DNSSEC Debugger - club1.fr

Domain Name:

Time: 2024-05-16 05:52:36 UTC

Analyzing DNSSEC problems for club1.fr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 57254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for club1.fr/A
	Received 620 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 620 octets ;; HEADER SECTION ;; id = 2873 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240529050000 20240516040000 5613 . f6AwGchB7R4lmjm5ImdL+UIPgByMhXK8jG9ws87PGFSIo0k6COpyzgbdzlOkru3h/wFZgQaqwqO/ JdEqQknsvV09oLhP+/Ri8vNquNf2KnF+aI34oSZSqmXsveFU/Q1XrEEOKcI4+XIQ3m415WFqesgv RZbIheCMV4pWaPjP/Sb2cqXj/yDMLOuxkNvDUsPF4WXAxMu2eWiWc9J1B56LeAAhDnmLHN1FIFan /6uvsbB8K3fUvuPN1J8NXbnm50VIsjitRYpmCIIAeHXxlvSEOGytQdxc3of6U6i2fhU6m3XB7iQ/ QFCA/j1EAkzhC9iq6rjYoDA55uGCD9LZWRZp1Q== ) ;; ADDITIONAL SECTION (9 records) d.nic.fr. 172800 IN A 194.0.9.1 e.ext.nic.fr. 172800 IN A 193.176.144.22 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for fr/DNSKEY
	Received 614 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 614 octets ;; HEADER SECTION ;; id = 35049 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240529050000 20240516040000 5613 . f6AwGchB7R4lmjm5ImdL+UIPgByMhXK8jG9ws87PGFSIo0k6COpyzgbdzlOkru3h/wFZgQaqwqO/ JdEqQknsvV09oLhP+/Ri8vNquNf2KnF+aI34oSZSqmXsveFU/Q1XrEEOKcI4+XIQ3m415WFqesgv RZbIheCMV4pWaPjP/Sb2cqXj/yDMLOuxkNvDUsPF4WXAxMu2eWiWc9J1B56LeAAhDnmLHN1FIFan /6uvsbB8K3fUvuPN1J8NXbnm50VIsjitRYpmCIIAeHXxlvSEOGytQdxc3of6U6i2fhU6m3XB7iQ/ QFCA/j1EAkzhC9iq6rjYoDA55uGCD9LZWRZp1Q== ) ;; ADDITIONAL SECTION (9 records) d.nic.fr. 172800 IN A 194.0.9.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN A 193.176.144.22 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN A 194.146.106.46 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN A 194.0.36.1 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone fr

	Checking DS between . and fr
	Query to a.root-servers.net for fr/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 56534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (2 records) fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240529050000 20240516040000 5613 . f6AwGchB7R4lmjm5ImdL+UIPgByMhXK8jG9ws87PGFSIo0k6COpyzgbdzlOkru3h/wFZgQaqwqO/ JdEqQknsvV09oLhP+/Ri8vNquNf2KnF+aI34oSZSqmXsveFU/Q1XrEEOKcI4+XIQ3m415WFqesgv RZbIheCMV4pWaPjP/Sb2cqXj/yDMLOuxkNvDUsPF4WXAxMu2eWiWc9J1B56LeAAhDnmLHN1FIFan /6uvsbB8K3fUvuPN1J8NXbnm50VIsjitRYpmCIIAeHXxlvSEOGytQdxc3of6U6i2fhU6m3XB7iQ/ QFCA/j1EAkzhC9iq6rjYoDA55uGCD9LZWRZp1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fr in the . zone
	DS=29133/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20240529050000 20240516040000 5613 . f6AwGchB7R4lmjm5ImdL+UIPgByMhXK8jG9ws87PGFSIo0k6COpyzgbdzlOkru3h/wFZgQaqwqO/ JdEqQknsvV09oLhP+/Ri8vNquNf2KnF+aI34oSZSqmXsveFU/Q1XrEEOKcI4+XIQ3m415WFqesgv RZbIheCMV4pWaPjP/Sb2cqXj/yDMLOuxkNvDUsPF4WXAxMu2eWiWc9J1B56LeAAhDnmLHN1FIFan /6uvsbB8K3fUvuPN1J8NXbnm50VIsjitRYpmCIIAeHXxlvSEOGytQdxc3of6U6i2fhU6m3XB7iQ/ QFCA/j1EAkzhC9iq6rjYoDA55uGCD9LZWRZp1Q== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=29133/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 )`
	Query to e.ext.nic.fr for fr/DNSKEY
	Received 289 bytes from 193.176.144.22
	;; Response received from [193.176.144.22] 289 octets ;; HEADER SECTION ;; id = 54732 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (3 records) fr. 3600 IN DNSKEY ( 256 3 13 GMdnRGCf3/0lJzPxJLmMhpr+BN80YD8+ei5G619SA6dpmEjiI58ME1h7KNZ8q3z7m5+3khrbfMTa ngcb90x0xA== ) ; Key ID = 40031 fr. 3600 IN DNSKEY ( 257 3 13 qRwN6xREvGGSFLh9cSFollJA3PRjjG7zHkUxc+7GZUi5qwaYZxYlXIBmajzGWjVpwhzlWdnwWYZx PsJ88HfqDA== ) ; Key ID = 29133 fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240615213228 20240417091842 29133 fr. YdOr4YkUr97a/aAh3qTs3gn9K3avKjNsThb1obDmvOqftlhC9A+lwILBqGj2E3WXU85bISQVM9rV vi/nP490Dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fr
	`fr. 3600 IN DNSKEY ( 256 3 13 GMdnRGCf3/0lJzPxJLmMhpr+BN80YD8+ei5G619SA6dpmEjiI58ME1h7KNZ8q3z7m5+3khrbfMTa ngcb90x0xA== ) ; Key ID = 40031`
	`fr. 3600 IN DNSKEY ( 257 3 13 qRwN6xREvGGSFLh9cSFollJA3PRjjG7zHkUxc+7GZUi5qwaYZxYlXIBmajzGWjVpwhzlWdnwWYZx PsJ88HfqDA== ) ; Key ID = 29133`
	DNSKEY=29133/SEP is now in the chain-of-trust
	DS=29133/SHA-256 verifies DNSKEY=29133/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240615213228 20240417091842 29133 fr. YdOr4YkUr97a/aAh3qTs3gn9K3avKjNsThb1obDmvOqftlhC9A+lwILBqGj2E3WXU85bISQVM9rV vi/nP490Dg== )`
	RRSIG=29133 and DNSKEY=29133/SEP verifies the DNSKEY RRset
	DNSKEY=40031 is now in the chain-of-trust
	Query to g.ext.nic.fr for club1.fr/A
	Received 349 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 349 octets ;; HEADER SECTION ;; id = 26709 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) club1.fr. 3600 IN NS ns1.jeanpierre.moe. club1.fr. 3600 IN NS ns2.he.net. club1.fr. 3600 IN NS ns1.he.net. club1.fr. 3600 IN NS ns1.club1.fr. club1.fr. 3600 IN NS ns1.ricorambo.su. club1.fr. 3600 IN DS ( 8897 13 2 c561bd5185db97594d68acc9fb96b5f4541ae71234b19bde1960581f37123791 ) club1.fr. 3600 IN RRSIG ( DS 13 2 3600 20240625110402 20240412134841 40031 fr. cgHBEjBM9X7H6NkyMJhX+ca800QSX49NGy7MpoC0M/aupklR1rwqWLCvRQ1QSC2q5ytCHtNnVUPA PL60ky7uuA== ) ;; ADDITIONAL SECTION (3 records) ns1.club1.fr. 3600 IN A 87.91.4.64 ns1.club1.fr. 3600 IN AAAA 2001:861:38c4:18a0::3 ;; { "EDNS-VERSION": 0 }
	Query to d.nic.fr for club1.fr/DNSKEY
	Received 349 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 349 octets ;; HEADER SECTION ;; id = 13394 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) club1.fr. 3600 IN NS ns1.club1.fr. club1.fr. 3600 IN NS ns2.he.net. club1.fr. 3600 IN NS ns1.jeanpierre.moe. club1.fr. 3600 IN NS ns1.he.net. club1.fr. 3600 IN NS ns1.ricorambo.su. club1.fr. 3600 IN DS ( 8897 13 2 c561bd5185db97594d68acc9fb96b5f4541ae71234b19bde1960581f37123791 ) club1.fr. 3600 IN RRSIG ( DS 13 2 3600 20240625110402 20240412134841 40031 fr. cgHBEjBM9X7H6NkyMJhX+ca800QSX49NGy7MpoC0M/aupklR1rwqWLCvRQ1QSC2q5ytCHtNnVUPA PL60ky7uuA== ) ;; ADDITIONAL SECTION (3 records) ns1.club1.fr. 3600 IN A 87.91.4.64 ns1.club1.fr. 3600 IN AAAA 2001:861:38c4:18a0::3 ;; { "EDNS-VERSION": 0 }
	Found child zone club1.fr

club1.fr

	Checking DS between fr and club1.fr
	Query to e.ext.nic.fr for club1.fr/DS
	Received 183 bytes from 193.176.144.22
	;; Response received from [193.176.144.22] 183 octets ;; HEADER SECTION ;; id = 59649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN DS ;; ANSWER SECTION (2 records) club1.fr. 3600 IN DS ( 8897 13 2 c561bd5185db97594d68acc9fb96b5f4541ae71234b19bde1960581f37123791 ) club1.fr. 3600 IN RRSIG ( DS 13 2 3600 20240625110402 20240412134841 40031 fr. cgHBEjBM9X7H6NkyMJhX+ca800QSX49NGy7MpoC0M/aupklR1rwqWLCvRQ1QSC2q5ytCHtNnVUPA PL60ky7uuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for club1.fr in the fr zone
	DS=8897/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`club1.fr. 3600 IN RRSIG ( DS 13 2 3600 20240625110402 20240412134841 40031 fr. cgHBEjBM9X7H6NkyMJhX+ca800QSX49NGy7MpoC0M/aupklR1rwqWLCvRQ1QSC2q5ytCHtNnVUPA PL60ky7uuA== )`
	RRSIG=40031 and DNSKEY=40031 verifies the DS RRset
	DS=8897/SHA-256 is now in the chain-of-trust
	`club1.fr. 3600 IN DS ( 8897 13 2 c561bd5185db97594d68acc9fb96b5f4541ae71234b19bde1960581f37123791 )`
	Query to ns1.he.net for club1.fr/DNSKEY
	Received 221 bytes from 216.218.130.2
	;; Response received from [216.218.130.2] 221 octets ;; HEADER SECTION ;; id = 25465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN DNSKEY ;; ANSWER SECTION (2 records) club1.fr. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240526172644 20240512165814 8897 club1.fr. A4OU7B4lVe7d79SmfF/ahciYET9GNdRPD2b1/zx9xvSQpCv40qSsRc0s9GU+woj0viX7sh12u1K0 JmbJ5jF00Q== ) club1.fr. 3600 IN DNSKEY ( 257 3 13 jFeMieQcXAQOkiOgS5F4ruN74KIrkxrdx1XOMg9PB9yUrr3RF1VoVPjWRCSCbK4usCmc7p2VUybN a8F0dtGUtQ== ) ; Key ID = 8897 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for club1.fr
	`club1.fr. 3600 IN DNSKEY ( 257 3 13 jFeMieQcXAQOkiOgS5F4ruN74KIrkxrdx1XOMg9PB9yUrr3RF1VoVPjWRCSCbK4usCmc7p2VUybN a8F0dtGUtQ== ) ; Key ID = 8897`
	DNSKEY=8897/SEP is now in the chain-of-trust
	DS=8897/SHA-256 verifies DNSKEY=8897/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`club1.fr. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240526172644 20240512165814 8897 club1.fr. A4OU7B4lVe7d79SmfF/ahciYET9GNdRPD2b1/zx9xvSQpCv40qSsRc0s9GU+woj0viX7sh12u1K0 JmbJ5jF00Q== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the DNSKEY RRset
	Query to ns2.he.net for club1.fr/A
	Received 157 bytes from 216.218.131.2
	;; Response received from [216.218.131.2] 157 octets ;; HEADER SECTION ;; id = 24483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) club1.fr. 86400 IN A 87.91.4.64 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.he.net is authoritative for club1.fr
	Found RRSIG signed by club1.fr zone
	Query to ns1.ricorambo.su for club1.fr/SOA
	Received 672 bytes from 82.66.0.217
	;; Response received from [82.66.0.217] 672 octets ;; HEADER SECTION ;; id = 44851 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN SOA ;; ANSWER SECTION (2 records) club1.fr. 86400 IN SOA ( ns1.club1.fr. hostmaster.club1.fr. 2024051601 ;serial 3600 ;refresh 3000 ;retry 1209600 ;expire 86400 ;minimum ) club1.fr. 86400 IN RRSIG ( SOA 13 2 86400 20240530015959 20240516005959 8897 club1.fr. U3HVITTZ5ODnjeTzSDcRuv9NEVsFj6xa/XjHZlsoscSbph+JrB6xkhKBh/TMQw5A2mdOXf/kgOCT lKPZnUm6NA== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.jeanpierre.moe for club1.fr/SOA
	Received 192 bytes from 82.65.174.145
	;; Response received from [82.65.174.145] 192 octets ;; HEADER SECTION ;; id = 48454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN SOA ;; ANSWER SECTION (2 records) club1.fr. 86400 IN SOA ( ns1.club1.fr. hostmaster.club1.fr. 2024051601 ;serial 3600 ;refresh 3000 ;retry 1209600 ;expire 86400 ;minimum ) club1.fr. 86400 IN RRSIG ( SOA 13 2 86400 20240530015959 20240516005959 8897 club1.fr. U3HVITTZ5ODnjeTzSDcRuv9NEVsFj6xa/XjHZlsoscSbph+JrB6xkhKBh/TMQw5A2mdOXf/kgOCT lKPZnUm6NA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.club1.fr for club1.fr/SOA
	Received 666 bytes from 87.91.4.64
	;; Response received from [87.91.4.64] 666 octets ;; HEADER SECTION ;; id = 31736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN SOA ;; ANSWER SECTION (2 records) club1.fr. 86400 IN SOA ( ns1.club1.fr. hostmaster.club1.fr. 2024051601 ;serial 3600 ;refresh 3000 ;retry 1209600 ;expire 86400 ;minimum ) club1.fr. 86400 IN RRSIG ( SOA 13 2 86400 20240530015959 20240516005959 8897 club1.fr. U3HVITTZ5ODnjeTzSDcRuv9NEVsFj6xa/XjHZlsoscSbph+JrB6xkhKBh/TMQw5A2mdOXf/kgOCT lKPZnUm6NA== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.he.net for club1.fr/SOA
	Received 192 bytes from 216.218.130.2
	;; Response received from [216.218.130.2] 192 octets ;; HEADER SECTION ;; id = 48427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN SOA ;; ANSWER SECTION (2 records) club1.fr. 86400 IN RRSIG ( SOA 13 2 86400 20240530015959 20240516005959 8897 club1.fr. U3HVITTZ5ODnjeTzSDcRuv9NEVsFj6xa/XjHZlsoscSbph+JrB6xkhKBh/TMQw5A2mdOXf/kgOCT lKPZnUm6NA== ) club1.fr. 86400 IN SOA ( ns1.club1.fr. hostmaster.club1.fr. 2024051601 ;serial 3600 ;refresh 3000 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.he.net for club1.fr/A
	Received 157 bytes from 216.218.131.2
	;; Response received from [216.218.131.2] 157 octets ;; HEADER SECTION ;; id = 25794 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) club1.fr. 86400 IN A 87.91.4.64 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	club1.fr A RR has value 87.91.4.64
	Found 1 RRSIGs over A RRset
	`club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the A RRset

club1.fr

	Query to ns1.club1.fr for club1.fr/A
	Received 635 bytes from 87.91.4.64
	;; Response received from [87.91.4.64] 635 octets ;; HEADER SECTION ;; id = 54897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	ns1.club1.fr is authoritative for club1.fr
	Found RRSIG signed by club1.fr zone
	Query to ns1.club1.fr for club1.fr/A
	Received 635 bytes from 87.91.4.64
	;; Response received from [87.91.4.64] 635 octets ;; HEADER SECTION ;; id = 25755 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	club1.fr A RR has value 87.91.4.64
	Found 1 RRSIGs over A RRset
	`club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the A RRset

club1.fr

	Query to ns1.he.net for club1.fr/A
	Received 157 bytes from 216.218.130.2
	;; Response received from [216.218.130.2] 157 octets ;; HEADER SECTION ;; id = 18476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.he.net is authoritative for club1.fr
	Found RRSIG signed by club1.fr zone
	Query to ns1.he.net for club1.fr/A
	Received 157 bytes from 216.218.130.2
	;; Response received from [216.218.130.2] 157 octets ;; HEADER SECTION ;; id = 47161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	club1.fr A RR has value 87.91.4.64
	Found 1 RRSIGs over A RRset
	`club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the A RRset

club1.fr

	Query to ns1.jeanpierre.moe for club1.fr/A
	Received 157 bytes from 82.65.174.145
	;; Response received from [82.65.174.145] 157 octets ;; HEADER SECTION ;; id = 57634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.jeanpierre.moe is authoritative for club1.fr
	Found RRSIG signed by club1.fr zone
	Query to ns1.jeanpierre.moe for club1.fr/A
	Received 157 bytes from 82.65.174.145
	;; Response received from [82.65.174.145] 157 octets ;; HEADER SECTION ;; id = 42182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	club1.fr A RR has value 87.91.4.64
	Found 1 RRSIGs over A RRset
	`club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the A RRset

club1.fr

	Query to ns1.ricorambo.su for club1.fr/A
	Received 641 bytes from 82.66.0.217
	;; Response received from [82.66.0.217] 641 octets ;; HEADER SECTION ;; id = 52425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	ns1.ricorambo.su is authoritative for club1.fr
	Found RRSIG signed by club1.fr zone
	Query to ns1.ricorambo.su for club1.fr/A
	Received 641 bytes from 82.66.0.217
	;; Response received from [82.66.0.217] 641 octets ;; HEADER SECTION ;; id = 53742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; club1.fr. IN A ;; ANSWER SECTION (2 records) club1.fr. 86400 IN A 87.91.4.64 club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== ) ;; AUTHORITY SECTION (6 records) club1.fr. 86400 IN NS ns1.jeanpierre.moe. club1.fr. 86400 IN NS ns1.ricorambo.su. club1.fr. 86400 IN NS ns1.he.net. club1.fr. 86400 IN NS ns2.he.net. club1.fr. 86400 IN NS ns1.club1.fr. club1.fr. 86400 IN RRSIG ( NS 13 2 86400 20240521111703 20240507104733 8897 club1.fr. 8eti8/Mwnh6WG85CUDgBFKCxKXy+BVDN3eoW8Vn6jAUpIFWinCMRHC2Rufr5U1zOa+QYNc/B4nCL ZzgpjK0V9Q== ) ;; ADDITIONAL SECTION (5 records) ns1.club1.fr. 86400 IN A 87.91.4.64 ns1.club1.fr. 86400 IN AAAA 2001:861:38c4:18a0::3 ns1.club1.fr. 86400 IN RRSIG ( A 13 3 86400 20240524022205 20240510014942 8897 club1.fr. efqL4s/NV+GEU+/tJlh14I5ZWg0XA+vEE10RRW7XIDDxiddOhuQ+Yv4EAMJpssHp+8uq8CSQ/baP KlSvCdv31Q== ) ns1.club1.fr. 86400 IN RRSIG ( AAAA 13 3 86400 20240521153745 20240507153340 8897 club1.fr. xSsObxN6mxtFYRJ0VPWLjz9u1L0rhIt56gfLwaHxMSvaAWzpS4SK1gQSCdoGU1SPJMTVjGP9LWjE ExzeriW8QA== ) ;; { "EDNS-VERSION": 0 }
	club1.fr A RR has value 87.91.4.64
	Found 1 RRSIGs over A RRset
	`club1.fr. 86400 IN RRSIG ( A 13 2 86400 20240523214715 20240509204730 8897 club1.fr. IgI+bPKuHMvoeO2O5nLk1Qe/Tn605zTITYspkkdtdNRkLeFbbFs06tFepf/mnseYhKYYKzcMzuRQ JeEZ4hmoww== )`
	RRSIG=8897 and DNSKEY=8897/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test club1.fr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: