DNSSEC Debugger - divablog.ro

Domain Name:

Time: 2025-01-15 09:16:21 UTC

Analyzing DNSSEC problems for divablog.ro

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 44240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250201000000 20250111000000 20326 . SpcnGEovWE8yDo63HScxdtFPdjxN6o7rJqYbv6nUbCtLWN7xuA0wMWvKxQN8+2TdFlc5wK5HPfeh sqAh9gbJOa73IolbkT2osEZDH2AHj2qGqoyj/cmgSpP+pAdUqjGx5y4nQDZR5lRHlj3l6A7xoZHd aBwJHtIcVRhLtBFdtlBgYmn7yxAjFJiI0x84g0WfNPengnAPIlaoWlroVo/JJDtPML0/3doZT9FJ lA5a1dbhc4mFy2cBeyjIOkLJq5HZMBGLYQpEr3jNQ4UApD3KXcjuTc9mi7STYJCadbZFaA1EZoAP rciR4p/M61APbaNuC/4Te3/CIFuQbJ7PSPvX9Q== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to b.root-servers.net for divablog.ro/A
	Received 765 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 765 octets ;; HEADER SECTION ;; id = 2783 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ro. 172800 IN NS dns-c.rotld.ro. ro. 172800 IN NS dns-at.rotld.ro. ro. 172800 IN NS dns-ro.denic.de. ro. 172800 IN NS primary.rotld.ro. ro. 172800 IN NS sec-dns-a.rotld.ro. ro. 172800 IN NS sec-dns-b.rotld.ro. ro. 86400 IN DS ( 61039 8 2 7c53f10e86835711c3cc6ba9632e4295a077e6a0a148059195371c3e5d07e10f ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UI74yEFJoLOTUJjErIIt4JQ30GLPmzS/OQPQgxh8vs2NTw7hT2A4MFajzkB1kbEqiGjMc4Ag+r4K na0U/t2jqP4El0Z0vOjdu5DDrP3NgI5Kk5TSC16OVzdELGSkis5sTHkdcijh807Rdzz+zTQ1QdTl jl9GwDMGIFq6Y/b5eJhNSrgxBq8jkvG7eaoxVxAVk7yfMVOQtqscOk0pyCwJOtjLGi7tWtnA10P2 S1QkCPJruqO9U8SS8w8idNGbn7ZouTAhQV5PRouvwUtbtWTDtQ38BZqPF2rDrWuiDacYcTEp9FLa itsdkF63BZ45Br6G/dD9MopFtlnN8T5tICpVcQ== ) ;; ADDITIONAL SECTION (12 records) dns-c.rotld.ro. 172800 IN A 194.0.11.113 dns-c.rotld.ro. 172800 IN AAAA 2001:678:e:113::53 dns-at.rotld.ro. 172800 IN A 78.104.145.6 dns-at.rotld.ro. 172800 IN AAAA 2001:628:453:bb::6 primary.rotld.ro. 172800 IN A 192.162.16.18 primary.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:18 sec-dns-a.rotld.ro. 172800 IN A 192.162.16.20 sec-dns-a.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:20 sec-dns-b.rotld.ro. 172800 IN A 193.230.31.230 sec-dns-b.rotld.ro. 172800 IN AAAA 2a03:5e80:0:5:193:230:31:230 dns-ro.denic.de. 172800 IN A 81.91.161.99 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for ro/DNSKEY
	Received 750 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 750 octets ;; HEADER SECTION ;; id = 37550 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 12 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ro. 172800 IN NS primary.rotld.ro. ro. 172800 IN NS dns-at.rotld.ro. ro. 172800 IN NS dns-c.rotld.ro. ro. 172800 IN NS dns-ro.denic.de. ro. 172800 IN NS sec-dns-b.rotld.ro. ro. 172800 IN NS sec-dns-a.rotld.ro. ro. 86400 IN DS ( 61039 8 2 7c53f10e86835711c3cc6ba9632e4295a077e6a0a148059195371c3e5d07e10f ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UI74yEFJoLOTUJjErIIt4JQ30GLPmzS/OQPQgxh8vs2NTw7hT2A4MFajzkB1kbEqiGjMc4Ag+r4K na0U/t2jqP4El0Z0vOjdu5DDrP3NgI5Kk5TSC16OVzdELGSkis5sTHkdcijh807Rdzz+zTQ1QdTl jl9GwDMGIFq6Y/b5eJhNSrgxBq8jkvG7eaoxVxAVk7yfMVOQtqscOk0pyCwJOtjLGi7tWtnA10P2 S1QkCPJruqO9U8SS8w8idNGbn7ZouTAhQV5PRouvwUtbtWTDtQ38BZqPF2rDrWuiDacYcTEp9FLa itsdkF63BZ45Br6G/dD9MopFtlnN8T5tICpVcQ== ) ;; ADDITIONAL SECTION (12 records) sec-dns-b.rotld.ro. 172800 IN A 193.230.31.230 sec-dns-a.rotld.ro. 172800 IN A 192.162.16.20 primary.rotld.ro. 172800 IN A 192.162.16.18 dns-ro.denic.de. 172800 IN A 81.91.161.99 dns-at.rotld.ro. 172800 IN A 78.104.145.6 dns-c.rotld.ro. 172800 IN A 194.0.11.113 sec-dns-b.rotld.ro. 172800 IN AAAA 2a03:5e80:0:5:193:230:31:230 sec-dns-a.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:20 primary.rotld.ro. 172800 IN AAAA 2a03:5e80:0:4:192:162:16:18 dns-at.rotld.ro. 172800 IN AAAA 2001:628:453:bb::6 dns-c.rotld.ro. 172800 IN AAAA 2001:678:e:113::53 ;; { "EDNS-VERSION": 0 }
	Found child zone ro

	Checking DS between . and ro
	Query to i.root-servers.net for ro/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 43250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DS ;; ANSWER SECTION (2 records) ro. 86400 IN DS ( 61039 8 2 7c53f10e86835711c3cc6ba9632e4295a077e6a0a148059195371c3e5d07e10f ) ro. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UI74yEFJoLOTUJjErIIt4JQ30GLPmzS/OQPQgxh8vs2NTw7hT2A4MFajzkB1kbEqiGjMc4Ag+r4K na0U/t2jqP4El0Z0vOjdu5DDrP3NgI5Kk5TSC16OVzdELGSkis5sTHkdcijh807Rdzz+zTQ1QdTl jl9GwDMGIFq6Y/b5eJhNSrgxBq8jkvG7eaoxVxAVk7yfMVOQtqscOk0pyCwJOtjLGi7tWtnA10P2 S1QkCPJruqO9U8SS8w8idNGbn7ZouTAhQV5PRouvwUtbtWTDtQ38BZqPF2rDrWuiDacYcTEp9FLa itsdkF63BZ45Br6G/dD9MopFtlnN8T5tICpVcQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ro in the . zone
	DS=61039/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ro. 86400 IN RRSIG ( DS 8 1 86400 20250128050000 20250115040000 26470 . UI74yEFJoLOTUJjErIIt4JQ30GLPmzS/OQPQgxh8vs2NTw7hT2A4MFajzkB1kbEqiGjMc4Ag+r4K na0U/t2jqP4El0Z0vOjdu5DDrP3NgI5Kk5TSC16OVzdELGSkis5sTHkdcijh807Rdzz+zTQ1QdTl jl9GwDMGIFq6Y/b5eJhNSrgxBq8jkvG7eaoxVxAVk7yfMVOQtqscOk0pyCwJOtjLGi7tWtnA10P2 S1QkCPJruqO9U8SS8w8idNGbn7ZouTAhQV5PRouvwUtbtWTDtQ38BZqPF2rDrWuiDacYcTEp9FLa itsdkF63BZ45Br6G/dD9MopFtlnN8T5tICpVcQ== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=61039/SHA-256 is now in the chain-of-trust
	`ro. 86400 IN DS ( 61039 8 2 7c53f10e86835711c3cc6ba9632e4295a077e6a0a148059195371c3e5d07e10f )`
	Query to dns-at.rotld.ro for ro/DNSKEY
	Received 1055 bytes from 78.104.145.6
	;; Response received from [78.104.145.6] 1055 octets ;; HEADER SECTION ;; id = 40417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ro. IN DNSKEY ;; ANSWER SECTION (5 records) ro. 86400 IN DNSKEY ( 257 3 8 AwEAAaDI/x+3JxAdq0NM3QiywJIeceQc8uvJq3xfztXpvkSxmNMCne1j7yrd59s9rbNKcl6oL/+I eUnYn3DAHJSFc0x+34evi5LYYL9eWhGQoOPALwnmNwfXC42YKERgCf27QzT/0l+fFnFb0qw2WDOo FgRZJxXPbcILhEeuR+ps7m3wPMWwKTKLPhB2p9TKvy4UKjb80tFVM+7jXGrjbqvMpOmn9q9adPhs LRlGldoyPaW08Y5sUnAdZqgmKtGVVkmFLYKJuPwCUSnVmlLLaLiT67UmSzhzH6Q2vjt5PixWM5eE 8iw3aeiv+lkjQ/ov+zXvrJMpDzI/aHXK5KIxiFsihjU= ) ; keytag 61039 ro. 86400 IN DNSKEY ( 256 3 8 AwEAAaBhy+C4bS/ZjNt7GQ6ODSQ6Km5trnMOeQP+b3DUTxtwZ4nJDOCDOjmduwF7J6Jw/gFGVCyX q/8ETjJ2Vr7RZB177Ck2cI3ZVrIlH/+YeU8EMb25QszjqDFrKtE/+88Ya01ySCWRfSeqt7+FSRt4 WYu6mLJlpt9IRX73Id1Nr7zP ) ; keytag 90 ro. 86400 IN DNSKEY ( 256 3 8 AwEAAderf7xtnAlY6HAKRvQ/wKHdq+M5eN0xsMmG847gh3hZeWhA6uXm59g0kpMZWg/tJz5so5/N KTN/ayLV2A3Q+9i97ufHG/ufgzmmoNCQ2C9LKqvNe7yqhj5w7ADUvz5OmfoTvT3oykweNM5U0cGC wN57hA/FxL+2iKfoXQcfCIZN ) ; keytag 8773 ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250210161049 20250111151049 8773 ro. NOQq2MHudyg6lbO3aZBDow3Dbjyk4xtS4pgpyc61KXDhu1rD3Ykiy3o9RUJrtG5N5lGyGwvPBo38 vycTy4sWDPxZxBhvbb+RzLn+WL8eT08Tv0RVah1iHDdBpPGEn0gl+h08eLupL9B8xMt6jMp8T1rE Ofi9COXDVArAN8XnAKo= ) ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250210161049 20250111151049 61039 ro. Iw3SFPIsfMJQd0vS7ypTwj7Th9W3LF1T5f5DrcyqoFq33GB5SCOEJ65HXr9Yv2ftND59VXagO2WT rXlCbLNoPxfqGnCBW30GZODSOGmLniX1lkHWAuc8k0OH8qSakXRaMnlRaE8lpBrYbv8cdFQwC8VY SnDK5tUtR1l6jN2MgisEAByCdxp1Xk4gvuLJSNZzwuSFY16NPilbP16Yc6vAR3Vk+8G0SXrJJ+Ll BfOBxn0/iuNpTJcvgPp40cCxQdxflI937pfGxgLj+MLmlUYeY8RjGroWnCcUzW0eIOtNpNJUC5HX GrZXb7URkb9d8W9KFlGfxoSTLAR56uWCheEXQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ro
	`ro. 86400 IN DNSKEY ( 257 3 8 AwEAAaDI/x+3JxAdq0NM3QiywJIeceQc8uvJq3xfztXpvkSxmNMCne1j7yrd59s9rbNKcl6oL/+I eUnYn3DAHJSFc0x+34evi5LYYL9eWhGQoOPALwnmNwfXC42YKERgCf27QzT/0l+fFnFb0qw2WDOo FgRZJxXPbcILhEeuR+ps7m3wPMWwKTKLPhB2p9TKvy4UKjb80tFVM+7jXGrjbqvMpOmn9q9adPhs LRlGldoyPaW08Y5sUnAdZqgmKtGVVkmFLYKJuPwCUSnVmlLLaLiT67UmSzhzH6Q2vjt5PixWM5eE 8iw3aeiv+lkjQ/ov+zXvrJMpDzI/aHXK5KIxiFsihjU= ) ; keytag 61039`
	`ro. 86400 IN DNSKEY ( 256 3 8 AwEAAaBhy+C4bS/ZjNt7GQ6ODSQ6Km5trnMOeQP+b3DUTxtwZ4nJDOCDOjmduwF7J6Jw/gFGVCyX q/8ETjJ2Vr7RZB177Ck2cI3ZVrIlH/+YeU8EMb25QszjqDFrKtE/+88Ya01ySCWRfSeqt7+FSRt4 WYu6mLJlpt9IRX73Id1Nr7zP ) ; keytag 90`
	`ro. 86400 IN DNSKEY ( 256 3 8 AwEAAderf7xtnAlY6HAKRvQ/wKHdq+M5eN0xsMmG847gh3hZeWhA6uXm59g0kpMZWg/tJz5so5/N KTN/ayLV2A3Q+9i97ufHG/ufgzmmoNCQ2C9LKqvNe7yqhj5w7ADUvz5OmfoTvT3oykweNM5U0cGC wN57hA/FxL+2iKfoXQcfCIZN ) ; keytag 8773`
	DNSKEY=61039/SEP is now in the chain-of-trust
	DS=61039/SHA-256 verifies DNSKEY=61039/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250210161049 20250111151049 8773 ro. NOQq2MHudyg6lbO3aZBDow3Dbjyk4xtS4pgpyc61KXDhu1rD3Ykiy3o9RUJrtG5N5lGyGwvPBo38 vycTy4sWDPxZxBhvbb+RzLn+WL8eT08Tv0RVah1iHDdBpPGEn0gl+h08eLupL9B8xMt6jMp8T1rE Ofi9COXDVArAN8XnAKo= )`
	`ro. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250210161049 20250111151049 61039 ro. Iw3SFPIsfMJQd0vS7ypTwj7Th9W3LF1T5f5DrcyqoFq33GB5SCOEJ65HXr9Yv2ftND59VXagO2WT rXlCbLNoPxfqGnCBW30GZODSOGmLniX1lkHWAuc8k0OH8qSakXRaMnlRaE8lpBrYbv8cdFQwC8VY SnDK5tUtR1l6jN2MgisEAByCdxp1Xk4gvuLJSNZzwuSFY16NPilbP16Yc6vAR3Vk+8G0SXrJJ+Ll BfOBxn0/iuNpTJcvgPp40cCxQdxflI937pfGxgLj+MLmlUYeY8RjGroWnCcUzW0eIOtNpNJUC5HX GrZXb7URkb9d8W9KFlGfxoSTLAR56uWCheEXQA== )`
	RRSIG=8773 and DNSKEY=8773 verifies the DNSKEY RRset
	RRSIG=61039 and DNSKEY=61039/SEP verifies the DNSKEY RRset
	DNSKEY=90 is now in the chain-of-trust
	DNSKEY=8773 is now in the chain-of-trust
	Query to dns-at.rotld.ro for divablog.ro/A
	Received 584 bytes from 78.104.145.6
	;; Response received from [78.104.145.6] 584 octets ;; HEADER SECTION ;; id = 28194 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) divablog.ro. 86400 IN NS nero.ns.cloudflare.com. divablog.ro. 86400 IN NS jo.ns.cloudflare.com. IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 iqfstgub6anvfqdfrdsg58jrr5m32itg NS SOA RRSIG DNSKEY NSEC3PARAM ) IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250123151230 20241224143609 90 ro. f/4DPl0AzLwlyGwBJWiNN0hOMM5Y4/6ygvYb8PitD36n3T0/kwLZfeOTC4SBo+Y4Z71v6zUySRvG 3R1lad4Jv+evShJR9v4kRF+zyDA2UQO6R8KFXTLlz7yVdZa+YnYd9ip0evy7/SLDPSa/57P/ARCV +1xHSUYVFIMi/TdD6fc= ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 1knrfedoi2j5rp676hkcsgkuc9mjilqv NS DS RRSIG ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250210170045 20250111164740 8773 ro. zGaN1/p9a1vsNbJmI3UDasTe2xgrxL0Cxs3asf/Nb0vFDACxhLDZzXLTa/ozWYzzHOkwSa3ZrztX BRuDT21QdNmoeMiVA8K1PLxi0EvqfyB1eoKWUMMWvDpPkeF22eE9O6xkH36mqEviUrvIe49CXDnc FKC2j1FZyZha7t5WlkQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to primary.rotld.ro for divablog.ro/DNSKEY
	Received 584 bytes from 192.162.16.18
	;; Response received from [192.162.16.18] 584 octets ;; HEADER SECTION ;; id = 17029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) divablog.ro. 86400 IN NS nero.ns.cloudflare.com. divablog.ro. 86400 IN NS jo.ns.cloudflare.com. IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 iqfstgub6anvfqdfrdsg58jrr5m32itg NS SOA RRSIG DNSKEY NSEC3PARAM ) IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250123151230 20241224143609 90 ro. f/4DPl0AzLwlyGwBJWiNN0hOMM5Y4/6ygvYb8PitD36n3T0/kwLZfeOTC4SBo+Y4Z71v6zUySRvG 3R1lad4Jv+evShJR9v4kRF+zyDA2UQO6R8KFXTLlz7yVdZa+YnYd9ip0evy7/SLDPSa/57P/ARCV +1xHSUYVFIMi/TdD6fc= ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 1knrfedoi2j5rp676hkcsgkuc9mjilqv NS DS RRSIG ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250210170045 20250111164740 8773 ro. zGaN1/p9a1vsNbJmI3UDasTe2xgrxL0Cxs3asf/Nb0vFDACxhLDZzXLTa/ozWYzzHOkwSa3ZrztX BRuDT21QdNmoeMiVA8K1PLxi0EvqfyB1eoKWUMMWvDpPkeF22eE9O6xkH36mqEviUrvIe49CXDnc FKC2j1FZyZha7t5WlkQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone divablog.ro

divablog.ro

	Checking DS between ro and divablog.ro
	Query to dns-ro.denic.de for divablog.ro/DS
	Received 756 bytes from 81.91.161.99
	;; Response received from [81.91.161.99] 756 octets ;; HEADER SECTION ;; id = 11321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 iqfstgub6anvfqdfrdsg58jrr5m32itg NS SOA RRSIG DNSKEY NSEC3PARAM ) IQ5GOB4M2AKCJD6R4DF69008C71280V6.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250123151230 20241224143609 90 ro. f/4DPl0AzLwlyGwBJWiNN0hOMM5Y4/6ygvYb8PitD36n3T0/kwLZfeOTC4SBo+Y4Z71v6zUySRvG 3R1lad4Jv+evShJR9v4kRF+zyDA2UQO6R8KFXTLlz7yVdZa+YnYd9ip0evy7/SLDPSa/57P/ARCV +1xHSUYVFIMi/TdD6fc= ) ro. 3600 IN SOA ( primary.rotld.ro. hostmaster.rotld.ro. 2017708669 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ro. 3600 IN RRSIG ( SOA 8 1 86400 20250214091603 20250115081603 8773 ro. GHTv6aS10yHOdWwjb9E6V4HkchK4V6p2oh/9/FnCQLz6EqkxsFKm0jVlBoSdiAtCis4/+QH0F0lq DVfk2cffQernkyZg3pWr8UX3hJR3+FvGS/y/Qf8dOcgE1hdFDoTIhoPpqX65lmP6fHo0pL4L6+So bQbIAAR7OCneOvtCyEM= ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN NSEC3 ( 1 1 10 b28c35e1 1knrfedoi2j5rp676hkcsgkuc9mjilqv NS DS RRSIG ) 1KLNA1VNF7NSOBGHOVGD94E8L7KES5L1.ro. 3600 IN RRSIG ( NSEC3 8 2 3600 20250210170045 20250111164740 8773 ro. zGaN1/p9a1vsNbJmI3UDasTe2xgrxL0Cxs3asf/Nb0vFDACxhLDZzXLTa/ozWYzzHOkwSa3ZrztX BRuDT21QdNmoeMiVA8K1PLxi0EvqfyB1eoKWUMMWvDpPkeF22eE9O6xkH36mqEviUrvIe49CXDnc FKC2j1FZyZha7t5WlkQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for divablog.ro in the ro zone
	Query to nero.ns.cloudflare.com for divablog.ro/DNSKEY
	Received 100 bytes from 108.162.195.28
	;; Response received from [108.162.195.28] 100 octets ;; HEADER SECTION ;; id = 22399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) divablog.ro. 1800 IN SOA ( jo.ns.cloudflare.com. dns.cloudflare.com. 2358536796 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to jo.ns.cloudflare.com for divablog.ro/A
	Received 72 bytes from 173.245.58.172
	;; Response received from [173.245.58.172] 72 octets ;; HEADER SECTION ;; id = 19946 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (2 records) divablog.ro. 300 IN A 104.21.22.144 divablog.ro. 300 IN A 172.67.205.81 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jo.ns.cloudflare.com is authoritative for divablog.ro
	Query to nero.ns.cloudflare.com for divablog.ro/SOA
	Received 100 bytes from 172.64.35.28
	;; Response received from [172.64.35.28] 100 octets ;; HEADER SECTION ;; id = 23919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN SOA ;; ANSWER SECTION (1 record) divablog.ro. 1800 IN SOA ( jo.ns.cloudflare.com. dns.cloudflare.com. 2358536796 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to jo.ns.cloudflare.com for divablog.ro/A
	Received 72 bytes from 173.245.58.172
	;; Response received from [173.245.58.172] 72 octets ;; HEADER SECTION ;; id = 21839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (2 records) divablog.ro. 300 IN A 172.67.205.81 divablog.ro. 300 IN A 104.21.22.144 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	divablog.ro A RR has value 172.67.205.81
	divablog.ro A RR has value 104.21.22.144
	No RRSIGs found

divablog.ro

	Query to nero.ns.cloudflare.com for divablog.ro/A
	Received 72 bytes from 162.159.44.28
	;; Response received from [162.159.44.28] 72 octets ;; HEADER SECTION ;; id = 58294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (2 records) divablog.ro. 300 IN A 172.67.205.81 divablog.ro. 300 IN A 104.21.22.144 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nero.ns.cloudflare.com is authoritative for divablog.ro
	Query to nero.ns.cloudflare.com for divablog.ro/A
	Received 72 bytes from 108.162.195.28
	;; Response received from [108.162.195.28] 72 octets ;; HEADER SECTION ;; id = 44789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; divablog.ro. IN A ;; ANSWER SECTION (2 records) divablog.ro. 300 IN A 104.21.22.144 divablog.ro. 300 IN A 172.67.205.81 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	divablog.ro A RR has value 104.21.22.144
	divablog.ro A RR has value 172.67.205.81
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test divablog.ro at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: