DNSSEC Debugger - crazyforprint.nl

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-06-09 20:31:47 UTC

Analyzing DNSSEC problems for crazyforprint.nl

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 53074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to c.root-servers.net for crazyforprint.nl/A
	Received 572 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 572 octets ;; HEADER SECTION ;; id = 53374 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; crazyforprint.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260622170000 20260609160000 54393 . T+vxYYDLo9hWiIlp1OcCCecfwzSsYLtYN1QPQxbYmsA0Jcj1yMFEB4GFPbSLthkJFXLOO2mIVuIV MPON+HM5VlPGRfG8NTa68b4ZdTa/8/c/Ae4CYNUdm9eWkpecL3vozQx7Tkql/sPAhZsRTdw2PmGC 2yu2Ptw3TRoNXy/7NR/Ro52xFEY2IauaUOyYlFYuBrnQvMGzqIp0qYBUqXm1UjTtiVK7bC00KGlD rz1Iih8RagaAmzvQDCh3UpdZ2Lb/5LeP/06C7pET0FdZgmD2n5msbsiGHQ1XBmmSmPc8awrhhLai ghgYb7sMULrz39IYh8T/qTcyWYbbSYmAUMEbXw== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for nl/DNSKEY
	Received 556 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 556 octets ;; HEADER SECTION ;; id = 33971 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260622170000 20260609160000 54393 . T+vxYYDLo9hWiIlp1OcCCecfwzSsYLtYN1QPQxbYmsA0Jcj1yMFEB4GFPbSLthkJFXLOO2mIVuIV MPON+HM5VlPGRfG8NTa68b4ZdTa/8/c/Ae4CYNUdm9eWkpecL3vozQx7Tkql/sPAhZsRTdw2PmGC 2yu2Ptw3TRoNXy/7NR/Ro52xFEY2IauaUOyYlFYuBrnQvMGzqIp0qYBUqXm1UjTtiVK7bC00KGlD rz1Iih8RagaAmzvQDCh3UpdZ2Lb/5LeP/06C7pET0FdZgmD2n5msbsiGHQ1XBmmSmPc8awrhhLai ghgYb7sMULrz39IYh8T/qTcyWYbbSYmAUMEbXw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to i.root-servers.net for nl/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 57252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20260622170000 20260609160000 54393 . T+vxYYDLo9hWiIlp1OcCCecfwzSsYLtYN1QPQxbYmsA0Jcj1yMFEB4GFPbSLthkJFXLOO2mIVuIV MPON+HM5VlPGRfG8NTa68b4ZdTa/8/c/Ae4CYNUdm9eWkpecL3vozQx7Tkql/sPAhZsRTdw2PmGC 2yu2Ptw3TRoNXy/7NR/Ro52xFEY2IauaUOyYlFYuBrnQvMGzqIp0qYBUqXm1UjTtiVK7bC00KGlD rz1Iih8RagaAmzvQDCh3UpdZ2Lb/5LeP/06C7pET0FdZgmD2n5msbsiGHQ1XBmmSmPc8awrhhLai ghgYb7sMULrz39IYh8T/qTcyWYbbSYmAUMEbXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20260622170000 20260609160000 54393 . T+vxYYDLo9hWiIlp1OcCCecfwzSsYLtYN1QPQxbYmsA0Jcj1yMFEB4GFPbSLthkJFXLOO2mIVuIV MPON+HM5VlPGRfG8NTa68b4ZdTa/8/c/Ae4CYNUdm9eWkpecL3vozQx7Tkql/sPAhZsRTdw2PmGC 2yu2Ptw3TRoNXy/7NR/Ro52xFEY2IauaUOyYlFYuBrnQvMGzqIp0qYBUqXm1UjTtiVK7bC00KGlD rz1Iih8RagaAmzvQDCh3UpdZ2Lb/5LeP/06C7pET0FdZgmD2n5msbsiGHQ1XBmmSmPc8awrhhLai ghgYb7sMULrz39IYh8T/qTcyWYbbSYmAUMEbXw== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 369 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 369 octets ;; HEADER SECTION ;; id = 53893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467 nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260626165410 20260529113829 17153 nl. J1LpVZDBEivHDwfzLmIZ3Qk8h/GwFLfAGMq0e9fP25xZ9LkSAkhCwgCJmKp0EIoTKTPwIvqRUvSL m+A/ivyQ/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	`nl. 3600 IN DNSKEY ( 256 3 13 ArhUNmeRU9NE4fAbORd6DjntZ0vDP3PoQotzRxGg/gdniUCSGp/naJdkcG5/Y9+SVE6f5h/NZCqG y2+Kh/FeEw== ) ; keytag 467`
	`nl. 3600 IN DNSKEY ( 256 3 13 K6vIyw43NeqqIe4vXEskU84cusiwHji866W22QpDbFTRQk1h1xJq4qDIpPpWNHZ86mWGvw7W3nD1 5Lb/wrCAyw== ) ; keytag 41543`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260626165410 20260529113829 17153 nl. J1LpVZDBEivHDwfzLmIZ3Qk8h/GwFLfAGMq0e9fP25xZ9LkSAkhCwgCJmKp0EIoTKTPwIvqRUvSL m+A/ivyQ/Q== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=467 is now in the chain-of-trust
	DNSKEY=41543 is now in the chain-of-trust
	Query to ns4.dns.nl for crazyforprint.nl/A
	Received 290 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 290 octets ;; HEADER SECTION ;; id = 27724 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; crazyforprint.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) crazyforprint.nl. 3600 IN NS ns1.tikklik.nl. crazyforprint.nl. 3600 IN NS ns2.tikklik.com. crazyforprint.nl. 3600 IN DS ( 62253 13 2 76bd10fa3329a09dbd19888dfbc6caaa9b4e9ff91b7b9015a396f269b25fa238 ) crazyforprint.nl. 3600 IN RRSIG ( DS 13 2 3600 20260626155318 20260529193740 41543 nl. Rs486dk4mmcu5cqirkOqCKl2kmLjgSfLq/t/FADEP2LnQzkHpUfE4KdRxiitEga4XkuXq4GUtfg3 Tj4GKC/h4A== ) ;; ADDITIONAL SECTION (3 records) ns1.tikklik.nl. 3600 IN A 5.22.255.2 ns1.tikklik.nl. 3600 IN AAAA 2a00:1bd0:740:1:2::2 ;; { "EDNS-VERSION": 0 }
	Query to ns1.dns.nl for crazyforprint.nl/DNSKEY
	Received 290 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 290 octets ;; HEADER SECTION ;; id = 54677 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; crazyforprint.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) crazyforprint.nl. 3600 IN NS ns1.tikklik.nl. crazyforprint.nl. 3600 IN NS ns2.tikklik.com. crazyforprint.nl. 3600 IN DS ( 62253 13 2 76bd10fa3329a09dbd19888dfbc6caaa9b4e9ff91b7b9015a396f269b25fa238 ) crazyforprint.nl. 3600 IN RRSIG ( DS 13 2 3600 20260626155318 20260529193740 41543 nl. Rs486dk4mmcu5cqirkOqCKl2kmLjgSfLq/t/FADEP2LnQzkHpUfE4KdRxiitEga4XkuXq4GUtfg3 Tj4GKC/h4A== ) ;; ADDITIONAL SECTION (3 records) ns1.tikklik.nl. 3600 IN A 5.22.255.2 ns1.tikklik.nl. 3600 IN AAAA 2a00:1bd0:740:1:2::2 ;; { "EDNS-VERSION": 0 }
	Found child zone crazyforprint.nl

crazyforprint.nl

	Checking DS between nl and crazyforprint.nl
	Query to ns4.dns.nl for crazyforprint.nl/DS
	Received 191 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 191 octets ;; HEADER SECTION ;; id = 41270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; crazyforprint.nl. IN DS ;; ANSWER SECTION (2 records) crazyforprint.nl. 3600 IN DS ( 62253 13 2 76bd10fa3329a09dbd19888dfbc6caaa9b4e9ff91b7b9015a396f269b25fa238 ) crazyforprint.nl. 3600 IN RRSIG ( DS 13 2 3600 20260626155318 20260529193740 41543 nl. Rs486dk4mmcu5cqirkOqCKl2kmLjgSfLq/t/FADEP2LnQzkHpUfE4KdRxiitEga4XkuXq4GUtfg3 Tj4GKC/h4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for crazyforprint.nl in the nl zone
	DS=62253/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`crazyforprint.nl. 3600 IN RRSIG ( DS 13 2 3600 20260626155318 20260529193740 41543 nl. Rs486dk4mmcu5cqirkOqCKl2kmLjgSfLq/t/FADEP2LnQzkHpUfE4KdRxiitEga4XkuXq4GUtfg3 Tj4GKC/h4A== )`
	RRSIG=41543 and DNSKEY=41543 verifies the DS RRset
	DS=62253/SHA-256 is now in the chain-of-trust
	`crazyforprint.nl. 3600 IN DS ( 62253 13 2 76bd10fa3329a09dbd19888dfbc6caaa9b4e9ff91b7b9015a396f269b25fa238 )`
	Query to ns1.tikklik.nl for crazyforprint.nl/DNSKEY
	Timeout querying ns1.tikklik.nl/5.22.255.2 for crazyforprint.nl/DNSKEY
	All Queries to ns1.tikklik.nl for crazyforprint.nl/DNSKEY timed out or failed
	Query to ns2.tikklik.com for crazyforprint.nl/DNSKEY
	Received 237 bytes from 46.182.222.162
	;; Response received from [46.182.222.162] 237 octets ;; HEADER SECTION ;; id = 10215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; crazyforprint.nl. IN DNSKEY ;; ANSWER SECTION (2 records) crazyforprint.nl. 3600 IN DNSKEY ( 257 3 13 7OuseBlwJZrg4VHi1rk5iWbeONuK0wekYa26ZQxmJBdSKiuOPu9n033VI3jgAdcx4Ly6Mc+wHzAL UOrj6/hr7w== ) ; keytag 62253 crazyforprint.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260618000000 20260528000000 62253 crazyforprint.nl. ZnsAyoiJZ6oOfanBAspPKirxA+273SK93y8+axNFewmE1Fp2gy7s3+J9iISHpwix2SFSojx24041 4cN9VFLJbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for crazyforprint.nl
	`crazyforprint.nl. 3600 IN DNSKEY ( 257 3 13 7OuseBlwJZrg4VHi1rk5iWbeONuK0wekYa26ZQxmJBdSKiuOPu9n033VI3jgAdcx4Ly6Mc+wHzAL UOrj6/hr7w== ) ; keytag 62253`
	DNSKEY=62253/SEP is now in the chain-of-trust
	DS=62253/SHA-256 verifies DNSKEY=62253/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`crazyforprint.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20260618000000 20260528000000 62253 crazyforprint.nl. ZnsAyoiJZ6oOfanBAspPKirxA+273SK93y8+axNFewmE1Fp2gy7s3+J9iISHpwix2SFSojx24041 4cN9VFLJbQ== )`
	RRSIG=62253 and DNSKEY=62253/SEP verifies the DNSKEY RRset
	Query to ns2.tikklik.com for crazyforprint.nl/A
	ns2.tikklik.com returns SERVFAIL for crazyforprint.nl/A
	No response from crazyforprint.nl nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test crazyforprint.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: