DNSSEC Analyzer

Domain Name:

Time: 2020-10-24 09:22:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for cas.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (864 bytes) ;; HEADER SECTION ;; id = 18935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to b.root-servers.net for cas.cat/A
	Received 778 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (778 bytes) ;; HEADER SECTION ;; id = 16397 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS switch.nic.cat. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS cat.pch.net. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . vKLJQ/qs94s0oh6qbJidWbVCD4CDWNrjOt7yaDR2IpjfhzRUFKjXM+8jXWjWYurL5YNdXV0ZvlVQ 8xm7nDHYunQYnk1cfPtXjU+3ppNguEvALus5QFPh+nxR96BNPVg8/ALt760JkWhMl/XmUCRJCQ06 oXfpt01KnZpywU7/pbrCbutBAfUSs4tmbEmacycAdx/YSdNbEXfWxtd2u14Y1r1e27Lcqa7qKgE2 W1m67kqf1/3CfVhu46SzpMYbHz18OGKiIutdHaTce3Dwq9o37VoYorKe14OOdsZXHnc/0sona/eI N3UiXadcJgXz83RS+W1is3kgoIEThUG7uPOhFw== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to m.root-servers.net for cat/DNSKEY
	Received 774 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (774 bytes) ;; HEADER SECTION ;; id = 18206 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . vKLJQ/qs94s0oh6qbJidWbVCD4CDWNrjOt7yaDR2IpjfhzRUFKjXM+8jXWjWYurL5YNdXV0ZvlVQ 8xm7nDHYunQYnk1cfPtXjU+3ppNguEvALus5QFPh+nxR96BNPVg8/ALt760JkWhMl/XmUCRJCQ06 oXfpt01KnZpywU7/pbrCbutBAfUSs4tmbEmacycAdx/YSdNbEXfWxtd2u14Y1r1e27Lcqa7qKgE2 W1m67kqf1/3CfVhu46SzpMYbHz18OGKiIutdHaTce3Dwq9o37VoYorKe14OOdsZXHnc/0sona/eI N3UiXadcJgXz83RS+W1is3kgoIEThUG7uPOhFw== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cat

cat

	Checking DS between . and cat
	Query to i.root-servers.net for cat/DS
	Received 367 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (367 bytes) ;; HEADER SECTION ;; id = 3935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . vKLJQ/qs94s0oh6qbJidWbVCD4CDWNrjOt7yaDR2IpjfhzRUFKjXM+8jXWjWYurL5YNdXV0ZvlVQ 8xm7nDHYunQYnk1cfPtXjU+3ppNguEvALus5QFPh+nxR96BNPVg8/ALt760JkWhMl/XmUCRJCQ06 oXfpt01KnZpywU7/pbrCbutBAfUSs4tmbEmacycAdx/YSdNbEXfWxtd2u14Y1r1e27Lcqa7qKgE2 W1m67kqf1/3CfVhu46SzpMYbHz18OGKiIutdHaTce3Dwq9o37VoYorKe14OOdsZXHnc/0sona/eI N3UiXadcJgXz83RS+W1is3kgoIEThUG7uPOhFw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . vKLJQ/qs94s0oh6qbJidWbVCD4CDWNrjOt7yaDR2IpjfhzRUFKjXM+8jXWjWYurL5YNdXV0ZvlVQ 8xm7nDHYunQYnk1cfPtXjU+3ppNguEvALus5QFPh+nxR96BNPVg8/ALt760JkWhMl/XmUCRJCQ06 oXfpt01KnZpywU7/pbrCbutBAfUSs4tmbEmacycAdx/YSdNbEXfWxtd2u14Y1r1e27Lcqa7qKgE2 W1m67kqf1/3CfVhu46SzpMYbHz18OGKiIutdHaTce3Dwq9o37VoYorKe14OOdsZXHnc/0sona/eI N3UiXadcJgXz83RS+W1is3kgoIEThUG7uPOhFw== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to switch.nic.cat for cat/DNSKEY
	Received 747 bytes from 130.59.31.29
	;; Answer received from 130.59.31.29 (747 bytes) ;; HEADER SECTION ;; id = 8657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAa5b61RoohuaBcUKxcGAAr5qCQfGU4s0LWq6PaIFsZ+X6Q4MtC+K6Vi+6ufFH2ejDErbbci8 /hJgRFHIm8/KBQiQRQPHrjKRrtW7dIvBhTJKn6ry0f5U2F7yVrsQQUP59j6PBILCRbXK5tzuCQLl osJCtLx1URtCyUEwlKKMemI9 ) ; Key ID = 5021 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20201030075811 20201016075811 58737 cat. QxeKxWBzGnHqB2GHoWwUkt17yzsmSV959vbsw8UPqGDUPgRTW6q7TL4cBKBhVKmYQD/cVti7vZEJ 54zM0Eywthnm9kcUGz1Hl0IbJcJyVeGEypX+/1es7Iblf4sDLJyO7pgJhiP8ZdT9B/zBtGU128jb rTavJkW8eM0V6yWx3Q0HNZXZz4/isW/ZRBtFTHrFJMnbaKLD1IiW88kUyJhoEu7HB0VC86orM+e3 IwOFmZfoJA88Va2RoBeZSLmU6BKlfioec5oAqiD+IrYEsOz+lDoi66g5IP+nKIJ6WBSwnE4wnBx/ OFbm0woJva5ceyoO3PfZeONrmdtc/eKU+PHK8Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAa5b61RoohuaBcUKxcGAAr5qCQfGU4s0LWq6PaIFsZ+X6Q4MtC+K6Vi+6ufFH2ejDErbbci8 /hJgRFHIm8/KBQiQRQPHrjKRrtW7dIvBhTJKn6ry0f5U2F7yVrsQQUP59j6PBILCRbXK5tzuCQLl osJCtLx1URtCyUEwlKKMemI9 ) ; Key ID = 5021`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20201030075811 20201016075811 58737 cat. QxeKxWBzGnHqB2GHoWwUkt17yzsmSV959vbsw8UPqGDUPgRTW6q7TL4cBKBhVKmYQD/cVti7vZEJ 54zM0Eywthnm9kcUGz1Hl0IbJcJyVeGEypX+/1es7Iblf4sDLJyO7pgJhiP8ZdT9B/zBtGU128jb rTavJkW8eM0V6yWx3Q0HNZXZz4/isW/ZRBtFTHrFJMnbaKLD1IiW88kUyJhoEu7HB0VC86orM+e3 IwOFmZfoJA88Va2RoBeZSLmU6BKlfioec5oAqiD+IrYEsOz+lDoi66g5IP+nKIJ6WBSwnE4wnBx/ OFbm0woJva5ceyoO3PfZeONrmdtc/eKU+PHK8Q== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=5021 is now in the chain-of-trust
	Query to anyc1.irondns.net for cas.cat/A
	Received 370 bytes from 195.253.64.4
	;; Answer received from 195.253.64.4 (370 bytes) ;; HEADER SECTION ;; id = 717 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS ns1.cas.cat. cas.cat. 86400 IN NS sdns2.ovh.net. j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20201106175053 20201023175053 5021 cat. TGanxWGpbfhBeyKyiU4A1dW4NuiszviaaW47sKcvgOIqgGUe9IoVLIBTlDGnNhJwTfWjpwMrlzkQ aZXAkMlMZiTHpDwlEIN8TNdoK036INifjqWvCyI1MRiRrXpzLCXX8fNtWMY9TMpD4kW2H62kyzs7 eO2Rnchbig0Q0grVOxc= ) ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 86400 IN A 51.68.173.168 ns1.cas.cat. 86400 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.nic.es for cas.cat/DNSKEY
	Received 370 bytes from 194.69.254.1
	;; Answer received from 194.69.254.1 (370 bytes) ;; HEADER SECTION ;; id = 7169 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS sdns2.ovh.net. cas.cat. 86400 IN NS ns1.cas.cat. j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20201106175053 20201023175053 5021 cat. TGanxWGpbfhBeyKyiU4A1dW4NuiszviaaW47sKcvgOIqgGUe9IoVLIBTlDGnNhJwTfWjpwMrlzkQ aZXAkMlMZiTHpDwlEIN8TNdoK036INifjqWvCyI1MRiRrXpzLCXX8fNtWMY9TMpD4kW2H62kyzs7 eO2Rnchbig0Q0grVOxc= ) ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 86400 IN A 51.68.173.168 ns1.cas.cat. 86400 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cas.cat

cas.cat

	Checking DS between cat and cas.cat
	Query to cat.pch.net for cas.cat/DS
	Received 511 bytes from 204.61.216.20
	;; Answer received from 204.61.216.20 (511 bytes) ;; HEADER SECTION ;; id = 45174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( ns.nic.cat. dnsmaster.corenic.org. 2010240908 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20201107070848 20201024070848 5021 cat. pq7YTTE8Lss17Np0IUpgIpXjYbibUC+LB403sw4sndefCLxFPt7IGAykVDB2xEltBs3Pv7pvEIMX LLU7HhNsHBPTFJWJDEVpCR26oiBxOBbgQdldoS31xhb4kht6FuAQvUd/k0CuamlYjsLYJXfx5gGd oynC+zESkAxoI3ZCpNc= ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20201106175053 20201023175053 5021 cat. TGanxWGpbfhBeyKyiU4A1dW4NuiszviaaW47sKcvgOIqgGUe9IoVLIBTlDGnNhJwTfWjpwMrlzkQ aZXAkMlMZiTHpDwlEIN8TNdoK036INifjqWvCyI1MRiRrXpzLCXX8fNtWMY9TMpD4kW2H62kyzs7 eO2Rnchbig0Q0grVOxc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cas.cat in the cat zone
	Query to ns1.cas.cat for cas.cat/DNSKEY
	Received 844 bytes from 51.68.173.168
	;; Answer received from 51.68.173.168 (844 bytes) ;; HEADER SECTION ;; id = 61902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (2 records) cas.cat. 3600 IN DNSKEY ( 256 3 8 AwEAAbyzUS2pXhAWYdcNyWb258F9tw35ySBsYRGNfkA543tTAzDFQBIvRwrn5O0Xb8GYelcu6DeS H2aOOSav1YAse864KuBopXQhYMW8sUmd8VdhYTIlZCDK+xgLYo89Vr6OsUbgalFKT+GHCHpHdX0D biH0v1U0gBCldpNFfwxg3ATU7+mUTktIzPK5oWRZukq3XzuElV3d+EbGQUyiSkXqXBTOuGVXF+aE 8J75+2aBm4VQ/DeCdN4x9NOxeX1EZwWOo3hxPsI8pkXTnyKfkaV1E1cTjRqGnlF8ivIskhB4YlKQ 5p8MFX9IESo153wfjQZOm3tzObrJEobRq8uUx4+x6Fc= ) ; Key ID = 50220 cas.cat. 3600 IN DNSKEY ( 257 3 8 AwEAAc//7tpWPkRCCJf1QpixSOKC72GvT4geHZts7DJXucQZFp4j9a3AbMAXcWw92GcXWALWbrYD MNPL+YAycntSNNSR4vxbrvN3T4OvWSdoCQuQui9Cz1cG78seEtTsCNHYaDLoAvBUN8d+jqGKr4bf 5tA+JbVwX/vKjawsPHnALVOsaaVnsIAj9zwv9MPXqhsotOJ3ekkX/JysJapNtKomBF+bY0Cv1LPF KIvFpiBEW7VbZNBCdMJBCUJ6UXXe3bedR+j1mIg7ZV3tImxizli/kal1162bscZoCXWx9vnKSGbG 5DFgEvevZn5ndamDyrborcwyWJwsR741lNSQGpiKuEAF0KFmb8e7Q2FzjzVDVZVEQJNLEwrWyL1K KLVjC1Np/QcGirH9Wt7vDgfKjwNqvP64jKx1DnT0zlW6lzNYmgYtNBR6s6dAk7u2+2T2GxfukBE2 4gDVv+qra9QugJIm09Hsa4MwhB23oHpvLDt8zo110cDRjrh/WgvNAt/nQe+ko1IB8kelsR105wt8 tj4hjZw1ssbrEnZ5t6RKdi7G03XzcVXwe9zgetU9iom6PNuY6FfXRJzJJwqFC5tzskdYse78JFRz jjC5UELId4Vaybd+7y7XE4o1FYTrqR8jyLy7F8jsQWbI0mcpUK/EXOfCm3aEH7LK5mmwuYc2tAWz 4gPx ) ; Key ID = 7441 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cas.cat
	`cas.cat. 3600 IN DNSKEY ( 256 3 8 AwEAAbyzUS2pXhAWYdcNyWb258F9tw35ySBsYRGNfkA543tTAzDFQBIvRwrn5O0Xb8GYelcu6DeS H2aOOSav1YAse864KuBopXQhYMW8sUmd8VdhYTIlZCDK+xgLYo89Vr6OsUbgalFKT+GHCHpHdX0D biH0v1U0gBCldpNFfwxg3ATU7+mUTktIzPK5oWRZukq3XzuElV3d+EbGQUyiSkXqXBTOuGVXF+aE 8J75+2aBm4VQ/DeCdN4x9NOxeX1EZwWOo3hxPsI8pkXTnyKfkaV1E1cTjRqGnlF8ivIskhB4YlKQ 5p8MFX9IESo153wfjQZOm3tzObrJEobRq8uUx4+x6Fc= ) ; Key ID = 50220`
	cas.cat. 3600 IN DNSKEY ( 257 3 8 AwEAAc//7tpWPkRCCJf1QpixSOKC72GvT4geHZts7DJXucQZFp4j9a3AbMAXcWw92GcXWALWbrYD MNPL+YAycntSNNSR4vxbrvN3T4OvWSdoCQuQui9Cz1cG78seEtTsCNHYaDLoAvBUN8d+jqGKr4bf 5tA+JbVwX/vKjawsPHnALVOsaaVnsIAj9zwv9MPXqhsotOJ3ekkX/JysJapNtKomBF+bY0Cv1LPF KIvFpiBEW7VbZNBCdMJBCUJ6UXXe3bedR+j1mIg7ZV3tImxizli/kal1162bscZoCXWx9vnKSGbG 5DFgEvevZn5ndamDyrborcwyWJwsR741lNSQGpiKuEAF0KFmb8e7Q2FzjzVDVZVEQJNLEwrWyL1K KLVjC1Np/QcGirH9Wt7vDgfKjwNqvP64jKx1DnT0zlW6lzNYmgYtNBR6s6dAk7u2+2T2GxfukBE2 4gDVv+qra9QugJIm09Hsa4MwhB23oHpvLDt8zo110cDRjrh/WgvNAt/nQe+ko1IB8kelsR105wt8 tj4hjZw1ssbrEnZ5t6RKdi7G03XzcVXwe9zgetU9iom6PNuY6FfXRJzJJwqFC5tzskdYse78JFRz jjC5UELId4Vaybd+7y7XE4o1FYTrqR8jyLy7F8jsQWbI0mcpUK/EXOfCm3aEH7LK5mmwuYc2tAWz 4gPx ) ; Key ID = 7441
	No RRSIGs found
	Query to sdns2.ovh.net for cas.cat/A
	Received 347 bytes from 213.251.188.141
	;; Answer received from 213.251.188.141 (347 bytes) ;; HEADER SECTION ;; id = 27469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (2 records) cas.cat. 3600 IN A 51.68.173.168 cas.cat. 3600 IN RRSIG ( A 8 2 3600 20201116115830 20201017111129 50220 cas.cat. lFEpzrJOaViZpBFR5IdSIErtjnAcTD1U88j7AEGdQodZTsfI33tvMQJYv58/B/cwzuSoe9kqcKDS 1LRPKV8dq2zrapGpkL8vNvN389LGwTisoZuTom3+6gtvLvvKPi13/AdCSyArJM8E8mw4qQepWoC1 1elbP3Xt7jZcBFkaUynQtIov3JfXYCBazdj+4/Ox7FbeojQmzKTTP6bJzsOwFeT9O6kMdH0PXTeS QIyeTyFwolTaEX5GK3LfRW0znLmKJunkofyXsdtXJAx91vzw+YbgphCfHE4cWsjKZFSJkxM9rPIt tF91+YDnpbxmJe1VWrNvEiGpnZcEJB7wSqLBbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cas.cat is authoritative for cas.cat
	Found RRSIG signed by cas.cat zone
	Query to sdns2.ovh.net for cas.cat/SOA
	Received 375 bytes from 213.251.188.141
	;; Answer received from 213.251.188.141 (375 bytes) ;; HEADER SECTION ;; id = 51122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN SOA ;; ANSWER SECTION (2 records) cas.cat. 3600 IN SOA ( ns1.cas.cat. dns.cas.cat. 2020091705 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) cas.cat. 3600 IN RRSIG ( SOA 8 2 3600 20201116121129 20201017111129 50220 cas.cat. lBrEHuiK/Q2ah7iutMBIZqIv1qeKGpQ8NN8oMT+SO/RWj514ii3Q6xJIf57Np+jBv7AcD73WSSFA 6JnGyg/Nxh2aFJ4E0PBasDWSnrV1Myebr5Ijlx4gAywFQmrQPtZPpmemG+32snPy2W+fhXWAioNs NobAM/rw4yFhuWEDHxRIAMHYwyoYx1Or/VFx/D8wxJdAcu2Hn9NOMxg2FswmxUhcbkEow/RoYC5X rBdYTWG2I1w4ZyahtOVfYC/YnvZd2BoLID5nGJCPvD5aaaaN1+rWFt66Tzy31fDahHbab4zWQrfB jWAzzC2Xj2ANP3+qfax+pQ4QgpFDaH3NBZxkzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.cas.cat for cas.cat/SOA
	Received 165 bytes from 51.68.173.168
	;; Answer received from 51.68.173.168 (165 bytes) ;; HEADER SECTION ;; id = 44790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN SOA ;; ANSWER SECTION (1 record) cas.cat. 3600 IN SOA ( ns1.cas.cat. dns.cas.cat. 2020091705 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (2 records) cas.cat. 3600 IN NS sdns2.ovh.net. cas.cat. 3600 IN NS ns1.cas.cat. ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 3600 IN A 51.68.173.168 ns1.cas.cat. 3600 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sdns2.ovh.net for cas.cat/A
	Received 347 bytes from 213.251.188.141
	;; Answer received from 213.251.188.141 (347 bytes) ;; HEADER SECTION ;; id = 25769 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (2 records) cas.cat. 3600 IN A 51.68.173.168 cas.cat. 3600 IN RRSIG ( A 8 2 3600 20201116115830 20201017111129 50220 cas.cat. lFEpzrJOaViZpBFR5IdSIErtjnAcTD1U88j7AEGdQodZTsfI33tvMQJYv58/B/cwzuSoe9kqcKDS 1LRPKV8dq2zrapGpkL8vNvN389LGwTisoZuTom3+6gtvLvvKPi13/AdCSyArJM8E8mw4qQepWoC1 1elbP3Xt7jZcBFkaUynQtIov3JfXYCBazdj+4/Ox7FbeojQmzKTTP6bJzsOwFeT9O6kMdH0PXTeS QIyeTyFwolTaEX5GK3LfRW0znLmKJunkofyXsdtXJAx91vzw+YbgphCfHE4cWsjKZFSJkxM9rPIt tF91+YDnpbxmJe1VWrNvEiGpnZcEJB7wSqLBbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cas.cat A RR has value 51.68.173.168
	Found 1 RRSIGs over A RRset
	`cas.cat. 3600 IN RRSIG ( A 8 2 3600 20201116115830 20201017111129 50220 cas.cat. lFEpzrJOaViZpBFR5IdSIErtjnAcTD1U88j7AEGdQodZTsfI33tvMQJYv58/B/cwzuSoe9kqcKDS 1LRPKV8dq2zrapGpkL8vNvN389LGwTisoZuTom3+6gtvLvvKPi13/AdCSyArJM8E8mw4qQepWoC1 1elbP3Xt7jZcBFkaUynQtIov3JfXYCBazdj+4/Ox7FbeojQmzKTTP6bJzsOwFeT9O6kMdH0PXTeS QIyeTyFwolTaEX5GK3LfRW0znLmKJunkofyXsdtXJAx91vzw+YbgphCfHE4cWsjKZFSJkxM9rPIt tF91+YDnpbxmJe1VWrNvEiGpnZcEJB7wSqLBbA== )`
	RRSIG=50220 and DNSKEY=50220 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cas.cat at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: