DNSSEC Debugger - facebook.de

Domain Name:

Time: 2024-05-14 19:24:55 UTC

Analyzing DNSSEC problems for facebook.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for facebook.de/A
	Received 745 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 745 octets ;; HEADER SECTION ;; id = 32769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240527170000 20240514160000 5613 . TvTOS+1S7eImzK4XiO/MuXuUfyb0thSlyMMa5qm79ARuXEkrHpv9+7sprfOgL6W4PN8TNOOHMHoP aSgL4lGlqskx0zfEIRtWqaXUsqe3eL2jPQkkgth01Kf/4niHzXkFhdhx16+qijImm6u15ZV+WvAt LdABx+ipCU+g3w39yKo2vyAKff6eJwt5ZsVzE6SOs5MI9PzECEFL0Nyv9OV/eVQuqcj4BZkfHskf wd5XIN4J8uNJYvjfFcLujSag9yLCCXpQboXsdbTqk3hXA2hnmg5yOF3i/XAU3oQN9MvKh2hu0HBK 64d+Vp8XE94e1bSP46J38uBGW8DyKY9yPSEK3w== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for de/DNSKEY
	Received 738 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 738 octets ;; HEADER SECTION ;; id = 1351 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240527170000 20240514160000 5613 . TvTOS+1S7eImzK4XiO/MuXuUfyb0thSlyMMa5qm79ARuXEkrHpv9+7sprfOgL6W4PN8TNOOHMHoP aSgL4lGlqskx0zfEIRtWqaXUsqe3eL2jPQkkgth01Kf/4niHzXkFhdhx16+qijImm6u15ZV+WvAt LdABx+ipCU+g3w39yKo2vyAKff6eJwt5ZsVzE6SOs5MI9PzECEFL0Nyv9OV/eVQuqcj4BZkfHskf wd5XIN4J8uNJYvjfFcLujSag9yLCCXpQboXsdbTqk3hXA2hnmg5yOF3i/XAU3oQN9MvKh2hu0HBK 64d+Vp8XE94e1bSP46J38uBGW8DyKY9yPSEK3w== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to i.root-servers.net for de/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 3005 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240527170000 20240514160000 5613 . TvTOS+1S7eImzK4XiO/MuXuUfyb0thSlyMMa5qm79ARuXEkrHpv9+7sprfOgL6W4PN8TNOOHMHoP aSgL4lGlqskx0zfEIRtWqaXUsqe3eL2jPQkkgth01Kf/4niHzXkFhdhx16+qijImm6u15ZV+WvAt LdABx+ipCU+g3w39yKo2vyAKff6eJwt5ZsVzE6SOs5MI9PzECEFL0Nyv9OV/eVQuqcj4BZkfHskf wd5XIN4J8uNJYvjfFcLujSag9yLCCXpQboXsdbTqk3hXA2hnmg5yOF3i/XAU3oQN9MvKh2hu0HBK 64d+Vp8XE94e1bSP46J38uBGW8DyKY9yPSEK3w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240527170000 20240514160000 5613 . TvTOS+1S7eImzK4XiO/MuXuUfyb0thSlyMMa5qm79ARuXEkrHpv9+7sprfOgL6W4PN8TNOOHMHoP aSgL4lGlqskx0zfEIRtWqaXUsqe3eL2jPQkkgth01Kf/4niHzXkFhdhx16+qijImm6u15ZV+WvAt LdABx+ipCU+g3w39yKo2vyAKff6eJwt5ZsVzE6SOs5MI9PzECEFL0Nyv9OV/eVQuqcj4BZkfHskf wd5XIN4J8uNJYvjfFcLujSag9yLCCXpQboXsdbTqk3hXA2hnmg5yOF3i/XAU3oQN9MvKh2hu0HBK 64d+Vp8XE94e1bSP46J38uBGW8DyKY9yPSEK3w== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to s.de.net for de/DNSKEY
	Received 893 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 893 octets ;; HEADER SECTION ;; id = 2928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445 de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240524190302 20240510173302 26755 de. RYfroAPxCCKE+kvvEUxoK8bNvCKlr+cp4BgHsLDWx8WWHPktPD7G5hMNPXGbpm0XOx5bGwDysxGd xdoBdj/LvuzdXVgbxehriNp2oz11r/eHTW6qVa4Vi2ZCHXipaATo5a2/Cq131NqIOIZZqG6sl7Jb xjBqulZLAdiHn1bzea70xKoqquqHwOxrUPhxG8c9rUsoDq6EPURWieQTGKjWYHyWv/0jw+4zFKjq 8DDlCpVuJdNLbg4nYvj4IPe65e6H5BgfTXCT5G0gfqlgVL9+ARD4s7NyLTGFQD0FGNYuYdNCbZ0g LTGJepwDX8av5OcCEIcJNfo+IkjPzkMuGnvYdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240524190302 20240510173302 26755 de. RYfroAPxCCKE+kvvEUxoK8bNvCKlr+cp4BgHsLDWx8WWHPktPD7G5hMNPXGbpm0XOx5bGwDysxGd xdoBdj/LvuzdXVgbxehriNp2oz11r/eHTW6qVa4Vi2ZCHXipaATo5a2/Cq131NqIOIZZqG6sl7Jb xjBqulZLAdiHn1bzea70xKoqquqHwOxrUPhxG8c9rUsoDq6EPURWieQTGKjWYHyWv/0jw+4zFKjq 8DDlCpVuJdNLbg4nYvj4IPe65e6H5BgfTXCT5G0gfqlgVL9+ARD4s7NyLTGFQD0FGNYuYdNCbZ0g LTGJepwDX8av5OcCEIcJNfo+IkjPzkMuGnvYdw== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56445 is now in the chain-of-trust
	DNSKEY=720 is now in the chain-of-trust
	Query to a.nic.de for facebook.de/A
	Received 610 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 610 octets ;; HEADER SECTION ;; id = 16081 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) facebook.de. 86400 IN NS a.ns.facebook.com. facebook.de. 86400 IN NS d.ns.facebook.com. facebook.de. 86400 IN NS c.ns.facebook.com. facebook.de. 86400 IN NS b.ns.facebook.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfkfr5ukc3q7hg1nc5nj1o4725f9sm ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. GRJmG7qAR8GG6sWspFLWMZP/XVpMPId2Lq9QuiNXquDts2zCstVO5oUPGzlZn8GaMDWSEVujFtGO YbWNsMaTM3ZLKbH8q8VZ1dzqAsi6Ojfd+b80EyYsR9QElxWwqOigUCpO5wwafp69iT6xyMcLEF2s 4TW5F/YF8FAYBLYKKr0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to z.nic.de for facebook.de/DNSKEY
	Received 610 bytes from 194.246.96.1
	;; Response received from [194.246.96.1] 610 octets ;; HEADER SECTION ;; id = 11502 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) facebook.de. 86400 IN NS d.ns.facebook.com. facebook.de. 86400 IN NS b.ns.facebook.com. facebook.de. 86400 IN NS a.ns.facebook.com. facebook.de. 86400 IN NS c.ns.facebook.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfkfr5ukc3q7hg1nc5nj1o4725f9sm ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. GRJmG7qAR8GG6sWspFLWMZP/XVpMPId2Lq9QuiNXquDts2zCstVO5oUPGzlZn8GaMDWSEVujFtGO YbWNsMaTM3ZLKbH8q8VZ1dzqAsi6Ojfd+b80EyYsR9QElxWwqOigUCpO5wwafp69iT6xyMcLEF2s 4TW5F/YF8FAYBLYKKr0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone facebook.de

facebook.de

	Checking DS between de and facebook.de
	Query to l.de.net for facebook.de/DS
	Received 756 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 756 octets ;; HEADER SECTION ;; id = 65399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) de. 7200 IN SOA ( f.nic.de. dns-operations.denic.de. 1715714643 ;serial 7200 ;refresh 7200 ;retry 3600000 ;expire 7200 ;minimum ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfkfr5ukc3q7hg1nc5nj1o4725f9sm ) de. 7200 IN RRSIG ( SOA 8 1 86400 20240528192400 20240514175400 720 de. folfYgUQA6TkJT65RItE79tR0aIH//3nn+1Jc14JchY1Xv34hdIykdvr2lA8+E1xX6/thOalsO/8 +6FSyKqFVchz25GMuUpZpOz8cP2DmLq/a/bBZypvU7cbfaB3YD7RTVfQzGDEUp5B4+2oyGZ4E4F1 2jovh/pAZoHce3q6zQ8= ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. GRJmG7qAR8GG6sWspFLWMZP/XVpMPId2Lq9QuiNXquDts2zCstVO5oUPGzlZn8GaMDWSEVujFtGO YbWNsMaTM3ZLKbH8q8VZ1dzqAsi6Ojfd+b80EyYsR9QElxWwqOigUCpO5wwafp69iT6xyMcLEF2s 4TW5F/YF8FAYBLYKKr0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for facebook.de in the de zone
	Query to a.ns.facebook.com for facebook.de/DNSKEY
	Received 97 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 97 octets ;; HEADER SECTION ;; id = 22605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4209974634 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to d.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.219.12
	;; Response received from [185.89.219.12] 56 octets ;; HEADER SECTION ;; id = 29764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ns.facebook.com is authoritative for facebook.de
	Query to b.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 97 octets ;; HEADER SECTION ;; id = 40756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4209974634 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 97 octets ;; HEADER SECTION ;; id = 24166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4209974634 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 97 octets ;; HEADER SECTION ;; id = 22953 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4209974634 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.219.12
	;; Response received from [185.89.219.12] 56 octets ;; HEADER SECTION ;; id = 10693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 31.13.88.1
	No RRSIGs found

facebook.de

	Query to c.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 56 octets ;; HEADER SECTION ;; id = 5703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.ns.facebook.com is authoritative for facebook.de
	Query to c.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 56 octets ;; HEADER SECTION ;; id = 13927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 31.13.88.1
	No RRSIGs found

facebook.de

	Query to a.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 56 octets ;; HEADER SECTION ;; id = 56640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ns.facebook.com is authoritative for facebook.de
	Query to a.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 56 octets ;; HEADER SECTION ;; id = 30872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 31.13.88.1
	No RRSIGs found

facebook.de

	Query to b.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 56 octets ;; HEADER SECTION ;; id = 44622 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.ns.facebook.com is authoritative for facebook.de
	Query to b.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 56 octets ;; HEADER SECTION ;; id = 27182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 31.13.88.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 31.13.88.1
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test facebook.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: