DNSSEC Analyzer

Domain Name:

Time: 2022-07-01 02:46:23 UTC, NTP stratum 16

Analyzing DNSSEC problems for byte.ma

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 34535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220711000000 20220620000000 20326 . CpFdBbv0lZXwIPLDhPn959HSJfQ4vp8r97A/rN0SPFlS4fQigB3EDXz0oeg2ENRPMn6HmrZpp0vB KMKfCXf3oC/4tioT7m18+xA05quW5+h/vJaOA0Iw7zOhTpQr1hTVaUwj/d0NV9JaCqZabjtj7ClN E/+aOBaCdVSXpy3re0WUk7FianexlLd5pL09RHGlH5eRyp8hAt5HqwrUvONfm7zgkhtO8RPtJSjN R5ZB9HDrcjDHiYzkbuw300LTphtzryG/XKwnQqv6E0iL+M6d4g7h9IQWpmM1lyjVM2sgZYGDPnBb N9kgNUCiF6HUHV12LmAJteZAQI65qARGFwADYg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	DNSKEY=20826 is now in the chain-of-trust
	Query to b.root-servers.net for byte.ma/A
	Received 853 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (853 octets) ;; HEADER SECTION ;; id = 27787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 18 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS d.tld.ma. ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS ns-ma.nic.fr. ma. 86400 IN DS ( 46261 8 2 caa9a73c53c77391cb1c3c6962379f184ba4de89695ff8212ab368efac30fbf6 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . FKNXEdQNN4GkNAbFkaZHm5iWULKD25HWSK55qfEOlvtfd8QTAY5VZ7EAei/Yt74QLRjs6vwcylpb EBcVm9pr1owYTFIvAgzebTLWu0vvvNFygqLHT/VnBeyF0d3IGO/vkB6bgfVr7pSq7xFJFqQqXBTG tf0I9/+8yy1FVh193TMV8Nlk+mQdD8e+FCZBJrA3gzilzs2xbGvKg+zJR+rCJUDn8hyDsWYyGY83 lvwtEzFB176bbJpVuZ8wbuJ13pEEwT2PTF0jwkZHPl4WYMmDue4poWXv8aR1YoFTAiWAEsP4LZsa VvFUDR9O6V+WjvgG3UTUQg1iDbHQrogBXeMkUw== ) ;; ADDITIONAL SECTION (18 records) a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 e.tld.ma. 172800 IN A 105.73.80.236 f.tld.ma. 172800 IN A 41.214.240.4 dns.inria.fr. 172800 IN A 193.51.208.13 ns-ma.nic.fr. 172800 IN A 194.0.9.1 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for ma/DNSKEY
	Received 852 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (852 octets) ;; HEADER SECTION ;; id = 36041 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 18 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS ns-ma.nic.fr. ma. 172800 IN NS d.tld.ma. ma. 86400 IN DS ( 46261 8 2 caa9a73c53c77391cb1c3c6962379f184ba4de89695ff8212ab368efac30fbf6 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . FKNXEdQNN4GkNAbFkaZHm5iWULKD25HWSK55qfEOlvtfd8QTAY5VZ7EAei/Yt74QLRjs6vwcylpb EBcVm9pr1owYTFIvAgzebTLWu0vvvNFygqLHT/VnBeyF0d3IGO/vkB6bgfVr7pSq7xFJFqQqXBTG tf0I9/+8yy1FVh193TMV8Nlk+mQdD8e+FCZBJrA3gzilzs2xbGvKg+zJR+rCJUDn8hyDsWYyGY83 lvwtEzFB176bbJpVuZ8wbuJ13pEEwT2PTF0jwkZHPl4WYMmDue4poWXv8aR1YoFTAiWAEsP4LZsa VvFUDR9O6V+WjvgG3UTUQg1iDbHQrogBXeMkUw== ) ;; ADDITIONAL SECTION (18 records) ns-ma.nic.fr. 172800 IN A 194.0.9.1 dns.inria.fr. 172800 IN A 193.51.208.13 f.tld.ma. 172800 IN A 41.214.240.4 e.tld.ma. 172800 IN A 105.73.80.236 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ma

	Checking DS between . and ma
	Query to l.root-servers.net for ma/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (366 octets) ;; HEADER SECTION ;; id = 42425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ma. IN DS ;; ANSWER SECTION (2 records) ma. 86400 IN DS ( 46261 8 2 caa9a73c53c77391cb1c3c6962379f184ba4de89695ff8212ab368efac30fbf6 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . FKNXEdQNN4GkNAbFkaZHm5iWULKD25HWSK55qfEOlvtfd8QTAY5VZ7EAei/Yt74QLRjs6vwcylpb EBcVm9pr1owYTFIvAgzebTLWu0vvvNFygqLHT/VnBeyF0d3IGO/vkB6bgfVr7pSq7xFJFqQqXBTG tf0I9/+8yy1FVh193TMV8Nlk+mQdD8e+FCZBJrA3gzilzs2xbGvKg+zJR+rCJUDn8hyDsWYyGY83 lvwtEzFB176bbJpVuZ8wbuJ13pEEwT2PTF0jwkZHPl4WYMmDue4poWXv8aR1YoFTAiWAEsP4LZsa VvFUDR9O6V+WjvgG3UTUQg1iDbHQrogBXeMkUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ma in the . zone
	DS=46261/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ma. 86400 IN RRSIG ( DS 8 1 86400 20220713170000 20220630160000 47671 . FKNXEdQNN4GkNAbFkaZHm5iWULKD25HWSK55qfEOlvtfd8QTAY5VZ7EAei/Yt74QLRjs6vwcylpb EBcVm9pr1owYTFIvAgzebTLWu0vvvNFygqLHT/VnBeyF0d3IGO/vkB6bgfVr7pSq7xFJFqQqXBTG tf0I9/+8yy1FVh193TMV8Nlk+mQdD8e+FCZBJrA3gzilzs2xbGvKg+zJR+rCJUDn8hyDsWYyGY83 lvwtEzFB176bbJpVuZ8wbuJ13pEEwT2PTF0jwkZHPl4WYMmDue4poWXv8aR1YoFTAiWAEsP4LZsa VvFUDR9O6V+WjvgG3UTUQg1iDbHQrogBXeMkUw== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=46261/SHA-256 is now in the chain-of-trust
	`ma. 86400 IN DS ( 46261 8 2 caa9a73c53c77391cb1c3c6962379f184ba4de89695ff8212ab368efac30fbf6 )`
	Query to dns.inria.fr for ma/DNSKEY
	Received 1055 bytes from 193.51.208.13
	;; Response received from 193.51.208.13 (1055 octets) ;; HEADER SECTION ;; id = 58162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (5 records) ma. 172800 IN DNSKEY ( 256 3 8 AwEAAaOKZWfX1R79Ttbhq5bK247zPT8CP4Mx66u029peoi7kR55b9f1WCdjSJCSZ8b8XIGq2Ynw2 CIJyHPdMayClHv6lMOz40QPHfCgtap0ZdWVSXdnXMFi4iSYXLEpVQJTU5oiwsEvZ7enwVef6WQeT YVFxtGOhZBQoYyR/6p+41Noz ) ; Key ID = 49050 ma. 172800 IN DNSKEY ( 256 3 8 AwEAAbRCfijEVTq2ERDSfh+TeXLUuPZJjzZ0qVRG1VZil3b1yTWbxqtdeHDw5vut/r7E8Xrvl7Pr 0r+qXcDehZeN7CyjH9wfP5CzOwjhr4QG2tS/5oiPBN6hZ0iSGpfnWYUj4fb8ru9RWMl9RaYpm09U db52uymJDoxR2vFcW0KaUFpX ) ; Key ID = 56904 ma. 172800 IN DNSKEY ( 257 3 8 AwEAAdnFZZ/qT5ut0DgY9hrH2iwLb5krRh1ZZ5QSUWXL1cIG8kylFGxQAJspDpsaECRi7z/TIim2 7GxF7ciOzcLFKKl9Hqq2kVSVY13AA6Z7JKV+uPpr+fGF0iOZl34yMaaSKSbCnPuAoiAFzq98XJlT dwe7Uocs5SzSKZCsTfQHd5k49MrnvgPc7mFNvmYsx/MzeWFdvJs2D7dij/Y7zsi9PoNKePJ4YNGM lxAALD32qUOHw/5GXnMd/Ph5Rov23EnHT+/UCx4pSFpdlRpGy5XZgA7Xf/JWjonj2DJ/YLMI04Tu bMuJ324cBt3ha5njGbxa3seYkwrheN9jBgtPcbeS6d0= ) ; Key ID = 46261 ma. 172800 IN RRSIG ( DNSKEY 8 1 172800 20220725093843 20220625093328 46261 ma. Bv3TK2r2OvUc78naDi0JcCDGSVdv9Cgm9ApzaJ+8ACSdHytEBmL4xCdAbS/8UZHuwbe727pAg5Fh p+QZs0tE5VzgYFz/ArWkRZiPoi8MqmagvV8WSNPOLbu1TTdqiY9nqlP9AEQW68ilNlXdY20xNfN8 mUAD9LEymm4wJC+6yXtfP10SFMsevr2/w8UhW1Tvihzkzm05FJ0onRrhI0ThmZwEPPPDo70wfIrY AF0VuxffRESKk3+frkVRoQRH01QExgp+VPljBm+Ij+z6nX0lRpfOj3TLuKk7Ct5ScpaBbcpHsl7u OvMsCeCvqNFRgTB+LuxbMf90Mcx5uAF1+1OW9Q== ) ma. 172800 IN RRSIG ( DNSKEY 8 1 172800 20220725093843 20220625093328 49050 ma. j6hUemo7BtUMsNY42IObIfnQis1eGRyGVfffyICWonTrqU0ZKr5VhYfc83VHe/gUX2tpg1vx9B5o bPZzbVF4Sx2h2sCKNzowDZtDC1kXZMpWpU8slMHHteQy/l9FM2RV/VQKNYW06QYjgZRfJmbBBmNN 6raYmX9ElVIxIoqydBM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ma
	`ma. 172800 IN DNSKEY ( 256 3 8 AwEAAaOKZWfX1R79Ttbhq5bK247zPT8CP4Mx66u029peoi7kR55b9f1WCdjSJCSZ8b8XIGq2Ynw2 CIJyHPdMayClHv6lMOz40QPHfCgtap0ZdWVSXdnXMFi4iSYXLEpVQJTU5oiwsEvZ7enwVef6WQeT YVFxtGOhZBQoYyR/6p+41Noz ) ; Key ID = 49050`
	`ma. 172800 IN DNSKEY ( 256 3 8 AwEAAbRCfijEVTq2ERDSfh+TeXLUuPZJjzZ0qVRG1VZil3b1yTWbxqtdeHDw5vut/r7E8Xrvl7Pr 0r+qXcDehZeN7CyjH9wfP5CzOwjhr4QG2tS/5oiPBN6hZ0iSGpfnWYUj4fb8ru9RWMl9RaYpm09U db52uymJDoxR2vFcW0KaUFpX ) ; Key ID = 56904`
	`ma. 172800 IN DNSKEY ( 257 3 8 AwEAAdnFZZ/qT5ut0DgY9hrH2iwLb5krRh1ZZ5QSUWXL1cIG8kylFGxQAJspDpsaECRi7z/TIim2 7GxF7ciOzcLFKKl9Hqq2kVSVY13AA6Z7JKV+uPpr+fGF0iOZl34yMaaSKSbCnPuAoiAFzq98XJlT dwe7Uocs5SzSKZCsTfQHd5k49MrnvgPc7mFNvmYsx/MzeWFdvJs2D7dij/Y7zsi9PoNKePJ4YNGM lxAALD32qUOHw/5GXnMd/Ph5Rov23EnHT+/UCx4pSFpdlRpGy5XZgA7Xf/JWjonj2DJ/YLMI04Tu bMuJ324cBt3ha5njGbxa3seYkwrheN9jBgtPcbeS6d0= ) ; Key ID = 46261`
	DNSKEY=46261/SEP is now in the chain-of-trust
	DS=46261/SHA-256 verifies DNSKEY=46261/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ma. 172800 IN RRSIG ( DNSKEY 8 1 172800 20220725093843 20220625093328 46261 ma. Bv3TK2r2OvUc78naDi0JcCDGSVdv9Cgm9ApzaJ+8ACSdHytEBmL4xCdAbS/8UZHuwbe727pAg5Fh p+QZs0tE5VzgYFz/ArWkRZiPoi8MqmagvV8WSNPOLbu1TTdqiY9nqlP9AEQW68ilNlXdY20xNfN8 mUAD9LEymm4wJC+6yXtfP10SFMsevr2/w8UhW1Tvihzkzm05FJ0onRrhI0ThmZwEPPPDo70wfIrY AF0VuxffRESKk3+frkVRoQRH01QExgp+VPljBm+Ij+z6nX0lRpfOj3TLuKk7Ct5ScpaBbcpHsl7u OvMsCeCvqNFRgTB+LuxbMf90Mcx5uAF1+1OW9Q== )`
	`ma. 172800 IN RRSIG ( DNSKEY 8 1 172800 20220725093843 20220625093328 49050 ma. j6hUemo7BtUMsNY42IObIfnQis1eGRyGVfffyICWonTrqU0ZKr5VhYfc83VHe/gUX2tpg1vx9B5o bPZzbVF4Sx2h2sCKNzowDZtDC1kXZMpWpU8slMHHteQy/l9FM2RV/VQKNYW06QYjgZRfJmbBBmNN 6raYmX9ElVIxIoqydBM= )`
	RRSIG=46261 and DNSKEY=46261/SEP verifies the DNSKEY RRset
	RRSIG=49050 and DNSKEY=49050 verifies the DNSKEY RRset
	DNSKEY=49050 is now in the chain-of-trust
	DNSKEY=56904 is now in the chain-of-trust
	Query to ns-ma.nic.fr for byte.ma/A
	Received 337 bytes from 194.0.9.1
	;; Response received from 194.0.9.1 (337 octets) ;; HEADER SECTION ;; id = 20093 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) byte.ma. 108000 IN NS becky.ns.cloudflare.com. byte.ma. 108000 IN NS thomas.ns.cloudflare.com. GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN NSEC3 ( 1 0 10 14b1c6807d9a53 gqhfkmekuuedc1lccskn6oe8n29qsa4c NS ) GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20220727073340 20220627072109 49050 ma. anTHAGKDUfNmHPaggE/PuOa+0amt+qO3n0L5gCszRBx9r3PdV/eCt0lOJy4gjVNWlyIadL/V9FeK mY48xS3XtO2a1qDGkoNlAHtYdddlz01Hckpa4+4SRr8K5yeW1NKz2nQ/y6sV3C6JxD0puSP3yk6P XLf2eHddeq7Bkl7LVo8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.tld.ma for byte.ma/DNSKEY
	Received 337 bytes from 81.192.171.139
	;; Response received from 81.192.171.139 (337 octets) ;; HEADER SECTION ;; id = 45695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) byte.ma. 108000 IN NS becky.ns.cloudflare.com. byte.ma. 108000 IN NS thomas.ns.cloudflare.com. GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN NSEC3 ( 1 0 10 14b1c6807d9a53 gqhfkmekuuedc1lccskn6oe8n29qsa4c NS ) GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20220727073340 20220627072109 49050 ma. anTHAGKDUfNmHPaggE/PuOa+0amt+qO3n0L5gCszRBx9r3PdV/eCt0lOJy4gjVNWlyIadL/V9FeK mY48xS3XtO2a1qDGkoNlAHtYdddlz01Hckpa4+4SRr8K5yeW1NKz2nQ/y6sV3C6JxD0puSP3yk6P XLf2eHddeq7Bkl7LVo8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone byte.ma

byte.ma

	Checking DS between ma and byte.ma
	Query to c.tld.ma for byte.ma/DS
	Received 491 bytes from 81.192.171.139
	;; Response received from 81.192.171.139 (491 octets) ;; HEADER SECTION ;; id = 44352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ma. 1800 IN SOA ( c.tld.ma. ma.anrt.ma. 2035183930 ;serial 900 ;refresh 90 ;retry 604800000 ;expire 1800 ;minimum ) ma. 1800 IN RRSIG ( SOA 8 1 108000 20220731024207 20220701014207 49050 ma. K7qtSiQRvlXN23zfMIlGYsad72Ay2HFGMWQyQZgBFXLD2x45mURTz0XBuliOJOUMAtElUu6oTpEH Em5hkrtMPIWXHk5eJR0HseoeDPz98DyjfGYwoesrDY6uvr0YsA0ykGco+Cjv6ycgHy0qro3DzEOa LOnqeujPbqBZhfY9kqU= ) GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN NSEC3 ( 1 0 10 14b1c6807d9a53 gqhfkmekuuedc1lccskn6oe8n29qsa4c NS ) GQGSMDUFFL3VN8TRFUKLOVM100CDGBN5.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20220727073340 20220627072109 49050 ma. anTHAGKDUfNmHPaggE/PuOa+0amt+qO3n0L5gCszRBx9r3PdV/eCt0lOJy4gjVNWlyIadL/V9FeK mY48xS3XtO2a1qDGkoNlAHtYdddlz01Hckpa4+4SRr8K5yeW1NKz2nQ/y6sV3C6JxD0puSP3yk6P XLf2eHddeq7Bkl7LVo8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for byte.ma in the ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/DNSKEY
	Received 299 bytes from 172.64.33.238
	;; Response received from 172.64.33.238 (299 octets) ;; HEADER SECTION ;; id = 10040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN DNSKEY ;; ANSWER SECTION (3 records) byte.ma. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 byte.ma. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 byte.ma. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220813175038 20220613175038 2371 byte.ma. L9M7oR+d35gWj+bGbH/ytROl4jDE0CxIJE7DsZd1x/63yutgoz3W9wHIVU0596ciXhAZkXUplHuo tLPIqKcUnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for byte.ma
	`byte.ma. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`byte.ma. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`byte.ma. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220813175038 20220613175038 2371 byte.ma. L9M7oR+d35gWj+bGbH/ytROl4jDE0CxIJE7DsZd1x/63yutgoz3W9wHIVU0596ciXhAZkXUplHuo tLPIqKcUnQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to becky.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 172.64.32.73
	;; Response received from 172.64.32.73 (171 octets) ;; HEADER SECTION ;; id = 293 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. OFAhWO9BMHT4ny4TV0pn9R/aHrCCuFsTbOt+JeW+gn9biOtFt8tAFlWUKKEWA2tm9mw4Uj1NQXzT rg5LM2DD9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	becky.ns.cloudflare.com is authoritative for byte.ma
	Found RRSIG signed by byte.ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/SOA
	Received 202 bytes from 172.64.33.238
	;; Response received from 172.64.33.238 (202 octets) ;; HEADER SECTION ;; id = 54931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN SOA ;; ANSWER SECTION (2 records) byte.ma. 3600 IN SOA ( becky.ns.cloudflare.com. dns.cloudflare.com. 2280963551 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) byte.ma. 3600 IN RRSIG ( SOA 13 2 3600 20220702034624 20220630014624 34505 byte.ma. BGH0HTtqkbKeQKq1ZkcgAUI1pKEPm0515cvk8lxQFBxG6YggJFWPMKI19RiAm2jpWH72xPkIhGQy crMIb+VOxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to becky.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 108.162.192.73
	;; Response received from 108.162.192.73 (171 octets) ;; HEADER SECTION ;; id = 39044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. HClIwIff2jTXlittrYBVl3NanfOGfsqCnP81rBG6mjbnvHcST3YWoA8e/bvZLgHX8RCPBElPRhYA 3OZHek8fqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	byte.ma A RR has value 172.67.152.154
	byte.ma A RR has value 104.21.1.242
	Found 1 RRSIGs over A RRset
	`byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. HClIwIff2jTXlittrYBVl3NanfOGfsqCnP81rBG6mjbnvHcST3YWoA8e/bvZLgHX8RCPBElPRhYA 3OZHek8fqQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

byte.ma

	Query to thomas.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 173.245.59.238
	;; Response received from 173.245.59.238 (171 octets) ;; HEADER SECTION ;; id = 22845 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. krax1wapOt37vkvSQQdNf8/BkZScd7hp5d2WKGBpjkWoEkyxbscrLhW+yHVrUFYHPjvpt/xgFDEN +pbyfV+xXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	thomas.ns.cloudflare.com is authoritative for byte.ma
	Found RRSIG signed by byte.ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 172.64.33.238
	;; Response received from 172.64.33.238 (171 octets) ;; HEADER SECTION ;; id = 30857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. ZuUSPqZzZCwbf6gHxFzRUejmEbYVeLuZnW84uWb9zMlrr/8aI9xYKFeOFXDDxyjTzriGyePEdlGQ dFmvqZyarg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	byte.ma A RR has value 104.21.1.242
	byte.ma A RR has value 172.67.152.154
	Found 1 RRSIGs over A RRset
	`byte.ma. 300 IN RRSIG ( A 13 2 300 20220702034624 20220630014624 34505 byte.ma. ZuUSPqZzZCwbf6gHxFzRUejmEbYVeLuZnW84uWb9zMlrr/8aI9xYKFeOFXDDxyjTzriGyePEdlGQ dFmvqZyarg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test byte.ma at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: