DNSSEC Debugger - goldenbaby.su

Domain Name:

Time: 2025-11-11 05:36:31 UTC

Analyzing DNSSEC problems for goldenbaby.su

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 10628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251201000000 20251110000000 20326 . Z8f/sJHf4Rp/UGL8oDy+jf/M9IJLtkD1SXasi/TBXZPxAiAA0l/jjD+gang8NYNQXbur7TycUflT DG7hySsoJS+8Us/N8qnIiq42/RshiaxIe3jaqdMOqSWIN8naQ7xn0S7jWHaSArWDFVUIZyBz6SVR 6LeHlIsTssDx/KWBcsx/Tz7odSq6QcuzT7+dSYQ1CDqh+RDwmcNe1Yf5sdCnryc5lctWpr+hB3b5 yNKazSA9XGI4MyQVO2qRhZd9OmB3os400ADZ6Oq3khc527h445sBpBZ4PvEMBI12m6m4hQUID+wf H8zR7DWaPQE0o9JAYfCTqwY1HIyRx9mkGJFzWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251201000000 20251110000000 20326 . Z8f/sJHf4Rp/UGL8oDy+jf/M9IJLtkD1SXasi/TBXZPxAiAA0l/jjD+gang8NYNQXbur7TycUflT DG7hySsoJS+8Us/N8qnIiq42/RshiaxIe3jaqdMOqSWIN8naQ7xn0S7jWHaSArWDFVUIZyBz6SVR 6LeHlIsTssDx/KWBcsx/Tz7odSq6QcuzT7+dSYQ1CDqh+RDwmcNe1Yf5sdCnryc5lctWpr+hB3b5 yNKazSA9XGI4MyQVO2qRhZd9OmB3os400ADZ6Oq3khc527h445sBpBZ4PvEMBI12m6m4hQUID+wf H8zR7DWaPQE0o9JAYfCTqwY1HIyRx9mkGJFzWw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to e.root-servers.net for goldenbaby.su/A
	Received 689 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 689 octets ;; HEADER SECTION ;; id = 53076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS a.dns.ripn.net. su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251123210000 20251110200000 61809 . 4dvKzq6fE/eIOFfATeLQSAQi0PL5h1SObVGmYMk2mOZryCTJZtP7HMoQGUcfHCUfSNZsVNXkAp2q zNiXK/gd5ymRkzw30/rIevuIACLtzdWdH78g47yA13u8TS8p4x7szDOySBgAHAyfVXzscLWzl61D wJnPRThImb2uUkGTN9wL1Awzq7Jwi/bUmCInnVTmCgEFDkrorJMh6vuWRHzKpxSWhk8JFRlbve5s YlUO18H0EFWSAsc6WPUVTem8PEqtgbFJoM3eUbQ7p0I64AKXkoi9DdO58n8uz2Vbs/pFSmH4AeVX 0XphCB0VtYDZmagVGOL/kztC3dIDWhwsiWJr6Q== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for su/DNSKEY
	Received 678 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 678 octets ;; HEADER SECTION ;; id = 50834 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS a.dns.ripn.net. su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251123210000 20251110200000 61809 . 4dvKzq6fE/eIOFfATeLQSAQi0PL5h1SObVGmYMk2mOZryCTJZtP7HMoQGUcfHCUfSNZsVNXkAp2q zNiXK/gd5ymRkzw30/rIevuIACLtzdWdH78g47yA13u8TS8p4x7szDOySBgAHAyfVXzscLWzl61D wJnPRThImb2uUkGTN9wL1Awzq7Jwi/bUmCInnVTmCgEFDkrorJMh6vuWRHzKpxSWhk8JFRlbve5s YlUO18H0EFWSAsc6WPUVTem8PEqtgbFJoM3eUbQ7p0I64AKXkoi9DdO58n8uz2Vbs/pFSmH4AeVX 0XphCB0VtYDZmagVGOL/kztC3dIDWhwsiWJr6Q== ) ;; ADDITIONAL SECTION (11 records) b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone su

	Checking DS between . and su
	Query to e.root-servers.net for su/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 42731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DS ;; ANSWER SECTION (2 records) su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251123210000 20251110200000 61809 . 4dvKzq6fE/eIOFfATeLQSAQi0PL5h1SObVGmYMk2mOZryCTJZtP7HMoQGUcfHCUfSNZsVNXkAp2q zNiXK/gd5ymRkzw30/rIevuIACLtzdWdH78g47yA13u8TS8p4x7szDOySBgAHAyfVXzscLWzl61D wJnPRThImb2uUkGTN9wL1Awzq7Jwi/bUmCInnVTmCgEFDkrorJMh6vuWRHzKpxSWhk8JFRlbve5s YlUO18H0EFWSAsc6WPUVTem8PEqtgbFJoM3eUbQ7p0I64AKXkoi9DdO58n8uz2Vbs/pFSmH4AeVX 0XphCB0VtYDZmagVGOL/kztC3dIDWhwsiWJr6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for su in the . zone
	DS=31297/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`su. 86400 IN RRSIG ( DS 8 1 86400 20251123210000 20251110200000 61809 . 4dvKzq6fE/eIOFfATeLQSAQi0PL5h1SObVGmYMk2mOZryCTJZtP7HMoQGUcfHCUfSNZsVNXkAp2q zNiXK/gd5ymRkzw30/rIevuIACLtzdWdH78g47yA13u8TS8p4x7szDOySBgAHAyfVXzscLWzl61D wJnPRThImb2uUkGTN9wL1Awzq7Jwi/bUmCInnVTmCgEFDkrorJMh6vuWRHzKpxSWhk8JFRlbve5s YlUO18H0EFWSAsc6WPUVTem8PEqtgbFJoM3eUbQ7p0I64AKXkoi9DdO58n8uz2Vbs/pFSmH4AeVX 0XphCB0VtYDZmagVGOL/kztC3dIDWhwsiWJr6Q== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=31297/SHA-256 is now in the chain-of-trust
	`su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 )`
	Query to f.dns.ripn.net for su/DNSKEY
	Received 745 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 745 octets ;; HEADER SECTION ;; id = 9965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (3 records) su. 345600 IN DNSKEY ( 256 3 8 AwEAAeyFlyWSGpAWmeyYx5KE9EcR3Ntugb60YLDz/C7YUhc2li1AZUiKArqVSLorm68W6dg+IUCz xDF/scRduerzOT/SQI5iQFwhxX3rDlPeqp9GZV0/H0WNUuv6NFe1aikLXe/VOxa2VQ5mwr5pOA+3 aN8n7qB/nTUKxr/TcRdu2WZR ) ; keytag 14565 su. 345600 IN DNSKEY ( 257 3 8 AwEAAaiX7pBUfcVtTUTt0u9edarRAb9gjmAuZ0LK50S6C2LUnQs+7FeQ6GzoBcHu7JRg/u5pUUU8 Si3XHEK0vzeQZa0kq/Q/SACIwpL9zHm0mTnB6xRuQJh7+dqotySIICIfyj9sb5naA3DHSihj818E dsXZ+4eS0sIQG03gn0WdBL21u+PXoOMc8eB/NUG40jDsBop2VGllh2N0iLEKp8Rn8k7mLjJL/DKt 1m7uTQJR9CsFW2rD4W7rtNeOZbVc1tIOPvczv+Oo9xlD8MB5z60oXmbQHiMXQTA1n7HBpwVvbtBm ssJ8j8tRgJ+ZTjjCntlVq8ppRPFQZ8c42A06/GcpEgE= ) ; keytag 31297 su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20251124000000 20251104000000 31297 su. kBqmjMUIdnjOCsF3P2+oHI7FGq9ycPhRlBuVNAt/r37jBpgOk31UJPUnIzcFhbOtuC1OiUKYmn8B gxL6uuQxUrd1hL8rhgckkob5UfC+ZsDlZAVlBuDsNIQkUDO/hLHIBQUCKPpbKc14DVklQKFbBGhU xWN5JR8FkUoG+txw5HxW9Q2bJAivWjnolitqAkmtImYlYgIvfmHiskgTkokXY03Hw1xQrcsyrQgD G407uprHdXcpuMfhu4zOVnXOs6rD9pz3vxH2IZDetRjprL813zSIcYgP7kMeW5QhQYFv9Ll42KYo j6Q8ZDVOngkn4/U+Hr7/nGTAmeTQ0RttmsU7Rw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for su
	`su. 345600 IN DNSKEY ( 256 3 8 AwEAAeyFlyWSGpAWmeyYx5KE9EcR3Ntugb60YLDz/C7YUhc2li1AZUiKArqVSLorm68W6dg+IUCz xDF/scRduerzOT/SQI5iQFwhxX3rDlPeqp9GZV0/H0WNUuv6NFe1aikLXe/VOxa2VQ5mwr5pOA+3 aN8n7qB/nTUKxr/TcRdu2WZR ) ; keytag 14565`
	`su. 345600 IN DNSKEY ( 257 3 8 AwEAAaiX7pBUfcVtTUTt0u9edarRAb9gjmAuZ0LK50S6C2LUnQs+7FeQ6GzoBcHu7JRg/u5pUUU8 Si3XHEK0vzeQZa0kq/Q/SACIwpL9zHm0mTnB6xRuQJh7+dqotySIICIfyj9sb5naA3DHSihj818E dsXZ+4eS0sIQG03gn0WdBL21u+PXoOMc8eB/NUG40jDsBop2VGllh2N0iLEKp8Rn8k7mLjJL/DKt 1m7uTQJR9CsFW2rD4W7rtNeOZbVc1tIOPvczv+Oo9xlD8MB5z60oXmbQHiMXQTA1n7HBpwVvbtBm ssJ8j8tRgJ+ZTjjCntlVq8ppRPFQZ8c42A06/GcpEgE= ) ; keytag 31297`
	DNSKEY=31297/SEP is now in the chain-of-trust
	DS=31297/SHA-256 verifies DNSKEY=31297/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20251124000000 20251104000000 31297 su. kBqmjMUIdnjOCsF3P2+oHI7FGq9ycPhRlBuVNAt/r37jBpgOk31UJPUnIzcFhbOtuC1OiUKYmn8B gxL6uuQxUrd1hL8rhgckkob5UfC+ZsDlZAVlBuDsNIQkUDO/hLHIBQUCKPpbKc14DVklQKFbBGhU xWN5JR8FkUoG+txw5HxW9Q2bJAivWjnolitqAkmtImYlYgIvfmHiskgTkokXY03Hw1xQrcsyrQgD G407uprHdXcpuMfhu4zOVnXOs6rD9pz3vxH2IZDetRjprL813zSIcYgP7kMeW5QhQYFv9Ll42KYo j6Q8ZDVOngkn4/U+Hr7/nGTAmeTQ0RttmsU7Rw== )`
	RRSIG=31297 and DNSKEY=31297/SEP verifies the DNSKEY RRset
	DNSKEY=14565 is now in the chain-of-trust
	Query to a.dns.ripn.net for goldenbaby.su/A
	Received 596 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 596 octets ;; HEADER SECTION ;; id = 21585 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOLDENBABY.su. 345600 IN NS ns4.nic.ru. GOLDENBABY.su. 345600 IN NS ns3.nic.ru. GOLDENBABY.su. 345600 IN NS ns8.nic.ru. VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129063113 20251016075521 14565 su. 0yhu2UNVhgmQEwHghHiblorg7UhIktemnX1T8GzclzZGtqLKGbCzhdq4a1Bp6Zn9mS0OqUZm6dhl suFKlTc/n1ExX9SJnwPHG5wzUAYKtIbo7z7zvmckRN1ORz6EvxFiONHzoYRS6oTOwovOSe8KG0FV 9Gk5gl9muQ7JO041Yo4= ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129192032 20251016075521 14565 su. mQ3/rnpHLhyJ2Q/yzjF21YFVgQ7jiIXIwxTk5ns/fab8JrnUo8vZ76FgrWkNwiFZWiwHl3SzzXJy ScBta9MhOYprmLMBoFFVxqMAVzS2WYNZ7yPuA0EhF+W8y6m6/GeFqTsVAImISKn7Fgk96GfU7xX1 ldW+b+YjBDymBoOhzB0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.dns.ripn.net for goldenbaby.su/DNSKEY
	Received 585 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 585 octets ;; HEADER SECTION ;; id = 25586 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) goldenbaby.su. 345600 IN NS ns3.nic.ru. goldenbaby.su. 345600 IN NS ns4.nic.ru. goldenbaby.su. 345600 IN NS ns8.nic.ru. vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129063113 20251016075521 14565 su. 0yhu2UNVhgmQEwHghHiblorg7UhIktemnX1T8GzclzZGtqLKGbCzhdq4a1Bp6Zn9mS0OqUZm6dhl suFKlTc/n1ExX9SJnwPHG5wzUAYKtIbo7z7zvmckRN1ORz6EvxFiONHzoYRS6oTOwovOSe8KG0FV 9Gk5gl9muQ7JO041Yo4= ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129192032 20251016075521 14565 su. mQ3/rnpHLhyJ2Q/yzjF21YFVgQ7jiIXIwxTk5ns/fab8JrnUo8vZ76FgrWkNwiFZWiwHl3SzzXJy ScBta9MhOYprmLMBoFFVxqMAVzS2WYNZ7yPuA0EhF+W8y6m6/GeFqTsVAImISKn7Fgk96GfU7xX1 ldW+b+YjBDymBoOhzB0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone goldenbaby.su

goldenbaby.su

	Checking DS between su and goldenbaby.su
	Query to a.dns.ripn.net for goldenbaby.su/DS
	Received 748 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 748 octets ;; HEADER SECTION ;; id = 10876 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) su. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 650206885 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) su. 3600 IN RRSIG ( SOA 8 1 345600 20251214130958 20251111035521 14565 su. dx4efkaZL1dLonda8Ok91fxCyjKQw+oB7UT+ChcvkZAIGogHKZvS7BcWNq272IWzcV4Jtk+jv+ms tkalO96uspF7LxKToMX51psL8rcrNmmse7FnQymvcNTiTSLqg/icylhmJ+S8XR2adUzjfyP/5KZZ DpSZRF/v2X0nulv0n04= ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129063113 20251016075521 14565 su. 0yhu2UNVhgmQEwHghHiblorg7UhIktemnX1T8GzclzZGtqLKGbCzhdq4a1Bp6Zn9mS0OqUZm6dhl suFKlTc/n1ExX9SJnwPHG5wzUAYKtIbo7z7zvmckRN1ORz6EvxFiONHzoYRS6oTOwovOSe8KG0FV 9Gk5gl9muQ7JO041Yo4= ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251129192032 20251016075521 14565 su. mQ3/rnpHLhyJ2Q/yzjF21YFVgQ7jiIXIwxTk5ns/fab8JrnUo8vZ76FgrWkNwiFZWiwHl3SzzXJy ScBta9MhOYprmLMBoFFVxqMAVzS2WYNZ7yPuA0EhF+W8y6m6/GeFqTsVAImISKn7Fgk96GfU7xX1 ldW+b+YjBDymBoOhzB0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for goldenbaby.su in the su zone
	Query to ns4.nic.ru for goldenbaby.su/DNSKEY
	Received 94 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 94 octets ;; HEADER SECTION ;; id = 51013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.85.61.20
	;; Response received from [194.85.61.20] 58 octets ;; HEADER SECTION ;; id = 48103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nic.ru is authoritative for goldenbaby.su
	Query to ns4.nic.ru for goldenbaby.su/SOA
	Received 94 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 94 octets ;; HEADER SECTION ;; id = 2023 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN SOA ;; ANSWER SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns8.nic.ru for goldenbaby.su/SOA
	Received 94 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 94 octets ;; HEADER SECTION ;; id = 45364 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN SOA ;; ANSWER SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.85.61.20
	;; Response received from [194.85.61.20] 58 octets ;; HEADER SECTION ;; id = 32008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

goldenbaby.su

	Query to ns4.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 58 octets ;; HEADER SECTION ;; id = 60152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.nic.ru is authoritative for goldenbaby.su
	Query to ns4.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 58 octets ;; HEADER SECTION ;; id = 26605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

goldenbaby.su

	Query to ns8.nic.ru for goldenbaby.su/A
	Received 58 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 58 octets ;; HEADER SECTION ;; id = 7744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns8.nic.ru is authoritative for goldenbaby.su
	Query to ns8.nic.ru for goldenbaby.su/A
	Received 58 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 58 octets ;; HEADER SECTION ;; id = 8704 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test goldenbaby.su at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: