DNSSEC Analyzer - cyberbits.asia

Domain Name:

Time: 2023-10-02 20:09:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for cyberbits.asia

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (1141 octets) ;; HEADER SECTION ;; id = 38960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to b.root-servers.net for cyberbits.asia/A
	Received 848 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (848 octets) ;; HEADER SECTION ;; id = 43809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) asia. 172800 IN NS a0.asia.afilias-nst.info. asia. 172800 IN NS a2.asia.afilias-nst.info. asia. 172800 IN NS b0.asia.afilias-nst.asia. asia. 172800 IN NS b2.asia.afilias-nst.org. asia. 172800 IN NS c0.asia.afilias-nst.info. asia. 172800 IN NS d0.asia.afilias-nst.asia. asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . iC+3nbeH07+C4CeMpFIdHqrKymw/ga5lWAoEb4fQCTf81JWWrTWuyeWtnRI3L03GHIVk0oQQg7lU +PqpBiajYSbVeer5IgKWC4xAqNwJFm3w4tR22W++0iAdwC8mKkhhd6c1HJMgQS8V09RPT/qV/P8A t9+obYXduoGy5LhsT6d7/H6y7W1N+CXfFwZG05PnOlkiTk91vEdRI+v+5ccdCRlHF0WJ66isboz0 NvBx6oNYnqYPXBwd+f9iR//w7wLH+hCNZkC33rolm/jzw+kujeMMgAn1xrTnzBvpPcNdJsgmDhfy rGeBsiTf0pXwMWOaDZhkBWgtyQf8xJlTMJexiQ== ) ;; ADDITIONAL SECTION (13 records) b0.asia.afilias-nst.asia. 172800 IN A 199.254.28.1 b0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:16::1 d0.asia.afilias-nst.asia. 172800 IN A 199.254.30.1 d0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:18::1 a0.asia.afilias-nst.info. 172800 IN A 199.19.55.1 a0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:d::1 a2.asia.afilias-nst.info. 172800 IN A 199.249.114.1 a2.asia.afilias-nst.info. 172800 IN AAAA 2001:500:42::1 b2.asia.afilias-nst.org. 172800 IN A 199.249.122.1 b2.asia.afilias-nst.org. 172800 IN AAAA 2001:500:4a::1 c0.asia.afilias-nst.info. 172800 IN A 199.254.29.1 c0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:17::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for asia/DNSKEY
	Received 792 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (792 octets) ;; HEADER SECTION ;; id = 63827 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; asia. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) asia. 172800 IN NS a0.asia.afilias-nst.info. asia. 172800 IN NS a2.asia.afilias-nst.info. asia. 172800 IN NS b0.asia.afilias-nst.asia. asia. 172800 IN NS b2.asia.afilias-nst.org. asia. 172800 IN NS c0.asia.afilias-nst.info. asia. 172800 IN NS d0.asia.afilias-nst.asia. asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . iC+3nbeH07+C4CeMpFIdHqrKymw/ga5lWAoEb4fQCTf81JWWrTWuyeWtnRI3L03GHIVk0oQQg7lU +PqpBiajYSbVeer5IgKWC4xAqNwJFm3w4tR22W++0iAdwC8mKkhhd6c1HJMgQS8V09RPT/qV/P8A t9+obYXduoGy5LhsT6d7/H6y7W1N+CXfFwZG05PnOlkiTk91vEdRI+v+5ccdCRlHF0WJ66isboz0 NvBx6oNYnqYPXBwd+f9iR//w7wLH+hCNZkC33rolm/jzw+kujeMMgAn1xrTnzBvpPcNdJsgmDhfy rGeBsiTf0pXwMWOaDZhkBWgtyQf8xJlTMJexiQ== ) ;; ADDITIONAL SECTION (13 records) a0.asia.afilias-nst.info. 172800 IN A 199.19.55.1 a2.asia.afilias-nst.info. 172800 IN A 199.249.114.1 b0.asia.afilias-nst.asia. 172800 IN A 199.254.28.1 b2.asia.afilias-nst.org. 172800 IN A 199.249.122.1 c0.asia.afilias-nst.info. 172800 IN A 199.254.29.1 d0.asia.afilias-nst.asia. 172800 IN A 199.254.30.1 a0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:d::1 a2.asia.afilias-nst.info. 172800 IN AAAA 2001:500:42::1 b0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:16::1 b2.asia.afilias-nst.org. 172800 IN AAAA 2001:500:4a::1 c0.asia.afilias-nst.info. 172800 IN AAAA 2001:500:17::1 d0.asia.afilias-nst.asia. 172800 IN AAAA 2001:500:18::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone asia

asia

	Checking DS between . and asia
	Query to f.root-servers.net for asia/DS
	Received 368 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (368 octets) ;; HEADER SECTION ;; id = 23060 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; asia. IN DS ;; ANSWER SECTION (2 records) asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c ) asia. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . iC+3nbeH07+C4CeMpFIdHqrKymw/ga5lWAoEb4fQCTf81JWWrTWuyeWtnRI3L03GHIVk0oQQg7lU +PqpBiajYSbVeer5IgKWC4xAqNwJFm3w4tR22W++0iAdwC8mKkhhd6c1HJMgQS8V09RPT/qV/P8A t9+obYXduoGy5LhsT6d7/H6y7W1N+CXfFwZG05PnOlkiTk91vEdRI+v+5ccdCRlHF0WJ66isboz0 NvBx6oNYnqYPXBwd+f9iR//w7wLH+hCNZkC33rolm/jzw+kujeMMgAn1xrTnzBvpPcNdJsgmDhfy rGeBsiTf0pXwMWOaDZhkBWgtyQf8xJlTMJexiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for asia in the . zone
	DS=23407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`asia. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . iC+3nbeH07+C4CeMpFIdHqrKymw/ga5lWAoEb4fQCTf81JWWrTWuyeWtnRI3L03GHIVk0oQQg7lU +PqpBiajYSbVeer5IgKWC4xAqNwJFm3w4tR22W++0iAdwC8mKkhhd6c1HJMgQS8V09RPT/qV/P8A t9+obYXduoGy5LhsT6d7/H6y7W1N+CXfFwZG05PnOlkiTk91vEdRI+v+5ccdCRlHF0WJ66isboz0 NvBx6oNYnqYPXBwd+f9iR//w7wLH+hCNZkC33rolm/jzw+kujeMMgAn1xrTnzBvpPcNdJsgmDhfy rGeBsiTf0pXwMWOaDZhkBWgtyQf8xJlTMJexiQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=23407/SHA-256 is now in the chain-of-trust
	`asia. 86400 IN DS ( 23407 8 2 0f51a4e5ef96b66c2078f7735b41860c83da0746ddda1a1b2b893ab056b3058c )`
	Query to b2.asia.afilias-nst.org for asia/DNSKEY
	Received 897 bytes from 199.249.122.1
	;; Response received from 199.249.122.1 (897 octets) ;; HEADER SECTION ;; id = 44033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; asia. IN DNSKEY ;; ANSWER SECTION (4 records) asia. 3600 IN DNSKEY ( 256 3 8 AwEAAcfbR2nHhscylnz6lV/EQseh/+Rl8cJkJoU6rpSde+fY/h++yjE8eNiBFU/MNo3A4RFdRWsU wrdbrIlpw/FTHq6W2rE2hIQ9/O/hagKIollM56MvElalXSXLmLNMabBkUtDq/t8DzVTbMK6gm9H+ 0oAe8PGDCCMz/P9FiIfelsmb ) ; Key ID = 24381 asia. 3600 IN DNSKEY ( 257 3 8 AwEAAdJAKRWpCvzHLNVQ9K+n6c2QLPGSbm7CHYfu1jMMSZI0K6CYifkdqREAUcrzK0KmrUs83mBQ 5eSsWfoFgoTq89YpBAfqpYFPz7+NAgbhpfpBMy7GavHwbKPZWJiin/lrP/jn3fRJp1yRxxhVFUQl uNZEAuP6+FswdQJyk9qmKoBP/dSwDinVdjT6DFcfbvs/Ioq0cSUZCzGEhkkLH2kRw44Qjrht6ZBS /1XocR+SF3gJzsqiuPvmtM2UGCIwjG+XmxlU5j/DpJaFwhlDOlr1ilv6vws94RyyJNZnfZV/Ky2B HUCam4pKsNR3IO7tniGc3xV53cBCH9nEFSbfFZ9CO0c= ) ; Key ID = 23407 asia. 3600 IN DNSKEY ( 256 3 8 AwEAAdL3Is7sZEHlsFCHMfaePRHE3UEFqGD3tQarWXI/KLx3vn2f+58pI6P3MJTq3YkwHKTOW8ac bxOvw0Q400gJ68cYx3yqraYMyRrluWr836lGu9xJNNR0w7z/y3V3zmq7dt5yT0ZgSsMXfddKZoro v2V1r7P81V7z0wvBet4N/qNR ) ; Key ID = 10461 asia. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231022153242 20231001143242 23407 asia. Cj+gmsDRQT+LkqLv0eJR7+QEpYyDJK7m5z+uOBj7s3vCITp1aj+3u/B3R+yNhAFa4xYNFTGUF9h/ W+2z6DGzH8IiICu1kTYEZ449B3vSSaGnrVDABbcbuN0MoD/XEQRPMtbz3JfUA7DAZ/4YbmBKc9Qm eZcju3ogdxM/iTjm2Ia7p9KJMgodY25PKeoB/uPV0cRYjpjf3a9CC+B2hh9TYd2XPbVg0G0mIp8c YlJEwfSGJMzthJ4LOz105CAR8N65WiN3By9qQJ8Iw3VaXAOOP7QwyXvqYKr8vRS9vl7K7OMZpU40 0wV0sVuyKykaByCrLU0pWkOx2hfGTEnbRowFkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for asia
	`asia. 3600 IN DNSKEY ( 256 3 8 AwEAAcfbR2nHhscylnz6lV/EQseh/+Rl8cJkJoU6rpSde+fY/h++yjE8eNiBFU/MNo3A4RFdRWsU wrdbrIlpw/FTHq6W2rE2hIQ9/O/hagKIollM56MvElalXSXLmLNMabBkUtDq/t8DzVTbMK6gm9H+ 0oAe8PGDCCMz/P9FiIfelsmb ) ; Key ID = 24381`
	`asia. 3600 IN DNSKEY ( 257 3 8 AwEAAdJAKRWpCvzHLNVQ9K+n6c2QLPGSbm7CHYfu1jMMSZI0K6CYifkdqREAUcrzK0KmrUs83mBQ 5eSsWfoFgoTq89YpBAfqpYFPz7+NAgbhpfpBMy7GavHwbKPZWJiin/lrP/jn3fRJp1yRxxhVFUQl uNZEAuP6+FswdQJyk9qmKoBP/dSwDinVdjT6DFcfbvs/Ioq0cSUZCzGEhkkLH2kRw44Qjrht6ZBS /1XocR+SF3gJzsqiuPvmtM2UGCIwjG+XmxlU5j/DpJaFwhlDOlr1ilv6vws94RyyJNZnfZV/Ky2B HUCam4pKsNR3IO7tniGc3xV53cBCH9nEFSbfFZ9CO0c= ) ; Key ID = 23407`
	`asia. 3600 IN DNSKEY ( 256 3 8 AwEAAdL3Is7sZEHlsFCHMfaePRHE3UEFqGD3tQarWXI/KLx3vn2f+58pI6P3MJTq3YkwHKTOW8ac bxOvw0Q400gJ68cYx3yqraYMyRrluWr836lGu9xJNNR0w7z/y3V3zmq7dt5yT0ZgSsMXfddKZoro v2V1r7P81V7z0wvBet4N/qNR ) ; Key ID = 10461`
	DNSKEY=23407/SEP is now in the chain-of-trust
	DS=23407/SHA-256 verifies DNSKEY=23407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`asia. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231022153242 20231001143242 23407 asia. Cj+gmsDRQT+LkqLv0eJR7+QEpYyDJK7m5z+uOBj7s3vCITp1aj+3u/B3R+yNhAFa4xYNFTGUF9h/ W+2z6DGzH8IiICu1kTYEZ449B3vSSaGnrVDABbcbuN0MoD/XEQRPMtbz3JfUA7DAZ/4YbmBKc9Qm eZcju3ogdxM/iTjm2Ia7p9KJMgodY25PKeoB/uPV0cRYjpjf3a9CC+B2hh9TYd2XPbVg0G0mIp8c YlJEwfSGJMzthJ4LOz105CAR8N65WiN3By9qQJ8Iw3VaXAOOP7QwyXvqYKr8vRS9vl7K7OMZpU40 0wV0sVuyKykaByCrLU0pWkOx2hfGTEnbRowFkw== )`
	RRSIG=23407 and DNSKEY=23407/SEP verifies the DNSKEY RRset
	DNSKEY=24381 is now in the chain-of-trust
	DNSKEY=10461 is now in the chain-of-trust
	Query to a2.asia.afilias-nst.info for cyberbits.asia/A
	Received 311 bytes from 199.249.114.1
	;; Response received from 199.249.114.1 (311 octets) ;; HEADER SECTION ;; id = 46958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberbits.asia. 3600 IN NS doug.ns.cloudflare.com. cyberbits.asia. 3600 IN NS piper.ns.cloudflare.com. cyberbits.asia. 3600 IN DS ( 2371 13 2 8e1b8affb08a88a2604a215bfc6a329bd48fb2eb1b7523a7f77d51c4f2b6d49a ) cyberbits.asia. 3600 IN RRSIG ( DS 8 2 3600 20231022153242 20231001143242 24381 asia. ovSfLgLCTstur7vGBrtpHJedNPt1m7ZWPlimV5BOw2WmBAe829lhHLgb1G4PRw6KgpMcvAH100gN 6bSUnq03L5V6c+P4lqW55G6IPeVCP0Jn80pE4aLgDkqf2FG1Qxesr9u8aOamOqT3tPo3clmROGPa 10+Q4GuDQKG2Z/1ZdIc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a0.asia.afilias-nst.info for cyberbits.asia/DNSKEY
	Received 311 bytes from 199.19.55.1
	;; Response received from 199.19.55.1 (311 octets) ;; HEADER SECTION ;; id = 62933 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberbits.asia. 3600 IN NS piper.ns.cloudflare.com. cyberbits.asia. 3600 IN NS doug.ns.cloudflare.com. cyberbits.asia. 3600 IN DS ( 2371 13 2 8e1b8affb08a88a2604a215bfc6a329bd48fb2eb1b7523a7f77d51c4f2b6d49a ) cyberbits.asia. 3600 IN RRSIG ( DS 8 2 3600 20231022153242 20231001143242 24381 asia. ovSfLgLCTstur7vGBrtpHJedNPt1m7ZWPlimV5BOw2WmBAe829lhHLgb1G4PRw6KgpMcvAH100gN 6bSUnq03L5V6c+P4lqW55G6IPeVCP0Jn80pE4aLgDkqf2FG1Qxesr9u8aOamOqT3tPo3clmROGPa 10+Q4GuDQKG2Z/1ZdIc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cyberbits.asia

cyberbits.asia

	Checking DS between asia and cyberbits.asia
	Query to b2.asia.afilias-nst.org for cyberbits.asia/DS
	Received 255 bytes from 199.249.122.1
	;; Response received from 199.249.122.1 (255 octets) ;; HEADER SECTION ;; id = 24621 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN DS ;; ANSWER SECTION (2 records) cyberbits.asia. 3600 IN DS ( 2371 13 2 8e1b8affb08a88a2604a215bfc6a329bd48fb2eb1b7523a7f77d51c4f2b6d49a ) cyberbits.asia. 3600 IN RRSIG ( DS 8 2 3600 20231022153242 20231001143242 24381 asia. ovSfLgLCTstur7vGBrtpHJedNPt1m7ZWPlimV5BOw2WmBAe829lhHLgb1G4PRw6KgpMcvAH100gN 6bSUnq03L5V6c+P4lqW55G6IPeVCP0Jn80pE4aLgDkqf2FG1Qxesr9u8aOamOqT3tPo3clmROGPa 10+Q4GuDQKG2Z/1ZdIc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cyberbits.asia in the asia zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cyberbits.asia. 3600 IN RRSIG ( DS 8 2 3600 20231022153242 20231001143242 24381 asia. ovSfLgLCTstur7vGBrtpHJedNPt1m7ZWPlimV5BOw2WmBAe829lhHLgb1G4PRw6KgpMcvAH100gN 6bSUnq03L5V6c+P4lqW55G6IPeVCP0Jn80pE4aLgDkqf2FG1Qxesr9u8aOamOqT3tPo3clmROGPa 10+Q4GuDQKG2Z/1ZdIc= )`
	RRSIG=24381 and DNSKEY=24381 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`cyberbits.asia. 3600 IN DS ( 2371 13 2 8e1b8affb08a88a2604a215bfc6a329bd48fb2eb1b7523a7f77d51c4f2b6d49a )`
	Query to doug.ns.cloudflare.com for cyberbits.asia/DNSKEY
	Received 313 bytes from 172.64.33.159
	;; Response received from 172.64.33.159 (313 octets) ;; HEADER SECTION ;; id = 46937 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN DNSKEY ;; ANSWER SECTION (3 records) cyberbits.asia. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 cyberbits.asia. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 cyberbits.asia. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231112111729 20230912111729 2371 cyberbits.asia. NVI+xS8gajnrBQvLG1e0a/S5Pqldu3ZOsAMg79yQV2U7//vxQk6WfI4nEVDN8NtnbXFSlI4f2p21 Y7lOPhCfbQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cyberbits.asia
	`cyberbits.asia. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`cyberbits.asia. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cyberbits.asia. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231112111729 20230912111729 2371 cyberbits.asia. NVI+xS8gajnrBQvLG1e0a/S5Pqldu3ZOsAMg79yQV2U7//vxQk6WfI4nEVDN8NtnbXFSlI4f2p21 Y7lOPhCfbQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to doug.ns.cloudflare.com for cyberbits.asia/A
	Received 185 bytes from 172.64.33.159
	;; Response received from 172.64.33.159 (185 octets) ;; HEADER SECTION ;; id = 28281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (3 records) cyberbits.asia. 300 IN A 104.21.28.51 cyberbits.asia. 300 IN A 172.67.144.65 cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. svWIWdU32+cKCoAaOl/3MU5ptz3j2Chq6vPR5jKBy7Jg/ByRCDpPjxsn5AYU1qHpMweOjnb7hsF5 rhvuzb2eNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	doug.ns.cloudflare.com is authoritative for cyberbits.asia
	Found RRSIG signed by cyberbits.asia zone
	Query to piper.ns.cloudflare.com for cyberbits.asia/SOA
	Received 215 bytes from 108.162.194.35
	;; Response received from 108.162.194.35 (215 octets) ;; HEADER SECTION ;; id = 35512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN SOA ;; ANSWER SECTION (2 records) cyberbits.asia. 1800 IN SOA ( doug.ns.cloudflare.com. dns.cloudflare.com. 2321465519 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) cyberbits.asia. 1800 IN RRSIG ( SOA 13 2 1800 20231003210908 20231001190908 34505 cyberbits.asia. jbPTjJTBdPCJQ9ef3qfrAg+AB+XudNUSILz6YPyd0tM7kgg3+2oaH7jIIfJ3o9qfoAcxYwtXa0dK yUtrv6KArA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to doug.ns.cloudflare.com for cyberbits.asia/A
	Received 185 bytes from 173.245.59.159
	;; Response received from 173.245.59.159 (185 octets) ;; HEADER SECTION ;; id = 23302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (3 records) cyberbits.asia. 300 IN A 172.67.144.65 cyberbits.asia. 300 IN A 104.21.28.51 cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. 7nId9zI1/DzQioH9jQKlAOldFdxNn4UlUKJGvnUQIoCJi0FL0Ky8O1NWmcg7Lc0qIAYBtcSYMpQq FDqHwR0FxQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cyberbits.asia A RR has value 172.67.144.65
	cyberbits.asia A RR has value 104.21.28.51
	Found 1 RRSIGs over A RRset
	`cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. 7nId9zI1/DzQioH9jQKlAOldFdxNn4UlUKJGvnUQIoCJi0FL0Ky8O1NWmcg7Lc0qIAYBtcSYMpQq FDqHwR0FxQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

cyberbits.asia

	Query to piper.ns.cloudflare.com for cyberbits.asia/A
	Received 185 bytes from 162.159.38.35
	;; Response received from 162.159.38.35 (185 octets) ;; HEADER SECTION ;; id = 47297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (3 records) cyberbits.asia. 300 IN A 104.21.28.51 cyberbits.asia. 300 IN A 172.67.144.65 cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. epAwnrgx4xTAThwgx20IGNJESMvLhf9zLNkRmLr2U7gyUSAduV7ufZT68GdkrqnF9EDgIeBLhU3D l/Vp6VMtpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	piper.ns.cloudflare.com is authoritative for cyberbits.asia
	Found RRSIG signed by cyberbits.asia zone
	Query to piper.ns.cloudflare.com for cyberbits.asia/A
	Received 185 bytes from 172.64.34.35
	;; Response received from 172.64.34.35 (185 octets) ;; HEADER SECTION ;; id = 29175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.asia. IN A ;; ANSWER SECTION (3 records) cyberbits.asia. 300 IN A 104.21.28.51 cyberbits.asia. 300 IN A 172.67.144.65 cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. HLe2h/HIt0fEdTPTR17INLd+JTvo+o6Eay9+EPV73DGWv8xgxd+/pg2wonW9LcV2WKOF9ORLGFWP zVHkm813ug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cyberbits.asia A RR has value 104.21.28.51
	cyberbits.asia A RR has value 172.67.144.65
	Found 1 RRSIGs over A RRset
	`cyberbits.asia. 300 IN RRSIG ( A 13 2 300 20231003210908 20231001190908 34505 cyberbits.asia. HLe2h/HIt0fEdTPTR17INLd+JTvo+o6Eay9+EPV73DGWv8xgxd+/pg2wonW9LcV2WKOF9ORLGFWP zVHkm813ug== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cyberbits.asia at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: