DNSSEC Analyzer - do.havedane.net

Domain Name:

Time: 2022-08-08 23:01:39 UTC, NTP stratum 16

Analyzing DNSSEC problems for do.havedane.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 31712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to m.root-servers.net for do.havedane.net/A
	Received 1178 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1178 octets) ;; HEADER SECTION ;; id = 39939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . dH0gFTzlH7jYJiGFFMGmIKOBqPv6B2g47P+LQMdxSMAIqB3RQUL4Nt2ZpU0F61gV1vO3aUqvpOgq OvJcrk5vjrLrLFu6pGER8mQgYIkyj8QGf+3IkYADtis0oxso1rTkbF2TnLkmVW7vzSA4hSfJtTWX 8gxgtahecMG+hhmckzSla8BanDEz5retHwr0LOYCuq3cMeEUTpqKceAw1d+dSq+O4oRjnhqvDol4 eGomfpgr4yel0qSR3QUdMjdKKNm/i6/UkO2C4fq9knwBqAVVYY0N/MsbdDk5iAYyv2Kq1V4YvL3N oQkK5VEcyJoJzou1MJyXaBJQZ3JvHJpGl7V7HA== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (1160 octets) ;; HEADER SECTION ;; id = 65513 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . dH0gFTzlH7jYJiGFFMGmIKOBqPv6B2g47P+LQMdxSMAIqB3RQUL4Nt2ZpU0F61gV1vO3aUqvpOgq OvJcrk5vjrLrLFu6pGER8mQgYIkyj8QGf+3IkYADtis0oxso1rTkbF2TnLkmVW7vzSA4hSfJtTWX 8gxgtahecMG+hhmckzSla8BanDEz5retHwr0LOYCuq3cMeEUTpqKceAw1d+dSq+O4oRjnhqvDol4 eGomfpgr4yel0qSR3QUdMjdKKNm/i6/UkO2C4fq9knwBqAVVYY0N/MsbdDk5iAYyv2Kq1V4YvL3N oQkK5VEcyJoJzou1MJyXaBJQZ3JvHJpGl7V7HA== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 1437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . dH0gFTzlH7jYJiGFFMGmIKOBqPv6B2g47P+LQMdxSMAIqB3RQUL4Nt2ZpU0F61gV1vO3aUqvpOgq OvJcrk5vjrLrLFu6pGER8mQgYIkyj8QGf+3IkYADtis0oxso1rTkbF2TnLkmVW7vzSA4hSfJtTWX 8gxgtahecMG+hhmckzSla8BanDEz5retHwr0LOYCuq3cMeEUTpqKceAw1d+dSq+O4oRjnhqvDol4 eGomfpgr4yel0qSR3QUdMjdKKNm/i6/UkO2C4fq9knwBqAVVYY0N/MsbdDk5iAYyv2Kq1V4YvL3N oQkK5VEcyJoJzou1MJyXaBJQZ3JvHJpGl7V7HA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . dH0gFTzlH7jYJiGFFMGmIKOBqPv6B2g47P+LQMdxSMAIqB3RQUL4Nt2ZpU0F61gV1vO3aUqvpOgq OvJcrk5vjrLrLFu6pGER8mQgYIkyj8QGf+3IkYADtis0oxso1rTkbF2TnLkmVW7vzSA4hSfJtTWX 8gxgtahecMG+hhmckzSla8BanDEz5retHwr0LOYCuq3cMeEUTpqKceAw1d+dSq+O4oRjnhqvDol4 eGomfpgr4yel0qSR3QUdMjdKKNm/i6/UkO2C4fq9knwBqAVVYY0N/MsbdDk5iAYyv2Kq1V4YvL3N oQkK5VEcyJoJzou1MJyXaBJQZ3JvHJpGl7V7HA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to f.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.35.51.30
	;; Response received from 192.35.51.30 (775 octets) ;; HEADER SECTION ;; id = 21847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPuuUVTSKJQoAxi044ExZl7F8F4r9HWKE5hisOw5UQcXEF65G2sVNqf2G3EVz5qJ9kLnpyBys5Y bbSG3tnyaLqJirtPLWLA0zqcgF05AdJtwlzoIdsVG6mhcB0n9mQ2N9Zs3McSSKzIrf0CzRAzEXVp RU3NiRWIf9yDC085RQyHsNODiso7QAGjKMDJQOTs4nHfxuIbCa1AbyFjpdzieF9v ) ; Key ID = 4403 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220817162830 20220802162330 35886 net. C41nQV4vp/5C/hgBldDhxq72T7swlsnO/J0jVI8Gwwwg9YvKrOVmyrNo3wC9kABCcGxQlSPNxjMW RmY+CyMdADw4anFC7Mnk1OXv4Fzg3jqhz8VxPbHMS+s0RJobL3ZyeVOozZb+9Ml+wGftjspc8blV A0hocQ3sO1nCMG7tMKWgZVi5MbbesUtZ2Q5uNLtVJ++kJaDWlXX26lgNbP6uUJI1ggBApybIhKom JafWehExhktN3qVYrUszGbkfdCOXdSsMuPN+FFy+slBa+7E+W9axV0+O74GyiomBFnqHIYm4f2bR s6Z5EC9nTL7cql1leptXtpt9bZnCUvV8TB6EzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPuuUVTSKJQoAxi044ExZl7F8F4r9HWKE5hisOw5UQcXEF65G2sVNqf2G3EVz5qJ9kLnpyBys5Y bbSG3tnyaLqJirtPLWLA0zqcgF05AdJtwlzoIdsVG6mhcB0n9mQ2N9Zs3McSSKzIrf0CzRAzEXVp RU3NiRWIf9yDC085RQyHsNODiso7QAGjKMDJQOTs4nHfxuIbCa1AbyFjpdzieF9v ) ; Key ID = 4403`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220817162830 20220802162330 35886 net. C41nQV4vp/5C/hgBldDhxq72T7swlsnO/J0jVI8Gwwwg9YvKrOVmyrNo3wC9kABCcGxQlSPNxjMW RmY+CyMdADw4anFC7Mnk1OXv4Fzg3jqhz8VxPbHMS+s0RJobL3ZyeVOozZb+9Ml+wGftjspc8blV A0hocQ3sO1nCMG7tMKWgZVi5MbbesUtZ2Q5uNLtVJ++kJaDWlXX26lgNbP6uUJI1ggBApybIhKom JafWehExhktN3qVYrUszGbkfdCOXdSsMuPN+FFy+slBa+7E+W9axV0+O74GyiomBFnqHIYm4f2bR s6Z5EC9nTL7cql1leptXtpt9bZnCUvV8TB6EzQ== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=4403 is now in the chain-of-trust
	Query to d.gtld-servers.net for do.havedane.net/A
	Received 385 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (385 octets) ;; HEADER SECTION ;; id = 45966 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) havedane.net. 172800 IN NS ns091.auroradns.eu. havedane.net. 172800 IN NS ns092.auroradns.nl. havedane.net. 172800 IN NS ns093.auroradns.info. havedane.net. 86400 IN DS ( 62657 8 2 cd158d77ed1510586dd14f32b1e4eb41f556486674864f091f78efc90a43c105 ) havedane.net. 86400 IN RRSIG ( DS 8 2 86400 20220815060038 20220808045038 4403 net. oMdmPSkY7K7WCHUPvLFgp5c2cnc7HMnVY5oOlVDR8R6GrVj/Vqjy0JGKsvNotPatvT8owD4MSxE8 9TdiS5JKeilWgUxMEY5n84PB8RLF8eFflVL9ACd2MUx2KQ69cMIfpUxa5vnuA97uJVDEclMg9CSu iD75B0wr6F8mOsx/OAoY4Lp9SRLhIaFxN5zwuSfSCmE9neSyDXPMt2f74csWiA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.gtld-servers.net for havedane.net/DNSKEY
	Received 382 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (382 octets) ;; HEADER SECTION ;; id = 15412 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; havedane.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) havedane.net. 172800 IN NS ns091.auroradns.eu. havedane.net. 172800 IN NS ns092.auroradns.nl. havedane.net. 172800 IN NS ns093.auroradns.info. havedane.net. 86400 IN DS ( 62657 8 2 cd158d77ed1510586dd14f32b1e4eb41f556486674864f091f78efc90a43c105 ) havedane.net. 86400 IN RRSIG ( DS 8 2 86400 20220815060038 20220808045038 4403 net. oMdmPSkY7K7WCHUPvLFgp5c2cnc7HMnVY5oOlVDR8R6GrVj/Vqjy0JGKsvNotPatvT8owD4MSxE8 9TdiS5JKeilWgUxMEY5n84PB8RLF8eFflVL9ACd2MUx2KQ69cMIfpUxa5vnuA97uJVDEclMg9CSu iD75B0wr6F8mOsx/OAoY4Lp9SRLhIaFxN5zwuSfSCmE9neSyDXPMt2f74csWiA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone havedane.net

havedane.net

	Checking DS between net and havedane.net
	Query to d.gtld-servers.net for havedane.net/DS
	Received 1200 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (1200 octets) ;; HEADER SECTION ;; id = 52158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 24 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; havedane.net. IN DS ;; ANSWER SECTION (2 records) havedane.net. 86400 IN DS ( 62657 8 2 cd158d77ed1510586dd14f32b1e4eb41f556486674864f091f78efc90a43c105 ) havedane.net. 86400 IN RRSIG ( DS 8 2 86400 20220815060038 20220808045038 4403 net. oMdmPSkY7K7WCHUPvLFgp5c2cnc7HMnVY5oOlVDR8R6GrVj/Vqjy0JGKsvNotPatvT8owD4MSxE8 9TdiS5JKeilWgUxMEY5n84PB8RLF8eFflVL9ACd2MUx2KQ69cMIfpUxa5vnuA97uJVDEclMg9CSu iD75B0wr6F8mOsx/OAoY4Lp9SRLhIaFxN5zwuSfSCmE9neSyDXPMt2f74csWiA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN RRSIG ( NS 8 1 172800 20220813060844 20220806045844 4403 net. yehtINIDELRWwlBEl83Hhtm+vrHa7+Xkc9yAUID2bAaYHIUqJG9P1CMm5FJANYZE+p0vdlUQ7FCD CHROcz9rPwlXYsgK1YF/Kv0g0C6jpW1RQf2cbER7/Lskj3yAJYYjwvCaER2H6y0gQE0oDsMRGWue /hNS9b4vhyv8oOOWtB/gGK4spQwoim7Ik0Wi2nYQDEL6+S5N/UNNF4BQPnwyVQ== ) ;; ADDITIONAL SECTION (24 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for havedane.net in the net zone
	DS=62657/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`havedane.net. 86400 IN RRSIG ( DS 8 2 86400 20220815060038 20220808045038 4403 net. oMdmPSkY7K7WCHUPvLFgp5c2cnc7HMnVY5oOlVDR8R6GrVj/Vqjy0JGKsvNotPatvT8owD4MSxE8 9TdiS5JKeilWgUxMEY5n84PB8RLF8eFflVL9ACd2MUx2KQ69cMIfpUxa5vnuA97uJVDEclMg9CSu iD75B0wr6F8mOsx/OAoY4Lp9SRLhIaFxN5zwuSfSCmE9neSyDXPMt2f74csWiA== )`
	RRSIG=4403 and DNSKEY=4403 verifies the DS RRset
	DS=62657/SHA-256 is now in the chain-of-trust
	`havedane.net. 86400 IN DS ( 62657 8 2 cd158d77ed1510586dd14f32b1e4eb41f556486674864f091f78efc90a43c105 )`
	Query to ns092.auroradns.nl for havedane.net/DNSKEY
	Received 765 bytes from 185.103.243.231
	;; Response received from 185.103.243.231 (765 octets) ;; HEADER SECTION ;; id = 35147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; havedane.net. IN DNSKEY ;; ANSWER SECTION (3 records) havedane.net. 300 IN RRSIG ( DNSKEY 8 2 300 20220818000000 20220728000000 62657 havedane.net. PJbahgafGYcjP+UTDKt//kLAFeM8vvKU0wm51Me4CUfbVm/IgWnvzydBITBIRzgikRHRs8aXawNW Gkd1TbJY38xHyD1ub4/NjYq1yD+FszZhgAEJKP8OxNtkyy2ojL6hTKyX9neh3zJErLL51GyHggBr 5lSX2kbgKOEs90a1j432SeVfNzry8f3Bz9Arfn+J9sTYWDOcbM6lqgJaPhq2nHBQ52LNCayqWUS/ yLKhH3kCaK8p5v3YpK7sa7I2gEye3QWXwfa12qKqBdNt+ybmmOjzU1EiFGyss4/IrQu8SgofKlCv sj/anD99HlespL/xwLKT4jVJZrGQGWJlq7wy7A== ) havedane.net. 300 IN DNSKEY ( 256 3 8 AwEAAb0fvJnHAFwEvSsc5BoYvZD4mu2FGe9mlg5YyNc3El6RKmlH3DNzeRncWUAeVMkWRzZCLrGL BaILqmwqEFlHNCWtQX4HSO5iReW6TyI9vxYigxhHdwKsi0lVgthlGdiSCbTZR70Hk+haqxN0p+A9 BxMPTIqkecyw1M27sRr7lB8V ) ; Key ID = 42609 havedane.net. 300 IN DNSKEY ( 257 3 8 AwEAAa18KFlHLtPzBRaRHLlrhK5oLSgwh7Mjesp6lqNhBgYtBsBo2+nIaWCtExQhE08xhU8HDpMo r0Inn+lGUgS+U9//AZnwckFkJELVFvT26YRbLmuWDbHo34TtF83vu0P8GqQVJi7tr2KqUFuKx6mL kGmfIkWJQfZARNKW8rsNMYUWdx88bMgWryGuoTaY7Gx5vg+kK42WTi/R9P2xIdNxpOhFlYDBbaLa l3+xaEovS9ns8zrlJRbL8MtpcwpJuY9ae12wxjqnj5H+x7ETwrjsrYfFO43s87xqiH+zgZcIHrSO o+lTYUUiL4kqvmNFD6s1ECHmZmSvBLmgd/hjRtZWbBc= ) ; Key ID = 62657 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for havedane.net
	`havedane.net. 300 IN DNSKEY ( 256 3 8 AwEAAb0fvJnHAFwEvSsc5BoYvZD4mu2FGe9mlg5YyNc3El6RKmlH3DNzeRncWUAeVMkWRzZCLrGL BaILqmwqEFlHNCWtQX4HSO5iReW6TyI9vxYigxhHdwKsi0lVgthlGdiSCbTZR70Hk+haqxN0p+A9 BxMPTIqkecyw1M27sRr7lB8V ) ; Key ID = 42609`
	`havedane.net. 300 IN DNSKEY ( 257 3 8 AwEAAa18KFlHLtPzBRaRHLlrhK5oLSgwh7Mjesp6lqNhBgYtBsBo2+nIaWCtExQhE08xhU8HDpMo r0Inn+lGUgS+U9//AZnwckFkJELVFvT26YRbLmuWDbHo34TtF83vu0P8GqQVJi7tr2KqUFuKx6mL kGmfIkWJQfZARNKW8rsNMYUWdx88bMgWryGuoTaY7Gx5vg+kK42WTi/R9P2xIdNxpOhFlYDBbaLa l3+xaEovS9ns8zrlJRbL8MtpcwpJuY9ae12wxjqnj5H+x7ETwrjsrYfFO43s87xqiH+zgZcIHrSO o+lTYUUiL4kqvmNFD6s1ECHmZmSvBLmgd/hjRtZWbBc= ) ; Key ID = 62657`
	DNSKEY=62657/SEP is now in the chain-of-trust
	DS=62657/SHA-256 verifies DNSKEY=62657/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`havedane.net. 300 IN RRSIG ( DNSKEY 8 2 300 20220818000000 20220728000000 62657 havedane.net. PJbahgafGYcjP+UTDKt//kLAFeM8vvKU0wm51Me4CUfbVm/IgWnvzydBITBIRzgikRHRs8aXawNW Gkd1TbJY38xHyD1ub4/NjYq1yD+FszZhgAEJKP8OxNtkyy2ojL6hTKyX9neh3zJErLL51GyHggBr 5lSX2kbgKOEs90a1j432SeVfNzry8f3Bz9Arfn+J9sTYWDOcbM6lqgJaPhq2nHBQ52LNCayqWUS/ yLKhH3kCaK8p5v3YpK7sa7I2gEye3QWXwfa12qKqBdNt+ybmmOjzU1EiFGyss4/IrQu8SgofKlCv sj/anD99HlespL/xwLKT4jVJZrGQGWJlq7wy7A== )`
	RRSIG=62657 and DNSKEY=62657/SEP verifies the DNSKEY RRset
	DNSKEY=42609 is now in the chain-of-trust
	Query to ns092.auroradns.nl for do.havedane.net/A
	Received 232 bytes from 185.103.243.231
	;; Response received from 185.103.243.231 (232 octets) ;; HEADER SECTION ;; id = 36776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) do.havedane.net. 3600 IN A 5.79.70.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	ns092.auroradns.nl is authoritative for do.havedane.net
	Query to ns092.auroradns.nl for do.havedane.net/DNSKEY
	Received 535 bytes from 185.103.243.231
	;; Response received from 185.103.243.231 (535 octets) ;; HEADER SECTION ;; id = 65518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) havedane.net. 300 IN SOA ( ns091.auroradns.eu. admin.auroradns.eu. 2019011601 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 300 ;minimum ) havedane.net. 300 IN RRSIG ( SOA 8 2 4800 20220818000000 20220728000000 42609 havedane.net. GuyHxxHzW+s87CAv615XTyIG4Pl5CA0sbQLN89Ff1jtLguGTeF0KZww2qhU8uBz1GkIi8w1yNOxq P/cUJ8QK8XAw1d+JzMU6Pj9fjN1IQE0KXkZQgJIhv1YXi8do5uTfx86EltVbP38JgTQxhSt/LeCp iICWKqwvJYHHLJezkjc= ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN NSEC3 ( 1 1 10 80052f2bc65f99c0 pjksjardocri81qr8nhtqhkrl8tgjnqm A MX AAAA RRSIG ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN RRSIG ( NSEC3 8 3 300 20220818000000 20220728000000 42609 havedane.net. ABynuxDvLLDmc/f4Pqums6Dm+2K3+7Atd9X3q+iOcA5arcNMpJ1H3olX2NyxB93CVmWHwVDGbRRJ 0XUOM2+wQKhe3WzgLwgwIzUM4rSX5VKSEQ2Eii48X/Nf6ykCBKKadomnkG5MDbqMdHHzmbkQRB1W KHEZ48gU3pw40SIECP4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found RRSIG signed by havedane.net zone
	Query to ns093.auroradns.info for havedane.net/SOA
	Received 273 bytes from 185.94.228.189
	;; Response received from 185.94.228.189 (273 octets) ;; HEADER SECTION ;; id = 53301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; havedane.net. IN SOA ;; ANSWER SECTION (2 records) havedane.net. 4800 IN SOA ( ns091.auroradns.eu. admin.auroradns.eu. 2019011601 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 300 ;minimum ) havedane.net. 4800 IN RRSIG ( SOA 8 2 4800 20220818000000 20220728000000 42609 havedane.net. GuyHxxHzW+s87CAv615XTyIG4Pl5CA0sbQLN89Ff1jtLguGTeF0KZww2qhU8uBz1GkIi8w1yNOxq P/cUJ8QK8XAw1d+JzMU6Pj9fjN1IQE0KXkZQgJIhv1YXi8do5uTfx86EltVbP38JgTQxhSt/LeCp iICWKqwvJYHHLJezkjc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns091.auroradns.eu for havedane.net/SOA
	Received 273 bytes from 185.95.31.179
	;; Response received from 185.95.31.179 (273 octets) ;; HEADER SECTION ;; id = 49083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; havedane.net. IN SOA ;; ANSWER SECTION (2 records) havedane.net. 4800 IN RRSIG ( SOA 8 2 4800 20220818000000 20220728000000 42609 havedane.net. GuyHxxHzW+s87CAv615XTyIG4Pl5CA0sbQLN89Ff1jtLguGTeF0KZww2qhU8uBz1GkIi8w1yNOxq P/cUJ8QK8XAw1d+JzMU6Pj9fjN1IQE0KXkZQgJIhv1YXi8do5uTfx86EltVbP38JgTQxhSt/LeCp iICWKqwvJYHHLJezkjc= ) havedane.net. 4800 IN SOA ( ns091.auroradns.eu. admin.auroradns.eu. 2019011601 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns092.auroradns.nl for do.havedane.net/A
	Received 232 bytes from 185.103.243.231
	;; Response received from 185.103.243.231 (232 octets) ;; HEADER SECTION ;; id = 53641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) do.havedane.net. 3600 IN A 5.79.70.105 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	do.havedane.net A RR has value 5.79.70.105
	Found 1 RRSIGs over A RRset
	`do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= )`
	RRSIG=42609 and DNSKEY=42609 verifies the A RRset

havedane.net

	Query to ns093.auroradns.info for do.havedane.net/A
	Received 232 bytes from 185.94.228.189
	;; Response received from 185.94.228.189 (232 octets) ;; HEADER SECTION ;; id = 10427 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN A 5.79.70.105 do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	ns093.auroradns.info is authoritative for do.havedane.net
	Query to ns093.auroradns.info for do.havedane.net/DNSKEY
	Received 535 bytes from 185.94.228.189
	;; Response received from 185.94.228.189 (535 octets) ;; HEADER SECTION ;; id = 31259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) havedane.net. 300 IN SOA ( ns091.auroradns.eu. admin.auroradns.eu. 2019011601 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 300 ;minimum ) havedane.net. 300 IN RRSIG ( SOA 8 2 4800 20220818000000 20220728000000 42609 havedane.net. GuyHxxHzW+s87CAv615XTyIG4Pl5CA0sbQLN89Ff1jtLguGTeF0KZww2qhU8uBz1GkIi8w1yNOxq P/cUJ8QK8XAw1d+JzMU6Pj9fjN1IQE0KXkZQgJIhv1YXi8do5uTfx86EltVbP38JgTQxhSt/LeCp iICWKqwvJYHHLJezkjc= ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN NSEC3 ( 1 1 10 80052f2bc65f99c0 pjksjardocri81qr8nhtqhkrl8tgjnqm A MX AAAA RRSIG ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN RRSIG ( NSEC3 8 3 300 20220818000000 20220728000000 42609 havedane.net. ABynuxDvLLDmc/f4Pqums6Dm+2K3+7Atd9X3q+iOcA5arcNMpJ1H3olX2NyxB93CVmWHwVDGbRRJ 0XUOM2+wQKhe3WzgLwgwIzUM4rSX5VKSEQ2Eii48X/Nf6ykCBKKadomnkG5MDbqMdHHzmbkQRB1W KHEZ48gU3pw40SIECP4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found RRSIG signed by havedane.net zone
	Query to ns093.auroradns.info for do.havedane.net/A
	Received 232 bytes from 185.94.228.189
	;; Response received from 185.94.228.189 (232 octets) ;; HEADER SECTION ;; id = 12569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN A 5.79.70.105 do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	do.havedane.net A RR has value 5.79.70.105
	Found 1 RRSIGs over A RRset
	`do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= )`
	RRSIG=42609 and DNSKEY=42609 verifies the A RRset

havedane.net

	Query to ns091.auroradns.eu for do.havedane.net/A
	Received 232 bytes from 185.95.31.179
	;; Response received from 185.95.31.179 (232 octets) ;; HEADER SECTION ;; id = 64225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN A 5.79.70.105 do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	ns091.auroradns.eu is authoritative for do.havedane.net
	Query to ns091.auroradns.eu for do.havedane.net/DNSKEY
	Received 535 bytes from 185.95.31.179
	;; Response received from 185.95.31.179 (535 octets) ;; HEADER SECTION ;; id = 12782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) havedane.net. 300 IN SOA ( ns091.auroradns.eu. admin.auroradns.eu. 2019011601 ;serial 86400 ;refresh 7200 ;retry 604800 ;expire 300 ;minimum ) havedane.net. 300 IN RRSIG ( SOA 8 2 4800 20220818000000 20220728000000 42609 havedane.net. GuyHxxHzW+s87CAv615XTyIG4Pl5CA0sbQLN89Ff1jtLguGTeF0KZww2qhU8uBz1GkIi8w1yNOxq P/cUJ8QK8XAw1d+JzMU6Pj9fjN1IQE0KXkZQgJIhv1YXi8do5uTfx86EltVbP38JgTQxhSt/LeCp iICWKqwvJYHHLJezkjc= ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN NSEC3 ( 1 1 10 80052f2bc65f99c0 pjksjardocri81qr8nhtqhkrl8tgjnqm A MX AAAA RRSIG ) pjksjardocri81qr8nhtqhkrl8tgjnql.havedane.net. 300 IN RRSIG ( NSEC3 8 3 300 20220818000000 20220728000000 42609 havedane.net. ABynuxDvLLDmc/f4Pqums6Dm+2K3+7Atd9X3q+iOcA5arcNMpJ1H3olX2NyxB93CVmWHwVDGbRRJ 0XUOM2+wQKhe3WzgLwgwIzUM4rSX5VKSEQ2Eii48X/Nf6ykCBKKadomnkG5MDbqMdHHzmbkQRB1W KHEZ48gU3pw40SIECP4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found RRSIG signed by havedane.net zone
	Query to ns091.auroradns.eu for do.havedane.net/A
	Received 232 bytes from 185.95.31.179
	;; Response received from 185.95.31.179 (232 octets) ;; HEADER SECTION ;; id = 54920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; do.havedane.net. IN A ;; ANSWER SECTION (2 records) do.havedane.net. 3600 IN A 5.79.70.105 do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	do.havedane.net A RR has value 5.79.70.105
	Found 1 RRSIGs over A RRset
	`do.havedane.net. 3600 IN RRSIG ( A 8 3 3600 20220818000000 20220728000000 42609 havedane.net. buO1yUlSA0MxKdgqH/GiFeJKa1ZP0aNGQpOlVw+CbYgBNJNfyylq31DiwI4RAjj0zYvsYyQMQ6rL +Ik5OLM8BA3k6+/gXgRryyAJ06MnTVGX/LdiO3t87iKX2rLjDavCBLI/s4bOoR/nOhIAxx65gFgk khf/P2d48qcp1L5Cj94= )`
	RRSIG=42609 and DNSKEY=42609 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test do.havedane.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: