DNSSEC Analyzer - fomm.top

Domain Name:

Time: 2021-01-26 12:50:07 UTC, NTP stratum 4

Analyzing DNSSEC problems for fomm.top

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 25581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210211000000 20210121000000 20326 . hdO/MozPh54eM3Ow9qSXrpqt0L3hj2RfqHeuDimtgMLSR3V16Xqm9k2ctaT4qyCZb51OtiuE+1Uu imx3Dj83myjz5mOGo0z1f1VEwV6QTuPkZeVecZAFCzsuVTlpUT1OdZQhnwvzIIPYBLlG3TOTQuPt UY9v1LcyoxYWEYy+SDdaQo1CGu4Ochy1aleL40pHWaqk0Swl0lLcgykgVWS3ZpCDL+R50cXg7z4i 5GnpMzxy48Yf4ED+Ja/W+x9ZOSmWnRmCjCGrTbY943AgJjCYEBbHEdJYo9PTYJrMp+x75U1LVSVp zpfI7OXd5yvH7AA8b83yyks+Sv+G6w8y05oZNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to f.root-servers.net for fomm.top/A
	Received 665 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (665 bytes) ;; HEADER SECTION ;; id = 55266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) top. 172800 IN NS a.zdnscloud.com. top. 172800 IN NS b.zdnscloud.com. top. 172800 IN NS c.zdnscloud.com. top. 172800 IN NS d.zdnscloud.com. top. 172800 IN NS f.zdnscloud.com. top. 172800 IN NS g.zdnscloud.com. top. 172800 IN NS i.zdnscloud.com. top. 172800 IN NS j.zdnscloud.com. top. 86400 IN DS ( 56384 8 2 ba378c5913404ec654df544f519b0fb287e140d64dac5d59e349962393c17945 ) top. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . nk+oQcrnnW6AJ5ol/vziqcEHvOUdKdlpAX1MqK+lBoLGNjV0i0y2rdzF8zVfObowBxPfdc1GEZFv 7S5Htqy9KWOtpYnz75CAn3X6qkcGgKH9Py6d8ZN8TkqCxCxyIWJn6c8s4fB63UlGrXBP0KAnYNIx ldlYYhvw7A3uRzG8aSm8jTD5n+HkzWUPUyF0kZjTRHcy9SNB1lyDeY7q3qYj/LFLzbSF1LeaF/+4 i4mLU+zev7Fp88yNPGHeD9uMTylxyAfQP1PpyrBQUhjxJFRHWHgMQSP+u/754yAFxOgPa6XgLTN9 Qlq08tbtBEYI03aQeetuSEwfmp0ToiWeQL3frQ== ) ;; ADDITIONAL SECTION (9 records) a.zdnscloud.com. 172800 IN A 203.99.24.1 b.zdnscloud.com. 172800 IN A 203.99.25.1 c.zdnscloud.com. 172800 IN A 203.99.26.1 d.zdnscloud.com. 172800 IN A 203.99.27.1 f.zdnscloud.com. 172800 IN A 114.67.16.204 g.zdnscloud.com. 172800 IN A 42.62.2.16 i.zdnscloud.com. 172800 IN AAAA 2401:8d00:1::1 j.zdnscloud.com. 172800 IN AAAA 2401:8d00:2::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.root-servers.net for top/DNSKEY
	Received 660 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (660 bytes) ;; HEADER SECTION ;; id = 26481 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; top. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) top. 172800 IN NS a.zdnscloud.com. top. 172800 IN NS b.zdnscloud.com. top. 172800 IN NS c.zdnscloud.com. top. 172800 IN NS d.zdnscloud.com. top. 172800 IN NS f.zdnscloud.com. top. 172800 IN NS g.zdnscloud.com. top. 172800 IN NS i.zdnscloud.com. top. 172800 IN NS j.zdnscloud.com. top. 86400 IN DS ( 56384 8 2 ba378c5913404ec654df544f519b0fb287e140d64dac5d59e349962393c17945 ) top. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . nk+oQcrnnW6AJ5ol/vziqcEHvOUdKdlpAX1MqK+lBoLGNjV0i0y2rdzF8zVfObowBxPfdc1GEZFv 7S5Htqy9KWOtpYnz75CAn3X6qkcGgKH9Py6d8ZN8TkqCxCxyIWJn6c8s4fB63UlGrXBP0KAnYNIx ldlYYhvw7A3uRzG8aSm8jTD5n+HkzWUPUyF0kZjTRHcy9SNB1lyDeY7q3qYj/LFLzbSF1LeaF/+4 i4mLU+zev7Fp88yNPGHeD9uMTylxyAfQP1PpyrBQUhjxJFRHWHgMQSP+u/754yAFxOgPa6XgLTN9 Qlq08tbtBEYI03aQeetuSEwfmp0ToiWeQL3frQ== ) ;; ADDITIONAL SECTION (9 records) a.zdnscloud.com. 172800 IN A 203.99.24.1 b.zdnscloud.com. 172800 IN A 203.99.25.1 c.zdnscloud.com. 172800 IN A 203.99.26.1 d.zdnscloud.com. 172800 IN A 203.99.27.1 f.zdnscloud.com. 172800 IN A 114.67.16.204 g.zdnscloud.com. 172800 IN A 42.62.2.16 i.zdnscloud.com. 172800 IN AAAA 2401:8d00:1::1 j.zdnscloud.com. 172800 IN AAAA 2401:8d00:2::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone top

top

	Checking DS between . and top
	Query to g.root-servers.net for top/DS
	Received 367 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (367 bytes) ;; HEADER SECTION ;; id = 24950 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; top. IN DS ;; ANSWER SECTION (2 records) top. 86400 IN DS ( 56384 8 2 ba378c5913404ec654df544f519b0fb287e140d64dac5d59e349962393c17945 ) top. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . nk+oQcrnnW6AJ5ol/vziqcEHvOUdKdlpAX1MqK+lBoLGNjV0i0y2rdzF8zVfObowBxPfdc1GEZFv 7S5Htqy9KWOtpYnz75CAn3X6qkcGgKH9Py6d8ZN8TkqCxCxyIWJn6c8s4fB63UlGrXBP0KAnYNIx ldlYYhvw7A3uRzG8aSm8jTD5n+HkzWUPUyF0kZjTRHcy9SNB1lyDeY7q3qYj/LFLzbSF1LeaF/+4 i4mLU+zev7Fp88yNPGHeD9uMTylxyAfQP1PpyrBQUhjxJFRHWHgMQSP+u/754yAFxOgPa6XgLTN9 Qlq08tbtBEYI03aQeetuSEwfmp0ToiWeQL3frQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for top in the . zone
	DS=56384/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`top. 86400 IN RRSIG ( DS 8 1 86400 20210208050000 20210126040000 42351 . nk+oQcrnnW6AJ5ol/vziqcEHvOUdKdlpAX1MqK+lBoLGNjV0i0y2rdzF8zVfObowBxPfdc1GEZFv 7S5Htqy9KWOtpYnz75CAn3X6qkcGgKH9Py6d8ZN8TkqCxCxyIWJn6c8s4fB63UlGrXBP0KAnYNIx ldlYYhvw7A3uRzG8aSm8jTD5n+HkzWUPUyF0kZjTRHcy9SNB1lyDeY7q3qYj/LFLzbSF1LeaF/+4 i4mLU+zev7Fp88yNPGHeD9uMTylxyAfQP1PpyrBQUhjxJFRHWHgMQSP+u/754yAFxOgPa6XgLTN9 Qlq08tbtBEYI03aQeetuSEwfmp0ToiWeQL3frQ== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=56384/SHA-256 is now in the chain-of-trust
	`top. 86400 IN DS ( 56384 8 2 ba378c5913404ec654df544f519b0fb287e140d64dac5d59e349962393c17945 )`
	Query to d.zdnscloud.com for top/DNSKEY
	Received 1314 bytes from 203.99.27.1
	;; Answer received from 203.99.27.1 (1314 bytes) ;; HEADER SECTION ;; id = 54539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; top. IN DNSKEY ;; ANSWER SECTION (5 records) top. 3600 IN DNSKEY ( 256 3 8 AwEAAaQnyuY/4lGn0oYn5b+uq5PIWfo9ehXsNYiQ+WiSdRIDQ9G0OBFyE1sakFeXj9IRPKfIk8S1 siGf5aqPYvPhzBtYZ8ZodGlrMaNo3DUWlgKH8L2suSFajKcgHJshviHHrG1qBJ7uf4snUD00vcCe dIYcV3QdWSE9RTh7pHhl40Bd ) ; Key ID = 43048 top. 3600 IN DNSKEY ( 257 3 8 AwEAAal8fzHFBf9R4ROwT1Ni7AdpHR0zZoY7mG21zBpmNwCHuzgXWj3DATKTaFHBPa3pJSMTBEis hH2JLmN+p3Jzp8Ehbib2QZXtPHhqbkf0qNSB/dclbZOa5zlkUuVZ9M+zZRd4t4KBVwwhTGpMWt0m tMXHg29NiVYYyWAql/MmPRcNvmV/9MYD7NexKeEl6f9urxZhI+TLEBpa8Tvxb9VPQVjD2P2vlFTb X/zod+P8RKUWlSvBLbFkJ70qfzKnJTz0CJbtSxxsmHSym9BOGTcBkJ/bpn+o3wcr1QIPY8cH90F8 7Y2YQQaB53BSDqcmx499fdfUVHR+g80xeZMFyPZtvwM= ) ; Key ID = 56384 top. 3600 IN DNSKEY ( 257 3 8 AwEAAatAgVoLs64qLKEZH88TSjpOdEyELhhQmig6PL8QakbR5WgBclLa5EQYRTgoputWPsCjSqIA HhVIKIzehKJddhjQSbYR75+ssAIr4iMQLk8RUXDF/6bSHCS+XJffe0p8qin4HEh43avqYaNF7z/Z XyP2bm/4Vhkj7xMw+TRIPyVu1PrPOyknnrtcUBDjmXBbYTmwKRKGa0d6f7r+xgmQif6kTAhwpIfV /eEvzcdp+oC26fvwkkOP3C11ZtuZ7t5c53KvfGCIqsYoezshjXEgV49afL0nyHRGjOtuBY8Yak9i SkWPKAZz7V+M9QpD1T1ayugMcUwieS653uJ+6GVHKuE= ) ; Key ID = 8644 top. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210314013400 20210113040738 8644 top. ga4FGE5S2gAPaIiE8TSyAMdig6Pp3ZeOwbpOFzeDvszz+Cnmvj7a3WSUvnmK28qbh8k9e7XYsVHQ KDLQ+FrSLPF92m8KPrCf81GfaZdRHNmFj1fO2m7v9vuAlWyRyjcpb0097gvf6bzY2EFiwH4AmRDO yeS6Vv449cI601z5YWqLuXgxW6BzMfHwO+rkix5Hj4NGmlR563dEzju4kSO0wHKbmLm9rlCv7h5L A1qEcA6xFF5bPdSA5SXH8pOTxjoHsxQS37KKOt3HCG4sCM75obytyYmTXPL1OHs8rLpaKU7APZIP FbWHYnbLp7AiVC52lbtoileuNZpz1UQGYNZRog== ) top. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210314013400 20210113040738 56384 top. d5Dd4rn7Esgfla4UHo+IOkBJhKd4ygglPrwfN/DhhlcTpZQnHRdhW/XltB/UZH05bjrO0XFyqTi9 56a+C4o97QaLvNzbdnuoVAcGwEKujkDkOjX5VpmKJ2yMAC+ujcQ4Yn5nfrHPZojxChR6SBUxOjd7 qpzavSuHjwiXC9Ah7I/B9UPwO2shAvbbkR3HcFRM0eP92tY+JOYjjyvZTWZeleRBBZwV2Et7I5yZ poU5WNbniKONSbQvdNxX3bvzvjzG9xhuVr2XtMgeyoQ0FLvC1vJn458d+lPPHr7t4gPsqeSQMd+5 LrC9I1M8jq8VqFzJp3xEaaLqDBwD86MjsQgp9w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for top
	`top. 3600 IN DNSKEY ( 256 3 8 AwEAAaQnyuY/4lGn0oYn5b+uq5PIWfo9ehXsNYiQ+WiSdRIDQ9G0OBFyE1sakFeXj9IRPKfIk8S1 siGf5aqPYvPhzBtYZ8ZodGlrMaNo3DUWlgKH8L2suSFajKcgHJshviHHrG1qBJ7uf4snUD00vcCe dIYcV3QdWSE9RTh7pHhl40Bd ) ; Key ID = 43048`
	`top. 3600 IN DNSKEY ( 257 3 8 AwEAAal8fzHFBf9R4ROwT1Ni7AdpHR0zZoY7mG21zBpmNwCHuzgXWj3DATKTaFHBPa3pJSMTBEis hH2JLmN+p3Jzp8Ehbib2QZXtPHhqbkf0qNSB/dclbZOa5zlkUuVZ9M+zZRd4t4KBVwwhTGpMWt0m tMXHg29NiVYYyWAql/MmPRcNvmV/9MYD7NexKeEl6f9urxZhI+TLEBpa8Tvxb9VPQVjD2P2vlFTb X/zod+P8RKUWlSvBLbFkJ70qfzKnJTz0CJbtSxxsmHSym9BOGTcBkJ/bpn+o3wcr1QIPY8cH90F8 7Y2YQQaB53BSDqcmx499fdfUVHR+g80xeZMFyPZtvwM= ) ; Key ID = 56384`
	`top. 3600 IN DNSKEY ( 257 3 8 AwEAAatAgVoLs64qLKEZH88TSjpOdEyELhhQmig6PL8QakbR5WgBclLa5EQYRTgoputWPsCjSqIA HhVIKIzehKJddhjQSbYR75+ssAIr4iMQLk8RUXDF/6bSHCS+XJffe0p8qin4HEh43avqYaNF7z/Z XyP2bm/4Vhkj7xMw+TRIPyVu1PrPOyknnrtcUBDjmXBbYTmwKRKGa0d6f7r+xgmQif6kTAhwpIfV /eEvzcdp+oC26fvwkkOP3C11ZtuZ7t5c53KvfGCIqsYoezshjXEgV49afL0nyHRGjOtuBY8Yak9i SkWPKAZz7V+M9QpD1T1ayugMcUwieS653uJ+6GVHKuE= ) ; Key ID = 8644`
	DNSKEY=56384/SEP is now in the chain-of-trust
	DS=56384/SHA-256 verifies DNSKEY=56384/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`top. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210314013400 20210113040738 8644 top. ga4FGE5S2gAPaIiE8TSyAMdig6Pp3ZeOwbpOFzeDvszz+Cnmvj7a3WSUvnmK28qbh8k9e7XYsVHQ KDLQ+FrSLPF92m8KPrCf81GfaZdRHNmFj1fO2m7v9vuAlWyRyjcpb0097gvf6bzY2EFiwH4AmRDO yeS6Vv449cI601z5YWqLuXgxW6BzMfHwO+rkix5Hj4NGmlR563dEzju4kSO0wHKbmLm9rlCv7h5L A1qEcA6xFF5bPdSA5SXH8pOTxjoHsxQS37KKOt3HCG4sCM75obytyYmTXPL1OHs8rLpaKU7APZIP FbWHYnbLp7AiVC52lbtoileuNZpz1UQGYNZRog== )`
	`top. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210314013400 20210113040738 56384 top. d5Dd4rn7Esgfla4UHo+IOkBJhKd4ygglPrwfN/DhhlcTpZQnHRdhW/XltB/UZH05bjrO0XFyqTi9 56a+C4o97QaLvNzbdnuoVAcGwEKujkDkOjX5VpmKJ2yMAC+ujcQ4Yn5nfrHPZojxChR6SBUxOjd7 qpzavSuHjwiXC9Ah7I/B9UPwO2shAvbbkR3HcFRM0eP92tY+JOYjjyvZTWZeleRBBZwV2Et7I5yZ poU5WNbniKONSbQvdNxX3bvzvjzG9xhuVr2XtMgeyoQ0FLvC1vJn458d+lPPHr7t4gPsqeSQMd+5 LrC9I1M8jq8VqFzJp3xEaaLqDBwD86MjsQgp9w== )`
	RRSIG=8644 and DNSKEY=8644/SEP verifies the DNSKEY RRset
	RRSIG=56384 and DNSKEY=56384/SEP verifies the DNSKEY RRset
	DNSKEY=43048 is now in the chain-of-trust
	DNSKEY=8644/SEP is now in the chain-of-trust
	Query to c.zdnscloud.com for fomm.top/A
	Received 309 bytes from 203.99.26.1
	;; Answer received from 203.99.26.1 (309 bytes) ;; HEADER SECTION ;; id = 49228 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) fomm.top. 3600 IN NS anirban.ns.cloudflare.com. fomm.top. 3600 IN NS jocelyn.ns.cloudflare.com. fomm.top. 3600 IN DS ( 2371 13 2 783b144cf1dafa56e8611fb91026c204baa49b9cc19999dcc99499ad9708f5e9 ) fomm.top. 3600 IN RRSIG ( DS 8 2 3600 20210308084450 20210107042151 43048 top. g1boYTzLRhFJsZDxPOM7YoQ1Sc4d7q19dVF32H8Wrmawvi75VZTQo4EAiBQC6c0ODvTlwElsHzCK P+d/sG3fknkI0VHsqNmh3J0HB5GuMsrHL1WNXW9EzKB7qSQUGh6R1OeAr0m9D6M/BLXI3pTra/EJ knLGXm7/vV3G/8qkEAw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.zdnscloud.com for fomm.top/DNSKEY
	Received 309 bytes from 203.99.27.1
	;; Answer received from 203.99.27.1 (309 bytes) ;; HEADER SECTION ;; id = 2544 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) fomm.top. 3600 IN NS jocelyn.ns.cloudflare.com. fomm.top. 3600 IN NS anirban.ns.cloudflare.com. fomm.top. 3600 IN DS ( 2371 13 2 783b144cf1dafa56e8611fb91026c204baa49b9cc19999dcc99499ad9708f5e9 ) fomm.top. 3600 IN RRSIG ( DS 8 2 3600 20210308084450 20210107042151 43048 top. g1boYTzLRhFJsZDxPOM7YoQ1Sc4d7q19dVF32H8Wrmawvi75VZTQo4EAiBQC6c0ODvTlwElsHzCK P+d/sG3fknkI0VHsqNmh3J0HB5GuMsrHL1WNXW9EzKB7qSQUGh6R1OeAr0m9D6M/BLXI3pTra/EJ knLGXm7/vV3G/8qkEAw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fomm.top

fomm.top

	Checking DS between top and fomm.top
	Query to f.zdnscloud.com for fomm.top/DS
	Received 248 bytes from 114.67.16.204
	;; Answer received from 114.67.16.204 (248 bytes) ;; HEADER SECTION ;; id = 29885 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN DS ;; ANSWER SECTION (2 records) fomm.top. 3600 IN DS ( 2371 13 2 783b144cf1dafa56e8611fb91026c204baa49b9cc19999dcc99499ad9708f5e9 ) fomm.top. 3600 IN RRSIG ( DS 8 2 3600 20210308084450 20210107042151 43048 top. g1boYTzLRhFJsZDxPOM7YoQ1Sc4d7q19dVF32H8Wrmawvi75VZTQo4EAiBQC6c0ODvTlwElsHzCK P+d/sG3fknkI0VHsqNmh3J0HB5GuMsrHL1WNXW9EzKB7qSQUGh6R1OeAr0m9D6M/BLXI3pTra/EJ knLGXm7/vV3G/8qkEAw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for fomm.top in the top zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fomm.top. 3600 IN RRSIG ( DS 8 2 3600 20210308084450 20210107042151 43048 top. g1boYTzLRhFJsZDxPOM7YoQ1Sc4d7q19dVF32H8Wrmawvi75VZTQo4EAiBQC6c0ODvTlwElsHzCK P+d/sG3fknkI0VHsqNmh3J0HB5GuMsrHL1WNXW9EzKB7qSQUGh6R1OeAr0m9D6M/BLXI3pTra/EJ knLGXm7/vV3G/8qkEAw= )`
	RRSIG=43048 and DNSKEY=43048 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`fomm.top. 3600 IN DS ( 2371 13 2 783b144cf1dafa56e8611fb91026c204baa49b9cc19999dcc99499ad9708f5e9 )`
	Query to anirban.ns.cloudflare.com for fomm.top/DNSKEY
	Received 301 bytes from 172.64.33.64
	;; Answer received from 172.64.33.64 (301 bytes) ;; HEADER SECTION ;; id = 35515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN DNSKEY ;; ANSWER SECTION (3 records) fomm.top. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 fomm.top. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 fomm.top. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210222075749 20201224075749 2371 fomm.top. nTD4uginF6UznOLoKrm7fDQKdvCIB3qcgZZS/lVakh04QgV0OM1DvHPOevL/XTps/L+DWCI0c9uT kwtAqlVb1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for fomm.top
	`fomm.top. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`fomm.top. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fomm.top. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210222075749 20201224075749 2371 fomm.top. nTD4uginF6UznOLoKrm7fDQKdvCIB3qcgZZS/lVakh04QgV0OM1DvHPOevL/XTps/L+DWCI0c9uT kwtAqlVb1Q== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to anirban.ns.cloudflare.com for fomm.top/A
	Received 157 bytes from 172.64.33.64
	;; Answer received from 172.64.33.64 (157 bytes) ;; HEADER SECTION ;; id = 62961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN A ;; ANSWER SECTION (2 records) fomm.top. 300 IN A 140.238.196.41 fomm.top. 300 IN RRSIG ( A 13 2 300 20210127135007 20210125115007 34505 fomm.top. RfMwynAnbEQf2xHS9Y0xJZm6PuQkmg7ftITeneeSqccpW2uIyVHtnNA9uZOXyNiGT2ZuHZNXigKQ yJpvZEAprw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fomm.top is authoritative for fomm.top
	Found RRSIG signed by fomm.top zone
	Query to anirban.ns.cloudflare.com for fomm.top/SOA
	Received 206 bytes from 108.162.193.64
	;; Answer received from 108.162.193.64 (206 bytes) ;; HEADER SECTION ;; id = 7608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN SOA ;; ANSWER SECTION (2 records) fomm.top. 3600 IN SOA ( anirban.ns.cloudflare.com. dns.cloudflare.com. 2036305528 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) fomm.top. 3600 IN RRSIG ( SOA 13 2 3600 20210127135007 20210125115007 34505 fomm.top. USO12V9yCAv/75bY9f1ib1qu63MHO+Z9rxb8d0zErjh82EuWZcpfrS2ZbbywO/Rz/hZhp1ZFl4Bp j+3ToGa++A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to jocelyn.ns.cloudflare.com for fomm.top/SOA
	Received 206 bytes from 172.64.32.174
	;; Answer received from 172.64.32.174 (206 bytes) ;; HEADER SECTION ;; id = 32819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN SOA ;; ANSWER SECTION (2 records) fomm.top. 3600 IN SOA ( anirban.ns.cloudflare.com. dns.cloudflare.com. 2036305528 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) fomm.top. 3600 IN RRSIG ( SOA 13 2 3600 20210127135007 20210125115007 34505 fomm.top. nXfzTUr8551f/tW354pGTcvu8KFSUGvjwNvwbcf6l0KO2odG/R0O4EmApilpDLJU6obp0RqFCDPq n0GnrSrxew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to anirban.ns.cloudflare.com for fomm.top/A
	Received 157 bytes from 172.64.33.64
	;; Answer received from 172.64.33.64 (157 bytes) ;; HEADER SECTION ;; id = 41039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fomm.top. IN A ;; ANSWER SECTION (2 records) fomm.top. 300 IN A 140.238.196.41 fomm.top. 300 IN RRSIG ( A 13 2 300 20210127135007 20210125115007 34505 fomm.top. xH3bUhK50e5tNGCMot9G4AUY7hwLjWxszD6uuX2MZ4yg627/eF+XiSzXV2H6Wu80L/bteDxxL8EQ K5XPSD+nMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fomm.top A RR has value 140.238.196.41
	Found 1 RRSIGs over A RRset
	`fomm.top. 300 IN RRSIG ( A 13 2 300 20210127135007 20210125115007 34505 fomm.top. xH3bUhK50e5tNGCMot9G4AUY7hwLjWxszD6uuX2MZ4yg627/eF+XiSzXV2H6Wu80L/bteDxxL8EQ K5XPSD+nMA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fomm.top at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: