DNSSEC Analyzer

Domain Name:

Time: 2021-05-14 22:28:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for id0.gr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 57938 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to i.root-servers.net for id0.gr/A
	Received 707 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (707 bytes) ;; HEADER SECTION ;; id = 31111 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) gr. 172800 IN NS gr-at.ics.forth.gr. gr. 172800 IN NS grdns.ics.forth.gr. gr. 172800 IN NS gr-m.ics.forth.gr. gr. 172800 IN NS gr-c.ics.forth.gr. gr. 172800 IN NS estia.ics.forth.gr. gr. 172800 IN NS gr-d.ics.forth.gr. gr. 86400 IN DS ( 35136 7 2 f7bf4c362b838c2069c9083fd38846bbb5d79edbde298f9268997307ea7dd5c3 ) gr. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . rpz94YdKVRYwKpxYd/Il0MnGd6Smzj3Spx9fywA2R4Q4x13zceyPSJEbH/egZdEXL/tVH1kbAu8w FCKgxzcdlySgUXWTCT8M4i6jH7Dd+NrWD/RerWUvyrJH3zeaXrnPISUGikTESmQyD2LtEJfXSTft E9kj7gNnkIdtLt62mGb0wuYB+BWtAMbij4lIt/wJzhmv7jCDeZAFyK/uLUPsLOgAP9PL3or7OATY GJTh9iRy5BgsxaxlGK42moO9nOxyRJr0LlZLlR3PWgXEIHyuAl8dqYPSCIeYskTBiuoDRIUM5rHh 11jnG3t+bDrj/rAtIokwRxzOj0RrLYQnX7cpVg== ) ;; ADDITIONAL SECTION (11 records) grdns.ics.forth.gr. 172800 IN A 139.91.1.1 gr-at.ics.forth.gr. 172800 IN A 78.104.145.227 estia.ics.forth.gr. 172800 IN A 139.91.191.3 gr-m.ics.forth.gr. 172800 IN A 194.0.4.10 gr-d.ics.forth.gr. 172800 IN A 194.0.11.102 gr-c.ics.forth.gr. 172800 IN A 194.0.1.25 estia.ics.forth.gr. 172800 IN AAAA 2001:648:2c30::191:3 gr-m.ics.forth.gr. 172800 IN AAAA 2001:678:7::4:10 gr-d.ics.forth.gr. 172800 IN AAAA 2001:678:e:102::53 gr-c.ics.forth.gr. 172800 IN AAAA 2001:678:4::19 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for gr/DNSKEY
	Received 701 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (701 bytes) ;; HEADER SECTION ;; id = 26366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) gr. 172800 IN NS gr-c.ics.forth.gr. gr. 172800 IN NS gr-d.ics.forth.gr. gr. 172800 IN NS gr-m.ics.forth.gr. gr. 172800 IN NS estia.ics.forth.gr. gr. 172800 IN NS gr-at.ics.forth.gr. gr. 172800 IN NS grdns.ics.forth.gr. gr. 86400 IN DS ( 35136 7 2 f7bf4c362b838c2069c9083fd38846bbb5d79edbde298f9268997307ea7dd5c3 ) gr. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . rpz94YdKVRYwKpxYd/Il0MnGd6Smzj3Spx9fywA2R4Q4x13zceyPSJEbH/egZdEXL/tVH1kbAu8w FCKgxzcdlySgUXWTCT8M4i6jH7Dd+NrWD/RerWUvyrJH3zeaXrnPISUGikTESmQyD2LtEJfXSTft E9kj7gNnkIdtLt62mGb0wuYB+BWtAMbij4lIt/wJzhmv7jCDeZAFyK/uLUPsLOgAP9PL3or7OATY GJTh9iRy5BgsxaxlGK42moO9nOxyRJr0LlZLlR3PWgXEIHyuAl8dqYPSCIeYskTBiuoDRIUM5rHh 11jnG3t+bDrj/rAtIokwRxzOj0RrLYQnX7cpVg== ) ;; ADDITIONAL SECTION (11 records) gr-c.ics.forth.gr. 172800 IN A 194.0.1.25 gr-d.ics.forth.gr. 172800 IN A 194.0.11.102 gr-m.ics.forth.gr. 172800 IN A 194.0.4.10 estia.ics.forth.gr. 172800 IN A 139.91.191.3 gr-at.ics.forth.gr. 172800 IN A 78.104.145.227 grdns.ics.forth.gr. 172800 IN A 139.91.1.1 gr-c.ics.forth.gr. 172800 IN AAAA 2001:678:4::19 gr-d.ics.forth.gr. 172800 IN AAAA 2001:678:e:102::53 gr-m.ics.forth.gr. 172800 IN AAAA 2001:678:7::4:10 estia.ics.forth.gr. 172800 IN AAAA 2001:648:2c30::191:3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone gr

	Checking DS between . and gr
	Query to k.root-servers.net for gr/DS
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 42442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; gr. IN DS ;; ANSWER SECTION (2 records) gr. 86400 IN DS ( 35136 7 2 f7bf4c362b838c2069c9083fd38846bbb5d79edbde298f9268997307ea7dd5c3 ) gr. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . rpz94YdKVRYwKpxYd/Il0MnGd6Smzj3Spx9fywA2R4Q4x13zceyPSJEbH/egZdEXL/tVH1kbAu8w FCKgxzcdlySgUXWTCT8M4i6jH7Dd+NrWD/RerWUvyrJH3zeaXrnPISUGikTESmQyD2LtEJfXSTft E9kj7gNnkIdtLt62mGb0wuYB+BWtAMbij4lIt/wJzhmv7jCDeZAFyK/uLUPsLOgAP9PL3or7OATY GJTh9iRy5BgsxaxlGK42moO9nOxyRJr0LlZLlR3PWgXEIHyuAl8dqYPSCIeYskTBiuoDRIUM5rHh 11jnG3t+bDrj/rAtIokwRxzOj0RrLYQnX7cpVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for gr in the . zone
	DS=35136/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`gr. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . rpz94YdKVRYwKpxYd/Il0MnGd6Smzj3Spx9fywA2R4Q4x13zceyPSJEbH/egZdEXL/tVH1kbAu8w FCKgxzcdlySgUXWTCT8M4i6jH7Dd+NrWD/RerWUvyrJH3zeaXrnPISUGikTESmQyD2LtEJfXSTft E9kj7gNnkIdtLt62mGb0wuYB+BWtAMbij4lIt/wJzhmv7jCDeZAFyK/uLUPsLOgAP9PL3or7OATY GJTh9iRy5BgsxaxlGK42moO9nOxyRJr0LlZLlR3PWgXEIHyuAl8dqYPSCIeYskTBiuoDRIUM5rHh 11jnG3t+bDrj/rAtIokwRxzOj0RrLYQnX7cpVg== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=35136/SHA-256 is now in the chain-of-trust
	`gr. 86400 IN DS ( 35136 7 2 f7bf4c362b838c2069c9083fd38846bbb5d79edbde298f9268997307ea7dd5c3 )`
	Query to gr-d.ics.forth.gr for gr/DNSKEY
	Received 1055 bytes from 194.0.11.102
	;; Answer received from 194.0.11.102 (1055 bytes) ;; HEADER SECTION ;; id = 20314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; gr. IN DNSKEY ;; ANSWER SECTION (5 records) gr. 10800 IN DNSKEY ( 256 3 7 AwEAAbX6prErwL2xKZjmHjN+eurJ1kXrRF88l1xLQIMNTWmrtwU0NIfAySrzimjPrWho/HrYhriW tyexLj4RSS3MG0BtyNYNqOEvxkXKwAI0D6FKKZroiOcWyvzDEnZw4kWStglXsKcxYPH6qYdwcpUg yenbcoKLVyQM0GAX+KltCZJ1 ) ; Key ID = 33317 gr. 10800 IN DNSKEY ( 257 3 7 AwEAAbjC4Uo/z1gus3h2OBfvg1gj/P0LsEWpTkwQbqW5CWoX1kZZVF4k+iPbkLvfHSzOr9mLS9pi zSVW+/V4WZlewy+/wcDusyfgjxBFbxvTtF7GnjIQg6zM4KsTMle/3mcLRoqSbqQTm/Wog/R7XPSU YSN1xPdex5YMeXCFphU3RVagRBSewU3/DhvJkWj4eS60wZfNvrjYvPALs/nWPiwHsj0wH9Y1qEq/ g9vYWkWueM2YInYu2MjRUUWKkY2iTAuJl4GIepNUENErmeRtQ4gx5uPwlWuWaB4lQizMz3TtU650 bLiJ90z0kVGtTTH3V27P9VBTOpZqhdcYkVyosmygDBU= ) ; Key ID = 35136 gr. 10800 IN DNSKEY ( 256 3 7 AwEAAc6kLqqo9BMMxxxNi5V4YggQCzQ0RkRrHaqIw+jwVaOeyQJ4bRIJRpL8OBbtGMWFBzFXrdHY uOdCD6/2xtR40bfCKQ2pKe3cHROqFYosQWro+ZuuDUWMG9lbTW/X15/Cvclw2mWpBuXETDTNo7kI HevCYCqaBea0SIn0YgjuzxkX ) ; Key ID = 7835 gr. 10800 IN RRSIG ( DNSKEY 7 1 10800 20210613210151 20210514210151 7835 gr. pBzpdpsbhxeVlsKfycEVJ5aFrrLsXzrhi4YnmEOg7/+TnuSz7bak6d4h9jWJm5OWbngvIaKdSp4Z SuWJ9RVipn4t/dOYl040pXsvYd0rOhq+IXMu2s83wmaWSd16AnuFJWNkR0IhtjMwbZVwj+kIY5nw tY18baW/RkaW8txgOuY= ) gr. 10800 IN RRSIG ( DNSKEY 7 1 10800 20210613210151 20210514210151 35136 gr. cARc8lk2IGPBY6U5qBUhjvZFUkheWM65OO9MIcucqqg9Fq+pjDX72eu3ybwi+5CQVlqc09LDhi+a N6e/x1FPcuB72uMAB40hKa2SVmXLkaaMyag7bojckv2E4vZLC8gkE83GyEQ11g8JMHY8K9U1xxn8 UFtW2GHHSJsSu9l75kBGcrRGig8jA1zRqPDdk/iu3vZevdd/WfSGIVWavbrPCwcPIReeoGECFtLo L/Duh4KmUt+iyTmqJfuxOgvk2sZwkbVXWwr6xSg6DWTJK8Arjyl9oKm4jjhanNFyL0SBhjtemiiq z3tpRl7op4nWAVDIyYGbvTonWxDnCWiXY5lYUQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 3 DNSKEY records for gr
	`gr. 10800 IN DNSKEY ( 256 3 7 AwEAAbX6prErwL2xKZjmHjN+eurJ1kXrRF88l1xLQIMNTWmrtwU0NIfAySrzimjPrWho/HrYhriW tyexLj4RSS3MG0BtyNYNqOEvxkXKwAI0D6FKKZroiOcWyvzDEnZw4kWStglXsKcxYPH6qYdwcpUg yenbcoKLVyQM0GAX+KltCZJ1 ) ; Key ID = 33317`
	`gr. 10800 IN DNSKEY ( 257 3 7 AwEAAbjC4Uo/z1gus3h2OBfvg1gj/P0LsEWpTkwQbqW5CWoX1kZZVF4k+iPbkLvfHSzOr9mLS9pi zSVW+/V4WZlewy+/wcDusyfgjxBFbxvTtF7GnjIQg6zM4KsTMle/3mcLRoqSbqQTm/Wog/R7XPSU YSN1xPdex5YMeXCFphU3RVagRBSewU3/DhvJkWj4eS60wZfNvrjYvPALs/nWPiwHsj0wH9Y1qEq/ g9vYWkWueM2YInYu2MjRUUWKkY2iTAuJl4GIepNUENErmeRtQ4gx5uPwlWuWaB4lQizMz3TtU650 bLiJ90z0kVGtTTH3V27P9VBTOpZqhdcYkVyosmygDBU= ) ; Key ID = 35136`
	`gr. 10800 IN DNSKEY ( 256 3 7 AwEAAc6kLqqo9BMMxxxNi5V4YggQCzQ0RkRrHaqIw+jwVaOeyQJ4bRIJRpL8OBbtGMWFBzFXrdHY uOdCD6/2xtR40bfCKQ2pKe3cHROqFYosQWro+ZuuDUWMG9lbTW/X15/Cvclw2mWpBuXETDTNo7kI HevCYCqaBea0SIn0YgjuzxkX ) ; Key ID = 7835`
	DNSKEY=35136/SEP is now in the chain-of-trust
	DS=35136/SHA-256 verifies DNSKEY=35136/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`gr. 10800 IN RRSIG ( DNSKEY 7 1 10800 20210613210151 20210514210151 7835 gr. pBzpdpsbhxeVlsKfycEVJ5aFrrLsXzrhi4YnmEOg7/+TnuSz7bak6d4h9jWJm5OWbngvIaKdSp4Z SuWJ9RVipn4t/dOYl040pXsvYd0rOhq+IXMu2s83wmaWSd16AnuFJWNkR0IhtjMwbZVwj+kIY5nw tY18baW/RkaW8txgOuY= )`
	`gr. 10800 IN RRSIG ( DNSKEY 7 1 10800 20210613210151 20210514210151 35136 gr. cARc8lk2IGPBY6U5qBUhjvZFUkheWM65OO9MIcucqqg9Fq+pjDX72eu3ybwi+5CQVlqc09LDhi+a N6e/x1FPcuB72uMAB40hKa2SVmXLkaaMyag7bojckv2E4vZLC8gkE83GyEQ11g8JMHY8K9U1xxn8 UFtW2GHHSJsSu9l75kBGcrRGig8jA1zRqPDdk/iu3vZevdd/WfSGIVWavbrPCwcPIReeoGECFtLo L/Duh4KmUt+iyTmqJfuxOgvk2sZwkbVXWwr6xSg6DWTJK8Arjyl9oKm4jjhanNFyL0SBhjtemiiq z3tpRl7op4nWAVDIyYGbvTonWxDnCWiXY5lYUQ== )`
	RRSIG=7835 and DNSKEY=7835 verifies the DNSKEY RRset
	RRSIG=35136 and DNSKEY=35136/SEP verifies the DNSKEY RRset
	DNSKEY=33317 is now in the chain-of-trust
	DNSKEY=7835 is now in the chain-of-trust
	Query to gr-at.ics.forth.gr for id0.gr/A
	Received 398 bytes from 78.104.145.227
	;; Answer received from 78.104.145.227 (398 bytes) ;; HEADER SECTION ;; id = 27 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) id0.gr. 10800 IN NS ns1.desec.io. id0.gr. 10800 IN NS ns2.desec.org. id0.gr. 10800 IN DS 39977 13 1 a48b5d723a2b3fb4011342186c9fe1af0ea8643c id0.gr. 10800 IN DS ( 39977 13 2 f9af0204318a065098b50bda2b91d9c912e9ced814928928c8e8a399e0b7beab ) id0.gr. 10800 IN DS ( 39977 13 4 dd94bc1d36212efd3de16a06dcb1452597fae71a5f21ffd812a5aa3a208c34e0 91f13ad85414dfe3759ec53c7e9fda1e ) id0.gr. 10800 IN RRSIG ( DS 7 2 10800 20210613210151 20210514210151 7835 gr. JhDLqLMlClq+2yD/rvXAulqE0+SiWSv4qVXkxRr5DzIW2jA/ClkYFhlwM7sARmvBlwtUjXo0rhQw Jlk3rWOOHjqj1/FlM6goMvhbJy336HdoEawvSeinLp+X204qph1uaHgEnOokBnLTupzKhqlqeGTO 2MpKXg0xum21l4GHrAw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to gr-d.ics.forth.gr for id0.gr/DNSKEY
	Received 398 bytes from 194.0.11.102
	;; Answer received from 194.0.11.102 (398 bytes) ;; HEADER SECTION ;; id = 1518 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) id0.gr. 10800 IN NS ns2.desec.org. id0.gr. 10800 IN NS ns1.desec.io. id0.gr. 10800 IN DS ( 39977 13 4 dd94bc1d36212efd3de16a06dcb1452597fae71a5f21ffd812a5aa3a208c34e0 91f13ad85414dfe3759ec53c7e9fda1e ) id0.gr. 10800 IN DS 39977 13 1 a48b5d723a2b3fb4011342186c9fe1af0ea8643c id0.gr. 10800 IN DS ( 39977 13 2 f9af0204318a065098b50bda2b91d9c912e9ced814928928c8e8a399e0b7beab ) id0.gr. 10800 IN RRSIG ( DS 7 2 10800 20210613210151 20210514210151 7835 gr. JhDLqLMlClq+2yD/rvXAulqE0+SiWSv4qVXkxRr5DzIW2jA/ClkYFhlwM7sARmvBlwtUjXo0rhQw Jlk3rWOOHjqj1/FlM6goMvhbJy336HdoEawvSeinLp+X204qph1uaHgEnOokBnLTupzKhqlqeGTO 2MpKXg0xum21l4GHrAw= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found child zone id0.gr

id0.gr

	Checking DS between gr and id0.gr
	Query to estia.ics.forth.gr for id0.gr/DS
	Received 345 bytes from 139.91.191.3
	;; Answer received from 139.91.191.3 (345 bytes) ;; HEADER SECTION ;; id = 16021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN DS ;; ANSWER SECTION (4 records) id0.gr. 10800 IN DS 39977 13 1 a48b5d723a2b3fb4011342186c9fe1af0ea8643c id0.gr. 10800 IN DS ( 39977 13 2 f9af0204318a065098b50bda2b91d9c912e9ced814928928c8e8a399e0b7beab ) id0.gr. 10800 IN DS ( 39977 13 4 dd94bc1d36212efd3de16a06dcb1452597fae71a5f21ffd812a5aa3a208c34e0 91f13ad85414dfe3759ec53c7e9fda1e ) id0.gr. 10800 IN RRSIG ( DS 7 2 10800 20210613210151 20210514210151 7835 gr. JhDLqLMlClq+2yD/rvXAulqE0+SiWSv4qVXkxRr5DzIW2jA/ClkYFhlwM7sARmvBlwtUjXo0rhQw Jlk3rWOOHjqj1/FlM6goMvhbJy336HdoEawvSeinLp+X204qph1uaHgEnOokBnLTupzKhqlqeGTO 2MpKXg0xum21l4GHrAw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1280 ;; option:
	Found 3 DS records for id0.gr in the gr zone
	DS=39977/SHA-1 has algorithm ECDSAP256SHA256
	DS=39977/SHA-256 has algorithm ECDSAP256SHA256
	DS=39977/SHA-384 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`id0.gr. 10800 IN RRSIG ( DS 7 2 10800 20210613210151 20210514210151 7835 gr. JhDLqLMlClq+2yD/rvXAulqE0+SiWSv4qVXkxRr5DzIW2jA/ClkYFhlwM7sARmvBlwtUjXo0rhQw Jlk3rWOOHjqj1/FlM6goMvhbJy336HdoEawvSeinLp+X204qph1uaHgEnOokBnLTupzKhqlqeGTO 2MpKXg0xum21l4GHrAw= )`
	RRSIG=7835 and DNSKEY=7835 verifies the DS RRset
	DS=39977/SHA-1 is now in the chain-of-trust
	`id0.gr. 10800 IN DS 39977 13 1 a48b5d723a2b3fb4011342186c9fe1af0ea8643c`
	`id0.gr. 10800 IN DS ( 39977 13 2 f9af0204318a065098b50bda2b91d9c912e9ced814928928c8e8a399e0b7beab )`
	`id0.gr. 10800 IN DS ( 39977 13 4 dd94bc1d36212efd3de16a06dcb1452597fae71a5f21ffd812a5aa3a208c34e0 91f13ad85414dfe3759ec53c7e9fda1e )`
	Query to ns2.desec.org for id0.gr/DNSKEY
	Received 217 bytes from 157.53.224.1
	;; Answer received from 157.53.224.1 (217 bytes) ;; HEADER SECTION ;; id = 22726 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN DNSKEY ;; ANSWER SECTION (2 records) id0.gr. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210527000000 20210506000000 39977 id0.gr. thnDuqG/ki/dET8VOI1pyMMMEFLITyhGpVUXsu5bGqYc8W/CSaSVqocLxkOqdCSVsLD5RkBseSfp OoKgxZQlsQ== ) id0.gr. 3600 IN DNSKEY ( 257 3 13 1gVGJfCH80oxHppqflKsWRIWNn1UwPqKQwWzMhmS9tNcTxY2AazxqTVX3b2nWQ0HWp3e2f3ORelA gLUB5LJ+tg== ) ; Key ID = 39977 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for id0.gr
	`id0.gr. 3600 IN DNSKEY ( 257 3 13 1gVGJfCH80oxHppqflKsWRIWNn1UwPqKQwWzMhmS9tNcTxY2AazxqTVX3b2nWQ0HWp3e2f3ORelA gLUB5LJ+tg== ) ; Key ID = 39977`
	DNSKEY=39977/SEP is now in the chain-of-trust
	DS=39977/SHA-1 verifies DNSKEY=39977/SEP
	DS=39977/SHA-256 verifies DNSKEY=39977/SEP
	DS=39977/SHA-384 verifies DNSKEY=39977/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`id0.gr. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210527000000 20210506000000 39977 id0.gr. thnDuqG/ki/dET8VOI1pyMMMEFLITyhGpVUXsu5bGqYc8W/CSaSVqocLxkOqdCSVsLD5RkBseSfp OoKgxZQlsQ== )`
	RRSIG=39977 and DNSKEY=39977/SEP verifies the DNSKEY RRset
	Query to ns1.desec.io for id0.gr/A
	Received 153 bytes from 45.54.76.1
	;; Answer received from 45.54.76.1 (153 bytes) ;; HEADER SECTION ;; id = 57582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (2 records) id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== ) id0.gr. 3600 IN A 176.119.210.163 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.desec.io is authoritative for id0.gr
	Found RRSIG signed by id0.gr zone
	Query to ns2.desec.org for id0.gr/SOA
	Received 185 bytes from 157.53.224.1
	;; Answer received from 157.53.224.1 (185 bytes) ;; HEADER SECTION ;; id = 20725 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN SOA ;; ANSWER SECTION (2 records) id0.gr. 300 IN SOA ( get.desec.io. get.desec.io. 2021052982 ;serial 86400 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) id0.gr. 300 IN RRSIG ( SOA 13 2 300 20210527000000 20210506000000 39977 id0.gr. 7w7gaJh6XPve2KXq4cUvOkpt+GCHzKC1quNNU8ATRuKC+CJCiZ4YOhFFLKE/RZ9mSSYMW0eH02fO slpe0WcEAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.desec.io for id0.gr/A
	Received 153 bytes from 45.54.76.1
	;; Answer received from 45.54.76.1 (153 bytes) ;; HEADER SECTION ;; id = 11783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (2 records) id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== ) id0.gr. 3600 IN A 176.119.210.163 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	id0.gr A RR has value 176.119.210.163
	Found 1 RRSIGs over A RRset
	`id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== )`
	RRSIG=39977 and DNSKEY=39977/SEP verifies the A RRset

id0.gr

	Query to ns2.desec.org for id0.gr/A
	Received 153 bytes from 157.53.224.1
	;; Answer received from 157.53.224.1 (153 bytes) ;; HEADER SECTION ;; id = 41775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (2 records) id0.gr. 3600 IN A 176.119.210.163 id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.desec.org is authoritative for id0.gr
	Found RRSIG signed by id0.gr zone
	Query to ns2.desec.org for id0.gr/A
	Received 153 bytes from 157.53.224.1
	;; Answer received from 157.53.224.1 (153 bytes) ;; HEADER SECTION ;; id = 63551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; id0.gr. IN A ;; ANSWER SECTION (2 records) id0.gr. 3600 IN A 176.119.210.163 id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	id0.gr A RR has value 176.119.210.163
	Found 1 RRSIGs over A RRset
	`id0.gr. 3600 IN RRSIG ( A 13 2 3600 20210527000000 20210506000000 39977 id0.gr. xq0OBi3RTtRikeP7u3eFk/2ANtl0AhXOSSy3C3mUhvVKPDMz6yba8Ak+tWRe0qfdLaLUzhu0Pa1M GJQV2Rn4KA== )`
	RRSIG=39977 and DNSKEY=39977/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test id0.gr at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: