DNSSEC Analyzer

Domain Name:

Time: 2021-08-06 03:58:15 UTC, NTP stratum 16

Analyzing DNSSEC problems for cas.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 58032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to k.root-servers.net for cas.cat/A
	Received 778 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (778 octets) ;; HEADER SECTION ;; id = 12222 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . EtKWAdpAev/9S428fUP6Ubi/MgI3F3UuHY3KJl5+ucToO6WOR6S1QqxwMUMF8I8RyYW5nHFxjXaN pm/XLkKtxOd7UGmVTlNari7sKMqQiRXhD1yEpc95kf0BOkTDLN9CptS5ddZjwtat0WS0hV5HTf9p U/Q1M/gKhoRXjS0g3/x0pPpLrrZ+G6Y8bWPqL9E6MSpxJYVAn7g8gQ8r0SZ+U7mRPGCzxUE1PsvO PQHgtxyzDLzQ26YxBFEkzUHMf9AwonW98SHyGJCUJq2MsRo3pfeF7v52aXmpsatJzuuJ/QDLytM9 pyYyAU8th4X9sVgy2BG9R2hO5hkfj1XO51RMYg== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for cat/DNSKEY
	Received 780 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (780 octets) ;; HEADER SECTION ;; id = 24374 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS switch.nic.cat. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS anyc1.irondns.net. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . EtKWAdpAev/9S428fUP6Ubi/MgI3F3UuHY3KJl5+ucToO6WOR6S1QqxwMUMF8I8RyYW5nHFxjXaN pm/XLkKtxOd7UGmVTlNari7sKMqQiRXhD1yEpc95kf0BOkTDLN9CptS5ddZjwtat0WS0hV5HTf9p U/Q1M/gKhoRXjS0g3/x0pPpLrrZ+G6Y8bWPqL9E6MSpxJYVAn7g8gQ8r0SZ+U7mRPGCzxUE1PsvO PQHgtxyzDLzQ26YxBFEkzUHMf9AwonW98SHyGJCUJq2MsRo3pfeF7v52aXmpsatJzuuJ/QDLytM9 pyYyAU8th4X9sVgy2BG9R2hO5hkfj1XO51RMYg== ) ;; ADDITIONAL SECTION (13 records) switch.nic.cat. 172800 IN A 130.59.31.29 anyc1.irondns.net. 172800 IN A 195.253.64.4 nsc.nic.de. 172800 IN A 194.0.11.110 ns1.nic.es. 172800 IN A 194.69.254.1 cat.pch.net. 172800 IN A 204.61.216.20 ns.nic.cat. 172800 IN A 84.88.0.162 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cat

cat

	Checking DS between . and cat
	Query to i.root-servers.net for cat/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (367 octets) ;; HEADER SECTION ;; id = 40412 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . EtKWAdpAev/9S428fUP6Ubi/MgI3F3UuHY3KJl5+ucToO6WOR6S1QqxwMUMF8I8RyYW5nHFxjXaN pm/XLkKtxOd7UGmVTlNari7sKMqQiRXhD1yEpc95kf0BOkTDLN9CptS5ddZjwtat0WS0hV5HTf9p U/Q1M/gKhoRXjS0g3/x0pPpLrrZ+G6Y8bWPqL9E6MSpxJYVAn7g8gQ8r0SZ+U7mRPGCzxUE1PsvO PQHgtxyzDLzQ26YxBFEkzUHMf9AwonW98SHyGJCUJq2MsRo3pfeF7v52aXmpsatJzuuJ/QDLytM9 pyYyAU8th4X9sVgy2BG9R2hO5hkfj1XO51RMYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20210818200000 20210805190000 26838 . EtKWAdpAev/9S428fUP6Ubi/MgI3F3UuHY3KJl5+ucToO6WOR6S1QqxwMUMF8I8RyYW5nHFxjXaN pm/XLkKtxOd7UGmVTlNari7sKMqQiRXhD1yEpc95kf0BOkTDLN9CptS5ddZjwtat0WS0hV5HTf9p U/Q1M/gKhoRXjS0g3/x0pPpLrrZ+G6Y8bWPqL9E6MSpxJYVAn7g8gQ8r0SZ+U7mRPGCzxUE1PsvO PQHgtxyzDLzQ26YxBFEkzUHMf9AwonW98SHyGJCUJq2MsRo3pfeF7v52aXmpsatJzuuJ/QDLytM9 pyYyAU8th4X9sVgy2BG9R2hO5hkfj1XO51RMYg== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to ns.nic.cat for cat/DNSKEY
	Received 747 bytes from 84.88.0.162
	;; Response received from 84.88.0.162 (747 octets) ;; HEADER SECTION ;; id = 4221 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAccztkoSSUinS0RAvo9uzo/TX1OLT5b5ECXYcBiokAzYJt4UeJFveA0g//u3jjQGKbMDMAAB Pn9UnDE+ZfdpvIP1h6nxeGPIuUx7eYxdl8W85zRgNklh3F9P5NwqvzuY2QCnQeWNHU2ROXKcWjCK TNIkk40YPQ33GqdpJL4ZuoRt ) ; Key ID = 59445 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20210817215623 20210803215623 58737 cat. GExjgcY33066bxWJTPTCDpgjkkvLseyC37sEI2yImANyL36RGgD1sTsZpMzdFbkLxIfazeEQjpE5 60WnyQ/FcCvhorQUQuBa/ZWQy9sVkEFtyMPykmyODlEiBdGJO79VX9lRuSF2aLXwPtN7Y+0qr8MI AfGrB5zD332J7+oDT7Ob5QR8aSLWChdxWzGY4kereZLPHCA0nQJAW9U+bmZ2cNTdBZyBBjDTUDAt kfby8Ej3z6oa2zdFO+aZ2EAdBXUIRQLHf+g0rDD4I8hqamRjK8rPTp7UgZffee5YsoAAjoCCJ3D/ W69Orh7w8Yz+uD1abpt0t00IcZ7pZAWZLHpr+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAccztkoSSUinS0RAvo9uzo/TX1OLT5b5ECXYcBiokAzYJt4UeJFveA0g//u3jjQGKbMDMAAB Pn9UnDE+ZfdpvIP1h6nxeGPIuUx7eYxdl8W85zRgNklh3F9P5NwqvzuY2QCnQeWNHU2ROXKcWjCK TNIkk40YPQ33GqdpJL4ZuoRt ) ; Key ID = 59445`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20210817215623 20210803215623 58737 cat. GExjgcY33066bxWJTPTCDpgjkkvLseyC37sEI2yImANyL36RGgD1sTsZpMzdFbkLxIfazeEQjpE5 60WnyQ/FcCvhorQUQuBa/ZWQy9sVkEFtyMPykmyODlEiBdGJO79VX9lRuSF2aLXwPtN7Y+0qr8MI AfGrB5zD332J7+oDT7Ob5QR8aSLWChdxWzGY4kereZLPHCA0nQJAW9U+bmZ2cNTdBZyBBjDTUDAt kfby8Ej3z6oa2zdFO+aZ2EAdBXUIRQLHf+g0rDD4I8hqamRjK8rPTp7UgZffee5YsoAAjoCCJ3D/ W69Orh7w8Yz+uD1abpt0t00IcZ7pZAWZLHpr+w== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=59445 is now in the chain-of-trust
	Query to anyc1.irondns.net for cas.cat/A
	Received 370 bytes from 195.253.64.4
	;; Response received from 195.253.64.4 (370 octets) ;; HEADER SECTION ;; id = 5204 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS sdns2.ovh.net. cas.cat. 86400 IN NS ns1.cas.cat. j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20210816215053 20210802215053 59445 cat. p81TRy9k5LWOTgYuOq7KmnrVcqJxgdpvf5ONzH6qX1cK0XdclEFjSanQXkaZSPP2IIFdhEbKX3ph l/KNfyQ2uAEsX506beffagTzk4ND8Qz1kmIYCBStxvQIVt22u4NqBHJUFc8T3HNwpTs2dS0GYcoY YjRTjjaiujgnB3x0CUU= ) ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 86400 IN A 51.68.173.168 ns1.cas.cat. 86400 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.nic.es for cas.cat/DNSKEY
	Received 370 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (370 octets) ;; HEADER SECTION ;; id = 774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cas.cat. 86400 IN NS sdns2.ovh.net. cas.cat. 86400 IN NS ns1.cas.cat. j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20210816215053 20210802215053 59445 cat. p81TRy9k5LWOTgYuOq7KmnrVcqJxgdpvf5ONzH6qX1cK0XdclEFjSanQXkaZSPP2IIFdhEbKX3ph l/KNfyQ2uAEsX506beffagTzk4ND8Qz1kmIYCBStxvQIVt22u4NqBHJUFc8T3HNwpTs2dS0GYcoY YjRTjjaiujgnB3x0CUU= ) ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 86400 IN A 51.68.173.168 ns1.cas.cat. 86400 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cas.cat

cas.cat

	Checking DS between cat and cas.cat
	Query to nsc.nic.de for cas.cat/DS
	Received 508 bytes from 194.0.11.110
	;; Response received from 194.0.11.110 (508 octets) ;; HEADER SECTION ;; id = 48677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( ns.nic.cat. dnsmaster.corenic.org. 2108060233 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20210820003357 20210806003357 59445 cat. AFzK28K7zdzgaZ5ZO6WcC9caoHdbfN/Rcz4W5wLsN6vchsamZb2bmq3EoQf7fex9Aa8tIulyU8sN K8BhWYo+GwjJo4RQrKTfo/9KDy+xxZ2WxSzc3RDi/B3piDt3IjMfqjFx2hmwdL4dNeZf2a8h8mQb UVExPSnvHnsBx/2ZOf4= ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN NSEC3 ( 1 0 12 ae7a5f02adac6f45 j2vuafkedh9512e9qnsj98ikshl6rslv NS ) j2vfjih60haegovl6ve1cmf1umpu825l.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20210816215053 20210802215053 59445 cat. p81TRy9k5LWOTgYuOq7KmnrVcqJxgdpvf5ONzH6qX1cK0XdclEFjSanQXkaZSPP2IIFdhEbKX3ph l/KNfyQ2uAEsX506beffagTzk4ND8Qz1kmIYCBStxvQIVt22u4NqBHJUFc8T3HNwpTs2dS0GYcoY YjRTjjaiujgnB3x0CUU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	No DS records found for cas.cat in the cat zone
	Query to ns1.cas.cat for cas.cat/DNSKEY
	Received 844 bytes from 51.68.173.168
	;; Response received from 51.68.173.168 (844 octets) ;; HEADER SECTION ;; id = 28561 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN DNSKEY ;; ANSWER SECTION (2 records) cas.cat. 3600 IN DNSKEY ( 256 3 8 AwEAAbyzUS2pXhAWYdcNyWb258F9tw35ySBsYRGNfkA543tTAzDFQBIvRwrn5O0Xb8GYelcu6DeS H2aOOSav1YAse864KuBopXQhYMW8sUmd8VdhYTIlZCDK+xgLYo89Vr6OsUbgalFKT+GHCHpHdX0D biH0v1U0gBCldpNFfwxg3ATU7+mUTktIzPK5oWRZukq3XzuElV3d+EbGQUyiSkXqXBTOuGVXF+aE 8J75+2aBm4VQ/DeCdN4x9NOxeX1EZwWOo3hxPsI8pkXTnyKfkaV1E1cTjRqGnlF8ivIskhB4YlKQ 5p8MFX9IESo153wfjQZOm3tzObrJEobRq8uUx4+x6Fc= ) ; Key ID = 50220 cas.cat. 3600 IN DNSKEY ( 257 3 8 AwEAAc//7tpWPkRCCJf1QpixSOKC72GvT4geHZts7DJXucQZFp4j9a3AbMAXcWw92GcXWALWbrYD MNPL+YAycntSNNSR4vxbrvN3T4OvWSdoCQuQui9Cz1cG78seEtTsCNHYaDLoAvBUN8d+jqGKr4bf 5tA+JbVwX/vKjawsPHnALVOsaaVnsIAj9zwv9MPXqhsotOJ3ekkX/JysJapNtKomBF+bY0Cv1LPF KIvFpiBEW7VbZNBCdMJBCUJ6UXXe3bedR+j1mIg7ZV3tImxizli/kal1162bscZoCXWx9vnKSGbG 5DFgEvevZn5ndamDyrborcwyWJwsR741lNSQGpiKuEAF0KFmb8e7Q2FzjzVDVZVEQJNLEwrWyL1K KLVjC1Np/QcGirH9Wt7vDgfKjwNqvP64jKx1DnT0zlW6lzNYmgYtNBR6s6dAk7u2+2T2GxfukBE2 4gDVv+qra9QugJIm09Hsa4MwhB23oHpvLDt8zo110cDRjrh/WgvNAt/nQe+ko1IB8kelsR105wt8 tj4hjZw1ssbrEnZ5t6RKdi7G03XzcVXwe9zgetU9iom6PNuY6FfXRJzJJwqFC5tzskdYse78JFRz jjC5UELId4Vaybd+7y7XE4o1FYTrqR8jyLy7F8jsQWbI0mcpUK/EXOfCm3aEH7LK5mmwuYc2tAWz 4gPx ) ; Key ID = 7441 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for cas.cat
	`cas.cat. 3600 IN DNSKEY ( 256 3 8 AwEAAbyzUS2pXhAWYdcNyWb258F9tw35ySBsYRGNfkA543tTAzDFQBIvRwrn5O0Xb8GYelcu6DeS H2aOOSav1YAse864KuBopXQhYMW8sUmd8VdhYTIlZCDK+xgLYo89Vr6OsUbgalFKT+GHCHpHdX0D biH0v1U0gBCldpNFfwxg3ATU7+mUTktIzPK5oWRZukq3XzuElV3d+EbGQUyiSkXqXBTOuGVXF+aE 8J75+2aBm4VQ/DeCdN4x9NOxeX1EZwWOo3hxPsI8pkXTnyKfkaV1E1cTjRqGnlF8ivIskhB4YlKQ 5p8MFX9IESo153wfjQZOm3tzObrJEobRq8uUx4+x6Fc= ) ; Key ID = 50220`
	cas.cat. 3600 IN DNSKEY ( 257 3 8 AwEAAc//7tpWPkRCCJf1QpixSOKC72GvT4geHZts7DJXucQZFp4j9a3AbMAXcWw92GcXWALWbrYD MNPL+YAycntSNNSR4vxbrvN3T4OvWSdoCQuQui9Cz1cG78seEtTsCNHYaDLoAvBUN8d+jqGKr4bf 5tA+JbVwX/vKjawsPHnALVOsaaVnsIAj9zwv9MPXqhsotOJ3ekkX/JysJapNtKomBF+bY0Cv1LPF KIvFpiBEW7VbZNBCdMJBCUJ6UXXe3bedR+j1mIg7ZV3tImxizli/kal1162bscZoCXWx9vnKSGbG 5DFgEvevZn5ndamDyrborcwyWJwsR741lNSQGpiKuEAF0KFmb8e7Q2FzjzVDVZVEQJNLEwrWyL1K KLVjC1Np/QcGirH9Wt7vDgfKjwNqvP64jKx1DnT0zlW6lzNYmgYtNBR6s6dAk7u2+2T2GxfukBE2 4gDVv+qra9QugJIm09Hsa4MwhB23oHpvLDt8zo110cDRjrh/WgvNAt/nQe+ko1IB8kelsR105wt8 tj4hjZw1ssbrEnZ5t6RKdi7G03XzcVXwe9zgetU9iom6PNuY6FfXRJzJJwqFC5tzskdYse78JFRz jjC5UELId4Vaybd+7y7XE4o1FYTrqR8jyLy7F8jsQWbI0mcpUK/EXOfCm3aEH7LK5mmwuYc2tAWz 4gPx ) ; Key ID = 7441
	No RRSIGs found
	Query to ns1.cas.cat for cas.cat/A
	Received 141 bytes from 51.68.173.168
	;; Response received from 51.68.173.168 (141 octets) ;; HEADER SECTION ;; id = 57388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 51.68.173.168 ;; AUTHORITY SECTION (2 records) cas.cat. 3600 IN NS sdns2.ovh.net. cas.cat. 3600 IN NS ns1.cas.cat. ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 3600 IN A 51.68.173.168 ns1.cas.cat. 3600 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.cas.cat is authoritative for cas.cat
	Query to sdns2.ovh.net for cas.cat/SOA
	Received 375 bytes from 213.251.188.141
	;; Response received from 213.251.188.141 (375 octets) ;; HEADER SECTION ;; id = 28040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN SOA ;; ANSWER SECTION (2 records) cas.cat. 3600 IN SOA ( ns1.cas.cat. dns.cas.cat. 2021031572 ;serial 3600 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) cas.cat. 3600 IN RRSIG ( SOA 8 2 3600 20210904174014 20210805164014 50220 cas.cat. QPPkusUn13jD4HixMjcnMudMPSbt7rJGSiu0zZdx/HLQ+419brvBoLRA9kZl93xzyy9bqV0OLWIT r6IWQq8qz3GOW/PloOt8OV9H9jMvWCBwkOy9jN4/ui56OLnyL4fH6Ti2TXNNlcQkmK6H3cJN0kkL pOH6DzO+HNxTHeyQNU6Sh5muLI8UsiDkZIohxPWT9esE5pLkxRpoZZeYhhQcPfiqKMFsXWpKzrqW jDSsuxZNjX1y6BYCj+ED3wDrzTrJhmRVPm8WxmwzcJ/EHT8bjuqXBVFt9G2ec0/4dGVJeeDxroRC P2d8ITmokTg3v9cl7IOXycbSOXA5BvsRdS4B3g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.cas.cat for cas.cat/A
	Received 141 bytes from 51.68.173.168
	;; Response received from 51.68.173.168 (141 octets) ;; HEADER SECTION ;; id = 23528 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (1 record) cas.cat. 3600 IN A 51.68.173.168 ;; AUTHORITY SECTION (2 records) cas.cat. 3600 IN NS ns1.cas.cat. cas.cat. 3600 IN NS sdns2.ovh.net. ;; ADDITIONAL SECTION (3 records) ns1.cas.cat. 3600 IN A 51.68.173.168 ns1.cas.cat. 3600 IN AAAA 2001:41d0:701:1100::194d ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cas.cat A RR has value 51.68.173.168
	No RRSIGs found

cas.cat

	Query to sdns2.ovh.net for cas.cat/A
	Received 347 bytes from 213.251.188.141
	;; Response received from 213.251.188.141 (347 octets) ;; HEADER SECTION ;; id = 42154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (2 records) cas.cat. 3600 IN A 51.68.173.168 cas.cat. 3600 IN RRSIG ( A 8 2 3600 20210904164700 20210805163422 50220 cas.cat. L3wY2KQAHFtOSL7An6a6fEaCIeW1abDoiqtCD7EF+2iQZqPGGgs8Az2RHghI8VBsnQpGcZbgFsjo uR8x/JV7bB+MCCLL4grbzZRHxD+65gmgnWQGOATelcrSbXBNS0dhT1wifd9NiEGjjAmnWVwXmB9A pGvQzkIVjY7tNHexSWgvaksaRv+FcYPlzUrkCz8yzfFQkWVVKlHwl5tIAm4CVpmAxTQavp8ez26C 4C3c/YQ1zkyWkFvqpaLXSpzmA6PlV4mavyIKEbVEp2opDoKjMVCOgkWCQzGBRvrtcZ1R7nxK2ZQx N89W0CWsY3L7AlvLu5XPorCKaUsAKSFt3TilXA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	sdns2.ovh.net is authoritative for cas.cat
	Found RRSIG signed by cas.cat zone
	Query to sdns2.ovh.net for cas.cat/A
	Received 347 bytes from 213.251.188.141
	;; Response received from 213.251.188.141 (347 octets) ;; HEADER SECTION ;; id = 5928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cas.cat. IN A ;; ANSWER SECTION (2 records) cas.cat. 3600 IN A 51.68.173.168 cas.cat. 3600 IN RRSIG ( A 8 2 3600 20210904164700 20210805163422 50220 cas.cat. L3wY2KQAHFtOSL7An6a6fEaCIeW1abDoiqtCD7EF+2iQZqPGGgs8Az2RHghI8VBsnQpGcZbgFsjo uR8x/JV7bB+MCCLL4grbzZRHxD+65gmgnWQGOATelcrSbXBNS0dhT1wifd9NiEGjjAmnWVwXmB9A pGvQzkIVjY7tNHexSWgvaksaRv+FcYPlzUrkCz8yzfFQkWVVKlHwl5tIAm4CVpmAxTQavp8ez26C 4C3c/YQ1zkyWkFvqpaLXSpzmA6PlV4mavyIKEbVEp2opDoKjMVCOgkWCQzGBRvrtcZ1R7nxK2ZQx N89W0CWsY3L7AlvLu5XPorCKaUsAKSFt3TilXA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cas.cat A RR has value 51.68.173.168
	Found 1 RRSIGs over A RRset
	`cas.cat. 3600 IN RRSIG ( A 8 2 3600 20210904164700 20210805163422 50220 cas.cat. L3wY2KQAHFtOSL7An6a6fEaCIeW1abDoiqtCD7EF+2iQZqPGGgs8Az2RHghI8VBsnQpGcZbgFsjo uR8x/JV7bB+MCCLL4grbzZRHxD+65gmgnWQGOATelcrSbXBNS0dhT1wifd9NiEGjjAmnWVwXmB9A pGvQzkIVjY7tNHexSWgvaksaRv+FcYPlzUrkCz8yzfFQkWVVKlHwl5tIAm4CVpmAxTQavp8ez26C 4C3c/YQ1zkyWkFvqpaLXSpzmA6PlV4mavyIKEbVEp2opDoKjMVCOgkWCQzGBRvrtcZ1R7nxK2ZQx N89W0CWsY3L7AlvLu5XPorCKaUsAKSFt3TilXA== )`
	RRSIG=50220 and DNSKEY=50220 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cas.cat at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: