DNSSEC Analyzer - incibe.es

Domain Name:

Time: 2023-10-02 22:25:00 UTC, NTP stratum 4

Analyzing DNSSEC problems for incibe.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 4430 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to k.root-servers.net for incibe.es/A
	Received 619 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (619 octets) ;; HEADER SECTION ;; id = 59923 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS c.nic.es. es. 172800 IN NS h.nic.es. es. 172800 IN NS a.nic.es. es. 172800 IN NS g.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . 1fnXHGv7yXwm8UlTc3KHy2rTE0sxTV+KBjUz7vPRxoS4axKXUWzKLp3IOE2l+Htbg8mF+eJoDTp0 UgVX4uhNz5n3vNrVsZRXRHH7jcy93gVtL+BkMSXJKHPUeUyV0F8hvXVPrpo67ESMs46S8O+krLa1 LxrvBz7GFhHrKFs159oo+BpjBeoi9viyXPPbMnsZbvK7ph40DgInstyGlyvWgIL5X5BlwVzhIicw v2Oo2Fe7gPrWv84sOw2i8piXP/P3EPTgg+AU7KoL07H6V/OfaSLXxhQONoYZQ68q78JyVKznqVNz OQO5cD55JNxOLFzkM3oXP+aGTqWefCtbTbGKpw== ) ;; ADDITIONAL SECTION (9 records) h.nic.es. 172800 IN A 194.0.33.53 g.nic.es. 172800 IN A 204.61.217.1 c.nic.es. 172800 IN A 194.0.34.53 a.nic.es. 172800 IN A 194.69.254.1 h.nic.es. 172800 IN AAAA 2001:678:40::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN AAAA 2001:678:44::53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.root-servers.net for es/DNSKEY
	Received 610 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (610 octets) ;; HEADER SECTION ;; id = 19034 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . 1fnXHGv7yXwm8UlTc3KHy2rTE0sxTV+KBjUz7vPRxoS4axKXUWzKLp3IOE2l+Htbg8mF+eJoDTp0 UgVX4uhNz5n3vNrVsZRXRHH7jcy93gVtL+BkMSXJKHPUeUyV0F8hvXVPrpo67ESMs46S8O+krLa1 LxrvBz7GFhHrKFs159oo+BpjBeoi9viyXPPbMnsZbvK7ph40DgInstyGlyvWgIL5X5BlwVzhIicw v2Oo2Fe7gPrWv84sOw2i8piXP/P3EPTgg+AU7KoL07H6V/OfaSLXxhQONoYZQ68q78JyVKznqVNz OQO5cD55JNxOLFzkM3oXP+aGTqWefCtbTbGKpw== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to d.root-servers.net for es/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (366 octets) ;; HEADER SECTION ;; id = 3948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . 1fnXHGv7yXwm8UlTc3KHy2rTE0sxTV+KBjUz7vPRxoS4axKXUWzKLp3IOE2l+Htbg8mF+eJoDTp0 UgVX4uhNz5n3vNrVsZRXRHH7jcy93gVtL+BkMSXJKHPUeUyV0F8hvXVPrpo67ESMs46S8O+krLa1 LxrvBz7GFhHrKFs159oo+BpjBeoi9viyXPPbMnsZbvK7ph40DgInstyGlyvWgIL5X5BlwVzhIicw v2Oo2Fe7gPrWv84sOw2i8piXP/P3EPTgg+AU7KoL07H6V/OfaSLXxhQONoYZQ68q78JyVKznqVNz OQO5cD55JNxOLFzkM3oXP+aGTqWefCtbTbGKpw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for es in the . zone
	DS=44375/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . 1fnXHGv7yXwm8UlTc3KHy2rTE0sxTV+KBjUz7vPRxoS4axKXUWzKLp3IOE2l+Htbg8mF+eJoDTp0 UgVX4uhNz5n3vNrVsZRXRHH7jcy93gVtL+BkMSXJKHPUeUyV0F8hvXVPrpo67ESMs46S8O+krLa1 LxrvBz7GFhHrKFs159oo+BpjBeoi9viyXPPbMnsZbvK7ph40DgInstyGlyvWgIL5X5BlwVzhIicw v2Oo2Fe7gPrWv84sOw2i8piXP/P3EPTgg+AU7KoL07H6V/OfaSLXxhQONoYZQ68q78JyVKznqVNz OQO5cD55JNxOLFzkM3oXP+aGTqWefCtbTbGKpw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=44375/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 )`
	Query to a.nic.es for es/DNSKEY
	Received 873 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (873 octets) ;; HEADER SECTION ;; id = 16871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375 es. 86400 IN DNSKEY ( 256 3 8 AwEAAchZp77aagTiWsRNgbdAzWkS7XckivkUBYX1FAOJtwaO5hflmfoXCl70g6zYOpoSzYnGPxTd 3kzQTp8nip45W9w9+skIbfq5aeZfMDVAzgEskTxRDWx/OHzAkAsFVm5nABp1XvEc1X1NQYr+X5Fh FT+CmoQBwDp/Lq4Vd9KYzXy3g2d+3oZP6zMkVAkMcRl8pIJp83YXkGCE9S3Dtv7Lz6CI4hVCT9IP 4/Q9ui9p4aJsQYXPWcFF/9oSLV15FNelWL3OsWxKLf9u2O3FZbHwEzbQy/veoaqM8EghTMGSHgrY xagItUZn8eGJ7PjGFvFc+EcAfZSIA9WjEnPnt/i8H7c= ) ; Key ID = 16468 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231007024433 20230923030544 44375 es. LbqxSO1NERg2g/x+MQm4kjaBfRasEFBf6pkVvU4ko9jKI3prpZa+RJ6V6lCBnf9OfpRNezCQYowK c6qHLs8AKT6aUU0YcYOaKiM6KgMnt2vOw5WRwpCqxS3JQkxAEELobcq5TjFsJmiE5hRQjFnaTzNS IQRTvb0CVk2BqH2g7jIzZUtjVS5UmL2FeDJSzS7Ru2TmzQLHhXpLxye38nVyI0EeU0oC4pMvq0w7 YHe4UAxrhIpObHfzlU9iGcVjXFVVxoUHiswxR9Y25TjTUHD1ufVgYUzJXPmXdYs5DKiPHlg3Uk8Z X1vnPQkwYQvG09SGXOoujR7EERhp7b4VqIg4EQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAchZp77aagTiWsRNgbdAzWkS7XckivkUBYX1FAOJtwaO5hflmfoXCl70g6zYOpoSzYnGPxTd 3kzQTp8nip45W9w9+skIbfq5aeZfMDVAzgEskTxRDWx/OHzAkAsFVm5nABp1XvEc1X1NQYr+X5Fh FT+CmoQBwDp/Lq4Vd9KYzXy3g2d+3oZP6zMkVAkMcRl8pIJp83YXkGCE9S3Dtv7Lz6CI4hVCT9IP 4/Q9ui9p4aJsQYXPWcFF/9oSLV15FNelWL3OsWxKLf9u2O3FZbHwEzbQy/veoaqM8EghTMGSHgrY xagItUZn8eGJ7PjGFvFc+EcAfZSIA9WjEnPnt/i8H7c= ) ; Key ID = 16468`
	DNSKEY=44375/SEP is now in the chain-of-trust
	DS=44375/SHA-256 verifies DNSKEY=44375/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231007024433 20230923030544 44375 es. LbqxSO1NERg2g/x+MQm4kjaBfRasEFBf6pkVvU4ko9jKI3prpZa+RJ6V6lCBnf9OfpRNezCQYowK c6qHLs8AKT6aUU0YcYOaKiM6KgMnt2vOw5WRwpCqxS3JQkxAEELobcq5TjFsJmiE5hRQjFnaTzNS IQRTvb0CVk2BqH2g7jIzZUtjVS5UmL2FeDJSzS7Ru2TmzQLHhXpLxye38nVyI0EeU0oC4pMvq0w7 YHe4UAxrhIpObHfzlU9iGcVjXFVVxoUHiswxR9Y25TjTUHD1ufVgYUzJXPmXdYs5DKiPHlg3Uk8Z X1vnPQkwYQvG09SGXOoujR7EERhp7b4VqIg4EQ== )`
	RRSIG=44375 and DNSKEY=44375/SEP verifies the DNSKEY RRset
	DNSKEY=16468 is now in the chain-of-trust
	Query to h.nic.es for incibe.es/A
	Received 521 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (521 octets) ;; HEADER SECTION ;; id = 64337 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) incibe.es. 86400 IN NS ns1.cdmon.net. incibe.es. 86400 IN NS ns2.cdmon.net. incibe.es. 86400 IN NS ns3.cdmon.net. incibe.es. 86400 IN NS ns4.cdmondns-01.org. incibe.es. 86400 IN NS ns5.cdmondns-01.com. incibe.es. 86400 IN DS ( 23399 14 4 86f3be64bdf8ed00e1f6d6b82a972f783e00c79bbc29ec4e65d30b9e47db1d20 ac60d737cd80cf59d74ba21bb92899ea ) incibe.es. 86400 IN RRSIG ( DS 8 2 86400 20231010025644 20230926070533 16468 es. dziogZtHJOVYjV3VKgZVQOU54s0fM6C2VRcfsRgCaBNIQTRsw0TMgKiPx5LGmxnx/Vt+PeI/fXbu dt+kqSdaOeUNk+CclZuu1TpaoKmdzYucndzvz+hHBFXuUQ/ZfT2jdcsJr8auQvUn/1JPPaBzCgAP Hc1iJOhycKeo9HdG8wiftVLc5NK84W6xyNXTy3zvYg0E6wc+FfK2YyFLHBxOpDM18zYv9cINs6cR LN7zmCllCeodfZntoraIv87VXcJ1//BD3f2jWR6E0tP/EnN3QSESjr51klDQT8B7Orp8hmEHmxi4 OX6smCGQSQFkCFn6VeEoJkCPgLsm69rXpz4LzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.nic.es for incibe.es/DNSKEY
	Received 521 bytes from 194.0.34.53
	;; Response received from 194.0.34.53 (521 octets) ;; HEADER SECTION ;; id = 12872 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) incibe.es. 86400 IN NS ns4.cdmondns-01.org. incibe.es. 86400 IN NS ns3.cdmon.net. incibe.es. 86400 IN NS ns5.cdmondns-01.com. incibe.es. 86400 IN NS ns2.cdmon.net. incibe.es. 86400 IN NS ns1.cdmon.net. incibe.es. 86400 IN DS ( 23399 14 4 86f3be64bdf8ed00e1f6d6b82a972f783e00c79bbc29ec4e65d30b9e47db1d20 ac60d737cd80cf59d74ba21bb92899ea ) incibe.es. 86400 IN RRSIG ( DS 8 2 86400 20231010025644 20230926070533 16468 es. dziogZtHJOVYjV3VKgZVQOU54s0fM6C2VRcfsRgCaBNIQTRsw0TMgKiPx5LGmxnx/Vt+PeI/fXbu dt+kqSdaOeUNk+CclZuu1TpaoKmdzYucndzvz+hHBFXuUQ/ZfT2jdcsJr8auQvUn/1JPPaBzCgAP Hc1iJOhycKeo9HdG8wiftVLc5NK84W6xyNXTy3zvYg0E6wc+FfK2YyFLHBxOpDM18zYv9cINs6cR LN7zmCllCeodfZntoraIv87VXcJ1//BD3f2jWR6E0tP/EnN3QSESjr51klDQT8B7Orp8hmEHmxi4 OX6smCGQSQFkCFn6VeEoJkCPgLsm69rXpz4LzA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone incibe.es

incibe.es

	Checking DS between es and incibe.es
	Query to g.nic.es for incibe.es/DS
	Received 392 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (392 octets) ;; HEADER SECTION ;; id = 47100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN DS ;; ANSWER SECTION (2 records) incibe.es. 86400 IN DS ( 23399 14 4 86f3be64bdf8ed00e1f6d6b82a972f783e00c79bbc29ec4e65d30b9e47db1d20 ac60d737cd80cf59d74ba21bb92899ea ) incibe.es. 86400 IN RRSIG ( DS 8 2 86400 20231010025644 20230926070533 16468 es. dziogZtHJOVYjV3VKgZVQOU54s0fM6C2VRcfsRgCaBNIQTRsw0TMgKiPx5LGmxnx/Vt+PeI/fXbu dt+kqSdaOeUNk+CclZuu1TpaoKmdzYucndzvz+hHBFXuUQ/ZfT2jdcsJr8auQvUn/1JPPaBzCgAP Hc1iJOhycKeo9HdG8wiftVLc5NK84W6xyNXTy3zvYg0E6wc+FfK2YyFLHBxOpDM18zYv9cINs6cR LN7zmCllCeodfZntoraIv87VXcJ1//BD3f2jWR6E0tP/EnN3QSESjr51klDQT8B7Orp8hmEHmxi4 OX6smCGQSQFkCFn6VeEoJkCPgLsm69rXpz4LzA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for incibe.es in the es zone
	DS=23399/SHA-384 has algorithm ECDSAP384SHA384
	Found 1 RRSIGs over DS RRset
	`incibe.es. 86400 IN RRSIG ( DS 8 2 86400 20231010025644 20230926070533 16468 es. dziogZtHJOVYjV3VKgZVQOU54s0fM6C2VRcfsRgCaBNIQTRsw0TMgKiPx5LGmxnx/Vt+PeI/fXbu dt+kqSdaOeUNk+CclZuu1TpaoKmdzYucndzvz+hHBFXuUQ/ZfT2jdcsJr8auQvUn/1JPPaBzCgAP Hc1iJOhycKeo9HdG8wiftVLc5NK84W6xyNXTy3zvYg0E6wc+FfK2YyFLHBxOpDM18zYv9cINs6cR LN7zmCllCeodfZntoraIv87VXcJ1//BD3f2jWR6E0tP/EnN3QSESjr51klDQT8B7Orp8hmEHmxi4 OX6smCGQSQFkCFn6VeEoJkCPgLsm69rXpz4LzA== )`
	RRSIG=16468 and DNSKEY=16468 verifies the DS RRset
	DS=23399/SHA-384 is now in the chain-of-trust
	`incibe.es. 86400 IN DS ( 23399 14 4 86f3be64bdf8ed00e1f6d6b82a972f783e00c79bbc29ec4e65d30b9e47db1d20 ac60d737cd80cf59d74ba21bb92899ea )`
	Query to ns4.cdmondns-01.org for incibe.es/DNSKEY
	Received 287 bytes from 52.58.66.183
	;; Response received from 52.58.66.183 (287 octets) ;; HEADER SECTION ;; id = 4395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN DNSKEY ;; ANSWER SECTION (2 records) incibe.es. 3600 IN DNSKEY ( 257 3 14 Gfulabz26xzOE5Qm3841CQLnzjkjT1KDKHNqAuZRMDFvfMq3TanX2wILGthT5VVZ6fqzs959IjBz lIdCSxlEfxRj5/l8ev3aDnLTSC6UE1C0LMEhrTIcjuzODqrB0aOO ) ; Key ID = 23399 incibe.es. 3600 IN RRSIG ( DNSKEY 14 2 3600 20231012000000 20230921000000 23399 incibe.es. jTmw7L4did6yRKWVdaDo3cfPeiyX1hrdD4BjoyRUau6JFe/LovMBQkROrXDbHOEGfcmmi1P2HqAF 7tDW/6TtuPg1HTLxij9hEVXNVpeebZZRto4MkK49F35/8IvCEvNL ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for incibe.es
	`incibe.es. 3600 IN DNSKEY ( 257 3 14 Gfulabz26xzOE5Qm3841CQLnzjkjT1KDKHNqAuZRMDFvfMq3TanX2wILGthT5VVZ6fqzs959IjBz lIdCSxlEfxRj5/l8ev3aDnLTSC6UE1C0LMEhrTIcjuzODqrB0aOO ) ; Key ID = 23399`
	DNSKEY=23399/SEP is now in the chain-of-trust
	DS=23399/SHA-384 verifies DNSKEY=23399/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`incibe.es. 3600 IN RRSIG ( DNSKEY 14 2 3600 20231012000000 20230921000000 23399 incibe.es. jTmw7L4did6yRKWVdaDo3cfPeiyX1hrdD4BjoyRUau6JFe/LovMBQkROrXDbHOEGfcmmi1P2HqAF 7tDW/6TtuPg1HTLxij9hEVXNVpeebZZRto4MkK49F35/8IvCEvNL )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the DNSKEY RRset
	Query to ns3.cdmon.net for incibe.es/A
	Received 191 bytes from 35.157.47.125
	;; Response received from 35.157.47.125 (191 octets) ;; HEADER SECTION ;; id = 65264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN A 195.53.165.153 incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. 96G0znoaWqtKNee6SRugIChf6PLXeWB1HHQw+bh1BKqc0C3OMiGfqSCmJloP4jik5i0NULAIz+zq ACwOKemxLLVzgUDcFUSIyLW3WeOLUthUMWB0dJc4PQlQOm7iL4O4 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.cdmon.net is authoritative for incibe.es
	Found RRSIG signed by incibe.es zone
	Query to ns1.cdmon.net for incibe.es/SOA
	Received 235 bytes from 35.189.106.232
	;; Response received from 35.189.106.232 (235 octets) ;; HEADER SECTION ;; id = 57270 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN SOA ;; ANSWER SECTION (2 records) incibe.es. 3600 IN SOA ( ns1.cdmon.net. hostmaster.incibe.es. 1 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) incibe.es. 3600 IN RRSIG ( SOA 14 2 3600 20231012000000 20230921000000 23399 incibe.es. eExRThEDu9aC6c22EqLZ969Sqvoqrslhny3upd3BwfbzZ9Gq9tElOBiu7icNuI8MtlO67A5CW5JF TObmLoyoexAE3V1+hCFMKuTUHgTjTlJ9EQXhxj07yfO0v1AxHskP ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.cdmondns-01.org for incibe.es/SOA
	Received 235 bytes from 52.58.66.183
	;; Response received from 52.58.66.183 (235 octets) ;; HEADER SECTION ;; id = 57297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN SOA ;; ANSWER SECTION (2 records) incibe.es. 3600 IN RRSIG ( SOA 14 2 3600 20231012000000 20230921000000 23399 incibe.es. g7LlYHe47s370FC42yoilHPAS3ZQ/V4Z7+0svowqU+M5hpipk5Le1RRm1p/F3oLzGo9JDcz0aHI2 KmVJIYlFcXEpNvc5vWaj9Tg3WkBq4fdMgjy17hUXU5eA8gAA3Rke ) incibe.es. 3600 IN SOA ( ns1.cdmon.net. hostmaster.incibe.es. 1 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.cdmon.net for incibe.es/SOA
	Received 235 bytes from 35.195.57.29
	;; Response received from 35.195.57.29 (235 octets) ;; HEADER SECTION ;; id = 23515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN SOA ;; ANSWER SECTION (2 records) incibe.es. 3600 IN SOA ( ns1.cdmon.net. hostmaster.incibe.es. 1 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) incibe.es. 3600 IN RRSIG ( SOA 14 2 3600 20231012000000 20230921000000 23399 incibe.es. My7z2gCeMzgS4+l05RoR+ymficm76n2kS84tY8+XGO3++L757ywjqNhsRfFJblmyyoAXNRODmqU0 Bw3T+imV0LMqrxm7bbcWiI5+oTz7i6POvYI3C96sxjYW/AO+Dtkw ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns5.cdmondns-01.com for incibe.es/SOA
	Received 235 bytes from 52.59.146.62
	;; Response received from 52.59.146.62 (235 octets) ;; HEADER SECTION ;; id = 48411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN SOA ;; ANSWER SECTION (2 records) incibe.es. 3600 IN SOA ( ns1.cdmon.net. hostmaster.incibe.es. 1 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) incibe.es. 3600 IN RRSIG ( SOA 14 2 3600 20231012000000 20230921000000 23399 incibe.es. gRkkiyqV09Z/HIfShj+GPOwT9UWL6puJpf0yodjkB7tz/oMIVQrMN09ZqD0irqC6MDzxTlVk03rc 19dXbrEsgOs4UH5Vbb96iGIzSNAh9c4dlizJnkapDZwO6GUdhKqF ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.cdmon.net for incibe.es/A
	Received 191 bytes from 35.157.47.125
	;; Response received from 35.157.47.125 (191 octets) ;; HEADER SECTION ;; id = 1803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN A 195.53.165.153 incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. 96G0znoaWqtKNee6SRugIChf6PLXeWB1HHQw+bh1BKqc0C3OMiGfqSCmJloP4jik5i0NULAIz+zq ACwOKemxLLVzgUDcFUSIyLW3WeOLUthUMWB0dJc4PQlQOm7iL4O4 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	incibe.es A RR has value 195.53.165.153
	Found 1 RRSIGs over A RRset
	`incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. 96G0znoaWqtKNee6SRugIChf6PLXeWB1HHQw+bh1BKqc0C3OMiGfqSCmJloP4jik5i0NULAIz+zq ACwOKemxLLVzgUDcFUSIyLW3WeOLUthUMWB0dJc4PQlQOm7iL4O4 )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the A RRset

incibe.es

	Query to ns4.cdmondns-01.org for incibe.es/A
	Received 191 bytes from 52.58.66.183
	;; Response received from 52.58.66.183 (191 octets) ;; HEADER SECTION ;; id = 15110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN A 195.53.165.153 incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. f/UNTlN8c1RjTiHrx+1DNjSsP0pFyC6rRbsYkh7CWdhGmg0qOUuIUw6Zm+RKKHn42Xvg7mumDRLL 5z5n2VPtks5+vqP0mAfyjOVQxltTB/mT3M/bX1hwRi3C2/NvpmGH ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.cdmondns-01.org is authoritative for incibe.es
	Found RRSIG signed by incibe.es zone
	Query to ns4.cdmondns-01.org for incibe.es/A
	Received 191 bytes from 52.58.66.183
	;; Response received from 52.58.66.183 (191 octets) ;; HEADER SECTION ;; id = 11887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN A 195.53.165.153 incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. f/UNTlN8c1RjTiHrx+1DNjSsP0pFyC6rRbsYkh7CWdhGmg0qOUuIUw6Zm+RKKHn42Xvg7mumDRLL 5z5n2VPtks5+vqP0mAfyjOVQxltTB/mT3M/bX1hwRi3C2/NvpmGH ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	incibe.es A RR has value 195.53.165.153
	Found 1 RRSIGs over A RRset
	`incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. f/UNTlN8c1RjTiHrx+1DNjSsP0pFyC6rRbsYkh7CWdhGmg0qOUuIUw6Zm+RKKHn42Xvg7mumDRLL 5z5n2VPtks5+vqP0mAfyjOVQxltTB/mT3M/bX1hwRi3C2/NvpmGH )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the A RRset

incibe.es

	Query to ns2.cdmon.net for incibe.es/A
	Received 191 bytes from 35.195.57.29
	;; Response received from 35.195.57.29 (191 octets) ;; HEADER SECTION ;; id = 2529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. jMPCe6V21HKI+QI9byTX7qpmcMTBbdpSnhDez8CCVDmQm2HNuQKUflfLzJRGZTFqioTJfds2rJ1s /HbQgr8P+I1DZBPGgQ1+Q+Kg54J4bk7mcThGi5sBvnzQwyw96AcL ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.cdmon.net is authoritative for incibe.es
	Found RRSIG signed by incibe.es zone
	Query to ns2.cdmon.net for incibe.es/A
	Received 191 bytes from 35.195.57.29
	;; Response received from 35.195.57.29 (191 octets) ;; HEADER SECTION ;; id = 4331 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. jMPCe6V21HKI+QI9byTX7qpmcMTBbdpSnhDez8CCVDmQm2HNuQKUflfLzJRGZTFqioTJfds2rJ1s /HbQgr8P+I1DZBPGgQ1+Q+Kg54J4bk7mcThGi5sBvnzQwyw96AcL ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	incibe.es A RR has value 195.53.165.153
	Found 1 RRSIGs over A RRset
	`incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. jMPCe6V21HKI+QI9byTX7qpmcMTBbdpSnhDez8CCVDmQm2HNuQKUflfLzJRGZTFqioTJfds2rJ1s /HbQgr8P+I1DZBPGgQ1+Q+Kg54J4bk7mcThGi5sBvnzQwyw96AcL )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the A RRset

incibe.es

	Query to ns1.cdmon.net for incibe.es/A
	Received 191 bytes from 35.189.106.232
	;; Response received from 35.189.106.232 (191 octets) ;; HEADER SECTION ;; id = 37174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. aIzrZFCSZDv9ypkAKfIFiGKp8jCZVm2jCbzbZMkVqh/TRhlPszAnH3gMiWuVuDqy95+WjY+THvbz T0KlC+nEa4zOEtg5Iew6Ae1iYsZYIeaJz0CM2py+2/DQPrfDJfIN ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.cdmon.net is authoritative for incibe.es
	Found RRSIG signed by incibe.es zone
	Query to ns1.cdmon.net for incibe.es/A
	Received 191 bytes from 35.189.106.232
	;; Response received from 35.189.106.232 (191 octets) ;; HEADER SECTION ;; id = 35497 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. aIzrZFCSZDv9ypkAKfIFiGKp8jCZVm2jCbzbZMkVqh/TRhlPszAnH3gMiWuVuDqy95+WjY+THvbz T0KlC+nEa4zOEtg5Iew6Ae1iYsZYIeaJz0CM2py+2/DQPrfDJfIN ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	incibe.es A RR has value 195.53.165.153
	Found 1 RRSIGs over A RRset
	`incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. aIzrZFCSZDv9ypkAKfIFiGKp8jCZVm2jCbzbZMkVqh/TRhlPszAnH3gMiWuVuDqy95+WjY+THvbz T0KlC+nEa4zOEtg5Iew6Ae1iYsZYIeaJz0CM2py+2/DQPrfDJfIN )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the A RRset

incibe.es

	Query to ns5.cdmondns-01.com for incibe.es/A
	Received 191 bytes from 52.59.146.62
	;; Response received from 52.59.146.62 (191 octets) ;; HEADER SECTION ;; id = 35566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. HzbSk7A8Ax+ukDpS889kCKVzFO6ujUbESTj1ImbhsDCAlg032SrVP8D8u5v/+QA7iOzsCPhtDqDg MlrvmRzdOFEQbUOl8yuTdrShchvXqhEAapj8pFMWjJcWKBQ49khk ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns5.cdmondns-01.com is authoritative for incibe.es
	Found RRSIG signed by incibe.es zone
	Query to ns5.cdmondns-01.com for incibe.es/A
	Received 191 bytes from 52.59.146.62
	;; Response received from 52.59.146.62 (191 octets) ;; HEADER SECTION ;; id = 25883 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; incibe.es. IN A ;; ANSWER SECTION (2 records) incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. HzbSk7A8Ax+ukDpS889kCKVzFO6ujUbESTj1ImbhsDCAlg032SrVP8D8u5v/+QA7iOzsCPhtDqDg MlrvmRzdOFEQbUOl8yuTdrShchvXqhEAapj8pFMWjJcWKBQ49khk ) incibe.es. 300 IN A 195.53.165.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	incibe.es A RR has value 195.53.165.153
	Found 1 RRSIGs over A RRset
	`incibe.es. 300 IN RRSIG ( A 14 2 300 20231012000000 20230921000000 23399 incibe.es. HzbSk7A8Ax+ukDpS889kCKVzFO6ujUbESTj1ImbhsDCAlg032SrVP8D8u5v/+QA7iOzsCPhtDqDg MlrvmRzdOFEQbUOl8yuTdrShchvXqhEAapj8pFMWjJcWKBQ49khk )`
	RRSIG=23399 and DNSKEY=23399/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test incibe.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: