DNSSEC Debugger - facebook.de

Domain Name:

Time: 2024-12-14 10:40:17 UTC

Analyzing DNSSEC problems for facebook.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 31516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241231000000 20241210000000 20326 . nUVwsqGTNd6MROtRk/jqSHMcsf+z3hDoaOaK0dBRQ4cXaYiHw2qAFStpX0JauuOLMja1KW17CeUM SScQlC6vj5rA1XbnLRy7RVmt1ohZ8RuoduPRt+o9YzqnHxYrp6rl36s4yJbTEiUysnnToPHFxaB+ A2W3ZYoGs4js6mqySfWoV57flttoEKP5crlMIElsVzbaMLuZMPLpYpci1rjEgxzJlA4D3flCt863 dxz4m+sim2CKOXAbKJYwGzFLJMeDRBraO+4uK0USjGj6CodNqqbe4q+WfjLfRVCuydyPQjjp5jZW C6VrcLEMPcxi/nZglmu1OGyFWxD4snw2+EwSIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; keytag 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241231000000 20241210000000 20326 . nUVwsqGTNd6MROtRk/jqSHMcsf+z3hDoaOaK0dBRQ4cXaYiHw2qAFStpX0JauuOLMja1KW17CeUM SScQlC6vj5rA1XbnLRy7RVmt1ohZ8RuoduPRt+o9YzqnHxYrp6rl36s4yJbTEiUysnnToPHFxaB+ A2W3ZYoGs4js6mqySfWoV57flttoEKP5crlMIElsVzbaMLuZMPLpYpci1rjEgxzJlA4D3flCt863 dxz4m+sim2CKOXAbKJYwGzFLJMeDRBraO+4uK0USjGj6CodNqqbe4q+WfjLfRVCuydyPQjjp5jZW C6VrcLEMPcxi/nZglmu1OGyFWxD4snw2+EwSIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to f.root-servers.net for facebook.de/A
	Received 745 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 745 octets ;; HEADER SECTION ;; id = 46008 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20241227050000 20241214040000 61050 . tyHWtWVckqFzqlzfe9Jn6rkeIDYfg5WVOOwUZ9Pr7Mvj2+Sx4MhgtNcJ7UH5rcuken75FyZCMjlu 9fGA6DbBCDcbI3rL3/MBuXuAa6C0ASO10nM8tETNZlz4Kzddg54Ee8SplnxT3wbXrdnzcCs94V60 SY5DbvIk8wEAu6wKiRcBLskpK9TgsaWpT+b5FfzQeWCAe9ZL0sbAJchmSOSUnwfpcU/yqRaf4jXM 96T4ZdxrSp872EHRdwScgmj3ZU0WDJ5hZMgIYj2uHpbLLkqTWdpjlwg+dGRYwHXkXVP6MiO3gF/J PiO2AYyOesVsWUspSLjgDsUMS0TwT13XFlVpGg== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for de/DNSKEY
	Received 736 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 736 octets ;; HEADER SECTION ;; id = 13638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20241227050000 20241214040000 61050 . tyHWtWVckqFzqlzfe9Jn6rkeIDYfg5WVOOwUZ9Pr7Mvj2+Sx4MhgtNcJ7UH5rcuken75FyZCMjlu 9fGA6DbBCDcbI3rL3/MBuXuAa6C0ASO10nM8tETNZlz4Kzddg54Ee8SplnxT3wbXrdnzcCs94V60 SY5DbvIk8wEAu6wKiRcBLskpK9TgsaWpT+b5FfzQeWCAe9ZL0sbAJchmSOSUnwfpcU/yqRaf4jXM 96T4ZdxrSp872EHRdwScgmj3ZU0WDJ5hZMgIYj2uHpbLLkqTWdpjlwg+dGRYwHXkXVP6MiO3gF/J PiO2AYyOesVsWUspSLjgDsUMS0TwT13XFlVpGg== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to i.root-servers.net for de/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 63415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20241227050000 20241214040000 61050 . tyHWtWVckqFzqlzfe9Jn6rkeIDYfg5WVOOwUZ9Pr7Mvj2+Sx4MhgtNcJ7UH5rcuken75FyZCMjlu 9fGA6DbBCDcbI3rL3/MBuXuAa6C0ASO10nM8tETNZlz4Kzddg54Ee8SplnxT3wbXrdnzcCs94V60 SY5DbvIk8wEAu6wKiRcBLskpK9TgsaWpT+b5FfzQeWCAe9ZL0sbAJchmSOSUnwfpcU/yqRaf4jXM 96T4ZdxrSp872EHRdwScgmj3ZU0WDJ5hZMgIYj2uHpbLLkqTWdpjlwg+dGRYwHXkXVP6MiO3gF/J PiO2AYyOesVsWUspSLjgDsUMS0TwT13XFlVpGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20241227050000 20241214040000 61050 . tyHWtWVckqFzqlzfe9Jn6rkeIDYfg5WVOOwUZ9Pr7Mvj2+Sx4MhgtNcJ7UH5rcuken75FyZCMjlu 9fGA6DbBCDcbI3rL3/MBuXuAa6C0ASO10nM8tETNZlz4Kzddg54Ee8SplnxT3wbXrdnzcCs94V60 SY5DbvIk8wEAu6wKiRcBLskpK9TgsaWpT+b5FfzQeWCAe9ZL0sbAJchmSOSUnwfpcU/yqRaf4jXM 96T4ZdxrSp872EHRdwScgmj3ZU0WDJ5hZMgIYj2uHpbLLkqTWdpjlwg+dGRYwHXkXVP6MiO3gF/J PiO2AYyOesVsWUspSLjgDsUMS0TwT13XFlVpGg== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to l.de.net for de/DNSKEY
	Received 893 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 893 octets ;; HEADER SECTION ;; id = 15893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAcmlrB2JPXp4o1GU1T+/PLrudZMEqqOf3QzX6+69S1KmFbsAFPp2Ie64GORoMz+dJ5OIwtrq qjzPK2bAgmfJZt/TOGmQ7JCHaoQ9PxkAekNS0GdzasDYefFeDwUh13FkRiwceuNyFhM6TAOv8ebE x7V9wr15p5ekB4FXX8D+ythr ) ; keytag 52410 de. 86400 IN DNSKEY ( 256 3 8 AwEAAegGbMaDLoNQcUlYLCXa3hAwaZrSlwjL49uvLbca3m0SvN/Ui5dsIyXxfhIwCXK3FlOJy9X5 xqdbdNr6cxJctmZ0GAJ2g6QJJTOJfGIb3gXf/FW8jrzVOJT1HHYlws/8IjlFCU6IU9pxWpHMDd++ 1L1EIIkNu514ad20BaOav1K3 ) ; keytag 63483 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241227190836 20241213173836 26755 de. McGh0ar/GxHMyX0qeVXAQuSEzUg5njx5QxlZsEm+U8VkEz4EJgZ1TY33p9YI4NFhL94ib4A843g4 7pDv9b+jpAaVGWs1vMjptfseDJlG9gLejOMEFwlBpM/Gudc9LkbPlicPDINNlYu2fJTTkMUbNva9 jjB39IUaSgMi9/i3l/6ZTYp1cDK/traxfTUDQvjq5mcywHR26/fzxRmECynvZH67Qw68YennRvk3 AtHJ+ln14tG4Rew8+t25ZDruapiSBjERYmAZ0ascbFcRDMdQ87FK/ZvrTAqD7jWbCaOimPPq0RRB 1cdP+Cc5rulBP90V79H6kBeRVGtvJ7gJkSlFLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcmlrB2JPXp4o1GU1T+/PLrudZMEqqOf3QzX6+69S1KmFbsAFPp2Ie64GORoMz+dJ5OIwtrq qjzPK2bAgmfJZt/TOGmQ7JCHaoQ9PxkAekNS0GdzasDYefFeDwUh13FkRiwceuNyFhM6TAOv8ebE x7V9wr15p5ekB4FXX8D+ythr ) ; keytag 52410`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAegGbMaDLoNQcUlYLCXa3hAwaZrSlwjL49uvLbca3m0SvN/Ui5dsIyXxfhIwCXK3FlOJy9X5 xqdbdNr6cxJctmZ0GAJ2g6QJJTOJfGIb3gXf/FW8jrzVOJT1HHYlws/8IjlFCU6IU9pxWpHMDd++ 1L1EIIkNu514ad20BaOav1K3 ) ; keytag 63483`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; keytag 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241227190836 20241213173836 26755 de. McGh0ar/GxHMyX0qeVXAQuSEzUg5njx5QxlZsEm+U8VkEz4EJgZ1TY33p9YI4NFhL94ib4A843g4 7pDv9b+jpAaVGWs1vMjptfseDJlG9gLejOMEFwlBpM/Gudc9LkbPlicPDINNlYu2fJTTkMUbNva9 jjB39IUaSgMi9/i3l/6ZTYp1cDK/traxfTUDQvjq5mcywHR26/fzxRmECynvZH67Qw68YennRvk3 AtHJ+ln14tG4Rew8+t25ZDruapiSBjERYmAZ0ascbFcRDMdQ87FK/ZvrTAqD7jWbCaOimPPq0RRB 1cdP+Cc5rulBP90V79H6kBeRVGtvJ7gJkSlFLQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=52410 is now in the chain-of-trust
	DNSKEY=63483 is now in the chain-of-trust
	Query to z.nic.de for facebook.de/A
	Received 610 bytes from 194.246.96.1
	;; Response received from [194.246.96.1] 610 octets ;; HEADER SECTION ;; id = 11210 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) facebook.de. 86400 IN NS c.ns.facebook.com. facebook.de. 86400 IN NS a.ns.facebook.com. facebook.de. 86400 IN NS b.ns.facebook.com. facebook.de. 86400 IN NS d.ns.facebook.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241226120641 20241212103641 52410 de. AMYyV7aeUK46D2yqnStQXe72mOYYC81OS3yWhki5wVeWIF0deY60fHmE5mZZWP5XkS/hGFutyGug DtFgXifBNi5rDmR4Lc4ZelH5OMTge5UjqdJsoE6ttYheyh++qTVHqV8HhUWAOLA7BIKWQyR3AkTT d1PREXDLq5KimXPIdnM= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfgcjh97edn6gd95gn16fs3gffgv48 ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241222062337 20241208045337 52410 de. BOrqokv7TuU0TfcLia2VjeHAF9DDzrzBI+f0U8qnP51+4CWsjTdNnU7AHuGYJYbanl5ZOqIz9awd m+LmQxkJKSaM/MOjO1zwrAigVcYJI8jmKT3GnZEKPNUqJx8Lv2pDh+1Tkwf9p2/ixQggiRfY193Q Zs5IndrPs6jk/V7HYjs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to l.de.net for facebook.de/DNSKEY
	Received 610 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 610 octets ;; HEADER SECTION ;; id = 9098 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) facebook.de. 86400 IN NS a.ns.facebook.com. facebook.de. 86400 IN NS b.ns.facebook.com. facebook.de. 86400 IN NS c.ns.facebook.com. facebook.de. 86400 IN NS d.ns.facebook.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfgcjh97edn6gd95gn16fs3gffgv48 ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241226120641 20241212103641 52410 de. AMYyV7aeUK46D2yqnStQXe72mOYYC81OS3yWhki5wVeWIF0deY60fHmE5mZZWP5XkS/hGFutyGug DtFgXifBNi5rDmR4Lc4ZelH5OMTge5UjqdJsoE6ttYheyh++qTVHqV8HhUWAOLA7BIKWQyR3AkTT d1PREXDLq5KimXPIdnM= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241222062337 20241208045337 52410 de. BOrqokv7TuU0TfcLia2VjeHAF9DDzrzBI+f0U8qnP51+4CWsjTdNnU7AHuGYJYbanl5ZOqIz9awd m+LmQxkJKSaM/MOjO1zwrAigVcYJI8jmKT3GnZEKPNUqJx8Lv2pDh+1Tkwf9p2/ixQggiRfY193Q Zs5IndrPs6jk/V7HYjs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone facebook.de

facebook.de

	Checking DS between de and facebook.de
	Query to l.de.net for facebook.de/DS
	Received 756 bytes from 77.67.63.105
	;; Response received from [77.67.63.105] 756 octets ;; HEADER SECTION ;; id = 13721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) de. 7200 IN SOA ( f.nic.de. dns-operations.denic.de. 1734172675 ;serial 7200 ;refresh 7200 ;retry 3600000 ;expire 7200 ;minimum ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a v6bfgcjh97edn6gd95gn16fs3gffgv48 ) de. 7200 IN RRSIG ( SOA 8 1 86400 20241228103751 20241214090751 52410 de. ROiezwigsDtKLgFyxFVI1qTNFYX7frs13dSDRPMxh3O62bwuBv76pMhFCq4shCyHogPoVkgLsH5m OURa+Bs2dlDucNh2U52OU2VFwvtpw8fC04a2ps6BmX/1c7hSCPXwuCX/SL9+2ad3S2Vj8VALHoqg hr5LvoNRGdLQwBYK3Bc= ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241226120641 20241212103641 52410 de. AMYyV7aeUK46D2yqnStQXe72mOYYC81OS3yWhki5wVeWIF0deY60fHmE5mZZWP5XkS/hGFutyGug DtFgXifBNi5rDmR4Lc4ZelH5OMTge5UjqdJsoE6ttYheyh++qTVHqV8HhUWAOLA7BIKWQyR3AkTT d1PREXDLq5KimXPIdnM= ) v6be1g9p5bdhifmsbk3usobql4ooa1n5.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20241222062337 20241208045337 52410 de. BOrqokv7TuU0TfcLia2VjeHAF9DDzrzBI+f0U8qnP51+4CWsjTdNnU7AHuGYJYbanl5ZOqIz9awd m+LmQxkJKSaM/MOjO1zwrAigVcYJI8jmKT3GnZEKPNUqJx8Lv2pDh+1Tkwf9p2/ixQggiRfY193Q Zs5IndrPs6jk/V7HYjs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for facebook.de in the de zone
	Query to a.ns.facebook.com for facebook.de/DNSKEY
	Received 97 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 97 octets ;; HEADER SECTION ;; id = 42219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4207849484 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 56 octets ;; HEADER SECTION ;; id = 58467 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ns.facebook.com is authoritative for facebook.de
	Query to c.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 97 octets ;; HEADER SECTION ;; id = 54682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4207849484 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 97 octets ;; HEADER SECTION ;; id = 5860 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4207849484 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.ns.facebook.com for facebook.de/SOA
	Received 97 bytes from 185.89.219.12
	;; Response received from [185.89.219.12] 97 octets ;; HEADER SECTION ;; id = 22951 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN SOA ;; ANSWER SECTION (1 record) facebook.de. 3600 IN SOA ( a.ns.facebook.com. dns.facebook.com. 4207849484 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.30.12
	;; Response received from [129.134.30.12] 56 octets ;; HEADER SECTION ;; id = 17335 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 157.240.249.13
	No RRSIGs found

facebook.de

	Query to d.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.219.12
	;; Response received from [185.89.219.12] 56 octets ;; HEADER SECTION ;; id = 772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ns.facebook.com is authoritative for facebook.de
	Query to d.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.219.12
	;; Response received from [185.89.219.12] 56 octets ;; HEADER SECTION ;; id = 25200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 157.240.249.13
	No RRSIGs found

facebook.de

	Query to b.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 56 octets ;; HEADER SECTION ;; id = 38802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	b.ns.facebook.com is authoritative for facebook.de
	Query to b.ns.facebook.com for facebook.de/A
	Received 56 bytes from 129.134.31.12
	;; Response received from [129.134.31.12] 56 octets ;; HEADER SECTION ;; id = 55041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 157.240.249.13
	No RRSIGs found

facebook.de

	Query to c.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 56 octets ;; HEADER SECTION ;; id = 20836 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	c.ns.facebook.com is authoritative for facebook.de
	Query to c.ns.facebook.com for facebook.de/A
	Received 56 bytes from 185.89.218.12
	;; Response received from [185.89.218.12] 56 octets ;; HEADER SECTION ;; id = 59158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; facebook.de. IN A ;; ANSWER SECTION (1 record) facebook.de. 60 IN A 157.240.249.13 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	facebook.de A RR has value 157.240.249.13
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test facebook.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: