DNSSEC Debugger

Domain Name:

Time: 2024-07-27 08:43:49 UTC

Analyzing DNSSEC problems for fmc.sk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 25111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to f.root-servers.net for fmc.sk/A
	Received 794 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 794 octets ;; HEADER SECTION ;; id = 58586 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . ff0v2mvtVoVhjDdw3XJFmKiLebtzvXERJNR3ypS0XPIpufqtt2/ZS7M+S1oX06s5BbpwEmCxulRL HJ1mGewQPjTh0L9HV3Lad88AIBoqvaiE7PWHYwT/ltVvacactZ6Iq/bbx3YG4tfz7ucgbQ4bP8MY WhF8OEi3sm6mesbMXK3TGaCYAPSHFj4l+fAb5VIl/AHCgF4ppz2HYdXF3ImjBwjYKIjI0xuiB2Mu zrdc1ShD1pCN4XyU2lkJmx7om2XhLUjMrc4NqAYMJX8HisIvuiMSSX0RT1j6vegY+lk/fjqf78Ru NXV5EhDzO6Ux5WIw64yF5IY9VIK23x2qDnBy0w== ) ;; ADDITIONAL SECTION (15 records) a.tld.sk. 172800 IN A 194.0.45.1 a.tld.sk. 172800 IN AAAA 2001:678:70::1 b.tld.sk. 172800 IN A 84.245.96.1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 c.tld.sk. 172800 IN A 195.12.159.1 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 e.tld.sk. 172800 IN A 194.169.218.16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN A 185.24.64.16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN A 212.18.248.16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN A 212.18.249.16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for sk/DNSKEY
	Received 790 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 790 octets ;; HEADER SECTION ;; id = 22829 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . ff0v2mvtVoVhjDdw3XJFmKiLebtzvXERJNR3ypS0XPIpufqtt2/ZS7M+S1oX06s5BbpwEmCxulRL HJ1mGewQPjTh0L9HV3Lad88AIBoqvaiE7PWHYwT/ltVvacactZ6Iq/bbx3YG4tfz7ucgbQ4bP8MY WhF8OEi3sm6mesbMXK3TGaCYAPSHFj4l+fAb5VIl/AHCgF4ppz2HYdXF3ImjBwjYKIjI0xuiB2Mu zrdc1ShD1pCN4XyU2lkJmx7om2XhLUjMrc4NqAYMJX8HisIvuiMSSX0RT1j6vegY+lk/fjqf78Ru NXV5EhDzO6Ux5WIw64yF5IY9VIK23x2qDnBy0w== ) ;; ADDITIONAL SECTION (15 records) a.tld.sk. 172800 IN A 194.0.45.1 a.tld.sk. 172800 IN AAAA 2001:678:70::1 b.tld.sk. 172800 IN A 84.245.96.1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 c.tld.sk. 172800 IN A 195.12.159.1 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 e.tld.sk. 172800 IN A 194.169.218.16 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN A 185.24.64.16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN A 212.18.248.16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN A 212.18.249.16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Found child zone sk

	Checking DS between . and sk
	Query to i.root-servers.net for sk/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 33678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DS ;; ANSWER SECTION (2 records) sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . ff0v2mvtVoVhjDdw3XJFmKiLebtzvXERJNR3ypS0XPIpufqtt2/ZS7M+S1oX06s5BbpwEmCxulRL HJ1mGewQPjTh0L9HV3Lad88AIBoqvaiE7PWHYwT/ltVvacactZ6Iq/bbx3YG4tfz7ucgbQ4bP8MY WhF8OEi3sm6mesbMXK3TGaCYAPSHFj4l+fAb5VIl/AHCgF4ppz2HYdXF3ImjBwjYKIjI0xuiB2Mu zrdc1ShD1pCN4XyU2lkJmx7om2XhLUjMrc4NqAYMJX8HisIvuiMSSX0RT1j6vegY+lk/fjqf78Ru NXV5EhDzO6Ux5WIw64yF5IY9VIK23x2qDnBy0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sk in the . zone
	DS=2324/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sk. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . ff0v2mvtVoVhjDdw3XJFmKiLebtzvXERJNR3ypS0XPIpufqtt2/ZS7M+S1oX06s5BbpwEmCxulRL HJ1mGewQPjTh0L9HV3Lad88AIBoqvaiE7PWHYwT/ltVvacactZ6Iq/bbx3YG4tfz7ucgbQ4bP8MY WhF8OEi3sm6mesbMXK3TGaCYAPSHFj4l+fAb5VIl/AHCgF4ppz2HYdXF3ImjBwjYKIjI0xuiB2Mu zrdc1ShD1pCN4XyU2lkJmx7om2XhLUjMrc4NqAYMJX8HisIvuiMSSX0RT1j6vegY+lk/fjqf78Ru NXV5EhDzO6Ux5WIw64yF5IY9VIK23x2qDnBy0w== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=2324/SHA-256 is now in the chain-of-trust
	`sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 )`
	Query to b.tld.sk for sk/DNSKEY
	Received 627 bytes from 84.245.96.1
	;; Response received from [84.245.96.1] 627 octets ;; HEADER SECTION ;; id = 31049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (7 records) sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267 sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492 sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324 sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311 sk. 3600 IN DNSKEY ( 256 3 13 IGW/FZP9PlW5YqbTme33lvzkHLgMMcEeTBapDs5spbKfpuG/fI/C8ZyCbWrxdX8Xeoiv6mkTEkzu 6O8mRe+NIQ== ) ; Key ID = 35356 sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 2324 sk. 5F4Ri7G/OeVO9n5Bv9a2UnIUsc6mT4S4XFu8tmAOz3LK6NVtGx6nrKqrugHxyzPFkcNzex0hNdY1 GQ1eUqO9Dw== ) sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 38311 sk. HJDutctoq4L9gOFA9xAkCv/XtLkWnWbyDhZILOcBP0QQgvJmvzPC0WpOFTNiWrbipkgc969cUx0V 9cU2jiZM6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for sk
	`sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267`
	`sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492`
	`sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324`
	`sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311`
	`sk. 3600 IN DNSKEY ( 256 3 13 IGW/FZP9PlW5YqbTme33lvzkHLgMMcEeTBapDs5spbKfpuG/fI/C8ZyCbWrxdX8Xeoiv6mkTEkzu 6O8mRe+NIQ== ) ; Key ID = 35356`
	DNSKEY=2324/SEP is now in the chain-of-trust
	DS=2324/SHA-256 verifies DNSKEY=2324/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 2324 sk. 5F4Ri7G/OeVO9n5Bv9a2UnIUsc6mT4S4XFu8tmAOz3LK6NVtGx6nrKqrugHxyzPFkcNzex0hNdY1 GQ1eUqO9Dw== )`
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240731173931 20240701070122 38311 sk. HJDutctoq4L9gOFA9xAkCv/XtLkWnWbyDhZILOcBP0QQgvJmvzPC0WpOFTNiWrbipkgc969cUx0V 9cU2jiZM6A== )`
	RRSIG=2324 and DNSKEY=2324/SEP verifies the DNSKEY RRset
	RRSIG=38311 and DNSKEY=38311/SEP verifies the DNSKEY RRset
	DNSKEY=39267 is now in the chain-of-trust
	DNSKEY=34492 is now in the chain-of-trust
	DNSKEY=38311/SEP is now in the chain-of-trust
	DNSKEY=35356 is now in the chain-of-trust
	Query to c.tld.sk for fmc.sk/A
	Received 462 bytes from 195.12.159.1
	;; Response received from [195.12.159.1] 462 octets ;; HEADER SECTION ;; id = 29141 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fmc.sk. 3600 IN NS ns.kios.sk. fmc.sk. 3600 IN NS ns2.kios.sk. h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN NSEC3 ( 1 1 0 - bude60a66ouq9rs07226ail8eofi4u5a NS DS RRSIG ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731203133 20240701065137 34492 sk. uheqYGEHDz+uIGB3OfHPa0YSXjHKBKFCBOIelY4Wg1U5YabiBVr7ePMIFOrzNTQDZnncg8Qb4dj7 VK6gf6uhRQ== ) ;; ADDITIONAL SECTION (3 records) ns.kios.sk. 3600 IN A 37.157.196.15 ns2.kios.sk. 3600 IN A 109.71.69.134 ;; { "EDNS-VERSION": 0 }
	Query to g.tld.sk for fmc.sk/DNSKEY
	Received 462 bytes from 212.18.248.16
	;; Response received from [212.18.248.16] 462 octets ;; HEADER SECTION ;; id = 19435 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fmc.sk. 3600 IN NS ns.kios.sk. fmc.sk. 3600 IN NS ns2.kios.sk. h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN NSEC3 ( 1 1 0 - bude60a66ouq9rs07226ail8eofi4u5a NS DS RRSIG ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731203133 20240701065137 34492 sk. uheqYGEHDz+uIGB3OfHPa0YSXjHKBKFCBOIelY4Wg1U5YabiBVr7ePMIFOrzNTQDZnncg8Qb4dj7 VK6gf6uhRQ== ) ;; ADDITIONAL SECTION (3 records) ns.kios.sk. 3600 IN A 37.157.196.15 ns2.kios.sk. 3600 IN A 109.71.69.134 ;; { "EDNS-VERSION": 0 }
	Found child zone fmc.sk

fmc.sk

	Checking DS between sk and fmc.sk
	Query to b.tld.sk for fmc.sk/DS
	Received 548 bytes from 84.245.96.1
	;; Response received from [84.245.96.1] 548 octets ;; HEADER SECTION ;; id = 21565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sk. 3600 IN SOA ( m.tld.sk. hostmaster.sk-nic.sk. 2018120669 ;serial 60 ;refresh 300 ;retry 3600000 ;expire 3600 ;minimum ) sk. 3600 IN RRSIG ( SOA 13 1 3600 20240825212554 20240727063948 34492 sk. MV64w3JRHIY/6z1m77fbvoNlfxEaTclgbFHr9Xtx2zF680YUYMrOxByUdTwT2DlXfa9RP08AAnEi igWvcsnBwg== ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN NSEC3 ( 1 1 0 - h8numb6pv12ua6imd5haiqk1e4p92re1 NS SOA RRSIG DNSKEY NSEC3PARAM ) h8num20s6cvfgirp67q8r84jleje4e25.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731085455 20240701065137 34492 sk. AbEID/VuwtQmCFaOEU+ZTxoca1ICelWGMoViIR9DLuB9ZwW5eFtI/5fEdnd5FZaTIGMtP9uVNxwV YZnzRoIzFw== ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN NSEC3 ( 1 1 0 - bude60a66ouq9rs07226ail8eofi4u5a NS DS RRSIG ) bud1deckgv547sotu9h510ktne7i5dni.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240731203133 20240701065137 34492 sk. uheqYGEHDz+uIGB3OfHPa0YSXjHKBKFCBOIelY4Wg1U5YabiBVr7ePMIFOrzNTQDZnncg8Qb4dj7 VK6gf6uhRQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for fmc.sk in the sk zone
	Query to ns.kios.sk for fmc.sk/DNSKEY
	Received 95 bytes from 37.157.196.15
	;; Response received from [37.157.196.15] 95 octets ;; HEADER SECTION ;; id = 39693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fmc.sk. 86400 IN SOA ( ns.kios.sk. administrator.kios.sk. 2021112201 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns.kios.sk for fmc.sk/A
	Received 93 bytes from 37.157.196.15
	;; Response received from [37.157.196.15] 93 octets ;; HEADER SECTION ;; id = 56549 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (1 record) fmc.sk. 86400 IN A 62.168.68.85 ;; AUTHORITY SECTION (2 records) fmc.sk. 86400 IN NS ns.kios.sk. fmc.sk. 86400 IN NS ns2.kios.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.kios.sk is authoritative for fmc.sk
	Query to ns2.kios.sk for fmc.sk/SOA
	Received 127 bytes from 89.185.252.69
	;; Response received from [89.185.252.69] 127 octets ;; HEADER SECTION ;; id = 37946 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN SOA ;; ANSWER SECTION (1 record) fmc.sk. 86400 IN SOA ( ns.kios.sk. administrator.kios.sk. 2021112201 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (2 records) fmc.sk. 86400 IN NS ns.kios.sk. fmc.sk. 86400 IN NS ns2.kios.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.kios.sk for fmc.sk/A
	Received 93 bytes from 37.157.196.15
	;; Response received from [37.157.196.15] 93 octets ;; HEADER SECTION ;; id = 62890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (1 record) fmc.sk. 86400 IN A 62.168.68.85 ;; AUTHORITY SECTION (2 records) fmc.sk. 86400 IN NS ns2.kios.sk. fmc.sk. 86400 IN NS ns.kios.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fmc.sk A RR has value 62.168.68.85
	No RRSIGs found

fmc.sk

	Query to ns2.kios.sk for fmc.sk/A
	Received 93 bytes from 89.185.252.69
	;; Response received from [89.185.252.69] 93 octets ;; HEADER SECTION ;; id = 34633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (1 record) fmc.sk. 86400 IN A 62.168.68.85 ;; AUTHORITY SECTION (2 records) fmc.sk. 86400 IN NS ns2.kios.sk. fmc.sk. 86400 IN NS ns.kios.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.kios.sk is authoritative for fmc.sk
	Query to ns2.kios.sk for fmc.sk/A
	Received 93 bytes from 89.185.252.69
	;; Response received from [89.185.252.69] 93 octets ;; HEADER SECTION ;; id = 7628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fmc.sk. IN A ;; ANSWER SECTION (1 record) fmc.sk. 86400 IN A 62.168.68.85 ;; AUTHORITY SECTION (2 records) fmc.sk. 86400 IN NS ns.kios.sk. fmc.sk. 86400 IN NS ns2.kios.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	fmc.sk A RR has value 62.168.68.85
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fmc.sk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: