DNSSEC Analyzer

Domain Name:

Time: 2020-02-28 05:26:04 UTC, NTP stratum 4

Analyzing DNSSEC problems for c0m.re

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (864 bytes) ;; HEADER SECTION ;; id = 27737 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to h.root-servers.net for c0m.re/A
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for c0m.re/A: 'IPv6 transport disabled'
	Received 620 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (620 bytes) ;; HEADER SECTION ;; id = 32445 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) re. 172800 IN NS d.nic.fr. re. 172800 IN NS e.ext.nic.fr. re. 172800 IN NS f.ext.nic.fr. re. 172800 IN NS g.ext.nic.fr. re. 86400 IN DS ( 27026 8 2 fc7f430d839fa81ce34fbbc3c687834184685e3312fa3284354b00aff6c9f2d2 ) re. 86400 IN RRSIG ( DS 8 1 86400 20200311170000 20200227160000 33853 . YgUddLDbNnxpYpz2zeMu6gRej6yxCbZnSokzix22DMsdCnS6J/k3o+BT8STwqyh1S9FuARs9triU U6SaSoV747VW03cl9eo4xsqxAMdOiWviJj4bAq5dmBWl5c92t8SnbiH8uz6PG9lwOUSVNq4UmoLH 8W13g3xcic927+bUdY7ioo6Gp8Hx72O+1NDyCfy4u3/kh1qcoHIKPkf185+qgT6Ka6JGGIB5S0oF BgqvhuPtdPYDiQqlgxTUxnXwupxBDttANkDESLahm2m3dAAci9RoILR4b7VLaMYvoXubrF9WHHz0 L9ItmMzpTHGavmXu6tK1rzMQNnKsNayiXcLaUQ== ) ;; ADDITIONAL SECTION (9 records) d.nic.fr. 172800 IN A 194.0.9.1 e.ext.nic.fr. 172800 IN A 193.176.144.22 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for re/DNSKEY
	Received 616 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (616 bytes) ;; HEADER SECTION ;; id = 46810 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; re. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) re. 172800 IN NS e.ext.nic.fr. re. 172800 IN NS d.nic.fr. re. 172800 IN NS f.ext.nic.fr. re. 172800 IN NS g.ext.nic.fr. re. 86400 IN DS ( 27026 8 2 fc7f430d839fa81ce34fbbc3c687834184685e3312fa3284354b00aff6c9f2d2 ) re. 86400 IN RRSIG ( DS 8 1 86400 20200311170000 20200227160000 33853 . YgUddLDbNnxpYpz2zeMu6gRej6yxCbZnSokzix22DMsdCnS6J/k3o+BT8STwqyh1S9FuARs9triU U6SaSoV747VW03cl9eo4xsqxAMdOiWviJj4bAq5dmBWl5c92t8SnbiH8uz6PG9lwOUSVNq4UmoLH 8W13g3xcic927+bUdY7ioo6Gp8Hx72O+1NDyCfy4u3/kh1qcoHIKPkf185+qgT6Ka6JGGIB5S0oF BgqvhuPtdPYDiQqlgxTUxnXwupxBDttANkDESLahm2m3dAAci9RoILR4b7VLaMYvoXubrF9WHHz0 L9ItmMzpTHGavmXu6tK1rzMQNnKsNayiXcLaUQ== ) ;; ADDITIONAL SECTION (9 records) d.nic.fr. 172800 IN A 194.0.9.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN A 193.176.144.22 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN A 194.146.106.46 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN A 194.0.36.1 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone re

	Checking DS between . and re
	Query to h.root-servers.net for re/DS
	Received 366 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (366 bytes) ;; HEADER SECTION ;; id = 36473 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; re. IN DS ;; ANSWER SECTION (2 records) re. 86400 IN DS ( 27026 8 2 fc7f430d839fa81ce34fbbc3c687834184685e3312fa3284354b00aff6c9f2d2 ) re. 86400 IN RRSIG ( DS 8 1 86400 20200311170000 20200227160000 33853 . YgUddLDbNnxpYpz2zeMu6gRej6yxCbZnSokzix22DMsdCnS6J/k3o+BT8STwqyh1S9FuARs9triU U6SaSoV747VW03cl9eo4xsqxAMdOiWviJj4bAq5dmBWl5c92t8SnbiH8uz6PG9lwOUSVNq4UmoLH 8W13g3xcic927+bUdY7ioo6Gp8Hx72O+1NDyCfy4u3/kh1qcoHIKPkf185+qgT6Ka6JGGIB5S0oF BgqvhuPtdPYDiQqlgxTUxnXwupxBDttANkDESLahm2m3dAAci9RoILR4b7VLaMYvoXubrF9WHHz0 L9ItmMzpTHGavmXu6tK1rzMQNnKsNayiXcLaUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for re in the . zone
	DS=27026/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`re. 86400 IN RRSIG ( DS 8 1 86400 20200311170000 20200227160000 33853 . YgUddLDbNnxpYpz2zeMu6gRej6yxCbZnSokzix22DMsdCnS6J/k3o+BT8STwqyh1S9FuARs9triU U6SaSoV747VW03cl9eo4xsqxAMdOiWviJj4bAq5dmBWl5c92t8SnbiH8uz6PG9lwOUSVNq4UmoLH 8W13g3xcic927+bUdY7ioo6Gp8Hx72O+1NDyCfy4u3/kh1qcoHIKPkf185+qgT6Ka6JGGIB5S0oF BgqvhuPtdPYDiQqlgxTUxnXwupxBDttANkDESLahm2m3dAAci9RoILR4b7VLaMYvoXubrF9WHHz0 L9ItmMzpTHGavmXu6tK1rzMQNnKsNayiXcLaUQ== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=27026/SHA-256 is now in the chain-of-trust
	`re. 86400 IN DS ( 27026 8 2 fc7f430d839fa81ce34fbbc3c687834184685e3312fa3284354b00aff6c9f2d2 )`
	Query to g.ext.nic.fr for re/DNSKEY
	Received 873 bytes from 194.0.36.1
	;; Answer received from 194.0.36.1 (873 bytes) ;; HEADER SECTION ;; id = 58651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; re. IN DNSKEY ;; ANSWER SECTION (3 records) re. 172800 IN DNSKEY ( 257 3 8 AwEAAczoSuqjZvMwWiklY/mWhGr5mqzCMw/ve05ZlUXLjonrIQ+q60I+8780lqvmc7VGtcDS+CwU v0jUHpXcqcCJbcqRXRf5K7JcosGcUBoNrhs3QupV3n9zxFZGZHahQVyQbmz8cGAFzJS9Nf/IeppJ iHDWnCIBbVhkt4mXGg4NHQst+rjXtx+lZW+6P6+LzNR322xqLx/wSkd1HJKip80eiZXRFfQnrirE YZ3kwS97ku5UtBv9oE0fL2PsxgkWzuSXeCQP7ehjXxMa26Or2p8xbKvuk5glH8BSCvPghdR2Pxxu on4Egzome2nXVPL+Z4q6cw9VOeIXmRxC6gmZ4EEcufk= ) ; Key ID = 27026 re. 172800 IN DNSKEY ( 256 3 8 AwEAAb9tOt8CLMixADVzUq9M05B1LAHfYIb5VNDq5yNzmewgl8lgJG5bli9KCZSYXIn1gbTCMHVe 69lzLOuus7NsfH3/E14YPruqNmO4urw4MLm8QAbCZBSltvWpIOPS8Tys5XpaH7dQuSVYpCAuPi2s Aney1lWngwal/PI4FlCtk4YoDhT3PueQsI6/cpPkxt3SIJLXjMH/9m3hNJKCkxz2QEMXOAd8Tp24 w/6c1qMHIih9yPZbdsmoejcv6PVHs7l25rDDN6cFga8r/e0jF4dtvI2zQHBOYr5o2hDUoDO61Y2J XJkyLtNvFeLNoihdiTfL1HYWmVQm1nKVGqg1non8hsM= ) ; Key ID = 38893 re. 172800 IN RRSIG ( DNSKEY 8 1 172800 20200325201943 20200125201943 27026 re. baAbdDeWol7iAhIJnmyPO+zJMUeVO4Qh4Q0C52J92WA70UTF9KP+tmYXk3gmlqMHLidfivtaMY7U q5OCs8+4B+9LU5IC3YN6Rsw/JAifMv/9qFcizGEa0B3W7h/1dMugRZDY7Cs9AoULnGZdTGKz9idz UsNh/TYC1/IvdS59Fm/N/3aQ5dGR2Axvpw6HYhjb5aWKVM6BxXR/GHaEBfUx5tlDmIKHXMXK5uNn Fw6spbi/QjFXx7w8mnhj4qcVca+bBrrwAye9axjzrTZT/SG4OaitU/QwEL+lG4N1e/6uGX0WiycV WTaAGcWjpDSn8MmJlKYzuikDQ5jV2dhLgLhCXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for re
	`re. 172800 IN DNSKEY ( 257 3 8 AwEAAczoSuqjZvMwWiklY/mWhGr5mqzCMw/ve05ZlUXLjonrIQ+q60I+8780lqvmc7VGtcDS+CwU v0jUHpXcqcCJbcqRXRf5K7JcosGcUBoNrhs3QupV3n9zxFZGZHahQVyQbmz8cGAFzJS9Nf/IeppJ iHDWnCIBbVhkt4mXGg4NHQst+rjXtx+lZW+6P6+LzNR322xqLx/wSkd1HJKip80eiZXRFfQnrirE YZ3kwS97ku5UtBv9oE0fL2PsxgkWzuSXeCQP7ehjXxMa26Or2p8xbKvuk5glH8BSCvPghdR2Pxxu on4Egzome2nXVPL+Z4q6cw9VOeIXmRxC6gmZ4EEcufk= ) ; Key ID = 27026`
	`re. 172800 IN DNSKEY ( 256 3 8 AwEAAb9tOt8CLMixADVzUq9M05B1LAHfYIb5VNDq5yNzmewgl8lgJG5bli9KCZSYXIn1gbTCMHVe 69lzLOuus7NsfH3/E14YPruqNmO4urw4MLm8QAbCZBSltvWpIOPS8Tys5XpaH7dQuSVYpCAuPi2s Aney1lWngwal/PI4FlCtk4YoDhT3PueQsI6/cpPkxt3SIJLXjMH/9m3hNJKCkxz2QEMXOAd8Tp24 w/6c1qMHIih9yPZbdsmoejcv6PVHs7l25rDDN6cFga8r/e0jF4dtvI2zQHBOYr5o2hDUoDO61Y2J XJkyLtNvFeLNoihdiTfL1HYWmVQm1nKVGqg1non8hsM= ) ; Key ID = 38893`
	DNSKEY=27026/SEP is now in the chain-of-trust
	DS=27026/SHA-256 verifies DNSKEY=27026/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`re. 172800 IN RRSIG ( DNSKEY 8 1 172800 20200325201943 20200125201943 27026 re. baAbdDeWol7iAhIJnmyPO+zJMUeVO4Qh4Q0C52J92WA70UTF9KP+tmYXk3gmlqMHLidfivtaMY7U q5OCs8+4B+9LU5IC3YN6Rsw/JAifMv/9qFcizGEa0B3W7h/1dMugRZDY7Cs9AoULnGZdTGKz9idz UsNh/TYC1/IvdS59Fm/N/3aQ5dGR2Axvpw6HYhjb5aWKVM6BxXR/GHaEBfUx5tlDmIKHXMXK5uNn Fw6spbi/QjFXx7w8mnhj4qcVca+bBrrwAye9axjzrTZT/SG4OaitU/QwEL+lG4N1e/6uGX0WiycV WTaAGcWjpDSn8MmJlKYzuikDQ5jV2dhLgLhCXw== )`
	RRSIG=27026 and DNSKEY=27026/SEP verifies the DNSKEY RRset
	DNSKEY=38893 is now in the chain-of-trust
	Query to g.ext.nic.fr for c0m.re/A
	Error querying g.ext.nic.fr/2001:678:4c:0:0:0:0:1 for c0m.re/A: 'IPv6 transport disabled'
	Received 494 bytes from 194.0.36.1
	;; Answer received from 194.0.36.1 (494 bytes) ;; HEADER SECTION ;; id = 13814 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) c0m.re. 172800 IN NS ns1.20dragons.com. c0m.re. 172800 IN NS ns4.20dragons.com. c0m.re. 172800 IN NS ns3.20dragons.com. c0m.re. 172800 IN NS ns2.20dragons.com. c0m.re. 172800 IN DS 63478 13 1 99123f8af9af38e4733a53951a716762bf8d1a1f c0m.re. 172800 IN DS ( 63478 13 2 748f47ab8f73bd28e108a095a400b9f15fdbfed079e6b92d8d69fac8a1f55e15 ) c0m.re. 172800 IN RRSIG ( DS 8 2 172800 20200323172115 20200123172115 38893 re. RF0+W+fg3W+++2IgSmQebmQd32XJqcfo+lZNEe0b9VYHif54DHGAxaeWhhUSId1VyX1Sbwh6Gg3Y y6cncmoQieW0ynTuAnfUiIRaf/vuFXN+iN3KX5TMwvSvbatHTLD0+wWFz0sdA4QV8O0lachvRiC8 V7C43aaLkXDPPz7B2kNBPpOHf/6AsUNcB8njqZpAyEjdr2gWAkJWOLjfebvrt+rYoLwElyHRhxli bgadmFY78qxBx3LbMvWoPufoZEal+4vvpan37XQNbatHv4aIFwPKo0wNRffAMa+7GmEfxpSAoQqV faMVb72hhvQIwUa/fgBIiQ2siVw43vK4k6irTg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.nic.fr for c0m.re/DNSKEY
	Received 494 bytes from 194.0.9.1
	;; Answer received from 194.0.9.1 (494 bytes) ;; HEADER SECTION ;; id = 58601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) c0m.re. 172800 IN NS ns4.20dragons.com. c0m.re. 172800 IN NS ns1.20dragons.com. c0m.re. 172800 IN NS ns3.20dragons.com. c0m.re. 172800 IN NS ns2.20dragons.com. c0m.re. 172800 IN DS 63478 13 1 99123f8af9af38e4733a53951a716762bf8d1a1f c0m.re. 172800 IN DS ( 63478 13 2 748f47ab8f73bd28e108a095a400b9f15fdbfed079e6b92d8d69fac8a1f55e15 ) c0m.re. 172800 IN RRSIG ( DS 8 2 172800 20200323172115 20200123172115 38893 re. RF0+W+fg3W+++2IgSmQebmQd32XJqcfo+lZNEe0b9VYHif54DHGAxaeWhhUSId1VyX1Sbwh6Gg3Y y6cncmoQieW0ynTuAnfUiIRaf/vuFXN+iN3KX5TMwvSvbatHTLD0+wWFz0sdA4QV8O0lachvRiC8 V7C43aaLkXDPPz7B2kNBPpOHf/6AsUNcB8njqZpAyEjdr2gWAkJWOLjfebvrt+rYoLwElyHRhxli bgadmFY78qxBx3LbMvWoPufoZEal+4vvpan37XQNbatHv4aIFwPKo0wNRffAMa+7GmEfxpSAoQqV faMVb72hhvQIwUa/fgBIiQ2siVw43vK4k6irTg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option:
	Found child zone c0m.re

c0m.re

	Checking DS between re and c0m.re
	Query to g.ext.nic.fr for c0m.re/DS
	Error querying g.ext.nic.fr/2001:678:4c:0:0:0:0:1 for c0m.re/DS: 'IPv6 transport disabled'
	Received 409 bytes from 194.0.36.1
	;; Answer received from 194.0.36.1 (409 bytes) ;; HEADER SECTION ;; id = 46760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN DS ;; ANSWER SECTION (3 records) c0m.re. 172800 IN DS 63478 13 1 99123f8af9af38e4733a53951a716762bf8d1a1f c0m.re. 172800 IN DS ( 63478 13 2 748f47ab8f73bd28e108a095a400b9f15fdbfed079e6b92d8d69fac8a1f55e15 ) c0m.re. 172800 IN RRSIG ( DS 8 2 172800 20200323172115 20200123172115 38893 re. RF0+W+fg3W+++2IgSmQebmQd32XJqcfo+lZNEe0b9VYHif54DHGAxaeWhhUSId1VyX1Sbwh6Gg3Y y6cncmoQieW0ynTuAnfUiIRaf/vuFXN+iN3KX5TMwvSvbatHTLD0+wWFz0sdA4QV8O0lachvRiC8 V7C43aaLkXDPPz7B2kNBPpOHf/6AsUNcB8njqZpAyEjdr2gWAkJWOLjfebvrt+rYoLwElyHRhxli bgadmFY78qxBx3LbMvWoPufoZEal+4vvpan37XQNbatHv4aIFwPKo0wNRffAMa+7GmEfxpSAoQqV faMVb72hhvQIwUa/fgBIiQ2siVw43vK4k6irTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for c0m.re in the re zone
	DS=63478/SHA-1 has algorithm ECDSAP256SHA256
	DS=63478/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`c0m.re. 172800 IN RRSIG ( DS 8 2 172800 20200323172115 20200123172115 38893 re. RF0+W+fg3W+++2IgSmQebmQd32XJqcfo+lZNEe0b9VYHif54DHGAxaeWhhUSId1VyX1Sbwh6Gg3Y y6cncmoQieW0ynTuAnfUiIRaf/vuFXN+iN3KX5TMwvSvbatHTLD0+wWFz0sdA4QV8O0lachvRiC8 V7C43aaLkXDPPz7B2kNBPpOHf/6AsUNcB8njqZpAyEjdr2gWAkJWOLjfebvrt+rYoLwElyHRhxli bgadmFY78qxBx3LbMvWoPufoZEal+4vvpan37XQNbatHv4aIFwPKo0wNRffAMa+7GmEfxpSAoQqV faMVb72hhvQIwUa/fgBIiQ2siVw43vK4k6irTg== )`
	RRSIG=38893 and DNSKEY=38893 verifies the DS RRset
	DS=63478/SHA-1 is now in the chain-of-trust
	`c0m.re. 172800 IN DS 63478 13 1 99123f8af9af38e4733a53951a716762bf8d1a1f`
	`c0m.re. 172800 IN DS ( 63478 13 2 748f47ab8f73bd28e108a095a400b9f15fdbfed079e6b92d8d69fac8a1f55e15 )`
	Query to ns1.20dragons.com for c0m.re/DNSKEY
	Received 217 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (217 bytes) ;; HEADER SECTION ;; id = 29981 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN DNSKEY ;; ANSWER SECTION (2 records) c0m.re. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 63478 c0m.re. soLWx+Pg0Chjue5d7d7vVvPFFzXYoBZyWeF+X3+bv/TO/6zygPQ0Cxd5kY7G7/DIxIh2GQWiJykD HYuEixHmcg== ) c0m.re. 7200 IN DNSKEY ( 257 3 13 4F/nCvN9yVtmMySnyCjJKGWjUvGP9PSq4Nz5qVGNje+5hPvuCyKiSokV6R0K2zTeCv9YL4IDZuxB FJbEfkilMw== ) ; Key ID = 63478 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for c0m.re
	`c0m.re. 7200 IN DNSKEY ( 257 3 13 4F/nCvN9yVtmMySnyCjJKGWjUvGP9PSq4Nz5qVGNje+5hPvuCyKiSokV6R0K2zTeCv9YL4IDZuxB FJbEfkilMw== ) ; Key ID = 63478`
	DNSKEY=63478/SEP is now in the chain-of-trust
	DS=63478/SHA-1 verifies DNSKEY=63478/SEP
	DS=63478/SHA-256 verifies DNSKEY=63478/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`c0m.re. 7200 IN RRSIG ( DNSKEY 13 2 7200 20200312000000 20200220000000 63478 c0m.re. soLWx+Pg0Chjue5d7d7vVvPFFzXYoBZyWeF+X3+bv/TO/6zygPQ0Cxd5kY7G7/DIxIh2GQWiJykD HYuEixHmcg== )`
	RRSIG=63478 and DNSKEY=63478/SEP verifies the DNSKEY RRset
	Query to ns3.20dragons.com for c0m.re/A
	Error querying ns3.20dragons.com/2a07:59c6:ee02:ffff:ffff:ffff:9edd:fb81 for c0m.re/A: 'IPv6 transport disabled'
	Received 153 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (153 bytes) ;; HEADER SECTION ;; id = 36756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN A ;; ANSWER SECTION (2 records) c0m.re. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 63478 c0m.re. 8EWLc1mO2/pDpIikNdb4DpToMUVJGPW8eCUzt1G/YIMXEOiwAmel2f3hXTJWZvCdLJX3ZA/bzCr1 6rCizFXhJg== ) c0m.re. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	c0m.re is authoritative for c0m.re
	Found RRSIG signed by c0m.re zone
	Query to ns3.20dragons.com for c0m.re/SOA
	Received 197 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (197 bytes) ;; HEADER SECTION ;; id = 52760 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN SOA ;; ANSWER SECTION (2 records) c0m.re. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.re. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 63478 c0m.re. MXTnikeSTAEu3e+/0d94Ed4+pNlumD832gzc2RPEoT7Wf2zIaN02IFso/wOYMSDA4TVEhTIWx4jk xA0m7e6RQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.20dragons.com for c0m.re/SOA
	Received 197 bytes from 185.246.130.161
	;; Answer received from 185.246.130.161 (197 bytes) ;; HEADER SECTION ;; id = 19246 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN SOA ;; ANSWER SECTION (2 records) c0m.re. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.re. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 63478 c0m.re. MXTnikeSTAEu3e+/0d94Ed4+pNlumD832gzc2RPEoT7Wf2zIaN02IFso/wOYMSDA4TVEhTIWx4jk xA0m7e6RQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.20dragons.com for c0m.re/SOA
	Received 197 bytes from 5.253.86.161
	;; Answer received from 5.253.86.161 (197 bytes) ;; HEADER SECTION ;; id = 21551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN SOA ;; ANSWER SECTION (2 records) c0m.re. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.re. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 63478 c0m.re. MXTnikeSTAEu3e+/0d94Ed4+pNlumD832gzc2RPEoT7Wf2zIaN02IFso/wOYMSDA4TVEhTIWx4jk xA0m7e6RQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.20dragons.com for c0m.re/SOA
	Error querying ns1.20dragons.com/2001:ac8:22:2:0:0:11fc:6413 for c0m.re/SOA: 'IPv6 transport disabled'
	Received 197 bytes from 77.81.110.236
	;; Answer received from 77.81.110.236 (197 bytes) ;; HEADER SECTION ;; id = 30956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN SOA ;; ANSWER SECTION (2 records) c0m.re. 3600 IN SOA ( ns1.20dragons.com. admin1.20dragons.com. 2020022707 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) c0m.re. 3600 IN RRSIG ( SOA 13 2 3600 20200312000000 20200220000000 63478 c0m.re. MXTnikeSTAEu3e+/0d94Ed4+pNlumD832gzc2RPEoT7Wf2zIaN02IFso/wOYMSDA4TVEhTIWx4jk xA0m7e6RQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.20dragons.com for c0m.re/A
	Received 153 bytes from 45.152.127.5
	;; Answer received from 45.152.127.5 (153 bytes) ;; HEADER SECTION ;; id = 47674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; c0m.re. IN A ;; ANSWER SECTION (2 records) c0m.re. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 63478 c0m.re. 8EWLc1mO2/pDpIikNdb4DpToMUVJGPW8eCUzt1G/YIMXEOiwAmel2f3hXTJWZvCdLJX3ZA/bzCr1 6rCizFXhJg== ) c0m.re. 86400 IN A 185.164.136.124 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	c0m.re A RR has value 185.164.136.124
	Found 1 RRSIGs over A RRset
	`c0m.re. 86400 IN RRSIG ( A 13 2 86400 20200312000000 20200220000000 63478 c0m.re. 8EWLc1mO2/pDpIikNdb4DpToMUVJGPW8eCUzt1G/YIMXEOiwAmel2f3hXTJWZvCdLJX3ZA/bzCr1 6rCizFXhJg== )`
	RRSIG=63478 and DNSKEY=63478/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test c0m.re at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: