DNSSEC Analyzer

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-04-26 12:12:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for c0m.li

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 33914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190512000000 20190421000000 20326 . ljHKB9UaikaYC1wHzZyFwwibNFjGuwnI3DtVLsnRUwqmq2Er3uaMUYA63Odz4yO1f46zPAOcciVt Xol5oOyci84eGFb/7x6iZpcpIqFP7kWoNTRlQWgJ2V3KHYLr6w3TYiV/eWY7Ziu9HFPV6SLAt6g9 RWgaNwlLUw+fHdmhiAteoXjEBfqNC1je5FtAdPaOB3/aYbUayL4miAo3tsBt8vDzFPOvYVkMHbo4 75Bg1roJfSqxlfKEamGWMwtfnSjmw8htrvi51TBgUOsBBsSGgYWY5/5THwyc8oQDZfi72DiOF2Gr UGjr9yvQIYMuukNAOG8tvAn9PjHlY6pg4XkGUA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to l.root-servers.net for c0m.li/A
	Received 854 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (854 bytes) ;; HEADER SECTION ;; id = 24910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) li. 172800 IN NS a.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS c.nic.li. li. 172800 IN NS d.nic.li. li. 172800 IN NS e.nic.li. li. 172800 IN NS f.nic.li. li. 172800 IN NS g.nic.li. li. 172800 IN NS h.nic.li. li. 86400 IN DS ( 43587 13 2 b14d4cf3551db52cf024e85ceca6ac7d0d78356e95c67aa6cd75257d1cab268f ) li. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . LcUXIF2cH2aUbu0DAsPdfgDhexYKkQBKCNTldVA41G8brXuLY3M1TOyPtqBn+1TSItp6ilk7wSLa DTjXwqHoVFpQ/zYIbMVfT/gGgNdObBEGCUN4K9x0/7L+FOSONA6TyF8QcUPVSRfpvdBP45OlwHu2 dTWh9hNFbu5+uL+XvgGL6GyCRbZeNEIhseVdM9gTccsx0RO0UyJa/j4XftRsy9HhCVzMfoubzoAJ hXOCXs6biBzTzz275+gcUg8ckJJj7Xs0FB6yYcg+HxLSdBg3+U0ZVs0QDWeafIgkHrk3tfv4VZEj YPeNL+7ymgpc4+xQmptMSXSvrM9xvd2gHh+jlg== ) ;; ADDITIONAL SECTION (17 records) a.nic.li. 172800 IN A 130.59.31.42 b.nic.li. 172800 IN A 130.59.31.44 c.nic.li. 172800 IN A 147.28.0.39 d.nic.li. 172800 IN A 200.160.0.5 e.nic.li. 172800 IN A 194.0.17.1 f.nic.li. 172800 IN A 194.146.106.14 g.nic.li. 172800 IN A 194.0.1.40 h.nic.li. 172800 IN A 85.119.5.230 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 c.nic.li. 172800 IN AAAA 2001:418:1::39 d.nic.li. 172800 IN AAAA 2001:12ff:0:a20::5 e.nic.li. 172800 IN AAAA 2001:678:3::1 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN AAAA 2001:678:4::28 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for li/DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for li/DNSKEY: 'IPv6 transport disabled'
	Received 850 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (850 bytes) ;; HEADER SECTION ;; id = 53076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) li. 172800 IN NS a.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS c.nic.li. li. 172800 IN NS d.nic.li. li. 172800 IN NS e.nic.li. li. 172800 IN NS f.nic.li. li. 172800 IN NS g.nic.li. li. 172800 IN NS h.nic.li. li. 86400 IN DS ( 43587 13 2 b14d4cf3551db52cf024e85ceca6ac7d0d78356e95c67aa6cd75257d1cab268f ) li. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . LcUXIF2cH2aUbu0DAsPdfgDhexYKkQBKCNTldVA41G8brXuLY3M1TOyPtqBn+1TSItp6ilk7wSLa DTjXwqHoVFpQ/zYIbMVfT/gGgNdObBEGCUN4K9x0/7L+FOSONA6TyF8QcUPVSRfpvdBP45OlwHu2 dTWh9hNFbu5+uL+XvgGL6GyCRbZeNEIhseVdM9gTccsx0RO0UyJa/j4XftRsy9HhCVzMfoubzoAJ hXOCXs6biBzTzz275+gcUg8ckJJj7Xs0FB6yYcg+HxLSdBg3+U0ZVs0QDWeafIgkHrk3tfv4VZEj YPeNL+7ymgpc4+xQmptMSXSvrM9xvd2gHh+jlg== ) ;; ADDITIONAL SECTION (17 records) a.nic.li. 172800 IN A 130.59.31.42 b.nic.li. 172800 IN A 130.59.31.44 c.nic.li. 172800 IN A 147.28.0.39 d.nic.li. 172800 IN A 200.160.0.5 e.nic.li. 172800 IN A 194.0.17.1 f.nic.li. 172800 IN A 194.146.106.14 g.nic.li. 172800 IN A 194.0.1.40 h.nic.li. 172800 IN A 85.119.5.230 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 c.nic.li. 172800 IN AAAA 2001:418:1::39 d.nic.li. 172800 IN AAAA 2001:12ff:0:a20::5 e.nic.li. 172800 IN AAAA 2001:678:3::1 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN AAAA 2001:678:4::28 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone li

	Checking DS between . and li
	Query to l.root-servers.net for li/DS
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for li/DS: 'IPv6 transport disabled'
	Received 366 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (366 bytes) ;; HEADER SECTION ;; id = 48607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DS ;; ANSWER SECTION (2 records) li. 86400 IN DS ( 43587 13 2 b14d4cf3551db52cf024e85ceca6ac7d0d78356e95c67aa6cd75257d1cab268f ) li. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . LcUXIF2cH2aUbu0DAsPdfgDhexYKkQBKCNTldVA41G8brXuLY3M1TOyPtqBn+1TSItp6ilk7wSLa DTjXwqHoVFpQ/zYIbMVfT/gGgNdObBEGCUN4K9x0/7L+FOSONA6TyF8QcUPVSRfpvdBP45OlwHu2 dTWh9hNFbu5+uL+XvgGL6GyCRbZeNEIhseVdM9gTccsx0RO0UyJa/j4XftRsy9HhCVzMfoubzoAJ hXOCXs6biBzTzz275+gcUg8ckJJj7Xs0FB6yYcg+HxLSdBg3+U0ZVs0QDWeafIgkHrk3tfv4VZEj YPeNL+7ymgpc4+xQmptMSXSvrM9xvd2gHh+jlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for li in the . zone
	DS=43587/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`li. 86400 IN RRSIG ( DS 8 1 86400 20190509050000 20190426040000 25266 . LcUXIF2cH2aUbu0DAsPdfgDhexYKkQBKCNTldVA41G8brXuLY3M1TOyPtqBn+1TSItp6ilk7wSLa DTjXwqHoVFpQ/zYIbMVfT/gGgNdObBEGCUN4K9x0/7L+FOSONA6TyF8QcUPVSRfpvdBP45OlwHu2 dTWh9hNFbu5+uL+XvgGL6GyCRbZeNEIhseVdM9gTccsx0RO0UyJa/j4XftRsy9HhCVzMfoubzoAJ hXOCXs6biBzTzz275+gcUg8ckJJj7Xs0FB6yYcg+HxLSdBg3+U0ZVs0QDWeafIgkHrk3tfv4VZEj YPeNL+7ymgpc4+xQmptMSXSvrM9xvd2gHh+jlg== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=43587/SHA-256 is now in the chain-of-trust
	`li. 86400 IN DS ( 43587 13 2 b14d4cf3551db52cf024e85ceca6ac7d0d78356e95c67aa6cd75257d1cab268f )`
	Query to c.nic.li for li/DNSKEY
	Error querying c.nic.li/2001:418:1:0:0:0:0:39 for li/DNSKEY: 'IPv6 transport disabled'
	Received 369 bytes from 147.28.0.39
	;; Answer received from 147.28.0.39 (369 bytes) ;; HEADER SECTION ;; id = 52308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (4 records) li. 86400 IN DNSKEY ( 257 3 13 +T60g75Fb8kY/GK4aqOTAXDrucF12q1XA+p+0sx9nvXGFVZMwy1dde3n8DfbsoBUGGS0Oo5V85fM MwUCoSbc5Q== ) ; Key ID = 43587 li. 86400 IN DNSKEY ( 256 3 13 dYNr1r18q/sUWwFacdUrkmijT59eXdqkhuTKhCmhWA41OyiK2tC34A8ttYXYl05XEqWtZLc/DCej 5DbffKQ5lA== ) ; Key ID = 46815 li. 86400 IN DNSKEY ( 256 3 13 /8wwUCpICw+KYQZ/zqH8OlrHptAgJKYSv1bq92yoLQuwI6noSeM5xGq8B1OPU8fLYc3Mr866CtJB jAM5NgZMpQ== ) ; Key ID = 18285 li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20190605100909 20190420090909 43587 li. 2ilP0XGc/yVPj1AZeLGi0QmcX0JvTsLL6y6JcoIG4+imKTb1/vCnTUhgptI1fU4rHMdTXEGlZyUk ko8PVUxJCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for li
	`li. 86400 IN DNSKEY ( 257 3 13 +T60g75Fb8kY/GK4aqOTAXDrucF12q1XA+p+0sx9nvXGFVZMwy1dde3n8DfbsoBUGGS0Oo5V85fM MwUCoSbc5Q== ) ; Key ID = 43587`
	`li. 86400 IN DNSKEY ( 256 3 13 dYNr1r18q/sUWwFacdUrkmijT59eXdqkhuTKhCmhWA41OyiK2tC34A8ttYXYl05XEqWtZLc/DCej 5DbffKQ5lA== ) ; Key ID = 46815`
	`li. 86400 IN DNSKEY ( 256 3 13 /8wwUCpICw+KYQZ/zqH8OlrHptAgJKYSv1bq92yoLQuwI6noSeM5xGq8B1OPU8fLYc3Mr866CtJB jAM5NgZMpQ== ) ; Key ID = 18285`
	DNSKEY=43587/SEP is now in the chain-of-trust
	DS=43587/SHA-256 verifies DNSKEY=43587/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20190605100909 20190420090909 43587 li. 2ilP0XGc/yVPj1AZeLGi0QmcX0JvTsLL6y6JcoIG4+imKTb1/vCnTUhgptI1fU4rHMdTXEGlZyUk ko8PVUxJCw== )`
	RRSIG=43587 and DNSKEY=43587/SEP verifies the DNSKEY RRset
	DNSKEY=46815 is now in the chain-of-trust
	DNSKEY=18285 is now in the chain-of-trust
	Query to f.nic.li for c0m.li/A
	Error querying f.nic.li/2001:67c:1010:3:0:0:0:53 for c0m.li/A: 'IPv6 transport disabled'
	Received 266 bytes from 194.146.106.14
	;; Answer received from 194.146.106.14 (266 bytes) ;; HEADER SECTION ;; id = 39549 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) c0m.li. 3600 IN NS ns3.20dragons.com. c0m.li. 3600 IN NS ns2.20dragons.com. c0m.li. 3600 IN NS ns1.20dragons.com. c0m.li. 3600 IN NS ns4.20dragons.com. c0m.li. 3600 IN DS ( 55752 13 2 b58aa77b935b5f046309fef8d774a19c6e7332573c05e132de0b1bd4d65c74d7 ) c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20190513015932 20190415033256 18285 li. foqYGb8/y5F6DsNxB/4wwrT575xs0eF3D6eBpLavU0q9mlM69VsGhJB5/6qZ6C2XEpWhKf+SJBNI u8MKdkL4RA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.nic.li for c0m.li/DNSKEY
	Error querying h.nic.li/2a03:bd80:36:0:0:1:203:230 for c0m.li/DNSKEY: 'IPv6 transport disabled'
	Received 266 bytes from 85.119.5.230
	;; Answer received from 85.119.5.230 (266 bytes) ;; HEADER SECTION ;; id = 18515 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) c0m.li. 3600 IN NS ns1.20dragons.com. c0m.li. 3600 IN NS ns2.20dragons.com. c0m.li. 3600 IN NS ns3.20dragons.com. c0m.li. 3600 IN NS ns4.20dragons.com. c0m.li. 3600 IN DS ( 55752 13 2 b58aa77b935b5f046309fef8d774a19c6e7332573c05e132de0b1bd4d65c74d7 ) c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20190513015932 20190415033256 18285 li. foqYGb8/y5F6DsNxB/4wwrT575xs0eF3D6eBpLavU0q9mlM69VsGhJB5/6qZ6C2XEpWhKf+SJBNI u8MKdkL4RA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone c0m.li

c0m.li

	Checking DS between li and c0m.li
	Query to a.nic.li for c0m.li/DS
	Error querying a.nic.li/2001:620:0:ff:0:0:0:57 for c0m.li/DS: 'IPv6 transport disabled'
	Received 181 bytes from 130.59.31.42
	;; Answer received from 130.59.31.42 (181 bytes) ;; HEADER SECTION ;; id = 45074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DS ;; ANSWER SECTION (2 records) c0m.li. 3600 IN DS ( 55752 13 2 b58aa77b935b5f046309fef8d774a19c6e7332573c05e132de0b1bd4d65c74d7 ) c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20190513015932 20190415033256 18285 li. foqYGb8/y5F6DsNxB/4wwrT575xs0eF3D6eBpLavU0q9mlM69VsGhJB5/6qZ6C2XEpWhKf+SJBNI u8MKdkL4RA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for c0m.li in the li zone
	DS=55752/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`c0m.li. 3600 IN RRSIG ( DS 13 2 3600 20190513015932 20190415033256 18285 li. foqYGb8/y5F6DsNxB/4wwrT575xs0eF3D6eBpLavU0q9mlM69VsGhJB5/6qZ6C2XEpWhKf+SJBNI u8MKdkL4RA== )`
	RRSIG=18285 and DNSKEY=18285 verifies the DS RRset
	DS=55752/SHA-256 is now in the chain-of-trust
	`c0m.li. 3600 IN DS ( 55752 13 2 b58aa77b935b5f046309fef8d774a19c6e7332573c05e132de0b1bd4d65c74d7 )`
	Query to ns2.20dragons.com for c0m.li/DNSKEY
	Timeout querying ns2.20dragons.com/155.254.33.250 for c0m.li/DNSKEY
	All Queries to ns2.20dragons.com for c0m.li/DNSKEY timed out or failed
	Query to ns1.20dragons.com for c0m.li/DNSKEY
	Timeout querying ns1.20dragons.com/23.94.166.82 for c0m.li/DNSKEY
	All Queries to ns1.20dragons.com for c0m.li/DNSKEY timed out or failed
	Query to ns4.20dragons.com for c0m.li/DNSKEY
	Received 217 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (217 bytes) ;; HEADER SECTION ;; id = 637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN DNSKEY ;; ANSWER SECTION (2 records) c0m.li. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 55752 c0m.li. ksSDrzVLE+DQTtSlw+XEH2mrqn+5p8ETz1zFp831WraBFrvC20GRXnh82YdkUOEuXEgcCh/YUq5i x+5F2Ueohg== ) c0m.li. 7200 IN DNSKEY ( 257 3 13 purr8r7Vel6HiKpRA8c7HPcVYXw956t4TUy78YXc06Phxi7rD0aX0y98I3E43dCv0j8gLuUMBbXB 44CPDY6yww== ) ; Key ID = 55752 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 1 DNSKEY records for c0m.li
	`c0m.li. 7200 IN DNSKEY ( 257 3 13 purr8r7Vel6HiKpRA8c7HPcVYXw956t4TUy78YXc06Phxi7rD0aX0y98I3E43dCv0j8gLuUMBbXB 44CPDY6yww== ) ; Key ID = 55752`
	DNSKEY=55752/SEP is now in the chain-of-trust
	DS=55752/SHA-256 verifies DNSKEY=55752/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`c0m.li. 7200 IN RRSIG ( DNSKEY 13 2 7200 20190509000000 20190418000000 55752 c0m.li. ksSDrzVLE+DQTtSlw+XEH2mrqn+5p8ETz1zFp831WraBFrvC20GRXnh82YdkUOEuXEgcCh/YUq5i x+5F2Ueohg== )`
	RRSIG=55752 and DNSKEY=55752/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for c0m.li/A
	Received 153 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (153 bytes) ;; HEADER SECTION ;; id = 64176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (2 records) c0m.li. 86400 IN A 185.147.34.9 c0m.li. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 55752 c0m.li. aaU9BkV/r7E8GDBNxsEuKJ1mDCDfBCFqAKuNszRkcCiGIZLEAp1vJ/k5lY8YMk1AVU75KQ1ITinH 6SmAZrxVVQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	c0m.li is authoritative for c0m.li
	Found RRSIG signed by c0m.li zone
	Query to ns3.20dragons.com for c0m.li/SOA
	Received 197 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (197 bytes) ;; HEADER SECTION ;; id = 40198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042607 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 55752 c0m.li. rnI0psS2uaQ1hrErijrThzcbTd9SJVolDDzhdKW+tyL+6Y1fhLkAtJr0anu3W5UFCx0UWX4gi+pM MfmV21v95A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.20dragons.com for c0m.li/SOA
	Received 197 bytes from 167.88.171.163
	;; Answer received from 167.88.171.163 (197 bytes) ;; HEADER SECTION ;; id = 25176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN SOA ;; ANSWER SECTION (2 records) c0m.li. 3600 IN RRSIG ( SOA 13 2 3600 20190509000000 20190418000000 55752 c0m.li. rnI0psS2uaQ1hrErijrThzcbTd9SJVolDDzhdKW+tyL+6Y1fhLkAtJr0anu3W5UFCx0UWX4gi+pM MfmV21v95A== ) c0m.li. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2019042607 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.20dragons.com for c0m.li/A
	Received 153 bytes from 45.61.137.212
	;; Answer received from 45.61.137.212 (153 bytes) ;; HEADER SECTION ;; id = 56097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.li. IN A ;; ANSWER SECTION (2 records) c0m.li. 86400 IN A 185.147.34.9 c0m.li. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 55752 c0m.li. aaU9BkV/r7E8GDBNxsEuKJ1mDCDfBCFqAKuNszRkcCiGIZLEAp1vJ/k5lY8YMk1AVU75KQ1ITinH 6SmAZrxVVQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	c0m.li A RR has value 185.147.34.9
	Found 1 RRSIGs over A RRset
	`c0m.li. 86400 IN RRSIG ( A 13 2 86400 20190509000000 20190418000000 55752 c0m.li. aaU9BkV/r7E8GDBNxsEuKJ1mDCDfBCFqAKuNszRkcCiGIZLEAp1vJ/k5lY8YMk1AVU75KQ1ITinH 6SmAZrxVVQ== )`
	RRSIG=55752 and DNSKEY=55752/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test c0m.li at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: