NS ns-a3.io. io. 172800 IN NS c0.nic.io. io. 172800 IN NS ns-a1.io. io. 172800 IN NS b0.nic.io. io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . vIyDUAhzLrVd9S3xu0cJWzTCNZ7BE/wTcogenP2HcyhY6tgBJSqz/evFjCLcpW87y5Z/Y/2O1VNU Ez++NOeTQ3vcYI2WH+QUZmKsx1+Yip3NgKY7yHJY7MjQ0EDBwvJyq1KqzIMgEyB9+a8uoeU2LEMe ltAZZuJ83BoqXH5IE6CAPKhpLnoMbe3IrAf5v4QyfmSQRlj6g9vwskKmFXvdfdfSXKXH+t7HKi0r z50vsxzPYVv5Nd/Pv0kApTTmgOrBdTZqERyTLUFab81CCHQqJZzbXLboTGrmwKkKfADlyF2yrcqr 2Tv4w6QDtJmhwYvC9ybQVddU1Sh8PubAbUpDuQ== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a2.nic.io. 172800 IN A 65.22.163.17 b0.nic.io. 172800 IN A 65.22.161.17 c0.nic.io. 172800 IN A 65.22.162.17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a3.io. 172800 IN A 74.116.178.1 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for io/DNSKEY
	Received 798 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (798 bytes) ;; HEADER SECTION ;; id = 26764 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS c0.nic.io. io. 172800 IN NS ns-a1.io. io. 172800 IN NS ns-a3.io. io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . vIyDUAhzLrVd9S3xu0cJWzTCNZ7BE/wTcogenP2HcyhY6tgBJSqz/evFjCLcpW87y5Z/Y/2O1VNU Ez++NOeTQ3vcYI2WH+QUZmKsx1+Yip3NgKY7yHJY7MjQ0EDBwvJyq1KqzIMgEyB9+a8uoeU2LEMe ltAZZuJ83BoqXH5IE6CAPKhpLnoMbe3IrAf5v4QyfmSQRlj6g9vwskKmFXvdfdfSXKXH+t7HKi0r z50vsxzPYVv5Nd/Pv0kApTTmgOrBdTZqERyTLUFab81CCHQqJZzbXLboTGrmwKkKfADlyF2yrcqr 2Tv4w6QDtJmhwYvC9ybQVddU1Sh8PubAbUpDuQ== ) ;; ADDITIONAL SECTION (12 records) a0.nic.io. 172800 IN A 65.22.160.17 a2.nic.io. 172800 IN A 65.22.163.17 b0.nic.io. 172800 IN A 65.22.161.17 c0.nic.io. 172800 IN A 65.22.162.17 ns-a1.io. 172800 IN A 194.0.1.1 ns-a3.io. 172800 IN A 74.116.178.1 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ns-a1.io. 172800 IN AAAA 2001:678:4::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone io

	Checking DS between . and io
	Query to h.root-servers.net for io/DS
	Received 450 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (450 bytes) ;; HEADER SECTION ;; id = 22800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DS ;; ANSWER SECTION (4 records) io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9 io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 ) io. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . vIyDUAhzLrVd9S3xu0cJWzTCNZ7BE/wTcogenP2HcyhY6tgBJSqz/evFjCLcpW87y5Z/Y/2O1VNU Ez++NOeTQ3vcYI2WH+QUZmKsx1+Yip3NgKY7yHJY7MjQ0EDBwvJyq1KqzIMgEyB9+a8uoeU2LEMe ltAZZuJ83BoqXH5IE6CAPKhpLnoMbe3IrAf5v4QyfmSQRlj6g9vwskKmFXvdfdfSXKXH+t7HKi0r z50vsxzPYVv5Nd/Pv0kApTTmgOrBdTZqERyTLUFab81CCHQqJZzbXLboTGrmwKkKfADlyF2yrcqr 2Tv4w6QDtJmhwYvC9ybQVddU1Sh8PubAbUpDuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DS records for io in the . zone
	DS=57355/SHA-1 has algorithm RSASHA256
	DS=57355/SHA-256 has algorithm RSASHA256
	DS=64744/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`io. 86400 IN RRSIG ( DS 8 1 86400 20180508170000 20180425160000 39570 . vIyDUAhzLrVd9S3xu0cJWzTCNZ7BE/wTcogenP2HcyhY6tgBJSqz/evFjCLcpW87y5Z/Y/2O1VNU Ez++NOeTQ3vcYI2WH+QUZmKsx1+Yip3NgKY7yHJY7MjQ0EDBwvJyq1KqzIMgEyB9+a8uoeU2LEMe ltAZZuJ83BoqXH5IE6CAPKhpLnoMbe3IrAf5v4QyfmSQRlj6g9vwskKmFXvdfdfSXKXH+t7HKi0r z50vsxzPYVv5Nd/Pv0kApTTmgOrBdTZqERyTLUFab81CCHQqJZzbXLboTGrmwKkKfADlyF2yrcqr 2Tv4w6QDtJmhwYvC9ybQVddU1Sh8PubAbUpDuQ== )`
	RRSIG=39570 and DNSKEY=39570 verifies the DS RRset
	DS=57355/SHA-1 is now in the chain-of-trust
	DS=64744/SHA-256 is now in the chain-of-trust
	`io. 86400 IN DS 57355 8 1 434e91e206134f5b3b0ac603b26f5e029346abc9`
	`io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 )`
	`io. 86400 IN DS ( 64744 8 2 2e7d661097a76eac145858e4ff8f3ddae5eaedfd527725bc6f8a943e4fe23a29 )`
	Query to a0.nic.io for io/DNSKEY
	Received 1333 bytes from 65.22.160.17
	;; Answer received from 65.22.160.17 (1333 bytes) ;; HEADER SECTION ;; id = 35511 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (6 records) io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355 io. 86400 IN DNSKEY ( 257 3 8 AwEAAdXClDBI9GCqAeERBHda3lBB3DXMWhfR+7LNwJv7DWIR2BwZk0zwFKnklvclDiEU5pM9HM6L qozITUplLjrthtobBwbY8lhjOicZuGe7L4EQJV3kZSkwFcdS5ojGkSNJfOZgJnCW8SNaap0koRvC w8ZqWGeIqep5kO9JfcffkMras5HCMEQL40WaVKnqMKthm+sVzVQ6D8ZytGLH0jQ7Vxfp/KRgR8id d79tOmOGj0CvrvkeVb5qS7/rEtturAivFIzUQi9/Ek53FWEkY+qkPMDBT40H8SEGASVUZCvDYwQa b1XyGFmOzFbVm9vCOZ9BYvYlsO9him80IU+d7R44orM= ) ; Key ID = 64744 io. 86400 IN DNSKEY ( 256 3 8 AwEAAcLtF0acBspt3iF2RWqh0La0Xv0oSo9TRSOyfe17Qh4dtHyE+5ue6uaKa9pqb+RPjTdYuQ+Z IFLd36xb5gAqh7j6MC8nnJPnxwl2opzeCIa+/X4X9pLVHN/+y27lZpoWV3+dHhEMbfZklGv8Ogtl fnZ7YWRKzAqyKoVWkDvTYOy7 ) ; Key ID = 17116 io. 86400 IN DNSKEY ( 256 3 8 BQEAAAAB6ggF1bt+xFtc74YMdWwTXSO1ztmexDeVTZHFvQFxNzwjnDSIwVpEYuxcOQQZsXTu44V0 jOuK9F1DSTWu5ZupW08yIkO6vp3BakEhjebxuo51GHvfNNEc81OcwscNn20e5EIE2kdnBKkdW/9G Z4I1jCNmsj64esj46HKFNpqWkx0= ) ; Key ID = 63407 io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180516151831 20180425141831 17116 io. hwRlOWUBiSJJbLG+p3HrBzdd485tYv7ucc1BLckiNmsLaMTGND/orfQMBzo0zmWCcdYOldestZJi me0Jf90cNmfLeCHKhXxULx+z+nW+WbJQlBOANgQxZU3+BNWpU6xwsFFNHwWpxmtPMUKg4D4+OqQz Zo42jsDNxUmFPtyKD/4= ) io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180516151831 20180425141831 57355 io. Gi5fkDtnPdhZU4OLMpOYSik+7TIWwdXPEtV/SN/uEfgHCEtEiNd5rxY6kEfSf26xY6ctidYlTbUf aEmY42a7LFZZCk/cixRP8joZ+h0bYhJLa3K/IRbWNnIFnhOdPd/l3ff/kcimNJDNlRqdWpvDtljy RrKmFKIROTKmcXep/6be5G4CSKZB3UHgqpxX4da4JNd6oHK6QtgluyDpKwDrdND8xIu0Pj2d/ll5 /AWi0xeMPWUXTSOAfqRiqOx8jbTDzzGwSi0NXwoJ2MIzkAUZ8KUoYC/gPSxkU7lUvSGHDdoScRru NyOtrNdAUmAnU444irQgNan+hlzIUIY4IF6ZBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for io
	`io. 86400 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355`
	`io. 86400 IN DNSKEY ( 257 3 8 AwEAAdXClDBI9GCqAeERBHda3lBB3DXMWhfR+7LNwJv7DWIR2BwZk0zwFKnklvclDiEU5pM9HM6L qozITUplLjrthtobBwbY8lhjOicZuGe7L4EQJV3kZSkwFcdS5ojGkSNJfOZgJnCW8SNaap0koRvC w8ZqWGeIqep5kO9JfcffkMras5HCMEQL40WaVKnqMKthm+sVzVQ6D8ZytGLH0jQ7Vxfp/KRgR8id d79tOmOGj0CvrvkeVb5qS7/rEtturAivFIzUQi9/Ek53FWEkY+qkPMDBT40H8SEGASVUZCvDYwQa b1XyGFmOzFbVm9vCOZ9BYvYlsO9him80IU+d7R44orM= ) ; Key ID = 64744`
	`io. 86400 IN DNSKEY ( 256 3 8 AwEAAcLtF0acBspt3iF2RWqh0La0Xv0oSo9TRSOyfe17Qh4dtHyE+5ue6uaKa9pqb+RPjTdYuQ+Z IFLd36xb5gAqh7j6MC8nnJPnxwl2opzeCIa+/X4X9pLVHN/+y27lZpoWV3+dHhEMbfZklGv8Ogtl fnZ7YWRKzAqyKoVWkDvTYOy7 ) ; Key ID = 17116`
	`io. 86400 IN DNSKEY ( 256 3 8 BQEAAAAB6ggF1bt+xFtc74YMdWwTXSO1ztmexDeVTZHFvQFxNzwjnDSIwVpEYuxcOQQZsXTu44V0 jOuK9F1DSTWu5ZupW08yIkO6vp3BakEhjebxuo51GHvfNNEc81OcwscNn20e5EIE2kdnBKkdW/9G Z4I1jCNmsj64esj46HKFNpqWkx0= ) ; Key ID = 63407`
	DNSKEY=57355/SEP is now in the chain-of-trust
	DS=57355/SHA-1 verifies DNSKEY=57355/SEP
	DS=57355/SHA-256 verifies DNSKEY=57355/SEP
	DNSKEY=64744/SEP is now in the chain-of-trust
	DS=64744/SHA-256 verifies DNSKEY=64744/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180516151831 20180425141831 17116 io. hwRlOWUBiSJJbLG+p3HrBzdd485tYv7ucc1BLckiNmsLaMTGND/orfQMBzo0zmWCcdYOldestZJi me0Jf90cNmfLeCHKhXxULx+z+nW+WbJQlBOANgQxZU3+BNWpU6xwsFFNHwWpxmtPMUKg4D4+OqQz Zo42jsDNxUmFPtyKD/4= )`
	`io. 86400 IN RRSIG ( DNSKEY 8 1 86400 20180516151831 20180425141831 57355 io. Gi5fkDtnPdhZU4OLMpOYSik+7TIWwdXPEtV/SN/uEfgHCEtEiNd5rxY6kEfSf26xY6ctidYlTbUf aEmY42a7LFZZCk/cixRP8joZ+h0bYhJLa3K/IRbWNnIFnhOdPd/l3ff/kcimNJDNlRqdWpvDtljy RrKmFKIROTKmcXep/6be5G4CSKZB3UHgqpxX4da4JNd6oHK6QtgluyDpKwDrdND8xIu0Pj2d/ll5 /AWi0xeMPWUXTSOAfqRiqOx8jbTDzzGwSi0NXwoJ2MIzkAUZ8KUoYC/gPSxkU7lUvSGHDdoScRru NyOtrNdAUmAnU444irQgNan+hlzIUIY4IF6ZBg== )`
	RRSIG=17116 and DNSKEY=17116 verifies the DNSKEY RRset
	RRSIG=57355 and DNSKEY=57355/SEP verifies the DNSKEY RRset
	DNSKEY=17116 is now in the chain-of-trust
	DNSKEY=63407 is now in the chain-of-trust
	Query to a0.nic.io for blog.cscholz.io/A
	Received 298 bytes from 65.22.160.17
	;; Answer received from 65.22.160.17 (298 bytes) ;; HEADER SECTION ;; id = 7590 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS ns3.o-o-s.de. cscholz.io. 86400 IN NS ns2.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180516151831 20180425141831 17116 io. D8dNsiblwJZa+Ntq6mb+gSVLWzPnDsVGB4hTHGHCAiSCI7Dnv2h6RYXhThiVPSxJPqqe0O/mn4ok VRz5Njz/6sr0aCfCUdjv83wy7Qb0BuS4gq16ZqGDQKWCyNpjplP0UpAi3HdqOmE1orWAos9HZfYo CBAm0sX3ueAvy4h264A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a2.nic.io for cscholz.io/DNSKEY
	Received 293 bytes from 65.22.163.17
	;; Answer received from 65.22.163.17 (293 bytes) ;; HEADER SECTION ;; id = 35226 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 86400 IN NS ns2.o-o-s.de. cscholz.io. 86400 IN NS ns3.o-o-s.de. cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180516151831 20180425141831 17116 io. D8dNsiblwJZa+Ntq6mb+gSVLWzPnDsVGB4hTHGHCAiSCI7Dnv2h6RYXhThiVPSxJPqqe0O/mn4ok VRz5Njz/6sr0aCfCUdjv83wy7Qb0BuS4gq16ZqGDQKWCyNpjplP0UpAi3HdqOmE1orWAos9HZfYo CBAm0sX3ueAvy4h264A= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cscholz.io

cscholz.io

	Checking DS between io and cscholz.io
	Query to ns-a3.io for cscholz.io/DS
	Received 249 bytes from 74.116.178.1
	;; Answer received from 74.116.178.1 (249 bytes) ;; HEADER SECTION ;; id = 32371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DS ;; ANSWER SECTION (2 records) cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 ) cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180516151831 20180425141831 17116 io. D8dNsiblwJZa+Ntq6mb+gSVLWzPnDsVGB4hTHGHCAiSCI7Dnv2h6RYXhThiVPSxJPqqe0O/mn4ok VRz5Njz/6sr0aCfCUdjv83wy7Qb0BuS4gq16ZqGDQKWCyNpjplP0UpAi3HdqOmE1orWAos9HZfYo CBAm0sX3ueAvy4h264A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cscholz.io in the io zone
	DS=5650/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cscholz.io. 86400 IN RRSIG ( DS 8 2 86400 20180516151831 20180425141831 17116 io. D8dNsiblwJZa+Ntq6mb+gSVLWzPnDsVGB4hTHGHCAiSCI7Dnv2h6RYXhThiVPSxJPqqe0O/mn4ok VRz5Njz/6sr0aCfCUdjv83wy7Qb0BuS4gq16ZqGDQKWCyNpjplP0UpAi3HdqOmE1orWAos9HZfYo CBAm0sX3ueAvy4h264A= )`
	RRSIG=17116 and DNSKEY=17116 verifies the DS RRset
	DS=5650/SHA-256 is now in the chain-of-trust
	`cscholz.io. 86400 IN DS ( 5650 8 2 e8b16dae221a65d1376e439808e1478e362925eb39a7ff22b6227f933bdce579 )`
	Query to ns3.o-o-s.de for cscholz.io/DNSKEY
	Received 1187 bytes from 92.51.135.226
	;; Answer received from 92.51.135.226 (1187 bytes) ;; HEADER SECTION ;; id = 20774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN DNSKEY ;; ANSWER SECTION (4 records) cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650 cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049 cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200412000000 20180412183027 5650 cscholz.io. PfEDl5wlpYMJj1snUUMLZRA5hSYJUVOpvzNkLJJUglgrMKB/o5ZspUROVfD2rEyseTvB9N3LAkXI viqZC9odQLbeB1jH03950kKy8jeYGSCdSiSzi2Ob3fgRlSTyResUIU1q7M3Lsqb2kzYU4LlNiSA6 f3BjhJvjPPjsMb4I5paqHJLcF1NKraG74LKjr4DPzlFOnDS1shJgcUS+oG7pIVx7GCGsK2xN6u+P CW3ksinp4rSKnWWUKerKYE20qzr1mNfvLIe8OJyIDrcR3tkq598pqZVdyKaFQRanwecb4OoR7ZAG fpFJq4RzzcxO4fp33FzboeXgNEflExIk3+jbPQ== ) cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200412000000 20180412183027 23049 cscholz.io. g6x0uDgL/sD4J8DDZfGOMu9ogmSaXW7uMGVimrktqP/+vLIyk/Zz+Krcpb6ucqNmQgKiS+nbIXDc 8iEYGjRC/u2lo3p2ZyoDyQ3KYNpXNfpi3JRSFoXM6HhO4mjKA8ZjTRXBCn8NRlCXITwWyunmu4dj 51fV5lLNhn2lI3r1a8vwVd/pNKT1IgMt1D/nr5T554OnyTKuMgkgpLE2DhPmGVYaSbTu5stk6t9J /CGlAocKhetd8me90WA/p3AQ/0bGuqhfGbBqR8FmVBTgqEPusDOWOfHmov91lx+J+g9Ynv1XBy1e c3jJV+4C0RUYUd2He4rY+MOMZA190S2OE1AesQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cscholz.io
	`cscholz.io. 3600 IN DNSKEY ( 257 3 8 AwEAAbfxOoYeTkW/ZRDjM4W3nfeqt1Do0hE0UFiKFsnmwL912lmTa40P0bcisnd39zU8jRRbkVTF yA6fntiUfsGT2ixM6XmaLKx3YLWT1cVzK/y2xys3O5Z1QREDoU2ol76mMks5bSJgJSxgSJQKzxbF ojfy/kSn5FtkhFOQATr0MTcieawMuTcqqCafMNfSibp25UyNWYDaseN/o6+reXP0H0HUb3PbDnvy MvXSTITQ2rxhnujHC+Yx8kXOjr6K1tzjtc3XU9NhL3MUIe60934nz7HR27AnUnwIKrdAhjmMC994 u5s6c+io0vNHW2N6cO862WhlDiHo/RYoc9LFHzjd4cM= ) ; Key ID = 5650`
	`cscholz.io. 3600 IN DNSKEY ( 256 3 8 AwEAAbzIvWb5zXlp+4cGEbCK7X41qMcwHaOmZPXSDaNQZQ1OK2tXldnjS0Y0EzFJN2wQ5fPn10wQ tzoHJxKhq2804TT+WDa5zaI8scELI1cCOKvKPgN8K2nCtObgYwZptOJ8BDxgTTc5Tn3at18/df1A VrRcXJYVpoPG5IPFdwfe71Rq88k6ZFIEYINZoLdR8K+Y2v7jNLzFJMe/Ai6y9/khQga2AMrMshYs Qp8ZTU/ZXGUoa6mXnXqVUD4n/y4vQtZrduwqostvIm0rwqpt8kyfFZCJ7PJyLAmJXzLqM37evF6l adTCZ1W8JMxP/omOpeGwYNwii7hwxNfKP82seBKMYPE= ) ; Key ID = 23049`
	DNSKEY=5650/SEP is now in the chain-of-trust
	DS=5650/SHA-256 verifies DNSKEY=5650/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200412000000 20180412183027 5650 cscholz.io. PfEDl5wlpYMJj1snUUMLZRA5hSYJUVOpvzNkLJJUglgrMKB/o5ZspUROVfD2rEyseTvB9N3LAkXI viqZC9odQLbeB1jH03950kKy8jeYGSCdSiSzi2Ob3fgRlSTyResUIU1q7M3Lsqb2kzYU4LlNiSA6 f3BjhJvjPPjsMb4I5paqHJLcF1NKraG74LKjr4DPzlFOnDS1shJgcUS+oG7pIVx7GCGsK2xN6u+P CW3ksinp4rSKnWWUKerKYE20qzr1mNfvLIe8OJyIDrcR3tkq598pqZVdyKaFQRanwecb4OoR7ZAG fpFJq4RzzcxO4fp33FzboeXgNEflExIk3+jbPQ== )`
	`cscholz.io. 3600 IN RRSIG ( DNSKEY 8 2 3600 20200412000000 20180412183027 23049 cscholz.io. g6x0uDgL/sD4J8DDZfGOMu9ogmSaXW7uMGVimrktqP/+vLIyk/Zz+Krcpb6ucqNmQgKiS+nbIXDc 8iEYGjRC/u2lo3p2ZyoDyQ3KYNpXNfpi3JRSFoXM6HhO4mjKA8ZjTRXBCn8NRlCXITwWyunmu4dj 51fV5lLNhn2lI3r1a8vwVd/pNKT1IgMt1D/nr5T554OnyTKuMgkgpLE2DhPmGVYaSbTu5stk6t9J /CGlAocKhetd8me90WA/p3AQ/0bGuqhfGbBqR8FmVBTgqEPusDOWOfHmov91lx+J+g9Ynv1XBy1e c3jJV+4C0RUYUd2He4rY+MOMZA190S2OE1AesQ== )`
	RRSIG=5650 and DNSKEY=5650/SEP verifies the DNSKEY RRset
	RRSIG=23049 and DNSKEY=23049 verifies the DNSKEY RRset
	DNSKEY=23049 is now in the chain-of-trust
	Query to ns2.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (358 bytes) ;; HEADER SECTION ;; id = 64385 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 92.51.135.226 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200412000000 20180412183027 23049 cscholz.io. TxQIWH4kki5zs1gouzlt1Q5dthEI/QoF+SX8wlyrg5qRB2UnFVyqaYDfnInINYJ1GtVJQkL0x5Xv TIAiqnL5DtjaNc5rqA9rf9l4f4FTduP1/sjHGCIyTVIwdAEm/J/l02Pt4wittR8XMbWZOEBp+bbi Ehwh5WA1FjPF5kJoufxUyirZq/N96ImYhH2BCJOjkWNMVjCGY5c7rLagP/mBvkRo9RrV8HEe/Pxn phABfnYsdXrI4xeIRTImo2SiU8C9aFlEqmmxR/EJIJmRB9ePlyy7AGaC8xBOBenNLWKk6jk1QzWV mNrCdqTEa+aGJ4oZ/KqNTGsL9w6M5ULj/kKK2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cscholz.io is authoritative for blog.cscholz.io
	Query to ns2.o-o-s.de for blog.cscholz.io/DNSKEY
	Received 749 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (749 bytes) ;; HEADER SECTION ;; id = 53978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cscholz.io. 60 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018041204 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 60 IN RRSIG ( SOA 8 2 2560 20200412000000 20180412183027 23049 cscholz.io. iRFEbzLqaQSp0ulBA03OeknxgMqZxTWEkaF03HjtU15UcvETEicvOwRc2mdsQ/BSaK9ofPYjEZ8F 6o44ORaBz253l/PwEyMQqPvmgo0umNL/LJSJa9tdYzJc1hTyYSIk+JNCMlp2TBgRtoPQAYkTYXlC c7vfGxVNScleEyMbH1yZ7pqO93oaAhpLydQ1QXMSUSGHNSF/BZ3kmSpSoT9mVIPuaQgk3cUhcf06 NnTNyLWnvEvAtjtg74o+wfArLYVCeAGhk2CpyYuyK7FkHSCTTj39Y3nbh5NDcnPCrNuqebuhhR2y xvcTLsvKxXskxAYjf2pTnBCozA4smVGz2hbf9Q== ) blog.cscholz.io. 60 IN NSEC _443._tcp.blog.cscholz.io. A RRSIG NSEC CAA blog.cscholz.io. 60 IN RRSIG ( NSEC 8 3 60 20200412000000 20180412183027 23049 cscholz.io. UGaT3siWKVkkCsjvNeMKztW0slLu0eAgWuVpNS1hnCEdxYdQO2oS+qwu6rhWoUjWl3BI6bzWfDS8 zf7T8ALUg3Q3hIlqPR1gyXHhKI5PyIrpFHo9x11JIqvzCIVm03xItbx7t932DoGkSnHcNxaIv1pj 7h3rQMKVaFJrHwsiYh27VX0EUnQdoNaKlxypNuU1+rs9KD7bbtPGQ77nMOZVwy0aF01tAg5Sxmum yXTAZ82CXRxTNm1iraFU15uvB6qimzRGOs5WGcp8Zh2O3OwMyl9N2fouHh61cR18bzo5S/L5fLvv p926JARr6mDJ5nSNvEQt/aIqJJuSqRPbLnKmpw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found RRSIG signed by cscholz.io zone
	Query to ns2.o-o-s.de for cscholz.io/SOA
	Received 396 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (396 bytes) ;; HEADER SECTION ;; id = 28060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018041204 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20200412000000 20180412183027 23049 cscholz.io. iRFEbzLqaQSp0ulBA03OeknxgMqZxTWEkaF03HjtU15UcvETEicvOwRc2mdsQ/BSaK9ofPYjEZ8F 6o44ORaBz253l/PwEyMQqPvmgo0umNL/LJSJa9tdYzJc1hTyYSIk+JNCMlp2TBgRtoPQAYkTYXlC c7vfGxVNScleEyMbH1yZ7pqO93oaAhpLydQ1QXMSUSGHNSF/BZ3kmSpSoT9mVIPuaQgk3cUhcf06 NnTNyLWnvEvAtjtg74o+wfArLYVCeAGhk2CpyYuyK7FkHSCTTj39Y3nbh5NDcnPCrNuqebuhhR2y xvcTLsvKxXskxAYjf2pTnBCozA4smVGz2hbf9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns3.o-o-s.de for cscholz.io/SOA
	Received 396 bytes from 92.51.135.226
	;; Answer received from 92.51.135.226 (396 bytes) ;; HEADER SECTION ;; id = 55955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cscholz.io. IN SOA ;; ANSWER SECTION (2 records) cscholz.io. 2560 IN SOA ( ns3.o-o-s.de. postmaster.o-o-s.de. 2018041204 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 60 ;minimum ) cscholz.io. 2560 IN RRSIG ( SOA 8 2 2560 20200412000000 20180412183027 23049 cscholz.io. iRFEbzLqaQSp0ulBA03OeknxgMqZxTWEkaF03HjtU15UcvETEicvOwRc2mdsQ/BSaK9ofPYjEZ8F 6o44ORaBz253l/PwEyMQqPvmgo0umNL/LJSJa9tdYzJc1hTyYSIk+JNCMlp2TBgRtoPQAYkTYXlC c7vfGxVNScleEyMbH1yZ7pqO93oaAhpLydQ1QXMSUSGHNSF/BZ3kmSpSoT9mVIPuaQgk3cUhcf06 NnTNyLWnvEvAtjtg74o+wfArLYVCeAGhk2CpyYuyK7FkHSCTTj39Y3nbh5NDcnPCrNuqebuhhR2y xvcTLsvKxXskxAYjf2pTnBCozA4smVGz2hbf9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.o-o-s.de for blog.cscholz.io/A
	Received 358 bytes from 188.166.132.156
	;; Answer received from 188.166.132.156 (358 bytes) ;; HEADER SECTION ;; id = 23811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; blog.cscholz.io. IN A ;; ANSWER SECTION (2 records) blog.cscholz.io. 3600 IN A 92.51.135.226 blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200412000000 20180412183027 23049 cscholz.io. TxQIWH4kki5zs1gouzlt1Q5dthEI/QoF+SX8wlyrg5qRB2UnFVyqaYDfnInINYJ1GtVJQkL0x5Xv TIAiqnL5DtjaNc5rqA9rf9l4f4FTduP1/sjHGCIyTVIwdAEm/J/l02Pt4wittR8XMbWZOEBp+bbi Ehwh5WA1FjPF5kJoufxUyirZq/N96ImYhH2BCJOjkWNMVjCGY5c7rLagP/mBvkRo9RrV8HEe/Pxn phABfnYsdXrI4xeIRTImo2SiU8C9aFlEqmmxR/EJIJmRB9ePlyy7AGaC8xBOBenNLWKk6jk1QzWV mNrCdqTEa+aGJ4oZ/KqNTGsL9w6M5ULj/kKK2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	blog.cscholz.io A RR has value 92.51.135.226
	Found 1 RRSIGs over A RRset
	`blog.cscholz.io. 3600 IN RRSIG ( A 8 3 3600 20200412000000 20180412183027 23049 cscholz.io. TxQIWH4kki5zs1gouzlt1Q5dthEI/QoF+SX8wlyrg5qRB2UnFVyqaYDfnInINYJ1GtVJQkL0x5Xv TIAiqnL5DtjaNc5rqA9rf9l4f4FTduP1/sjHGCIyTVIwdAEm/J/l02Pt4wittR8XMbWZOEBp+bbi Ehwh5WA1FjPF5kJoufxUyirZq/N96ImYhH2BCJOjkWNMVjCGY5c7rLagP/mBvkRo9RrV8HEe/Pxn phABfnYsdXrI4xeIRTImo2SiU8C9aFlEqmmxR/EJIJmRB9ePlyy7AGaC8xBOBenNLWKk6jk1QzWV mNrCdqTEa+aGJ4oZ/KqNTGsL9w6M5ULj/kKK2Q== )`
	RRSIG=23049 and DNSKEY=23049 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test blog.cscholz.io at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: