DNSSEC Analyzer

Domain Name:

Time: 2022-01-25 14:24:07 UTC, NTP stratum 16

Analyzing DNSSEC problems for ine.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (864 octets) ;; HEADER SECTION ;; id = 48201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to h.root-servers.net for ine.es/A
	Received 650 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (650 octets) ;; HEADER SECTION ;; id = 29360 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS 50252 8 1 9bf0115b43a4ee8f7223fbf5b294d91cdeed2dbe es. 86400 IN DS ( 50252 8 2 dd2b515da6dbc0e826006e6ae02864c05825694a84b3e4e0e59918c78c1bc8eb ) es. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . LXPP4LgHu17br+CLTbNedOGHr7OnqFKSmkHR7pQNKywMV8w9PQ5Lmlyx0m1DSBVBfJN9kqGt87Tw YJ4iJ8sNF+/2zkdDqw+pl3eR2kWeEehuABUksKS2ibJP5IPr5zjLveSeXfFZE8uOZNt5+iCAt/AC yoTitFL1hSsKUerdUTzbkqE/upmYOC735RSUqmN0YIWkfpvPlV4rPB9WeYgonv0+/PhEKSyJSUVW ORR1Z9OHHMwlbqBx8rrIUEOdnrMCPys7txRkp6kdFjVDWZnjQH+B4ztCDp1EZYwtSkHLNlros5Rn 9H+l5M2TsZ1oPRfz6A93o3Yd5cm+YpYnLYPXEQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to k.root-servers.net for es/DNSKEY
	Received 648 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (648 octets) ;; HEADER SECTION ;; id = 40601 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS 50252 8 1 9bf0115b43a4ee8f7223fbf5b294d91cdeed2dbe es. 86400 IN DS ( 50252 8 2 dd2b515da6dbc0e826006e6ae02864c05825694a84b3e4e0e59918c78c1bc8eb ) es. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . LXPP4LgHu17br+CLTbNedOGHr7OnqFKSmkHR7pQNKywMV8w9PQ5Lmlyx0m1DSBVBfJN9kqGt87Tw YJ4iJ8sNF+/2zkdDqw+pl3eR2kWeEehuABUksKS2ibJP5IPr5zjLveSeXfFZE8uOZNt5+iCAt/AC yoTitFL1hSsKUerdUTzbkqE/upmYOC735RSUqmN0YIWkfpvPlV4rPB9WeYgonv0+/PhEKSyJSUVW ORR1Z9OHHMwlbqBx8rrIUEOdnrMCPys7txRkp6kdFjVDWZnjQH+B4ztCDp1EZYwtSkHLNlros5Rn 9H+l5M2TsZ1oPRfz6A93o3Yd5cm+YpYnLYPXEQ== ) ;; ADDITIONAL SECTION (9 records) h.nic.es. 172800 IN A 194.0.33.53 g.nic.es. 172800 IN A 204.61.217.1 c.nic.es. 172800 IN A 194.0.34.53 a.nic.es. 172800 IN A 194.69.254.1 h.nic.es. 172800 IN AAAA 2001:678:40::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN AAAA 2001:678:44::53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to f.root-servers.net for es/DS
	Received 402 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (402 octets) ;; HEADER SECTION ;; id = 4128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (3 records) es. 86400 IN DS 50252 8 1 9bf0115b43a4ee8f7223fbf5b294d91cdeed2dbe es. 86400 IN DS ( 50252 8 2 dd2b515da6dbc0e826006e6ae02864c05825694a84b3e4e0e59918c78c1bc8eb ) es. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . LXPP4LgHu17br+CLTbNedOGHr7OnqFKSmkHR7pQNKywMV8w9PQ5Lmlyx0m1DSBVBfJN9kqGt87Tw YJ4iJ8sNF+/2zkdDqw+pl3eR2kWeEehuABUksKS2ibJP5IPr5zjLveSeXfFZE8uOZNt5+iCAt/AC yoTitFL1hSsKUerdUTzbkqE/upmYOC735RSUqmN0YIWkfpvPlV4rPB9WeYgonv0+/PhEKSyJSUVW ORR1Z9OHHMwlbqBx8rrIUEOdnrMCPys7txRkp6kdFjVDWZnjQH+B4ztCDp1EZYwtSkHLNlros5Rn 9H+l5M2TsZ1oPRfz6A93o3Yd5cm+YpYnLYPXEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for es in the . zone
	DS=50252/SHA-1 has algorithm RSASHA256
	DS=50252/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20220207050000 20220125040000 9799 . LXPP4LgHu17br+CLTbNedOGHr7OnqFKSmkHR7pQNKywMV8w9PQ5Lmlyx0m1DSBVBfJN9kqGt87Tw YJ4iJ8sNF+/2zkdDqw+pl3eR2kWeEehuABUksKS2ibJP5IPr5zjLveSeXfFZE8uOZNt5+iCAt/AC yoTitFL1hSsKUerdUTzbkqE/upmYOC735RSUqmN0YIWkfpvPlV4rPB9WeYgonv0+/PhEKSyJSUVW ORR1Z9OHHMwlbqBx8rrIUEOdnrMCPys7txRkp6kdFjVDWZnjQH+B4ztCDp1EZYwtSkHLNlros5Rn 9H+l5M2TsZ1oPRfz6A93o3Yd5cm+YpYnLYPXEQ== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=50252/SHA-1 is now in the chain-of-trust
	`es. 86400 IN DS 50252 8 1 9bf0115b43a4ee8f7223fbf5b294d91cdeed2dbe`
	`es. 86400 IN DS ( 50252 8 2 dd2b515da6dbc0e826006e6ae02864c05825694a84b3e4e0e59918c78c1bc8eb )`
	Query to g.nic.es for es/DNSKEY
	Received 893 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (893 octets) ;; HEADER SECTION ;; id = 62985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (4 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610 es. 86400 IN DNSKEY ( 256 3 8 AwEAAaY14DAu85uVmTj0+4BAlfNJNKBbsjNldf/SRo7s9OuqybaYoQ7cS2umyPJDZfka0vU3Mi+W sg5jcz3w2/S3RgjBHXGLNYW1c17X83HLivAl0G4fo2YnL+DqzacTy9chh9ShaqgOUVLhdB6J98bk z0BvmYbK6xa3QAsK4CDMZkzf ) ; Key ID = 24901 es. 86400 IN DNSKEY ( 257 3 8 AwEAAcx/A937k2uXiNaReGX1grLJhc2oYWuX5suwUXdKhisqHh7UVEZDPuBdEoZlK81vitsp4o1A AYlemNQmUIBXxkxBEQqOH8GwW3+d6nkdQaYYHWvgPS/7xKHvG3muIToWyi7jcTjLUdoATwbgdn55 AiK3/DYvpgQ6nEBTsytLMEL6LJddEm5WHgu+/7JPy5hgL4ZPVdkrCHrjhbNF3HknHO2bULER5u8p fMUNH4bt9e1w+uY5MoGeoALEPRPcn0Fz1ixaAkLajcQjMkFHRP8LSmhQiwwO/JQSF27khrtUYp/B 5A8TjqY0hEQlV4rUNP0NzkGzEPLOIiWxcXLpoSazArM= ) ; Key ID = 50252 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220129140108 20220115080426 50252 es. eoExUEu0+b9w//kehfxghZRyC1EXUUsWEdMpDtmoHCHsIejRn6nK9JAQ/QpVyT5ouKkmy/LlEpoC nvbPeVfc67WgiqIDZiI3DpsI69xHmuE3Pkpl675c/7/EbrbfJa4svat+v7fH8q8v/0Eq74vFEbRv J7f5OA2fyIvZ456ZnF0FbFyLHASCW05BPOrRuyt4rF9zNJ+DRvBRX5GdiZY6q2IIt8tbE/PYK6F5 hNntgkD0FLz/5Vej7dfPcQV9A04SGRGkwojPrR/IyrCwCMoVQztVZs/ZBUjkIlwx2gwUIYoDyZ4S 2DpPqvR8b7suIIa++3Yd8Ph2ge1S1kgwFrp4pg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAaY14DAu85uVmTj0+4BAlfNJNKBbsjNldf/SRo7s9OuqybaYoQ7cS2umyPJDZfka0vU3Mi+W sg5jcz3w2/S3RgjBHXGLNYW1c17X83HLivAl0G4fo2YnL+DqzacTy9chh9ShaqgOUVLhdB6J98bk z0BvmYbK6xa3QAsK4CDMZkzf ) ; Key ID = 24901`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcx/A937k2uXiNaReGX1grLJhc2oYWuX5suwUXdKhisqHh7UVEZDPuBdEoZlK81vitsp4o1A AYlemNQmUIBXxkxBEQqOH8GwW3+d6nkdQaYYHWvgPS/7xKHvG3muIToWyi7jcTjLUdoATwbgdn55 AiK3/DYvpgQ6nEBTsytLMEL6LJddEm5WHgu+/7JPy5hgL4ZPVdkrCHrjhbNF3HknHO2bULER5u8p fMUNH4bt9e1w+uY5MoGeoALEPRPcn0Fz1ixaAkLajcQjMkFHRP8LSmhQiwwO/JQSF27khrtUYp/B 5A8TjqY0hEQlV4rUNP0NzkGzEPLOIiWxcXLpoSazArM= ) ; Key ID = 50252`
	DNSKEY=50252/SEP is now in the chain-of-trust
	DS=50252/SHA-1 verifies DNSKEY=50252/SEP
	DS=50252/SHA-256 verifies DNSKEY=50252/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220129140108 20220115080426 50252 es. eoExUEu0+b9w//kehfxghZRyC1EXUUsWEdMpDtmoHCHsIejRn6nK9JAQ/QpVyT5ouKkmy/LlEpoC nvbPeVfc67WgiqIDZiI3DpsI69xHmuE3Pkpl675c/7/EbrbfJa4svat+v7fH8q8v/0Eq74vFEbRv J7f5OA2fyIvZ456ZnF0FbFyLHASCW05BPOrRuyt4rF9zNJ+DRvBRX5GdiZY6q2IIt8tbE/PYK6F5 hNntgkD0FLz/5Vej7dfPcQV9A04SGRGkwojPrR/IyrCwCMoVQztVZs/ZBUjkIlwx2gwUIYoDyZ4S 2DpPqvR8b7suIIa++3Yd8Ph2ge1S1kgwFrp4pg== )`
	RRSIG=50252 and DNSKEY=50252/SEP verifies the DNSKEY RRset
	DNSKEY=27610 is now in the chain-of-trust
	DNSKEY=24901 is now in the chain-of-trust
	Query to a.nic.es for ine.es/A
	Received 638 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (638 octets) ;; HEADER SECTION ;; id = 54747 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ine.es. 86400 IN NS artemis.ttd.net. ine.es. 86400 IN NS fourier.ine.es. ine.es. 86400 IN NS cramer.ine.es. cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb cjc0cg4lethd602koqotv909lksddrtv NS SOA RRSIG DNSKEY NSEC3PARAM ) cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220205224600 20220123040425 27610 es. IXgXYbHMAn61briMUT6usf/noiLfhs4ufr6awLnOQJJ8NRci3EwVSFbMI/eEXjT/e8dsOJs5v7/m WWf5MCjm946TLDZyFrUK8LBEJGkXotV/M/cJI+iQmkv84fih+33010wwT/X+Ox5kJPz8uE7wASDT QJy5f9JmEweJmZM/XZw= ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb kc8raacet4purm0v8mgdbvqvtq18se9f NS DS RRSIG ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220201041612 20220118000445 24901 es. ju9eyRDAqnwmUrDatJRhuqGX5UjyPlYY3r4tMvyJZnUgjJ6Ehvd+WkfanYm99h0X8f2dln35zYrV odXeLV1y14YhZAX243hkd/pt8MOxNh5i23qxR38jWdXXcgJD2NkmtHY85YXz/9qbnISKWKTGmEaU /n3x2wgJf2tHaM+HGeA= ) ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 86400 IN A 195.254.149.45 fourier.ine.es. 86400 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.nic.es for ine.es/DNSKEY
	Received 638 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (638 octets) ;; HEADER SECTION ;; id = 19672 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ine.es. 86400 IN NS artemis.ttd.net. ine.es. 86400 IN NS fourier.ine.es. ine.es. 86400 IN NS cramer.ine.es. cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb cjc0cg4lethd602koqotv909lksddrtv NS SOA RRSIG DNSKEY NSEC3PARAM ) cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220205224600 20220123040425 27610 es. IXgXYbHMAn61briMUT6usf/noiLfhs4ufr6awLnOQJJ8NRci3EwVSFbMI/eEXjT/e8dsOJs5v7/m WWf5MCjm946TLDZyFrUK8LBEJGkXotV/M/cJI+iQmkv84fih+33010wwT/X+Ox5kJPz8uE7wASDT QJy5f9JmEweJmZM/XZw= ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb kc8raacet4purm0v8mgdbvqvtq18se9f NS DS RRSIG ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220201041612 20220118000445 24901 es. ju9eyRDAqnwmUrDatJRhuqGX5UjyPlYY3r4tMvyJZnUgjJ6Ehvd+WkfanYm99h0X8f2dln35zYrV odXeLV1y14YhZAX243hkd/pt8MOxNh5i23qxR38jWdXXcgJD2NkmtHY85YXz/9qbnISKWKTGmEaU /n3x2wgJf2tHaM+HGeA= ) ;; ADDITIONAL SECTION (3 records) fourier.ine.es. 86400 IN A 195.254.149.47 cramer.ine.es. 86400 IN A 195.254.149.45 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ine.es

ine.es

	Checking DS between es and ine.es
	Query to c.nic.es for ine.es/DS
	Received 753 bytes from 194.0.34.53
	;; Response received from 194.0.34.53 (753 octets) ;; HEADER SECTION ;; id = 11416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb cjc0cg4lethd602koqotv909lksddrtv NS SOA RRSIG DNSKEY NSEC3PARAM ) cjbms31dlas3a0uccuql7ul86c3a8cev.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220205224600 20220123040425 27610 es. IXgXYbHMAn61briMUT6usf/noiLfhs4ufr6awLnOQJJ8NRci3EwVSFbMI/eEXjT/e8dsOJs5v7/m WWf5MCjm946TLDZyFrUK8LBEJGkXotV/M/cJI+iQmkv84fih+33010wwT/X+Ox5kJPz8uE7wASDT QJy5f9JmEweJmZM/XZw= ) es. 86400 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2022012504 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 86400 IN RRSIG ( SOA 8 1 86400 20220208113302 20220125120436 27610 es. nQm+5XwcinUq8oB637B3/lRD70SLXTCuehr/oPjft2gAfBUcPg9vhmYxQbd0EGPr1sH/lDLxGtof Cj62Jh5AZnHpc3RN00QXSGUIAHfIot5K1kaoYbeW13fxM+s1YPmXPUujp70PSZFIv0h04lhGK2vS RwQf/C/DNAqrCmT2/f0= ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN NSEC3 ( 1 1 5 1d00680a7a586cdb kc8raacet4purm0v8mgdbvqvtq18se9f NS DS RRSIG ) kc7s70a90k28kpgcuvnbu1lpnq72g9ao.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220201041612 20220118000445 24901 es. ju9eyRDAqnwmUrDatJRhuqGX5UjyPlYY3r4tMvyJZnUgjJ6Ehvd+WkfanYm99h0X8f2dln35zYrV odXeLV1y14YhZAX243hkd/pt8MOxNh5i23qxR38jWdXXcgJD2NkmtHY85YXz/9qbnISKWKTGmEaU /n3x2wgJf2tHaM+HGeA= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for ine.es in the es zone
	Query to fourier.ine.es for ine.es/DNSKEY
	Received 89 bytes from 195.254.149.47
	;; Response received from 195.254.149.47 (89 octets) ;; HEADER SECTION ;; id = 56404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ine.es. 1200 IN SOA ( cramer.ine.es. hostmaster.ine.es. 2021112408 ;serial 7200 ;refresh 300 ;retry 1814400 ;expire 1200 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to cramer.ine.es for ine.es/A
	Received 171 bytes from 195.254.149.45
	;; Response received from 195.254.149.45 (171 octets) ;; HEADER SECTION ;; id = 5931 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.130 ine.es. 10800 IN A 195.254.149.129 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS fourier.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS cramer.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	cramer.ine.es is authoritative for ine.es
	Query to fourier.ine.es for ine.es/SOA
	Received 186 bytes from 195.254.149.47
	;; Response received from 195.254.149.47 (186 octets) ;; HEADER SECTION ;; id = 15749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN SOA ;; ANSWER SECTION (1 record) ine.es. 10800 IN SOA ( cramer.ine.es. hostmaster.ine.es. 2021112408 ;serial 7200 ;refresh 300 ;retry 1814400 ;expire 1200 ;minimum ) ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS fourier.ine.es. ine.es. 10800 IN NS cramer.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to artemis.ttd.net for ine.es/SOA
	Received 186 bytes from 213.0.184.69
	;; Response received from 213.0.184.69 (186 octets) ;; HEADER SECTION ;; id = 17479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN SOA ;; ANSWER SECTION (1 record) ine.es. 10800 IN SOA ( cramer.ine.es. hostmaster.ine.es. 2021112408 ;serial 7200 ;refresh 300 ;retry 1814400 ;expire 1200 ;minimum ) ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS cramer.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS fourier.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to cramer.ine.es for ine.es/A
	Received 171 bytes from 195.254.149.45
	;; Response received from 195.254.149.45 (171 octets) ;; HEADER SECTION ;; id = 24485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.129 ine.es. 10800 IN A 195.254.149.130 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS fourier.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS cramer.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ine.es A RR has value 195.254.149.129
	ine.es A RR has value 195.254.149.130
	No RRSIGs found

ine.es

	Query to fourier.ine.es for ine.es/A
	Received 171 bytes from 195.254.149.47
	;; Response received from 195.254.149.47 (171 octets) ;; HEADER SECTION ;; id = 31913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.130 ine.es. 10800 IN A 195.254.149.129 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS fourier.ine.es. ine.es. 10800 IN NS cramer.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fourier.ine.es is authoritative for ine.es
	Query to fourier.ine.es for ine.es/A
	Received 171 bytes from 195.254.149.47
	;; Response received from 195.254.149.47 (171 octets) ;; HEADER SECTION ;; id = 12349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.129 ine.es. 10800 IN A 195.254.149.130 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS cramer.ine.es. ine.es. 10800 IN NS fourier.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ine.es A RR has value 195.254.149.129
	ine.es A RR has value 195.254.149.130
	No RRSIGs found

ine.es

	Query to artemis.ttd.net for ine.es/A
	Received 171 bytes from 213.0.184.69
	;; Response received from 213.0.184.69 (171 octets) ;; HEADER SECTION ;; id = 35829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.129 ine.es. 10800 IN A 195.254.149.130 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS cramer.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS fourier.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	artemis.ttd.net is authoritative for ine.es
	Query to artemis.ttd.net for ine.es/A
	Received 171 bytes from 213.0.184.69
	;; Response received from 213.0.184.69 (171 octets) ;; HEADER SECTION ;; id = 32636 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ine.es. IN A ;; ANSWER SECTION (2 records) ine.es. 10800 IN A 195.254.149.129 ine.es. 10800 IN A 195.254.149.130 ;; AUTHORITY SECTION (3 records) ine.es. 10800 IN NS cramer.ine.es. ine.es. 10800 IN NS artemis.ttd.net. ine.es. 10800 IN NS fourier.ine.es. ;; ADDITIONAL SECTION (3 records) cramer.ine.es. 10800 IN A 195.254.149.45 fourier.ine.es. 10800 IN A 195.254.149.47 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ine.es A RR has value 195.254.149.129
	ine.es A RR has value 195.254.149.130
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ine.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: