DNSSEC Analyzer

Domain Name:

Time: 2022-05-20 09:47:42 UTC, NTP stratum 16

Analyzing DNSSEC problems for ces.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	Query to a.root-servers.net for ces.es/A
	Received 614 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (614 octets) ;; HEADER SECTION ;; id = 23082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS g.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS a.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; ADDITIONAL SECTION (9 records) g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for es/DNSKEY
	Received 610 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (610 octets) ;; HEADER SECTION ;; id = 48348 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to a.root-servers.net for es/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (366 octets) ;; HEADER SECTION ;; id = 58472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for es in the . zone
	DS=49852/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=49852/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 )`
	Query to h.nic.es for es/DNSKEY
	Received 893 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (893 octets) ;; HEADER SECTION ;; id = 44478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (4 records) es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852 es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119 es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220602021230 20220518190502 49852 es. YCSDTA84d6UYLP8UGfsyodMyopB9xWGWt9kevX4Db2K/YWT9tWruUCxFTJLaySa921renq/DBsFp Sl9/z6D8ykVsrn/2oWmxugbbEruJZDo0gWyAm5IPfqjyBHR+CTLZAjw0KIrtHI87ckmBXE723XYQ MrJkERx5y6tRJZ69vJW4aqm5XsOXSpgORufwVxZMnkFA6m0k2M4mXUGalqRuJ53rbnwKF3N4aIab CkFt20seUUX2GALTKdmnVIH8FVcbYiQG+KWhMiACDe25Jr7g9dKPmMS4RLX97rllSwEypX18bs9j VrsDDolNTtvZxNEhHlJPlsNELTV8XN/kr4GFOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 3 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610`
	DNSKEY=49852/SEP is now in the chain-of-trust
	DS=49852/SHA-256 verifies DNSKEY=49852/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220602021230 20220518190502 49852 es. YCSDTA84d6UYLP8UGfsyodMyopB9xWGWt9kevX4Db2K/YWT9tWruUCxFTJLaySa921renq/DBsFp Sl9/z6D8ykVsrn/2oWmxugbbEruJZDo0gWyAm5IPfqjyBHR+CTLZAjw0KIrtHI87ckmBXE723XYQ MrJkERx5y6tRJZ69vJW4aqm5XsOXSpgORufwVxZMnkFA6m0k2M4mXUGalqRuJ53rbnwKF3N4aIab CkFt20seUUX2GALTKdmnVIH8FVcbYiQG+KWhMiACDe25Jr7g9dKPmMS4RLX97rllSwEypX18bs9j VrsDDolNTtvZxNEhHlJPlsNELTV8XN/kr4GFOw== )`
	RRSIG=49852 and DNSKEY=49852/SEP verifies the DNSKEY RRset
	DNSKEY=7119 is now in the chain-of-trust
	DNSKEY=27610 is now in the chain-of-trust
	Query to g.nic.es for ces.es/A
	Received 585 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (585 octets) ;; HEADER SECTION ;; id = 47462 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ces.es. 86400 IN NS artemis.ttd.net. ces.es. 86400 IN NS minerva.ttd.net. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 7i516tanu6stpmmfmdu9eu3cp40525q2 NS DS RRSIG ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601193954 20220518141209 7119 es. UG6VlNnpxPxY0NchWmJLY4shZcf/JndI5F/ZtXrf8DnI060HhZiHfCFGPTgxQqS3Fe6O/pdl9SgZ 0EWsvJH8aYzTX8K54AARVwMxYumPzXNcZz6Mnm7jbzfftGvoZFyPZyVvYVqTbUxsPTGu4sjz29kY pEynbgGGrSsG2AEd0m0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.nic.es for ces.es/DNSKEY
	Received 585 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (585 octets) ;; HEADER SECTION ;; id = 49789 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 7i516tanu6stpmmfmdu9eu3cp40525q2 NS DS RRSIG ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601193954 20220518141209 7119 es. UG6VlNnpxPxY0NchWmJLY4shZcf/JndI5F/ZtXrf8DnI060HhZiHfCFGPTgxQqS3Fe6O/pdl9SgZ 0EWsvJH8aYzTX8K54AARVwMxYumPzXNcZz6Mnm7jbzfftGvoZFyPZyVvYVqTbUxsPTGu4sjz29kY pEynbgGGrSsG2AEd0m0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ces.es

ces.es

	Checking DS between es and ces.es
	Query to a.nic.es for ces.es/DS
	Received 753 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (753 octets) ;; HEADER SECTION ;; id = 19819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) es. 86400 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2022052003 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 86400 IN RRSIG ( SOA 8 1 86400 20220603022338 20220520070453 7119 es. GYUj/+CgOfM96Aiixz8javXe/Sdu+fxNQZ+AqWglI+ntVEwdVajFAodHNb3LGeGIY0jmESWkAK1M IJYgI81zxMM/9MePj+wZLLac8bVJ8jCqnsc6//U+OLfldF11cc2hIhqa8EvUlgfu1XB0p/iQL6It pMAMYXdyOvQ1Wr4UJjg= ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 7i516tanu6stpmmfmdu9eu3cp40525q2 NS DS RRSIG ) 7i4qq84raiqtjfmklcfgdd9agvn44525.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601193954 20220518141209 7119 es. UG6VlNnpxPxY0NchWmJLY4shZcf/JndI5F/ZtXrf8DnI060HhZiHfCFGPTgxQqS3Fe6O/pdl9SgZ 0EWsvJH8aYzTX8K54AARVwMxYumPzXNcZz6Mnm7jbzfftGvoZFyPZyVvYVqTbUxsPTGu4sjz29kY pEynbgGGrSsG2AEd0m0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for ces.es in the es zone
	Query to minerva.ttd.net for ces.es/DNSKEY
	Received 100 bytes from 213.0.184.68
	;; Response received from 213.0.184.68 (100 octets) ;; HEADER SECTION ;; id = 7899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ces.es. 86400 IN SOA ( rdammde1-02.rima-tde.net. root.rdammde1-02.rima-tde.net. 2020022485 ;serial 86400 ;refresh 7200 ;retry 259200 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to artemis.ttd.net for ces.es/A
	Received 102 bytes from 213.0.184.69
	;; Response received from 213.0.184.69 (102 octets) ;; HEADER SECTION ;; id = 64834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (1 record) ces.es. 300 IN A 194.224.106.200 ;; AUTHORITY SECTION (2 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	artemis.ttd.net is authoritative for ces.es
	Query to minerva.ttd.net for ces.es/SOA
	Received 148 bytes from 213.0.184.68
	;; Response received from 213.0.184.68 (148 octets) ;; HEADER SECTION ;; id = 12123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN SOA ;; ANSWER SECTION (1 record) ces.es. 86400 IN SOA ( rdammde1-02.rima-tde.net. root.rdammde1-02.rima-tde.net. 2020022485 ;serial 86400 ;refresh 7200 ;retry 259200 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (2 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to artemis.ttd.net for ces.es/A
	Received 102 bytes from 213.0.184.69
	;; Response received from 213.0.184.69 (102 octets) ;; HEADER SECTION ;; id = 50162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (1 record) ces.es. 300 IN A 194.224.106.200 ;; AUTHORITY SECTION (2 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ces.es A RR has value 194.224.106.200
	No RRSIGs found

ces.es

	Query to minerva.ttd.net for ces.es/A
	Received 102 bytes from 213.0.184.68
	;; Response received from 213.0.184.68 (102 octets) ;; HEADER SECTION ;; id = 34351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (1 record) ces.es. 300 IN A 194.224.106.200 ;; AUTHORITY SECTION (2 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	minerva.ttd.net is authoritative for ces.es
	Query to minerva.ttd.net for ces.es/A
	Received 102 bytes from 213.0.184.68
	;; Response received from 213.0.184.68 (102 octets) ;; HEADER SECTION ;; id = 36633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ces.es. IN A ;; ANSWER SECTION (1 record) ces.es. 300 IN A 194.224.106.200 ;; AUTHORITY SECTION (2 records) ces.es. 86400 IN NS minerva.ttd.net. ces.es. 86400 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ces.es A RR has value 194.224.106.200
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ces.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: