DNSSEC Analyzer

Domain Name:

Time: 2021-03-19 02:30:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for frm.li

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 56144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to j.root-servers.net for frm.li/A
	Received 794 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (794 bytes) ;; HEADER SECTION ;; id = 7915 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) li. 172800 IN NS f.nic.li. li. 172800 IN NS g.nic.li. li. 172800 IN NS c.nic.li. li. 172800 IN NS a.nic.li. li. 172800 IN NS h.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS e.nic.li. li. 86400 IN DS ( 62844 13 2 1a0be40aa38a254f97cdf811acb4e33872a087e718fd3ba3828e3d59c706c3e4 ) li. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . cY/XmfL/2Mx5z2oEuItoftLSmKkbpRc3UTbXAhcsqpEY5/YuMIHB399Sl3bGNSVuhO+KgaHfWAJC HKzcHSFUoSCEIwE8k48tWs2gQnsuGCt6NCxrBjPFSPhbA4f7pNILiOsOHM7I1t7cVe4ZMyvbxyvE Y6UN1CE3ehL35jJrlVDfebSJYBifis15wxd4RPPHCxuXKMEqcIJlpGZEHkV9gwfi3wIQOKCwLqcy dhCK62y0bYDd6iuep9h+/4f/iuxV5tfp90ChDYy9FT7qxYRHR54WCRnTu1qJyWfqdvbZlZPHOA1y ePMn+9yM+hbKmGSm61thDW1ZUgiwd3wgRl+cew== ) ;; ADDITIONAL SECTION (15 records) f.nic.li. 172800 IN A 194.146.106.14 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN A 194.0.1.40 g.nic.li. 172800 IN AAAA 2001:678:4::28 c.nic.li. 172800 IN A 74.116.178.40 c.nic.li. 172800 IN AAAA 2620:7d:e000::28 a.nic.li. 172800 IN A 130.59.31.42 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 h.nic.li. 172800 IN A 85.119.5.230 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 b.nic.li. 172800 IN A 130.59.31.44 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 e.nic.li. 172800 IN A 194.0.17.1 e.nic.li. 172800 IN AAAA 2001:678:3::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for li/DNSKEY
	Received 790 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (790 bytes) ;; HEADER SECTION ;; id = 62127 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) li. 172800 IN NS a.nic.li. li. 172800 IN NS b.nic.li. li. 172800 IN NS c.nic.li. li. 172800 IN NS e.nic.li. li. 172800 IN NS f.nic.li. li. 172800 IN NS g.nic.li. li. 172800 IN NS h.nic.li. li. 86400 IN DS ( 62844 13 2 1a0be40aa38a254f97cdf811acb4e33872a087e718fd3ba3828e3d59c706c3e4 ) li. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . cY/XmfL/2Mx5z2oEuItoftLSmKkbpRc3UTbXAhcsqpEY5/YuMIHB399Sl3bGNSVuhO+KgaHfWAJC HKzcHSFUoSCEIwE8k48tWs2gQnsuGCt6NCxrBjPFSPhbA4f7pNILiOsOHM7I1t7cVe4ZMyvbxyvE Y6UN1CE3ehL35jJrlVDfebSJYBifis15wxd4RPPHCxuXKMEqcIJlpGZEHkV9gwfi3wIQOKCwLqcy dhCK62y0bYDd6iuep9h+/4f/iuxV5tfp90ChDYy9FT7qxYRHR54WCRnTu1qJyWfqdvbZlZPHOA1y ePMn+9yM+hbKmGSm61thDW1ZUgiwd3wgRl+cew== ) ;; ADDITIONAL SECTION (15 records) a.nic.li. 172800 IN A 130.59.31.42 b.nic.li. 172800 IN A 130.59.31.44 c.nic.li. 172800 IN A 74.116.178.40 e.nic.li. 172800 IN A 194.0.17.1 f.nic.li. 172800 IN A 194.146.106.14 g.nic.li. 172800 IN A 194.0.1.40 h.nic.li. 172800 IN A 85.119.5.230 a.nic.li. 172800 IN AAAA 2001:620:0:ff::57 b.nic.li. 172800 IN AAAA 2001:620:0:ff::59 c.nic.li. 172800 IN AAAA 2620:7d:e000::28 e.nic.li. 172800 IN AAAA 2001:678:3::1 f.nic.li. 172800 IN AAAA 2001:67c:1010:3::53 g.nic.li. 172800 IN AAAA 2001:678:4::28 h.nic.li. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone li

	Checking DS between . and li
	Query to d.root-servers.net for li/DS
	Received 366 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (366 bytes) ;; HEADER SECTION ;; id = 60199 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DS ;; ANSWER SECTION (2 records) li. 86400 IN DS ( 62844 13 2 1a0be40aa38a254f97cdf811acb4e33872a087e718fd3ba3828e3d59c706c3e4 ) li. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . cY/XmfL/2Mx5z2oEuItoftLSmKkbpRc3UTbXAhcsqpEY5/YuMIHB399Sl3bGNSVuhO+KgaHfWAJC HKzcHSFUoSCEIwE8k48tWs2gQnsuGCt6NCxrBjPFSPhbA4f7pNILiOsOHM7I1t7cVe4ZMyvbxyvE Y6UN1CE3ehL35jJrlVDfebSJYBifis15wxd4RPPHCxuXKMEqcIJlpGZEHkV9gwfi3wIQOKCwLqcy dhCK62y0bYDd6iuep9h+/4f/iuxV5tfp90ChDYy9FT7qxYRHR54WCRnTu1qJyWfqdvbZlZPHOA1y ePMn+9yM+hbKmGSm61thDW1ZUgiwd3wgRl+cew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for li in the . zone
	DS=62844/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`li. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . cY/XmfL/2Mx5z2oEuItoftLSmKkbpRc3UTbXAhcsqpEY5/YuMIHB399Sl3bGNSVuhO+KgaHfWAJC HKzcHSFUoSCEIwE8k48tWs2gQnsuGCt6NCxrBjPFSPhbA4f7pNILiOsOHM7I1t7cVe4ZMyvbxyvE Y6UN1CE3ehL35jJrlVDfebSJYBifis15wxd4RPPHCxuXKMEqcIJlpGZEHkV9gwfi3wIQOKCwLqcy dhCK62y0bYDd6iuep9h+/4f/iuxV5tfp90ChDYy9FT7qxYRHR54WCRnTu1qJyWfqdvbZlZPHOA1y ePMn+9yM+hbKmGSm61thDW1ZUgiwd3wgRl+cew== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=62844/SHA-256 is now in the chain-of-trust
	`li. 86400 IN DS ( 62844 13 2 1a0be40aa38a254f97cdf811acb4e33872a087e718fd3ba3828e3d59c706c3e4 )`
	Query to b.nic.li for li/DNSKEY
	Received 369 bytes from 130.59.31.44
	;; Answer received from 130.59.31.44 (369 bytes) ;; HEADER SECTION ;; id = 57993 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; li. IN DNSKEY ;; ANSWER SECTION (4 records) li. 86400 IN DNSKEY ( 256 3 13 OEqNBnUh+YMluI1hIqJTLXccKJZDlBlts74HHRQBPX1Ua5ObnoKVeHZIazMDwDaGRTGBIScecEC/ SxnSX/qBCw== ) ; Key ID = 47507 li. 86400 IN DNSKEY ( 257 3 13 RQr+Jxsnj+yF32gCEiwi1/UTwTGkl+WrKD1u+6qExmZ/rmmPSzMBbAcQMXVr02N0Sn0V/r+lHTit c6cXZ8ZgQQ== ) ; Key ID = 62844 li. 86400 IN DNSKEY ( 256 3 13 oNeayQjiYWmYohH6w0SHNUAWaGKK3rL7t6RnODv4R242ET4+JObkf6Mlpd10hNgRAqJwenzjAEV0 eWoNN7M3Bg== ) ; Key ID = 30843 li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210425100909 20210310090909 62844 li. VBKHSIOEPxq9YMWQ+KnoMbLyoq9WymFxcSD+84LuoHg/nhRgf7TieTKw4B/95Jwnbn5UHD4iHlwo QtjixinpCA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for li
	`li. 86400 IN DNSKEY ( 256 3 13 OEqNBnUh+YMluI1hIqJTLXccKJZDlBlts74HHRQBPX1Ua5ObnoKVeHZIazMDwDaGRTGBIScecEC/ SxnSX/qBCw== ) ; Key ID = 47507`
	`li. 86400 IN DNSKEY ( 257 3 13 RQr+Jxsnj+yF32gCEiwi1/UTwTGkl+WrKD1u+6qExmZ/rmmPSzMBbAcQMXVr02N0Sn0V/r+lHTit c6cXZ8ZgQQ== ) ; Key ID = 62844`
	`li. 86400 IN DNSKEY ( 256 3 13 oNeayQjiYWmYohH6w0SHNUAWaGKK3rL7t6RnODv4R242ET4+JObkf6Mlpd10hNgRAqJwenzjAEV0 eWoNN7M3Bg== ) ; Key ID = 30843`
	DNSKEY=62844/SEP is now in the chain-of-trust
	DS=62844/SHA-256 verifies DNSKEY=62844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`li. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210425100909 20210310090909 62844 li. VBKHSIOEPxq9YMWQ+KnoMbLyoq9WymFxcSD+84LuoHg/nhRgf7TieTKw4B/95Jwnbn5UHD4iHlwo QtjixinpCA== )`
	RRSIG=62844 and DNSKEY=62844/SEP verifies the DNSKEY RRset
	DNSKEY=47507 is now in the chain-of-trust
	DNSKEY=30843 is now in the chain-of-trust
	Query to c.nic.li for frm.li/A
	Received 255 bytes from 74.116.178.40
	;; Answer received from 74.116.178.40 (255 bytes) ;; HEADER SECTION ;; id = 25371 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) frm.li. 3600 IN NS zod.ns.cloudflare.com. frm.li. 3600 IN NS melissa.ns.cloudflare.com. frm.li. 3600 IN DS ( 2371 13 2 d5428b61dc20097fa593a9bfffeba8f896be1c0e0785c346725d5237b2f75db8 ) frm.li. 3600 IN RRSIG ( DS 13 2 3600 20210416023254 20210317020007 47507 li. ChoM1g5FZHwtiyk/gwyf4pbjedJl5tSnbxx2m7HOnR9N4NHRhXBv2LZVA8CsRz3U69v4KigalbC1 tw9kuS0Kfg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.nic.li for frm.li/DNSKEY
	Received 255 bytes from 74.116.178.40
	;; Answer received from 74.116.178.40 (255 bytes) ;; HEADER SECTION ;; id = 50984 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) frm.li. 3600 IN NS zod.ns.cloudflare.com. frm.li. 3600 IN NS melissa.ns.cloudflare.com. frm.li. 3600 IN DS ( 2371 13 2 d5428b61dc20097fa593a9bfffeba8f896be1c0e0785c346725d5237b2f75db8 ) frm.li. 3600 IN RRSIG ( DS 13 2 3600 20210416023254 20210317020007 47507 li. ChoM1g5FZHwtiyk/gwyf4pbjedJl5tSnbxx2m7HOnR9N4NHRhXBv2LZVA8CsRz3U69v4KigalbC1 tw9kuS0Kfg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone frm.li

frm.li

	Checking DS between li and frm.li
	Query to h.nic.li for frm.li/DS
	Received 181 bytes from 85.119.5.230
	;; Answer received from 85.119.5.230 (181 bytes) ;; HEADER SECTION ;; id = 10148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN DS ;; ANSWER SECTION (2 records) frm.li. 3600 IN DS ( 2371 13 2 d5428b61dc20097fa593a9bfffeba8f896be1c0e0785c346725d5237b2f75db8 ) frm.li. 3600 IN RRSIG ( DS 13 2 3600 20210416023254 20210317020007 47507 li. ChoM1g5FZHwtiyk/gwyf4pbjedJl5tSnbxx2m7HOnR9N4NHRhXBv2LZVA8CsRz3U69v4KigalbC1 tw9kuS0Kfg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for frm.li in the li zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`frm.li. 3600 IN RRSIG ( DS 13 2 3600 20210416023254 20210317020007 47507 li. ChoM1g5FZHwtiyk/gwyf4pbjedJl5tSnbxx2m7HOnR9N4NHRhXBv2LZVA8CsRz3U69v4KigalbC1 tw9kuS0Kfg== )`
	RRSIG=47507 and DNSKEY=47507 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`frm.li. 3600 IN DS ( 2371 13 2 d5428b61dc20097fa593a9bfffeba8f896be1c0e0785c346725d5237b2f75db8 )`
	Query to zod.ns.cloudflare.com for frm.li/DNSKEY
	Received 297 bytes from 172.64.33.250
	;; Answer received from 172.64.33.250 (297 bytes) ;; HEADER SECTION ;; id = 38583 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN DNSKEY ;; ANSWER SECTION (3 records) frm.li. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 frm.li. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 frm.li. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210417164927 20210216164927 2371 frm.li. DjPZqXg6+EZYBMtUI4tIqrz8bC/cHPnjzNDQK1ac4pnomgfGDfxPMEcDBDP5xCzIk8h5eqUqbLFk zn5WUCZBUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for frm.li
	`frm.li. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`frm.li. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`frm.li. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210417164927 20210216164927 2371 frm.li. DjPZqXg6+EZYBMtUI4tIqrz8bC/cHPnjzNDQK1ac4pnomgfGDfxPMEcDBDP5xCzIk8h5eqUqbLFk zn5WUCZBUQ== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to zod.ns.cloudflare.com for frm.li/A
	Received 153 bytes from 108.162.193.250
	;; Answer received from 108.162.193.250 (153 bytes) ;; HEADER SECTION ;; id = 38426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN A ;; ANSWER SECTION (2 records) frm.li. 300 IN A 64.227.86.110 frm.li. 300 IN RRSIG ( A 13 2 300 20210320033002 20210318013002 34505 frm.li. 3gT4Pv9/WBZalPf3MUkS+2iCzqs+I3u5JBX/i88GUqk48oZgxoJBAJPYtqiugRn3TjSRST1IF48A aAqasrRWog== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	frm.li is authoritative for frm.li
	Found RRSIG signed by frm.li zone
	Query to zod.ns.cloudflare.com for frm.li/SOA
	Received 202 bytes from 173.245.59.250
	;; Answer received from 173.245.59.250 (202 bytes) ;; HEADER SECTION ;; id = 40425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN SOA ;; ANSWER SECTION (2 records) frm.li. 3600 IN SOA ( melissa.ns.cloudflare.com. dns.cloudflare.com. 2036775278 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) frm.li. 3600 IN RRSIG ( SOA 13 2 3600 20210320033002 20210318013002 34505 frm.li. JGZY4HHo8lZUuZJlCWECOfXo2Bu3HDuWQBquAqTiEWLEY29XgsE01VUnMeBpS8QVW9Ezj0XPC0kB RjlmOF1O1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to melissa.ns.cloudflare.com for frm.li/SOA
	Received 202 bytes from 172.64.32.199
	;; Answer received from 172.64.32.199 (202 bytes) ;; HEADER SECTION ;; id = 51416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN SOA ;; ANSWER SECTION (2 records) frm.li. 3600 IN SOA ( melissa.ns.cloudflare.com. dns.cloudflare.com. 2036775278 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) frm.li. 3600 IN RRSIG ( SOA 13 2 3600 20210320033002 20210318013002 34505 frm.li. ATE/7WnLJ9WlFaIl9o5NcqeBt31X/IJAh5wxMnjWuoF3rJSwwBDq2sxZ2CFgrDwljcp86thjHM9m 0t9R8dUWbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to zod.ns.cloudflare.com for frm.li/A
	Received 153 bytes from 173.245.59.250
	;; Answer received from 173.245.59.250 (153 bytes) ;; HEADER SECTION ;; id = 28578 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; frm.li. IN A ;; ANSWER SECTION (2 records) frm.li. 300 IN A 64.227.86.110 frm.li. 300 IN RRSIG ( A 13 2 300 20210320033002 20210318013002 34505 frm.li. ut6dtgUD7jPyDWQVA1v4VlGkvvcM+7ZvdfX3Xln8EwUNxRIL/zZNZT2UxKkbPlWD0dTVqi+VMqQx cE3LxyFwPQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	frm.li A RR has value 64.227.86.110
	Found 1 RRSIGs over A RRset
	`frm.li. 300 IN RRSIG ( A 13 2 300 20210320033002 20210318013002 34505 frm.li. ut6dtgUD7jPyDWQVA1v4VlGkvvcM+7ZvdfX3Xln8EwUNxRIL/zZNZT2UxKkbPlWD0dTVqi+VMqQx cE3LxyFwPQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test frm.li at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: