DNSSEC Analyzer - clasconsultants.net

Domain Name:

Time: 2021-03-19 02:29:47 UTC, NTP stratum 4

Analyzing DNSSEC problems for clasconsultants.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (864 bytes) ;; HEADER SECTION ;; id = 36331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to j.root-servers.net for clasconsultants.net/A
	Received 1176 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1176 bytes) ;; HEADER SECTION ;; id = 36202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; clasconsultants.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . H0HBAIoxLIXq147u70ymCP8FpkwgbavPieRLTS5Iij2R2SGDd7dC2Dh4WC63MXv0qdoTwW60L9A+ YLHn1tpS0AFwdZzMh7ZQoyy5e/CByK0q3FC+06fRpkioJBaCyjH5b2M1uec22j/R2lRSt65GewoN JAFd/w6Mywsp3LhOCZrK+fPgwjKP1ou6m4dAoDyebf9hrDsKHOYgcbco6rQENCEecar/Af07oyRC LAGCkaZHXebbqBi7oSR6ruA9znDc3e4OGnA0+GOqiXfq3QEpBgAghEj76j1JU6PS5RhoKwXeubrw yDMJHyyaPJwLavdPUOgv7hRTDMubvk56IQnYnw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.root-servers.net for net/DNSKEY
	Received 1160 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (1160 bytes) ;; HEADER SECTION ;; id = 62956 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . H0HBAIoxLIXq147u70ymCP8FpkwgbavPieRLTS5Iij2R2SGDd7dC2Dh4WC63MXv0qdoTwW60L9A+ YLHn1tpS0AFwdZzMh7ZQoyy5e/CByK0q3FC+06fRpkioJBaCyjH5b2M1uec22j/R2lRSt65GewoN JAFd/w6Mywsp3LhOCZrK+fPgwjKP1ou6m4dAoDyebf9hrDsKHOYgcbco6rQENCEecar/Af07oyRC LAGCkaZHXebbqBi7oSR6ruA9znDc3e4OGnA0+GOqiXfq3QEpBgAghEj76j1JU6PS5RhoKwXeubrw yDMJHyyaPJwLavdPUOgv7hRTDMubvk56IQnYnw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to j.root-servers.net for net/DS
	Received 367 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (367 bytes) ;; HEADER SECTION ;; id = 42047 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . H0HBAIoxLIXq147u70ymCP8FpkwgbavPieRLTS5Iij2R2SGDd7dC2Dh4WC63MXv0qdoTwW60L9A+ YLHn1tpS0AFwdZzMh7ZQoyy5e/CByK0q3FC+06fRpkioJBaCyjH5b2M1uec22j/R2lRSt65GewoN JAFd/w6Mywsp3LhOCZrK+fPgwjKP1ou6m4dAoDyebf9hrDsKHOYgcbco6rQENCEecar/Af07oyRC LAGCkaZHXebbqBi7oSR6ruA9znDc3e4OGnA0+GOqiXfq3QEpBgAghEj76j1JU6PS5RhoKwXeubrw yDMJHyyaPJwLavdPUOgv7hRTDMubvk56IQnYnw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . H0HBAIoxLIXq147u70ymCP8FpkwgbavPieRLTS5Iij2R2SGDd7dC2Dh4WC63MXv0qdoTwW60L9A+ YLHn1tpS0AFwdZzMh7ZQoyy5e/CByK0q3FC+06fRpkioJBaCyjH5b2M1uec22j/R2lRSt65GewoN JAFd/w6Mywsp3LhOCZrK+fPgwjKP1ou6m4dAoDyebf9hrDsKHOYgcbco6rQENCEecar/Af07oyRC LAGCkaZHXebbqBi7oSR6ruA9znDc3e4OGnA0+GOqiXfq3QEpBgAghEj76j1JU6PS5RhoKwXeubrw yDMJHyyaPJwLavdPUOgv7hRTDMubvk56IQnYnw== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to k.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.52.178.30
	;; Answer received from 192.52.178.30 (775 bytes) ;; HEADER SECTION ;; id = 44378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQO3ZB3ZsOinKfuX7U5vTo8/x4DnLpamAurL/87RhyK3vifJv688ky3tvtknBUkGmVS1Gf477JMa qHo8ZXImJwQR+TbkpCAgo60qF0I6NIdJS0PQ35if3D1KeQ3EbZDVJ+puQh3mGjkssXWE+1qa1vbY 6M8gT4cW+iIeLKGt5ieAbUTbp1Pvx0PZGLkL7wDOu4vqwuIslm1g2brrrHaLSp25 ) ; Key ID = 30944 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210325172830 20210310172330 35886 net. MKJ7krvB9kgNMB3cHZ6Y/jnNU768gEFGG1sLMwkCQ7mCsPNxGaFWaaemagD7bmEIyQ0k4BsgJ7k2 gIU+oZfEj5ZKXIHWzh7DZtMWqsQrERXBoBf7g4c/ql7tp3wPw6nZtq26rzCnFkhSF+iZ+9iwK2Wc pp69GjDdD6PY8cc0d6nwSiqC9cCs3uwKcMtSPl3WcI4MBGzyAyf81D+5p59inauiNJcD3B3R/S6a jZhvQLG4NTBBjhskDYtLtSUzaf55LipqSaIAnjIjnzn1BDfJH1BvMuaVexhNcX26Ujy1BkRT5J6b XZmaB6QkIUTR7xqB0fvSa/+9BVWx4glyh5kP5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQO3ZB3ZsOinKfuX7U5vTo8/x4DnLpamAurL/87RhyK3vifJv688ky3tvtknBUkGmVS1Gf477JMa qHo8ZXImJwQR+TbkpCAgo60qF0I6NIdJS0PQ35if3D1KeQ3EbZDVJ+puQh3mGjkssXWE+1qa1vbY 6M8gT4cW+iIeLKGt5ieAbUTbp1Pvx0PZGLkL7wDOu4vqwuIslm1g2brrrHaLSp25 ) ; Key ID = 30944`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210325172830 20210310172330 35886 net. MKJ7krvB9kgNMB3cHZ6Y/jnNU768gEFGG1sLMwkCQ7mCsPNxGaFWaaemagD7bmEIyQ0k4BsgJ7k2 gIU+oZfEj5ZKXIHWzh7DZtMWqsQrERXBoBf7g4c/ql7tp3wPw6nZtq26rzCnFkhSF+iZ+9iwK2Wc pp69GjDdD6PY8cc0d6nwSiqC9cCs3uwKcMtSPl3WcI4MBGzyAyf81D+5p59inauiNJcD3B3R/S6a jZhvQLG4NTBBjhskDYtLtSUzaf55LipqSaIAnjIjnzn1BDfJH1BvMuaVexhNcX26Ujy1BkRT5J6b XZmaB6QkIUTR7xqB0fvSa/+9BVWx4glyh5kP5w== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=30944 is now in the chain-of-trust
	Query to f.gtld-servers.net for clasconsultants.net/A
	Received 1139 bytes from 192.35.51.30
	;; Answer received from 192.35.51.30 (1139 bytes) ;; HEADER SECTION ;; id = 1093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; clasconsultants.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1616120965 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20210326022925 20210319011925 30944 net. MXiaOA5x2sbffgUOECZMdGxi5EQBwMv3VBHgptzLpYh1CbPx0iQkbh5u6UMRMwZIFQGsBMWfSO2m z9GBFTQ6qOQNSHztdfif4gXBL3CY1bkGw78X572I2IEL/3J0IL66kcj/MSSBgdehuFKxEACroAAC TlGQ4phb3YVHeJPaya6VovpAdqvZrwBszALDB5Q9HFXGBuaeSPNL0MSiFxuBDQ== ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210325080203 20210318065203 30944 net. KEdkBmf0A69n29hdU2qe4gj7p88EZ9dFu02ccZBqRr0BXObvYjMzJ5AZ2PltD1rAeDdJVDtTRIko XpAs/P44ztVn6hKWrBvd/nNp8T3VEGhWzf3CARz6NTWJslB/31UVSbAgSq6fttyRjedy/DQ+bz/g SGEyF/kkWdb6h7a+Hho9KpVOYiZlZGXuEgpnXVNHxf1cZTD4rPzfKGx2LGLX8A== ) VS4EVRKG37G65BQN9O0IKNCPL24SNMMG.net. 86400 IN NSEC3 ( 1 1 0 - vs4i945fpr2kauk3s7qkurl9t8kvfk4n NS DS RRSIG ) VS4EVRKG37G65BQN9O0IKNCPL24SNMMG.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210322073944 20210315062944 30944 net. tjNywU0uMeAgwylWxQXhMjTwR2vqhYIH5F0z+wYn5E55tsB1ePfl2hbyXn6H80+mvT5h+nv9Oa7v SSwHNOy6UWhNccYhRunVvtLow+kdXX9n+A4NGc8hDb4hVIE400GGp5eObOMqYflXTtRV1LTyayyP aJm3T2Ewhy3UTcs6KpiygwwRCCoNnpJoslL4Py4joXzpH6K7/QXJwUXpjik5zg== ) EEQ3CIFFULOPN4J3E5MKEGKVDJKIGVBP.net. 86400 IN NSEC3 ( 1 1 0 - eeqk07irbkp8qh4ers3rb7eii1oa1l8n NS DS RRSIG ) EEQ3CIFFULOPN4J3E5MKEGKVDJKIGVBP.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20210323075751 20210316064751 30944 net. TUNCW1gqC0T5WxO6yGo4rZrS0lhU8pitoSioANmoQTeV4HWyC1yQPwxgqeiwKzdUHj4Wu8w94hD5 0I44G+LPnmKSCvN4yD4AsZeFihzsivOpNaL8DaBE+hLHTek6wFE/HYCkINjO9TWQ2jZpcqRLCeO9 j1IuU/WslLHR3eztMUVfolNeFP7vOezH93BVb/jF1uoEf38AdKHjIr/jKPmtsQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Zone net (192.35.51.30) returns NXDOMAIN for clasconsultants.net
	NSEC3 validation not implemented yet

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test clasconsultants.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: