DNSSEC Debugger

Domain Name:

Time: 2024-10-22 20:42:06 UTC

Analyzing DNSSEC problems for coin.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 39410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to b.root-servers.net for coin.es/A
	Received 615 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 615 octets ;; HEADER SECTION ;; id = 34982 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20241104170000 20241022160000 61050 . Gu5/QPIicRFO51ik/VN1UYjZkDy0akspE01OubRBX/3bKNf22TqRiS9Kn6ls/WDPhVEDl2FzlNwX +QfyK519LD8UeN74aizNFPZhKBfJg2O+NFMbE84F/l08qrKsiRARCUwyikKHJO27M1KlmBlXHb8i nhBFiB3Xrutue7QeGnNMsikQI/djQXzQKEOT9JTH+2YuNPfxZjteL0mMgHBauJC9XxKImUnkVgNw JISb8ealrg8IRobUBjC18Xdx41dzTJAaxBJwLwQMRVNFGNf2T1ucIfNG0tAp/XHdj35/fU16ACYZ RKd+g13qHrSKm7QaAt5dC7p8o82KQ4uCpIRIWg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for es/DNSKEY
	Received 610 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 610 octets ;; HEADER SECTION ;; id = 13240 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20241104170000 20241022160000 61050 . Gu5/QPIicRFO51ik/VN1UYjZkDy0akspE01OubRBX/3bKNf22TqRiS9Kn6ls/WDPhVEDl2FzlNwX +QfyK519LD8UeN74aizNFPZhKBfJg2O+NFMbE84F/l08qrKsiRARCUwyikKHJO27M1KlmBlXHb8i nhBFiB3Xrutue7QeGnNMsikQI/djQXzQKEOT9JTH+2YuNPfxZjteL0mMgHBauJC9XxKImUnkVgNw JISb8ealrg8IRobUBjC18Xdx41dzTJAaxBJwLwQMRVNFGNf2T1ucIfNG0tAp/XHdj35/fU16ACYZ RKd+g13qHrSKm7QaAt5dC7p8o82KQ4uCpIRIWg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Found child zone es

	Checking DS between . and es
	Query to i.root-servers.net for es/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 56879 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20241104170000 20241022160000 61050 . Gu5/QPIicRFO51ik/VN1UYjZkDy0akspE01OubRBX/3bKNf22TqRiS9Kn6ls/WDPhVEDl2FzlNwX +QfyK519LD8UeN74aizNFPZhKBfJg2O+NFMbE84F/l08qrKsiRARCUwyikKHJO27M1KlmBlXHb8i nhBFiB3Xrutue7QeGnNMsikQI/djQXzQKEOT9JTH+2YuNPfxZjteL0mMgHBauJC9XxKImUnkVgNw JISb8ealrg8IRobUBjC18Xdx41dzTJAaxBJwLwQMRVNFGNf2T1ucIfNG0tAp/XHdj35/fU16ACYZ RKd+g13qHrSKm7QaAt5dC7p8o82KQ4uCpIRIWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for es in the . zone
	DS=44375/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20241104170000 20241022160000 61050 . Gu5/QPIicRFO51ik/VN1UYjZkDy0akspE01OubRBX/3bKNf22TqRiS9Kn6ls/WDPhVEDl2FzlNwX +QfyK519LD8UeN74aizNFPZhKBfJg2O+NFMbE84F/l08qrKsiRARCUwyikKHJO27M1KlmBlXHb8i nhBFiB3Xrutue7QeGnNMsikQI/djQXzQKEOT9JTH+2YuNPfxZjteL0mMgHBauJC9XxKImUnkVgNw JISb8ealrg8IRobUBjC18Xdx41dzTJAaxBJwLwQMRVNFGNf2T1ucIfNG0tAp/XHdj35/fU16ACYZ RKd+g13qHrSKm7QaAt5dC7p8o82KQ4uCpIRIWg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=44375/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 )`
	Query to g.nic.es for es/DNSKEY
	Received 873 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 873 octets ;; HEADER SECTION ;; id = 20175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375 es. 86400 IN DNSKEY ( 256 3 8 AwEAAd65XpaspSBappDQeZQXlb3JN6G0oDNtPI60S3KCaUAG014fsJdpcJ0KeaPWX3SZXB6jv0UY L/pXQFv2QGBVDuNU/LxKE0xiAYvsr7ZSuxARWdaWAw6DbY49IlBJ3fcZE33Bg53UgNZtRUQBmC9X YJsp4ineJanXcbCvPBcjt+DrC1a2AxowckidMoO3CDgfRNxyCkjMVIaJIMhC4gNMf+kzKnmYsnhr U8/HifPyRQZl9XIxj+HDXmz8XYAfmU6O81QPV6pHl8rrbLrBqxtpIi1WL2saQiGcnW9NN5WU4Pd2 Oohu3g9ZhdvuqaYyDzkzOdBxn5WR3HBocFzoTTeiORM= ) ; Key ID = 2331 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241024224619 20241010190539 44375 es. xP+m7xMW6ibePw0fUjcJhnygVdx13uz5XC8qtGVky3tXH1ml4C21UG5pjfrhdNgaJi24IXdZt8wM UvA1AbCwZpDQlN/nhUB7QQgEVZSCPSKLZne9PJKZMakZ2BXRo7mpmffg8hcAQmDS3U15gi9jnJ5S wQQwCFyQNrE8qmOfBVl9q1LB0C6IL3LGZ0tETDMfqgECBKhYQXaqUK5tZkrjM5WJdDSct4Tt69cu CeXlseOOsPfMY4Xl6/VzOA8JhvkDjtkDe6fkmwXdz/uCjX364sT7JoT72654cX3PPhTxD2s/Ou6o kvACginwHkjSfL8GN1B8ae7qJXF69R34wdEXkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAd65XpaspSBappDQeZQXlb3JN6G0oDNtPI60S3KCaUAG014fsJdpcJ0KeaPWX3SZXB6jv0UY L/pXQFv2QGBVDuNU/LxKE0xiAYvsr7ZSuxARWdaWAw6DbY49IlBJ3fcZE33Bg53UgNZtRUQBmC9X YJsp4ineJanXcbCvPBcjt+DrC1a2AxowckidMoO3CDgfRNxyCkjMVIaJIMhC4gNMf+kzKnmYsnhr U8/HifPyRQZl9XIxj+HDXmz8XYAfmU6O81QPV6pHl8rrbLrBqxtpIi1WL2saQiGcnW9NN5WU4Pd2 Oohu3g9ZhdvuqaYyDzkzOdBxn5WR3HBocFzoTTeiORM= ) ; Key ID = 2331`
	DNSKEY=44375/SEP is now in the chain-of-trust
	DS=44375/SHA-256 verifies DNSKEY=44375/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241024224619 20241010190539 44375 es. xP+m7xMW6ibePw0fUjcJhnygVdx13uz5XC8qtGVky3tXH1ml4C21UG5pjfrhdNgaJi24IXdZt8wM UvA1AbCwZpDQlN/nhUB7QQgEVZSCPSKLZne9PJKZMakZ2BXRo7mpmffg8hcAQmDS3U15gi9jnJ5S wQQwCFyQNrE8qmOfBVl9q1LB0C6IL3LGZ0tETDMfqgECBKhYQXaqUK5tZkrjM5WJdDSct4Tt69cu CeXlseOOsPfMY4Xl6/VzOA8JhvkDjtkDe6fkmwXdz/uCjX364sT7JoT72654cX3PPhTxD2s/Ou6o kvACginwHkjSfL8GN1B8ae7qJXF69R34wdEXkw== )`
	RRSIG=44375 and DNSKEY=44375/SEP verifies the DNSKEY RRset
	DNSKEY=2331 is now in the chain-of-trust
	Query to h.nic.es for coin.es/A
	Received 914 bytes from 194.0.33.53
	;; Response received from [194.0.33.53] 914 octets ;; HEADER SECTION ;; id = 8334 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) coin.es. 86400 IN NS ns1045.ui-dns.de. coin.es. 86400 IN NS ns1045.ui-dns.biz. coin.es. 86400 IN NS ns1045.ui-dns.com. coin.es. 86400 IN NS ns1045.ui-dns.org. tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d tfv7cdtmvoh27b5js9o2efjuoekq4ul9 NS SOA RRSIG DNSKEY NSEC3PARAM ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d s169fpjf3ujrpss3fq054e4t0a3cn2ko NS DS RRSIG ) tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030221159 20241017013817 2331 es. V5YWE2hdhU3azGQRnGzz/hlhp79kI0r1nKvzpLeWJFLXBmEGk4Gn2jFdaMpPGUvaYR2ArT2GAICE KO1Mcc/Lg70zQ6vJxvfHbYLQntWQMmSgV2KZRPAZiImaDRGB3wvWMNcLTYGbhNLo244h/688JI4g u4OqvWE8qT20y3pKrCh5hBzvMgxc9hjY+hKQb4LEY1SeU5zqJafWJ03NSRSeNRgJDPhzdkcyRbXO 7PFyJ76OtvctPsQBV0iDLzrwIttOTkhS4TlolYnmtl7oIreEmooyuH5/xceB8M7Y5eCVAfjqaopG VFigyWuyOC6YEJNtA3SCCOKuLgiKPWg8JwKF4A== ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030220213 20241017013817 2331 es. EsEKfbFFm4eXUOe0F+9J2wCMwi3Cvn3zplYX03Kgr394W61xxYFxwpiZGDcIt9g100u1JRPy3GIr kN6+ATko5D7xutCf12ixLVcRbgZ05jBSQuBv2fmxzQnClNFEbWwMsJ/igp7JiDC9DBWtWiVehTDo Z8jhNRTLU1rLVtNblahd9tsL5i0i/gAAU9SLn2mxzbGQKAY+sy3p4fr/Y8eiMk9cJsyT5FSsgUay IOCxwV3GaOBhlHH+T4btpmViDX4mTloYy6P97CM8HwsovHUjtwEaquljZ+jYIXNlZ8U1yg5qB3+0 JDIglIbAk0Dieq6v/RhhljjDEWPru2d3nBtd4Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to g.nic.es for coin.es/DNSKEY
	Received 914 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 914 octets ;; HEADER SECTION ;; id = 17204 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) coin.es. 86400 IN NS ns1045.ui-dns.de. coin.es. 86400 IN NS ns1045.ui-dns.biz. coin.es. 86400 IN NS ns1045.ui-dns.com. coin.es. 86400 IN NS ns1045.ui-dns.org. tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d tfv7cdtmvoh27b5js9o2efjuoekq4ul9 NS SOA RRSIG DNSKEY NSEC3PARAM ) tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030221159 20241017013817 2331 es. V5YWE2hdhU3azGQRnGzz/hlhp79kI0r1nKvzpLeWJFLXBmEGk4Gn2jFdaMpPGUvaYR2ArT2GAICE KO1Mcc/Lg70zQ6vJxvfHbYLQntWQMmSgV2KZRPAZiImaDRGB3wvWMNcLTYGbhNLo244h/688JI4g u4OqvWE8qT20y3pKrCh5hBzvMgxc9hjY+hKQb4LEY1SeU5zqJafWJ03NSRSeNRgJDPhzdkcyRbXO 7PFyJ76OtvctPsQBV0iDLzrwIttOTkhS4TlolYnmtl7oIreEmooyuH5/xceB8M7Y5eCVAfjqaopG VFigyWuyOC6YEJNtA3SCCOKuLgiKPWg8JwKF4A== ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d s169fpjf3ujrpss3fq054e4t0a3cn2ko NS DS RRSIG ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030220213 20241017013817 2331 es. EsEKfbFFm4eXUOe0F+9J2wCMwi3Cvn3zplYX03Kgr394W61xxYFxwpiZGDcIt9g100u1JRPy3GIr kN6+ATko5D7xutCf12ixLVcRbgZ05jBSQuBv2fmxzQnClNFEbWwMsJ/igp7JiDC9DBWtWiVehTDo Z8jhNRTLU1rLVtNblahd9tsL5i0i/gAAU9SLn2mxzbGQKAY+sy3p4fr/Y8eiMk9cJsyT5FSsgUay IOCxwV3GaOBhlHH+T4btpmViDX4mTloYy6P97CM8HwsovHUjtwEaquljZ+jYIXNlZ8U1yg5qB3+0 JDIglIbAk0Dieq6v/RhhljjDEWPru2d3nBtd4Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone coin.es

coin.es

	Checking DS between es and coin.es
	Query to g.nic.es for coin.es/DS
	Received 1138 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 1138 octets ;; HEADER SECTION ;; id = 64185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d tfv7cdtmvoh27b5js9o2efjuoekq4ul9 NS SOA RRSIG DNSKEY NSEC3PARAM ) tfv5svttjaflo8vd840cqj9al2tp2d99.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030221159 20241017013817 2331 es. V5YWE2hdhU3azGQRnGzz/hlhp79kI0r1nKvzpLeWJFLXBmEGk4Gn2jFdaMpPGUvaYR2ArT2GAICE KO1Mcc/Lg70zQ6vJxvfHbYLQntWQMmSgV2KZRPAZiImaDRGB3wvWMNcLTYGbhNLo244h/688JI4g u4OqvWE8qT20y3pKrCh5hBzvMgxc9hjY+hKQb4LEY1SeU5zqJafWJ03NSRSeNRgJDPhzdkcyRbXO 7PFyJ76OtvctPsQBV0iDLzrwIttOTkhS4TlolYnmtl7oIreEmooyuH5/xceB8M7Y5eCVAfjqaopG VFigyWuyOC6YEJNtA3SCCOKuLgiKPWg8JwKF4A== ) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2024102206 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 3600 IN RRSIG ( SOA 8 1 3600 20241105231534 20241022190545 2331 es. k6HPxo04JBpY9p/cnS79o24QV95ziRacY30VebxaEr0Z9+TZRmd/pibhyOsQZVEqJeM4pOSxoE94 hgQJvNI/oztGwQM8y+Q1bHPSCU8A017OKMb0h3dM+fi3SOTpl3dwI5SLcdk27+q99V+cC3wkeWSn +aty+tsFeZF82HG3xY63SES28R7j/4tacDOD+WAjWXxU4zYVPwvcZpFauMi4EL2h4c2W+KI/c72h xe95pTyqsutY9NpSvRRNVjxH4MJr8+rmfPq7mWVOuf8kxJlLRvzT/1VRk1i9qTLyI/zmG0f+SjiS 94BAGVJZdVF48DGdrAv4zVzgpLmvK3L5fbC4fw== ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN NSEC3 ( 1 1 5 8d8e199709d7703d s169fpjf3ujrpss3fq054e4t0a3cn2ko NS DS RRSIG ) s162ngi34v8idcpoha2r74k6382gmjmt.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20241030220213 20241017013817 2331 es. EsEKfbFFm4eXUOe0F+9J2wCMwi3Cvn3zplYX03Kgr394W61xxYFxwpiZGDcIt9g100u1JRPy3GIr kN6+ATko5D7xutCf12ixLVcRbgZ05jBSQuBv2fmxzQnClNFEbWwMsJ/igp7JiDC9DBWtWiVehTDo Z8jhNRTLU1rLVtNblahd9tsL5i0i/gAAU9SLn2mxzbGQKAY+sy3p4fr/Y8eiMk9cJsyT5FSsgUay IOCxwV3GaOBhlHH+T4btpmViDX4mTloYy6P97CM8HwsovHUjtwEaquljZ+jYIXNlZ8U1yg5qB3+0 JDIglIbAk0Dieq6v/RhhljjDEWPru2d3nBtd4Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for coin.es in the es zone
	Query to ns1045.ui-dns.org for coin.es/DNSKEY
	Received 106 bytes from 217.160.83.45
	;; Response received from [217.160.83.45] 106 octets ;; HEADER SECTION ;; id = 28133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) coin.es. 600 IN SOA ( ns1045.ui-dns.com. hostmaster.1und1.com. 2017060188 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1045.ui-dns.biz for coin.es/A
	Received 52 bytes from 217.160.81.45
	;; Response received from [217.160.81.45] 52 octets ;; HEADER SECTION ;; id = 2032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1045.ui-dns.biz is authoritative for coin.es
	Query to ns1045.ui-dns.com for coin.es/SOA
	Received 106 bytes from 217.160.82.45
	;; Response received from [217.160.82.45] 106 octets ;; HEADER SECTION ;; id = 51700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN SOA ;; ANSWER SECTION (1 record) coin.es. 86400 IN SOA ( ns1045.ui-dns.com. hostmaster.1und1.com. 2017060188 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1045.ui-dns.de for coin.es/SOA
	Received 106 bytes from 217.160.80.45
	;; Response received from [217.160.80.45] 106 octets ;; HEADER SECTION ;; id = 28312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN SOA ;; ANSWER SECTION (1 record) coin.es. 86400 IN SOA ( ns1045.ui-dns.com. hostmaster.1und1.com. 2017060188 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1045.ui-dns.org for coin.es/SOA
	Received 106 bytes from 217.160.83.45
	;; Response received from [217.160.83.45] 106 octets ;; HEADER SECTION ;; id = 55048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN SOA ;; ANSWER SECTION (1 record) coin.es. 86400 IN SOA ( ns1045.ui-dns.com. hostmaster.1und1.com. 2017060188 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1045.ui-dns.biz for coin.es/A
	Received 52 bytes from 217.160.81.45
	;; Response received from [217.160.81.45] 52 octets ;; HEADER SECTION ;; id = 59406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coin.es A RR has value 217.160.0.213
	No RRSIGs found

coin.es

	Query to ns1045.ui-dns.org for coin.es/A
	Received 52 bytes from 217.160.83.45
	;; Response received from [217.160.83.45] 52 octets ;; HEADER SECTION ;; id = 56556 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1045.ui-dns.org is authoritative for coin.es
	Query to ns1045.ui-dns.org for coin.es/A
	Received 52 bytes from 217.160.83.45
	;; Response received from [217.160.83.45] 52 octets ;; HEADER SECTION ;; id = 18520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coin.es A RR has value 217.160.0.213
	No RRSIGs found

coin.es

	Query to ns1045.ui-dns.com for coin.es/A
	Received 52 bytes from 217.160.82.45
	;; Response received from [217.160.82.45] 52 octets ;; HEADER SECTION ;; id = 42189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1045.ui-dns.com is authoritative for coin.es
	Query to ns1045.ui-dns.com for coin.es/A
	Received 52 bytes from 217.160.82.45
	;; Response received from [217.160.82.45] 52 octets ;; HEADER SECTION ;; id = 58968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coin.es A RR has value 217.160.0.213
	No RRSIGs found

coin.es

	Query to ns1045.ui-dns.de for coin.es/A
	Received 52 bytes from 217.160.80.45
	;; Response received from [217.160.80.45] 52 octets ;; HEADER SECTION ;; id = 49990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1045.ui-dns.de is authoritative for coin.es
	Query to ns1045.ui-dns.de for coin.es/A
	Received 52 bytes from 217.160.80.45
	;; Response received from [217.160.80.45] 52 octets ;; HEADER SECTION ;; id = 43672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; coin.es. IN A ;; ANSWER SECTION (1 record) coin.es. 3600 IN A 217.160.0.213 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coin.es A RR has value 217.160.0.213
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test coin.es at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: