DNSSEC Analyzer

Domain Name:

Time: 2020-02-28 06:18:28 UTC, NTP stratum 4

Analyzing DNSSEC problems for c0m.li

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 36774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to j.root-servers.net for c0m.li/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for c0m.li/A: 'IPv6 transport disabled'
	Received 854 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (854 bytes) ;; HEADER SECTION ;; id = 2097 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) li. 172800 IN NS c.nic.li. li. 172800 IN NS f.nic.li. li. 172800 IN NS g.nic.li. li. 172800 IN NS a.nic.li. li. 172800 IN NS h.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS e.nic.li. li. 172800 IN NS d.nic.li. li. 86400 IN DS ( 30904 13 2 63725534b907cfc0e2326a640327c70c8e44d747aabeef0d1a14afb7836a7894 ) li. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . vlu9xnSyBKc7xsufFDa2kEsIC7i/oZuFbFRcM48pbeyh6FRlvu7naX3Vwyz/wfCBmovKx/oTO2NO hXh02zN6xxKDKXUJFWgb/cojXAAKXSqyMVljSTKI+qnEE7beyxL9QsqYGKnECJ4IaBHQWORoRnNW y73BXr3AiNarrwTv91f/CzfLPr3MkSQ22PifdPZ2EcwsEFa0iEjnfEoMHRFNGD0U1LEKiy/aR1Qz 3Wn3YcUgxOnwI1R/Bf9jdiQ1PxvH6b9FZc79tRgdZE8x0jFVC2wXLuqZwyJ7g0JAmrhIGPbNLHyY yqAl/hhAW+//gShIySArkl7Sh6pBrKMqunXwhA== ) ;; ADDITIONAL SECTION (17 records) c.nic.li. 172800 IN A 147.28.0.39 c.nic.li. 172800 IN AAAA 2001:418:1::39 f.nic.li. 172800 IN A 194.146.106.14 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN A 194.0.1.40 g.nic.li. 172800 IN AAAA 2001:678:4::28 a.nic.li. 172800 IN A 130.59.31.42 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 h.nic.li. 172800 IN A 85.119.5.230 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 b.nic.li. 172800 IN A 130.59.31.44 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 e.nic.li. 172800 IN A 194.0.17.1 e.nic.li. 172800 IN AAAA 2001:678:3::1 d.nic.li. 172800 IN A 200.160.0.5 d.nic.li. 172800 IN AAAA 2001:12ff:0:a20::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for li/DNSKEY
	Received 850 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (850 bytes) ;; HEADER SECTION ;; id = 33143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) li. 172800 IN NS g.nic.li. li. 172800 IN NS f.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS c.nic.li. li. 172800 IN NS a.nic.li. li. 172800 IN NS h.nic.li. li. 172800 IN NS d.nic.li. li. 172800 IN NS e.nic.li. li. 86400 IN DS ( 30904 13 2 63725534b907cfc0e2326a640327c70c8e44d747aabeef0d1a14afb7836a7894 ) li. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . vlu9xnSyBKc7xsufFDa2kEsIC7i/oZuFbFRcM48pbeyh6FRlvu7naX3Vwyz/wfCBmovKx/oTO2NO hXh02zN6xxKDKXUJFWgb/cojXAAKXSqyMVljSTKI+qnEE7beyxL9QsqYGKnECJ4IaBHQWORoRnNW y73BXr3AiNarrwTv91f/CzfLPr3MkSQ22PifdPZ2EcwsEFa0iEjnfEoMHRFNGD0U1LEKiy/aR1Qz 3Wn3YcUgxOnwI1R/Bf9jdiQ1PxvH6b9FZc79tRgdZE8x0jFVC2wXLuqZwyJ7g0JAmrhIGPbNLHyY yqAl/hhAW+//gShIySArkl7Sh6pBrKMqunXwhA== ) ;; ADDITIONAL SECTION (17 records) a.nic.li. 172800 IN A 130.59.31.42 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 b.nic.li. 172800 IN A 130.59.31.44 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 c.nic.li. 172800 IN A 147.28.0.39 c.nic.li. 172800 IN AAAA 2001:418:1::39 d.nic.li. 172800 IN A 200.160.0.5 d.nic.li. 172800 IN AAAA 2001:12ff:0:a20::5 e.nic.li. 172800 IN A 194.0.17.1 e.nic.li. 172800 IN AAAA 2001:678:3::1 f.nic.li. 172800 IN A 194.146.106.14 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN A 194.0.1.40 g.nic.li. 172800 IN AAAA 2001:678:4::28 h.nic.li. 172800 IN A 85.119.5.230 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone li

	Checking DS between . and li
	Query to l.root-servers.net for li/DS
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for li/DS: 'IPv6 transport disabled'
	Received 366 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (366 bytes) ;; HEADER SECTION ;; id = 17600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DS ;; ANSWER SECTION (2 records) li. 86400 IN DS ( 30904 13 2 63725534b907cfc0e2326a640327c70c8e44d747aabeef0d1a14afb7836a7894 ) li. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . vlu9xnSyBKc7xsufFDa2kEsIC7i/oZuFbFRcM48pbeyh6FRlvu7naX3Vwyz/wfCBmovKx/oTO2NO hXh02zN6xxKDKXUJFWgb/cojXAAKXSqyMVljSTKI+qnEE7beyxL9QsqYGKnECJ4IaBHQWORoRnNW y73BXr3AiNarrwTv91f/CzfLPr3MkSQ22PifdPZ2EcwsEFa0iEjnfEoMHRFNGD0U1LEKiy/aR1Qz 3Wn3YcUgxOnwI1R/Bf9jdiQ1PxvH6b9FZc79tRgdZE8x0jFVC2wXLuqZwyJ7g0JAmrhIGPbNLHyY yqAl/hhAW+//gShIySArkl7Sh6pBrKMqunXwhA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for li in the . zone
	DS=30904/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`li. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . vlu9xnSyBKc7xsufFDa2kEsIC7i/oZuFbFRcM48pbeyh6FRlvu7naX3Vwyz/wfCBmovKx/oTO2NO hXh02zN6xxKDKXUJFWgb/cojXAAKXSqyMVljSTKI+qnEE7beyxL9QsqYGKnECJ4IaBHQWORoRnNW y73BXr3AiNarrwTv91f/CzfLPr3MkSQ22PifdPZ2EcwsEFa0iEjnfEoMHRFNGD0U1LEKiy/aR1Qz 3Wn3YcUgxOnwI1R/Bf9jdiQ1PxvH6b9FZc79tRgdZE8x0jFVC2wXLuqZwyJ7g0JAmrhIGPbNLHyY yqAl/hhAW+//gShIySArkl7Sh6pBrKMqunXwhA== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=30904/SHA-256 is now in the chain-of-trust
	`li. 86400 IN DS ( 30904 13 2 63725534b907cfc0e2326a640327c70c8e44d747aabeef0d1a14afb7836a7894 )`
	Query to c.nic.li for li/DNSKEY
	Received 369 bytes from 147.28.0.39
	;; Answer received from 147.28.0.39 (369 bytes) ;; HEADER SECTION ;; id = 31109 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (4 records) li. 86400 IN DNSKEY ( 256 3 13 cZ59JnqmHJJZSoi0hwDEtddPNkP28LiEpIo/51uGSGxz7Qc+aXNdzm9MFNWO2iK8m+HB/VrPTcJY XpbnQMxTTw== ) ; Key ID = 65316 li. 86400 IN DNSKEY ( 256 3 13 YJCX0Rt/GiYMp/2AEWi++9lBcIcxelbBO1UQ8iniwOLeM5ZTObjfkInQu8HxVCgbSzn0BoJ/xe97 c5evfKpOzg== ) ; Key ID = 26831 li. 86400 IN DNSKEY ( 257 3 13 J4NA1fYIasUPgAQJvo5VeheTEXcKrA6OceEAALHw1p40Zf0XCnarTGI8Pjz6KT3E9EQ8e/tcaF7C 7w/xKk316w== ) ; Key ID = 30904 li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200331100909 20200214090909 30904 li. JDINruQqyAsFfIQw3ytNh7F/1fYh1gl+4LEvSP5HiFNnS5W4nz+LcNDRpgsbqPepsI9W6bG7jcUS t+GGiR9Ong== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for li
	`li. 86400 IN DNSKEY ( 256 3 13 cZ59JnqmHJJZSoi0hwDEtddPNkP28LiEpIo/51uGSGxz7Qc+aXNdzm9MFNWO2iK8m+HB/VrPTcJY XpbnQMxTTw== ) ; Key ID = 65316`
	`li. 86400 IN DNSKEY ( 256 3 13 YJCX0Rt/GiYMp/2AEWi++9lBcIcxelbBO1UQ8iniwOLeM5ZTObjfkInQu8HxVCgbSzn0BoJ/xe97 c5evfKpOzg== ) ; Key ID = 26831`
	`li. 86400 IN DNSKEY ( 257 3 13 J4NA1fYIasUPgAQJvo5VeheTEXcKrA6OceEAALHw1p40Zf0XCnarTGI8Pjz6KT3E9EQ8e/tcaF7C 7w/xKk316w== ) ; Key ID = 30904`
	DNSKEY=30904/SEP is now in the chain-of-trust
	DS=30904/SHA-256 verifies DNSKEY=30904/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200331100909 20200214090909 30904 li. JDINruQqyAsFfIQw3ytNh7F/1fYh1gl+4LEvSP5HiFNnS5W4nz+LcNDRpgsbqPepsI9W6bG7jcUS t+GGiR9Ong== )`
	RRSIG=30904 and DNSKEY=30904/SEP verifies the DNSKEY RRset
	DNSKEY=65316 is now in the chain-of-trust
	DNSKEY=26831 is now in the chain-of-trust
	Query to d.nic.li for c0m.li/A
	Error querying d.nic.li/2001:12ff:0:a20:0:0:0:5 for c0m.li/A: 'IPv6 transport disabled'
	Received 302 bytes from 200.160.0.5
	;; Answer received from 200.160.0.5 (302 bytes) ;; HEADER SECTION ;; id = 43325 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) c0m.li. 3600 IN NS ns4.20dragons.com. c0m.li. 3600 IN NS ns2.20dragons.com. c0m.li. 3600 IN NS ns3.20dragons.com. c0m.li. 3600 IN NS ns1.20dragons.com. c0m.li. 3600 IN DS ( 25857 13 2 c0b060968ceb6d28dd81875f15eb78ba06b93399149cbb58da68c9ea55dd78cd ) c0m.li. 3600 IN DS 25857 13 1 5e5201bf096fd8b952efae288d642dcf19a17a41 c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20200324224604 20200223220007 26831 li. QDiUzPfZ0xrIL5cpxrMrgn0Amxmy6MfuFEjYp+1l1jtpy3dLpezUGDPQiuA0Io8lGPV5kGn7AmoA LBcPtLaUww== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.nic.li for c0m.li/DNSKEY
	Timeout querying h.nic.li/85.119.5.230 for c0m.li/DNSKEY
	Error querying h.nic.li/2a03:bd80:36:0:0:1:203:230 for c0m.li/DNSKEY: 'IPv6 transport disabled'
	All Queries to h.nic.li for c0m.li/DNSKEY timed out or failed
	Query to a.nic.li for c0m.li/DNSKEY
	Received 302 bytes from 130.59.31.42
	;; Answer received from 130.59.31.42 (302 bytes) ;; HEADER SECTION ;; id = 13073 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) c0m.li. 3600 IN NS ns2.20dragons.com. c0m.li. 3600 IN NS ns4.20dragons.com. c0m.li. 3600 IN NS ns1.20dragons.com. c0m.li. 3600 IN NS ns3.20dragons.com. c0m.li. 3600 IN DS 25857 13 1 5e5201bf096fd8b952efae288d642dcf19a17a41 c0m.li. 3600 IN DS ( 25857 13 2 c0b060968ceb6d28dd81875f15eb78ba06b93399149cbb58da68c9ea55dd78cd ) c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20200324224604 20200223220007 26831 li. QDiUzPfZ0xrIL5cpxrMrgn0Amxmy6MfuFEjYp+1l1jtpy3dLpezUGDPQiuA0Io8lGPV5kGn7AmoA LBcPtLaUww== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone c0m.li

c0m.li

	Checking DS between li and c0m.li
	Query to e.nic.li for c0m.li/DS
	Received 217 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (217 bytes) ;; HEADER SECTION ;; id = 54487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DS ;; ANSWER SECTION (3 records) c0m.li. 3600 IN DS ( 25857 13 2 c0b060968ceb6d28dd81875f15eb78ba06b93399149cbb58da68c9ea55dd78cd ) c0m.li. 3600 IN DS 25857 13 1 5e5201bf096fd8b952efae288d642dcf19a17a41 c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20200324224604 20200223220007 26831 li. QDiUzPfZ0xrIL5cpxrMrgn0Amxmy6MfuFEjYp+1l1jtpy3dLpezUGDPQiuA0Io8lGPV5kGn7AmoA LBcPtLaUww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for c0m.li in the li zone
	DS=25857/SHA-256 has algorithm ECDSAP256SHA256
	DS=25857/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20200324224604 20200223220007 26831 li. QDiUzPfZ0xrIL5cpxrMrgn0Amxmy6MfuFEjYp+1l1jtpy3dLpezUGDPQiuA0Io8lGPV5kGn7AmoA LBcPtLaUww== )`
	RRSIG=26831 and DNSKEY=26831 verifies the DS RRset
	DS=25857/SHA-256 is now in the chain-of-trust
	`c0m.li. 3600 IN DS ( 25857 13 2 c0b060968ceb6d28dd81875f15eb78ba06b93399149cbb58da68c9ea55dd78cd )`
	`c0m.li. 3600 IN DS 25857 13 1 5e5201bf096fd8b952efae288d642dcf19a17a41`
	Query to ns1.20dragons.com for c0m.li/DNSKEY
	Received 217 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (217 bytes) ;; HEADER SECTION ;; id = 10287 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DNSKEY ;; ANSWER SECTION (2 records) c0m.li. 7200 IN DNSKEY ( 257 3 13 GsxArj56OrFpRKry+nOYfYpE/bmxiqT/Rkc3MpL1ApsuScZ05zfaPXsy2vzDv9S+5cH6dOoDDc4E cFHOaJm3zw== ) ; Key ID = 25857 c0m.li. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 25857 c0m.li. IN/fACdFUPCZt6//Zyr7ZJfgM5KS+qS5q3EOvM9J0MYATuwvj0Q+Lt194OxrZO0vSGsQN3+7o3wX Z5KuXRrQRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for c0m.li
	`c0m.li. 7200 IN DNSKEY ( 257 3 13 GsxArj56OrFpRKry+nOYfYpE/bmxiqT/Rkc3MpL1ApsuScZ05zfaPXsy2vzDv9S+5cH6dOoDDc4E cFHOaJm3zw== ) ; Key ID = 25857`
	DNSKEY=25857/SEP is now in the chain-of-trust
	DS=25857/SHA-256 verifies DNSKEY=25857/SEP
	DS=25857/SHA-1 verifies DNSKEY=25857/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`c0m.li. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 25857 c0m.li. IN/fACdFUPCZt6//Zyr7ZJfgM5KS+qS5q3EOvM9J0MYATuwvj0Q+Lt194OxrZO0vSGsQN3+7o3wX Z5KuXRrQRw== )`
	RRSIG=25857 and DNSKEY=25857/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for c0m.li/A
	Error querying ns3.20dragons.com/2a07:59c6:ee02:ffff:ffff:ffff:9edd:fb81 for c0m.li/A: 'IPv6 transport disabled'
	Received 336 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (336 bytes) ;; HEADER SECTION ;; id = 11625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) c0m.li. 7200 IN NSEC *.c0m.li. NS SOA MX TXT AAAA RRSIG NSEC DNSKEY SPF c0m.li. 7200 IN RRSIG ( NSEC 13 2 7200 20200312000000 20200220000000 25857 c0m.li. xervfX3eXARLtxzOGlR5oatew+XVaEf9L+udwMK71b0c3NSCK/GMtgLy3hGABEKdmtNinGsWJqsp 9DVFIlSr1w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	c0m.li is authoritative for c0m.li
	Found RRSIG signed by c0m.li zone
	Query to ns3.20dragons.com for c0m.li/SOA
	Received 197 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (197 bytes) ;; HEADER SECTION ;; id = 15601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.20dragons.com for c0m.li/SOA
	Received 197 bytes from 185.246.130.161
	;; Answer received from 185.246.130.161 (197 bytes) ;; HEADER SECTION ;; id = 24884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.20dragons.com for c0m.li/SOA
	Error querying ns2.20dragons.com/2a0f:ca80:0:3:0:0:0:2222 for c0m.li/SOA: 'IPv6 transport disabled'
	Received 197 bytes from 5.253.86.161
	;; Answer received from 5.253.86.161 (197 bytes) ;; HEADER SECTION ;; id = 16767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.20dragons.com for c0m.li/SOA
	Error querying ns1.20dragons.com/2001:ac8:22:2:0:0:11fc:6413 for c0m.li/SOA: 'IPv6 transport disabled'
	Received 197 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (197 bytes) ;; HEADER SECTION ;; id = 12375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.20dragons.com for c0m.li/A
	Error querying ns3.20dragons.com/2a07:59c6:ee02:ffff:ffff:ffff:9edd:fb81 for c0m.li/A: 'IPv6 transport disabled'
	Received 336 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (336 bytes) ;; HEADER SECTION ;; id = 19479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== ) c0m.li. 7200 IN NSEC *.c0m.li. NS SOA MX TXT AAAA RRSIG NSEC DNSKEY SPF c0m.li. 7200 IN RRSIG ( NSEC 13 2 7200 20200312000000 20200220000000 25857 c0m.li. xervfX3eXARLtxzOGlR5oatew+XVaEf9L+udwMK71b0c3NSCK/GMtgLy3hGABEKdmtNinGsWJqsp 9DVFIlSr1w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`c0m.li. 7200 IN RRSIG ( NSEC 13 2 7200 20200312000000 20200220000000 25857 c0m.li. xervfX3eXARLtxzOGlR5oatew+XVaEf9L+udwMK71b0c3NSCK/GMtgLy3hGABEKdmtNinGsWJqsp 9DVFIlSr1w== )`
	RRSIG=25857 and DNSKEY=25857/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for c0m.li
	Found 1 RRSIGs over SOA RRset
	`c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 25857 c0m.li. mlWjEzVDXA/Lonof/WocfmCSxJIiJyFipjf2d+gZk4F5AY7nNFJczeRchfuGB753/nK2/MrjFaFr 1GR7RIXmZA== )`
	RRSIG=25857 and DNSKEY=25857/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test c0m.li at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: