DNSSEC Analyzer

Domain Name:

Time: 2023-10-02 21:56:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for cas.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 58979 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to e.root-servers.net for cas.cat/A
	Received 778 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (778 octets) ;; HEADER SECTION ;; id = 14902 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . nzWVXQV1sEr+f1lq4KgKmN/PP6cweUZzg3yo/ow2cjcvxKY3RclFfhmZvsklZak1S2zFqoioSW20 boFL79q9HDtyvZileaV7T4LpRNMcIsNOMyrJiIv8w1TLStGo9FU02sGKZRfwXb1u8I2ai5nbD8VT nV8TTn/2hb1lDky+k5VorpUMzrkVtGLl7aGY81E9LwVxnRi9G+Giu6aBihu3bxaumyk4+uvKyVOV tc68ESb/f7B7DZJf1oagKIoJ6qe/gyG+yj4xu4hAjG2339VG6hDO1RdqvwuvGXcvUDAG2ne10Gah 2cH7RmA2E59od3yzHQGMdi9dKNzkyZMhEwywnw== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for cat/DNSKEY
	Received 774 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (774 octets) ;; HEADER SECTION ;; id = 26878 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . nzWVXQV1sEr+f1lq4KgKmN/PP6cweUZzg3yo/ow2cjcvxKY3RclFfhmZvsklZak1S2zFqoioSW20 boFL79q9HDtyvZileaV7T4LpRNMcIsNOMyrJiIv8w1TLStGo9FU02sGKZRfwXb1u8I2ai5nbD8VT nV8TTn/2hb1lDky+k5VorpUMzrkVtGLl7aGY81E9LwVxnRi9G+Giu6aBihu3bxaumyk4+uvKyVOV tc68ESb/f7B7DZJf1oagKIoJ6qe/gyG+yj4xu4hAjG2339VG6hDO1RdqvwuvGXcvUDAG2ne10Gah 2cH7RmA2E59od3yzHQGMdi9dKNzkyZMhEwywnw== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cat

cat

	Checking DS between . and cat
	Query to a.root-servers.net for cat/DS
	Received 367 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (367 octets) ;; HEADER SECTION ;; id = 28323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . nzWVXQV1sEr+f1lq4KgKmN/PP6cweUZzg3yo/ow2cjcvxKY3RclFfhmZvsklZak1S2zFqoioSW20 boFL79q9HDtyvZileaV7T4LpRNMcIsNOMyrJiIv8w1TLStGo9FU02sGKZRfwXb1u8I2ai5nbD8VT nV8TTn/2hb1lDky+k5VorpUMzrkVtGLl7aGY81E9LwVxnRi9G+Giu6aBihu3bxaumyk4+uvKyVOV tc68ESb/f7B7DZJf1oagKIoJ6qe/gyG+yj4xu4hAjG2339VG6hDO1RdqvwuvGXcvUDAG2ne10Gah 2cH7RmA2E59od3yzHQGMdi9dKNzkyZMhEwywnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . nzWVXQV1sEr+f1lq4KgKmN/PP6cweUZzg3yo/ow2cjcvxKY3RclFfhmZvsklZak1S2zFqoioSW20 boFL79q9HDtyvZileaV7T4LpRNMcIsNOMyrJiIv8w1TLStGo9FU02sGKZRfwXb1u8I2ai5nbD8VT nV8TTn/2hb1lDky+k5VorpUMzrkVtGLl7aGY81E9LwVxnRi9G+Giu6aBihu3bxaumyk4+uvKyVOV tc68ESb/f7B7DZJf1oagKIoJ6qe/gyG+yj4xu4hAjG2339VG6hDO1RdqvwuvGXcvUDAG2ne10Gah 2cH7RmA2E59od3yzHQGMdi9dKNzkyZMhEwywnw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to ns1.nic.es for cat/DNSKEY
	Received 779 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (779 octets) ;; HEADER SECTION ;; id = 13005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAbU63wuraRIO28XJdx2Pwx/TS284f1WgIwx++eut4eZQ3/Dx52ptGJfAsPgLTTvtMRl6SlTu I6u3UPbLiuoJih/kjZZCZ5rjGXebPWaw1hcCznRMO6C3TEVV/f6bTDQfeBAxx+c5/tNiKsnDyxj2 gTllgCR1LtuYqmeFrnskzSmFeoB+TsfjW33epzqiFTTva9MbaXWt+nGS3bn5ElnUap8= ) ; Key ID = 4485 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20231015075739 20231001075739 58737 cat. Ii8gsdxRLIIIVotpPdsVAWZb1eARSZV+hiSZcYZzj5QJa0zE75bCJBJXg2aEptHvYg7OLm06GGH4 75z0syCQg24Fj2r67f7XfNCAYMDq2E5gcCFggDwaxfngN6SxpoVdsAPZbHCBD1qX95AUAXwkhbx/ qUhlduuPW2pSY1DSsORwzT2nWzTkHn0/fOhzqYwphdpJq8sU0Yg7SYzE7rCMEU5wx2dJ8mr9dhDc ekKVmysrsnL3HomFM/uVSPEaZC0dUVrgvzRE5w9kBg0be3x2PrvGOTEfkHJktES7C+aS1QsDYRcT ti561v0G80POPTu8jJnYPsSYUN0K4ljl4jnPrw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAbU63wuraRIO28XJdx2Pwx/TS284f1WgIwx++eut4eZQ3/Dx52ptGJfAsPgLTTvtMRl6SlTu I6u3UPbLiuoJih/kjZZCZ5rjGXebPWaw1hcCznRMO6C3TEVV/f6bTDQfeBAxx+c5/tNiKsnDyxj2 gTllgCR1LtuYqmeFrnskzSmFeoB+TsfjW33epzqiFTTva9MbaXWt+nGS3bn5ElnUap8= ) ; Key ID = 4485`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20231015075739 20231001075739 58737 cat. Ii8gsdxRLIIIVotpPdsVAWZb1eARSZV+hiSZcYZzj5QJa0zE75bCJBJXg2aEptHvYg7OLm06GGH4 75z0syCQg24Fj2r67f7XfNCAYMDq2E5gcCFggDwaxfngN6SxpoVdsAPZbHCBD1qX95AUAXwkhbx/ qUhlduuPW2pSY1DSsORwzT2nWzTkHn0/fOhzqYwphdpJq8sU0Yg7SYzE7rCMEU5wx2dJ8mr9dhDc ekKVmysrsnL3HomFM/uVSPEaZC0dUVrgvzRE5w9kBg0be3x2PrvGOTEfkHJktES7C+aS1QsDYRcT ti561v0G80POPTu8jJnYPsSYUN0K4ljl4jnPrw== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=4485 is now in the chain-of-trust
	Query to cat.pch.net for cas.cat/A
	Received 351 bytes from 204.61.216.20
	;; Response received from 204.61.216.20 (351 octets) ;; HEADER SECTION ;; id = 11843 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS dns13.ovh.net. cas.cat. 86400 IN NS ns13.ovh.net. tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN NSEC3 ( 1 0 0 - tatn6nu4oq87n7a1881rkadfrhoij5c5 NS ) tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231014075047 20230930075047 4485 cat. PUXBhupdjarDC6srRmMXJMCnWf3XorCKznGKkYFUvsSxKOLZofnkdRLpeZENhn/bBONaN4+CAH/D kngooxnbfDZJ4kJak0l1j79bQsyG/j+Z7FDFPxaQSyIY4M0EItk4zMBmV9wtACmd/jO6AmeBhvC5 K8H6KhtpHt2aoIlbNysdHZwsq5DNUocmUeitNAU05zt2fKcMnwoDT8+T6ddugQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to anyc1.irondns.net for cas.cat/DNSKEY
	Received 351 bytes from 195.253.64.4
	;; Response received from 195.253.64.4 (351 octets) ;; HEADER SECTION ;; id = 26691 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS dns13.ovh.net. cas.cat. 86400 IN NS ns13.ovh.net. tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231014075047 20230930075047 4485 cat. PUXBhupdjarDC6srRmMXJMCnWf3XorCKznGKkYFUvsSxKOLZofnkdRLpeZENhn/bBONaN4+CAH/D kngooxnbfDZJ4kJak0l1j79bQsyG/j+Z7FDFPxaQSyIY4M0EItk4zMBmV9wtACmd/jO6AmeBhvC5 K8H6KhtpHt2aoIlbNysdHZwsq5DNUocmUeitNAU05zt2fKcMnwoDT8+T6ddugQ== ) tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN NSEC3 ( 1 0 0 - tatn6nu4oq87n7a1881rkadfrhoij5c5 NS ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cas.cat

cas.cat

	Checking DS between cat and cas.cat
	Query to ns.nic.cat for cas.cat/DS
	Timeout querying ns.nic.cat/84.88.0.162 for cas.cat/DS
	All Queries to ns.nic.cat for cas.cat/DS timed out or failed
	Query to cat.pch.net for cas.cat/DS
	Received 567 bytes from 204.61.216.20
	;; Response received from 204.61.216.20 (567 octets) ;; HEADER SECTION ;; id = 47859 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( ns.nic.cat. dnsmaster.corenic.org. 2310022124 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20231016192444 20231002192444 4485 cat. dHOcvFCP3fZL1uEKn+yssi2d06F+zrWkwCiJKUPZHrUHATw5UFHoXJ8a7VbXkMsrHp8Kb+hfhrJh mEYPLw+ZXtpmmfMu98aQJzGTR4v59ChxSFYHnFg5/08+UGNJL0rKX84MwTBAHA1DianTeiLm9XH9 ZmpRiq5gNHiGePKh0HpNIM1ApEXvvv9P/uwypVG6myTZuROPLqDKh2sYSKPNqg== ) tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN NSEC3 ( 1 0 0 - tatn6nu4oq87n7a1881rkadfrhoij5c5 NS ) tati3coui5l2k0bp9alh50qphdfp1dog.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231014075047 20230930075047 4485 cat. PUXBhupdjarDC6srRmMXJMCnWf3XorCKznGKkYFUvsSxKOLZofnkdRLpeZENhn/bBONaN4+CAH/D kngooxnbfDZJ4kJak0l1j79bQsyG/j+Z7FDFPxaQSyIY4M0EItk4zMBmV9wtACmd/jO6AmeBhvC5 K8H6KhtpHt2aoIlbNysdHZwsq5DNUocmUeitNAU05zt2fKcMnwoDT8+T6ddugQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for cas.cat in the cat zone
	Query to dns13.ovh.net for cas.cat/DNSKEY
	Received 90 bytes from 213.251.188.132
	;; Response received from 213.251.188.132 (90 octets) ;; HEADER SECTION ;; id = 6620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cas.cat. 60 IN SOA ( dns13.ovh.net. tech.ovh.net. 2023081605 ;serial 86400 ;refresh 3600 ;retry 3600000 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns13.ovh.net for cas.cat/A
	Received 52 bytes from 213.251.128.132
	;; Response received from 213.251.128.132 (52 octets) ;; HEADER SECTION ;; id = 5276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 45.150.187.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns13.ovh.net is authoritative for cas.cat
	Query to dns13.ovh.net for cas.cat/SOA
	Received 90 bytes from 213.251.188.132
	;; Response received from 213.251.188.132 (90 octets) ;; HEADER SECTION ;; id = 1134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN SOA ;; ANSWER SECTION (1 record) cas.cat. 3600 IN SOA ( dns13.ovh.net. tech.ovh.net. 2023081605 ;serial 86400 ;refresh 3600 ;retry 3600000 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns13.ovh.net for cas.cat/A
	Received 52 bytes from 213.251.128.132
	;; Response received from 213.251.128.132 (52 octets) ;; HEADER SECTION ;; id = 43718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 45.150.187.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cas.cat A RR has value 45.150.187.15
	No RRSIGs found

cas.cat

	Query to dns13.ovh.net for cas.cat/A
	Received 52 bytes from 213.251.188.132
	;; Response received from 213.251.188.132 (52 octets) ;; HEADER SECTION ;; id = 19604 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 45.150.187.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dns13.ovh.net is authoritative for cas.cat
	Query to dns13.ovh.net for cas.cat/A
	Received 52 bytes from 213.251.188.132
	;; Response received from 213.251.188.132 (52 octets) ;; HEADER SECTION ;; id = 8429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 45.150.187.15 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cas.cat A RR has value 45.150.187.15
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cas.cat at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: