DNSSEC Analyzer - comunesbt.it

Domain Name:

Time: 2021-01-26 13:14:44 UTC, NTP stratum 4

Analyzing DNSSEC problems for comunesbt.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 38434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to e.root-servers.net for comunesbt.it/A
	Received 759 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (759 bytes) ;; HEADER SECTION ;; id = 36320 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS s.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . GfLbfH8EPVoyocylOumvcza8/bXLBjLlSOyFOUj0KQvctYpX35P5AYym/k8gpJIWuE57B/1YX3NI fBfwtE+uNPDXdMdfkf5mEv9Sa3lrdecbBMWyCmEgackFlXUn8XZs62HQqIqs6DjAtodq4VBn9xYh AsRL6ipWGiYtO/XhBNZy1uNthkEw2niMom7RsLjt8T9rlTPaxoqWT+NevVWzIDzvpvrbXoVJ9HwL bWxuCCNndx4xZxXaO7FmkQYpg0nfJqee2isv84CP5rl6z5cyvpLh1iEO/dnSHKKULhv0/ENxehB5 zIKzo0aqfbCWrYePyJpeMlqpASE+1+Ygie359A== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 m.dns.it. 172800 IN A 217.29.76.4 r.dns.it. 172800 IN A 193.206.141.46 s.dns.it. 172800 IN A 194.146.106.30 dns.nic.it. 172800 IN A 192.12.192.5 nameserver.cnr.it. 172800 IN A 194.119.192.34 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca s.dns.it. 172800 IN AAAA 2001:67c:1010:7::53 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for it/DNSKEY
	Received 749 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (749 bytes) ;; HEADER SECTION ;; id = 43578 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS nameserver.cnr.it. it. 172800 IN NS s.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . GfLbfH8EPVoyocylOumvcza8/bXLBjLlSOyFOUj0KQvctYpX35P5AYym/k8gpJIWuE57B/1YX3NI fBfwtE+uNPDXdMdfkf5mEv9Sa3lrdecbBMWyCmEgackFlXUn8XZs62HQqIqs6DjAtodq4VBn9xYh AsRL6ipWGiYtO/XhBNZy1uNthkEw2niMom7RsLjt8T9rlTPaxoqWT+NevVWzIDzvpvrbXoVJ9HwL bWxuCCNndx4xZxXaO7FmkQYpg0nfJqee2isv84CP5rl6z5cyvpLh1iEO/dnSHKKULhv0/ENxehB5 zIKzo0aqfbCWrYePyJpeMlqpASE+1+Ygie359A== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 m.dns.it. 172800 IN A 217.29.76.4 r.dns.it. 172800 IN A 193.206.141.46 s.dns.it. 172800 IN A 194.146.106.30 dns.nic.it. 172800 IN A 192.12.192.5 nameserver.cnr.it. 172800 IN A 194.119.192.34 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca s.dns.it. 172800 IN AAAA 2001:67c:1010:7::53 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone it

	Checking DS between . and it
	Query to j.root-servers.net for it/DS
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 64238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . GfLbfH8EPVoyocylOumvcza8/bXLBjLlSOyFOUj0KQvctYpX35P5AYym/k8gpJIWuE57B/1YX3NI fBfwtE+uNPDXdMdfkf5mEv9Sa3lrdecbBMWyCmEgackFlXUn8XZs62HQqIqs6DjAtodq4VBn9xYh AsRL6ipWGiYtO/XhBNZy1uNthkEw2niMom7RsLjt8T9rlTPaxoqWT+NevVWzIDzvpvrbXoVJ9HwL bWxuCCNndx4xZxXaO7FmkQYpg0nfJqee2isv84CP5rl6z5cyvpLh1iEO/dnSHKKULhv0/ENxehB5 zIKzo0aqfbCWrYePyJpeMlqpASE+1+Ygie359A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . GfLbfH8EPVoyocylOumvcza8/bXLBjLlSOyFOUj0KQvctYpX35P5AYym/k8gpJIWuE57B/1YX3NI fBfwtE+uNPDXdMdfkf5mEv9Sa3lrdecbBMWyCmEgackFlXUn8XZs62HQqIqs6DjAtodq4VBn9xYh AsRL6ipWGiYtO/XhBNZy1uNthkEw2niMom7RsLjt8T9rlTPaxoqWT+NevVWzIDzvpvrbXoVJ9HwL bWxuCCNndx4xZxXaO7FmkQYpg0nfJqee2isv84CP5rl6z5cyvpLh1iEO/dnSHKKULhv0/ENxehB5 zIKzo0aqfbCWrYePyJpeMlqpASE+1+Ygie359A== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to a.dns.it for it/DNSKEY
	Received 1163 bytes from 194.0.16.215
	;; Answer received from 194.0.16.215 (1163 bytes) ;; HEADER SECTION ;; id = 5378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (4 records) it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901 it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395 it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20210225120331 20210126120331 18395 it. KQD3rlsxwi2FLOwOXLP4v9KyVGL5slEcdCuQhlsJ3ZgNBc6nwJ4HJfa9/MNo9n7bEEmBBHesBWkD +h6m7+I1of6jWTqZJ8rPfDPPuQU/NqAG8s+YAKfZF9adlmOAs1abdVAEyrMd1S20c3nzHDHPLr4V 509ibEYkzoLLExhpcCHEcGw0HrwZQToF3h1Saa2RO6v4szAFOSRamgpl7AJ0WPW/W/+w8QgvPHOI dq8cKzxAPnT3a7R485g/ja80lm+dPYU0fOyg1lRYbZlKkbqaqOxNkp9AyeQvG3iOKbZ+blvB+OPD W6BdjOA35RQ29mVn7s9oIOLZeF8gTStdO5fv3w== ) it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20210225120331 20210126120331 41901 it. jVUt7HwX6aXk7+RVSBDqH3z/N+PYvHb3gOWO+EL2082imMT+H7R7S4+7eBAEuMUq5J8nStXssv+x O69IAynQOQWUBcyX9/dj55jfsKXmV2N1r3lYQc+2qCEJ+ztW7bYclyobirnJLK42SFwSAC+GRl+c cSU7rBscakhWf1nyPck8IovCjfHjlShKmheY+yWyk/TAogqnoKSI2NiFXpLUAi2/q+PfkvlVosdO cKSr0egCv729P0jq1rhw6fFwNwf/krFn7c48wlkUXUgAmmXBI9C4uPFFkjj3x8CcQCb8dfXFsYA3 gMmVVGNUpUB/q2kpjFa6r443FER692uuX8ltKg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for it
	`it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901`
	`it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20210225120331 20210126120331 18395 it. KQD3rlsxwi2FLOwOXLP4v9KyVGL5slEcdCuQhlsJ3ZgNBc6nwJ4HJfa9/MNo9n7bEEmBBHesBWkD +h6m7+I1of6jWTqZJ8rPfDPPuQU/NqAG8s+YAKfZF9adlmOAs1abdVAEyrMd1S20c3nzHDHPLr4V 509ibEYkzoLLExhpcCHEcGw0HrwZQToF3h1Saa2RO6v4szAFOSRamgpl7AJ0WPW/W/+w8QgvPHOI dq8cKzxAPnT3a7R485g/ja80lm+dPYU0fOyg1lRYbZlKkbqaqOxNkp9AyeQvG3iOKbZ+blvB+OPD W6BdjOA35RQ29mVn7s9oIOLZeF8gTStdO5fv3w== )`
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20210225120331 20210126120331 41901 it. jVUt7HwX6aXk7+RVSBDqH3z/N+PYvHb3gOWO+EL2082imMT+H7R7S4+7eBAEuMUq5J8nStXssv+x O69IAynQOQWUBcyX9/dj55jfsKXmV2N1r3lYQc+2qCEJ+ztW7bYclyobirnJLK42SFwSAC+GRl+c cSU7rBscakhWf1nyPck8IovCjfHjlShKmheY+yWyk/TAogqnoKSI2NiFXpLUAi2/q+PfkvlVosdO cKSr0egCv729P0jq1rhw6fFwNwf/krFn7c48wlkUXUgAmmXBI9C4uPFFkjj3x8CcQCb8dfXFsYA3 gMmVVGNUpUB/q2kpjFa6r443FER692uuX8ltKg== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DNSKEY RRset
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to nameserver.cnr.it for comunesbt.it/A
	Received 444 bytes from 194.119.192.34
	;; Answer received from 194.119.192.34 (444 bytes) ;; HEADER SECTION ;; id = 10452 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) comunesbt.it. 10800 IN NS ns2.as59715.net. comunesbt.it. 10800 IN NS ns1.as59715.net. comunesbt.it. 10800 IN NS ns3.as59715.net. comunesbt.it. 10800 IN DS ( 348 14 2 62a547805f7adeef79a035375a264e76063d3c27c67b7c5f1d8ebea191e9ea91 ) comunesbt.it. 10800 IN RRSIG ( DS 10 2 10800 20210225120331 20210126120331 18395 it. fNawkbhZ69wuf8eLxnKqv7u7LhqH6CULxdJX9bE52HvEysbW+btnnF4h6tB5S4GfXPpfsGTSwaSg cnJCaGrEp8wdRs61tVBiSLx3wgktf8SCQ+CO7f887oIl5r3hF0dkqqfeJuseURyRrZBELNYu6eqY KMV3AA7bwKRExHAjMw2AVsxZxDTJmmunSlmtVUPlozmkSAz/I/wdClMfASFHCjTZRmncDM+54trh DsJEyBaYOrsF6qYojrqMuxUtJIJggSiV4EAghMbixRCsESHfnlsBpbOY5UbDXlsihr5EjVFHyyph SJNRyVrBC1oZKHxkSGhDpzgu97S0XWTq4xBNRw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.dns.it for comunesbt.it/DNSKEY
	Received 444 bytes from 194.0.16.215
	;; Answer received from 194.0.16.215 (444 bytes) ;; HEADER SECTION ;; id = 31769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) comunesbt.it. 10800 IN NS ns1.as59715.net. comunesbt.it. 10800 IN NS ns3.as59715.net. comunesbt.it. 10800 IN NS ns2.as59715.net. comunesbt.it. 10800 IN DS ( 348 14 2 62a547805f7adeef79a035375a264e76063d3c27c67b7c5f1d8ebea191e9ea91 ) comunesbt.it. 10800 IN RRSIG ( DS 10 2 10800 20210225120331 20210126120331 18395 it. fNawkbhZ69wuf8eLxnKqv7u7LhqH6CULxdJX9bE52HvEysbW+btnnF4h6tB5S4GfXPpfsGTSwaSg cnJCaGrEp8wdRs61tVBiSLx3wgktf8SCQ+CO7f887oIl5r3hF0dkqqfeJuseURyRrZBELNYu6eqY KMV3AA7bwKRExHAjMw2AVsxZxDTJmmunSlmtVUPlozmkSAz/I/wdClMfASFHCjTZRmncDM+54trh DsJEyBaYOrsF6qYojrqMuxUtJIJggSiV4EAghMbixRCsESHfnlsBpbOY5UbDXlsihr5EjVFHyyph SJNRyVrBC1oZKHxkSGhDpzgu97S0XWTq4xBNRw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone comunesbt.it

comunesbt.it

	Checking DS between it and comunesbt.it
	Query to dns.nic.it for comunesbt.it/DS
	Received 379 bytes from 192.12.192.5
	;; Answer received from 192.12.192.5 (379 bytes) ;; HEADER SECTION ;; id = 52438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN DS ;; ANSWER SECTION (2 records) comunesbt.it. 10800 IN DS ( 348 14 2 62a547805f7adeef79a035375a264e76063d3c27c67b7c5f1d8ebea191e9ea91 ) comunesbt.it. 10800 IN RRSIG ( DS 10 2 10800 20210225120331 20210126120331 18395 it. fNawkbhZ69wuf8eLxnKqv7u7LhqH6CULxdJX9bE52HvEysbW+btnnF4h6tB5S4GfXPpfsGTSwaSg cnJCaGrEp8wdRs61tVBiSLx3wgktf8SCQ+CO7f887oIl5r3hF0dkqqfeJuseURyRrZBELNYu6eqY KMV3AA7bwKRExHAjMw2AVsxZxDTJmmunSlmtVUPlozmkSAz/I/wdClMfASFHCjTZRmncDM+54trh DsJEyBaYOrsF6qYojrqMuxUtJIJggSiV4EAghMbixRCsESHfnlsBpbOY5UbDXlsihr5EjVFHyyph SJNRyVrBC1oZKHxkSGhDpzgu97S0XWTq4xBNRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for comunesbt.it in the it zone
	DS=348/SHA-256 has algorithm ECDSAP384SHA384
	Found 1 RRSIGs over DS RRset
	`comunesbt.it. 10800 IN RRSIG ( DS 10 2 10800 20210225120331 20210126120331 18395 it. fNawkbhZ69wuf8eLxnKqv7u7LhqH6CULxdJX9bE52HvEysbW+btnnF4h6tB5S4GfXPpfsGTSwaSg cnJCaGrEp8wdRs61tVBiSLx3wgktf8SCQ+CO7f887oIl5r3hF0dkqqfeJuseURyRrZBELNYu6eqY KMV3AA7bwKRExHAjMw2AVsxZxDTJmmunSlmtVUPlozmkSAz/I/wdClMfASFHCjTZRmncDM+54trh DsJEyBaYOrsF6qYojrqMuxUtJIJggSiV4EAghMbixRCsESHfnlsBpbOY5UbDXlsihr5EjVFHyyph SJNRyVrBC1oZKHxkSGhDpzgu97S0XWTq4xBNRw== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DS RRset
	DS=348/SHA-256 is now in the chain-of-trust
	`comunesbt.it. 10800 IN DS ( 348 14 2 62a547805f7adeef79a035375a264e76063d3c27c67b7c5f1d8ebea191e9ea91 )`
	Query to ns1.as59715.net for comunesbt.it/DNSKEY
	Received 657 bytes from 185.5.201.53
	;; Answer received from 185.5.201.53 (657 bytes) ;; HEADER SECTION ;; id = 8443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN DNSKEY ;; ANSWER SECTION (5 records) comunesbt.it. 3600 IN DNSKEY ( 257 3 14 VUCdA33by8XJ8Y9LKn+I4VD6vmMSpshWhfRKsFRUloLlwri0bLMk8f8aEpippg/sUcA873tpe6K0 a35uDW4SR0bi8wlyKfBDsoDfz4kwYl93Yd7Rj1e3uu6NTeNA1QaA ) ; Key ID = 348 comunesbt.it. 3600 IN DNSKEY ( 256 3 14 sPa/liGoRudA0S+MAMfsEqNpskXAR3EQrmnJoxZjyVcLuogEoytRyhz1rkAmENpftkO3PwgMpHVU 4VwgyIjJDFDH5K3yPYfFSq+3kuSl28y4qAPqKgaHCgIS4YfL7dN7 ) ; Key ID = 11517 comunesbt.it. 3600 IN DNSKEY ( 257 3 14 +hX3OdzXDjZJ8BQayhkgxnOM7/dSgAiQyR/5DaZy0L3wSCUoLNbAZIXMg6Vgzyy94I3iiADBd8cu /VgnpyFkLFs1YFeFZDWGshQ1nV1tuQ1h5t8FqbsnKEhsHIWL8t4T ) ; Key ID = 56946 comunesbt.it. 3600 IN RRSIG ( DNSKEY 14 2 3600 20210205103530 20210122075810 348 comunesbt.it. EC+P9Brkkz7+IrWllpPDzQD4yGBTGPE3TrtSj2Q+sc/WnheGW/aZKSl8gxD1KLQz/FiGi/dMW/MV 4t8od2Fh3bFtaPrKo4X+JhJ5kFai3Krq9h6h8SY33afdjjrI8cAM ) comunesbt.it. 3600 IN RRSIG ( DNSKEY 14 2 3600 20210205103530 20210122075810 56946 comunesbt.it. 4iimPZNskDzO09U/pWNYvkpvt1UKorMnPrzhrPmSjpUW2D2DZgASu3Xlm5Hd2op7kwuZklUtQCSn RYUI0CPbZrYXan57W22KP1S2u92et+OIXYfpoYO4maWDJkYFFXBw ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for comunesbt.it
	`comunesbt.it. 3600 IN DNSKEY ( 257 3 14 VUCdA33by8XJ8Y9LKn+I4VD6vmMSpshWhfRKsFRUloLlwri0bLMk8f8aEpippg/sUcA873tpe6K0 a35uDW4SR0bi8wlyKfBDsoDfz4kwYl93Yd7Rj1e3uu6NTeNA1QaA ) ; Key ID = 348`
	`comunesbt.it. 3600 IN DNSKEY ( 256 3 14 sPa/liGoRudA0S+MAMfsEqNpskXAR3EQrmnJoxZjyVcLuogEoytRyhz1rkAmENpftkO3PwgMpHVU 4VwgyIjJDFDH5K3yPYfFSq+3kuSl28y4qAPqKgaHCgIS4YfL7dN7 ) ; Key ID = 11517`
	`comunesbt.it. 3600 IN DNSKEY ( 257 3 14 +hX3OdzXDjZJ8BQayhkgxnOM7/dSgAiQyR/5DaZy0L3wSCUoLNbAZIXMg6Vgzyy94I3iiADBd8cu /VgnpyFkLFs1YFeFZDWGshQ1nV1tuQ1h5t8FqbsnKEhsHIWL8t4T ) ; Key ID = 56946`
	DNSKEY=348/SEP is now in the chain-of-trust
	DS=348/SHA-256 verifies DNSKEY=348/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`comunesbt.it. 3600 IN RRSIG ( DNSKEY 14 2 3600 20210205103530 20210122075810 348 comunesbt.it. EC+P9Brkkz7+IrWllpPDzQD4yGBTGPE3TrtSj2Q+sc/WnheGW/aZKSl8gxD1KLQz/FiGi/dMW/MV 4t8od2Fh3bFtaPrKo4X+JhJ5kFai3Krq9h6h8SY33afdjjrI8cAM )`
	`comunesbt.it. 3600 IN RRSIG ( DNSKEY 14 2 3600 20210205103530 20210122075810 56946 comunesbt.it. 4iimPZNskDzO09U/pWNYvkpvt1UKorMnPrzhrPmSjpUW2D2DZgASu3Xlm5Hd2op7kwuZklUtQCSn RYUI0CPbZrYXan57W22KP1S2u92et+OIXYfpoYO4maWDJkYFFXBw )`
	RRSIG=348 and DNSKEY=348/SEP verifies the DNSKEY RRset
	RRSIG=56946 and DNSKEY=56946/SEP verifies the DNSKEY RRset
	DNSKEY=11517 is now in the chain-of-trust
	DNSKEY=56946/SEP is now in the chain-of-trust
	Query to ns3.as59715.net for comunesbt.it/A
	Received 197 bytes from 54.93.203.146
	;; Answer received from 54.93.203.146 (197 bytes) ;; HEADER SECTION ;; id = 62440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN A ;; ANSWER SECTION (2 records) comunesbt.it. 86400 IN A 185.5.201.81 comunesbt.it. 86400 IN RRSIG ( A 14 2 86400 20210129175914 20210116041108 11517 comunesbt.it. HfVTHNKYMSihPYWpJB1Q/sXWj7iJvMoFoUjsC6ylc1zOe3fvnLrf7LgUEnZLPGZGQr/Scv3MC0VA qa991BfQwjewQNbC/9YopsO0eRump42PaUyY0SUXfYMjhilKsjxU ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	comunesbt.it is authoritative for comunesbt.it
	Found RRSIG signed by comunesbt.it zone
	Query to ns1.as59715.net for comunesbt.it/SOA
	Received 242 bytes from 185.5.201.53
	;; Answer received from 185.5.201.53 (242 bytes) ;; HEADER SECTION ;; id = 48118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN SOA ;; ANSWER SECTION (2 records) comunesbt.it. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 1611540554 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) comunesbt.it. 3600 IN RRSIG ( SOA 14 2 3600 20210208050734 20210125010914 11517 comunesbt.it. 4QqUT9t/i8RTJ71mIFnzWU2MhcpLm1yYLXp5C+lbLcJB9w45j3lhdVciAcUJ6zBrUwvFzkN3bCe+ HtRmKPNoiqPU/30gZvSvnt1H8O0RQ8knjojIsUPW/BNUlmpNWKVv ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.as59715.net for comunesbt.it/SOA
	Received 242 bytes from 54.93.203.146
	;; Answer received from 54.93.203.146 (242 bytes) ;; HEADER SECTION ;; id = 26057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN SOA ;; ANSWER SECTION (2 records) comunesbt.it. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 1611540554 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) comunesbt.it. 3600 IN RRSIG ( SOA 14 2 3600 20210208050734 20210125010914 11517 comunesbt.it. 4QqUT9t/i8RTJ71mIFnzWU2MhcpLm1yYLXp5C+lbLcJB9w45j3lhdVciAcUJ6zBrUwvFzkN3bCe+ HtRmKPNoiqPU/30gZvSvnt1H8O0RQ8knjojIsUPW/BNUlmpNWKVv ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.as59715.net for comunesbt.it/SOA
	Received 242 bytes from 185.5.202.53
	;; Answer received from 185.5.202.53 (242 bytes) ;; HEADER SECTION ;; id = 5305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN SOA ;; ANSWER SECTION (2 records) comunesbt.it. 3600 IN SOA ( ns1.as59715.net. dnsmaster.as59715.net. 1611540554 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 3600 ;minimum ) comunesbt.it. 3600 IN RRSIG ( SOA 14 2 3600 20210208050734 20210125010914 11517 comunesbt.it. 4QqUT9t/i8RTJ71mIFnzWU2MhcpLm1yYLXp5C+lbLcJB9w45j3lhdVciAcUJ6zBrUwvFzkN3bCe+ HtRmKPNoiqPU/30gZvSvnt1H8O0RQ8knjojIsUPW/BNUlmpNWKVv ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.as59715.net for comunesbt.it/A
	Received 197 bytes from 54.93.203.146
	;; Answer received from 54.93.203.146 (197 bytes) ;; HEADER SECTION ;; id = 48789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; comunesbt.it. IN A ;; ANSWER SECTION (2 records) comunesbt.it. 86400 IN A 185.5.201.81 comunesbt.it. 86400 IN RRSIG ( A 14 2 86400 20210129175914 20210116041108 11517 comunesbt.it. HfVTHNKYMSihPYWpJB1Q/sXWj7iJvMoFoUjsC6ylc1zOe3fvnLrf7LgUEnZLPGZGQr/Scv3MC0VA qa991BfQwjewQNbC/9YopsO0eRump42PaUyY0SUXfYMjhilKsjxU ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	comunesbt.it A RR has value 185.5.201.81
	Found 1 RRSIGs over A RRset
	`comunesbt.it. 86400 IN RRSIG ( A 14 2 86400 20210129175914 20210116041108 11517 comunesbt.it. HfVTHNKYMSihPYWpJB1Q/sXWj7iJvMoFoUjsC6ylc1zOe3fvnLrf7LgUEnZLPGZGQr/Scv3MC0VA qa991BfQwjewQNbC/9YopsO0eRump42PaUyY0SUXfYMjhilKsjxU )`
	RRSIG=11517 and DNSKEY=11517 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test comunesbt.it at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: