DNSSEC Debugger - jobnet.dk

Domain Name:

Time: 2025-10-23 00:52:38 UTC

Analyzing DNSSEC problems for jobnet.dk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 1141 octets ;; HEADER SECTION ;; id = 8004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=61809 is now in the chain-of-trust
	Query to f.root-servers.net for jobnet.dk/A
	Received 737 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 737 octets ;; HEADER SECTION ;; id = 29782 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS h.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS t.nic.dk. dk. 86400 IN DS ( 20109 13 2 5c86a68ae2c3ab74182b3ad0749b46e55f892b835f9578cfa12f9093fb252bd0 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20251104170000 20251022160000 61809 . yCI59R34+e5IEAnzuAo5K5a0/PWt5WxFSYUz4jfz46nlTa81eAQm5NWR/r+/po6YiWlLWyl9zw3H gLw6lJocOWVz4IfAjgfHRYcshDSAwBakCd+X1EtUHEX4HhmxK1IT8wIrLzS2D7FtmYdnV8oxOiLe zRHZDMiLe2KW2jleirYch80BikgJPWF6Rb4VOiII3bgjPbZJv5QfGdrpONEOvvJk83281NsXZy/3 n1j10zPbjiANT7ASNcBwYTELaZ+5JoyIsNaGmUXk7aTYbTB8XOBHZwnd1OsTcc6OTBMbIun+21BN m47DjQPypfFAkK78IqJ0/1QL5hvhKQu2YYLN+w== ) ;; ADDITIONAL SECTION (13 records) b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 c.nic.dk. 172800 IN A 185.159.199.45 c.nic.dk. 172800 IN AAAA 2620:10a:80ac::45 h.nic.dk. 172800 IN A 46.30.126.214 h.nic.dk. 172800 IN AAAA 2a00:1b18:1:2::53 l.nic.dk. 172800 IN A 130.226.213.138 l.nic.dk. 172800 IN AAAA 2001:878:0:e000:82:e2:d5:8a s.nic.dk. 172800 IN A 194.0.28.7 s.nic.dk. 172800 IN AAAA 2001:678:2c:0:194:0:28:7 t.nic.dk. 172800 IN A 185.43.134.16 t.nic.dk. 172800 IN AAAA 2001:148f:fffd::16 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for dk/DNSKEY
	Received 732 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 732 octets ;; HEADER SECTION ;; id = 41598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS h.nic.dk. dk. 172800 IN NS t.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 86400 IN DS ( 20109 13 2 5c86a68ae2c3ab74182b3ad0749b46e55f892b835f9578cfa12f9093fb252bd0 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20251104170000 20251022160000 61809 . yCI59R34+e5IEAnzuAo5K5a0/PWt5WxFSYUz4jfz46nlTa81eAQm5NWR/r+/po6YiWlLWyl9zw3H gLw6lJocOWVz4IfAjgfHRYcshDSAwBakCd+X1EtUHEX4HhmxK1IT8wIrLzS2D7FtmYdnV8oxOiLe zRHZDMiLe2KW2jleirYch80BikgJPWF6Rb4VOiII3bgjPbZJv5QfGdrpONEOvvJk83281NsXZy/3 n1j10zPbjiANT7ASNcBwYTELaZ+5JoyIsNaGmUXk7aTYbTB8XOBHZwnd1OsTcc6OTBMbIun+21BN m47DjQPypfFAkK78IqJ0/1QL5hvhKQu2YYLN+w== ) ;; ADDITIONAL SECTION (13 records) t.nic.dk. 172800 IN A 185.43.134.16 s.nic.dk. 172800 IN A 194.0.28.7 l.nic.dk. 172800 IN A 130.226.213.138 h.nic.dk. 172800 IN A 46.30.126.214 c.nic.dk. 172800 IN A 185.159.199.45 b.nic.dk. 172800 IN A 193.163.102.222 t.nic.dk. 172800 IN AAAA 2001:148f:fffd::16 s.nic.dk. 172800 IN AAAA 2001:678:2c:0:194:0:28:7 l.nic.dk. 172800 IN AAAA 2001:878:0:e000:82:e2:d5:8a h.nic.dk. 172800 IN AAAA 2a00:1b18:1:2::53 c.nic.dk. 172800 IN AAAA 2620:10a:80ac::45 b.nic.dk. 172800 IN AAAA 2a01:630:0:80::53 ;; { "EDNS-VERSION": 0 }
	Found child zone dk

	Checking DS between . and dk
	Query to b.root-servers.net for dk/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 9277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS ( 20109 13 2 5c86a68ae2c3ab74182b3ad0749b46e55f892b835f9578cfa12f9093fb252bd0 ) dk. 86400 IN RRSIG ( DS 8 1 86400 20251104170000 20251022160000 61809 . yCI59R34+e5IEAnzuAo5K5a0/PWt5WxFSYUz4jfz46nlTa81eAQm5NWR/r+/po6YiWlLWyl9zw3H gLw6lJocOWVz4IfAjgfHRYcshDSAwBakCd+X1EtUHEX4HhmxK1IT8wIrLzS2D7FtmYdnV8oxOiLe zRHZDMiLe2KW2jleirYch80BikgJPWF6Rb4VOiII3bgjPbZJv5QfGdrpONEOvvJk83281NsXZy/3 n1j10zPbjiANT7ASNcBwYTELaZ+5JoyIsNaGmUXk7aTYbTB8XOBHZwnd1OsTcc6OTBMbIun+21BN m47DjQPypfFAkK78IqJ0/1QL5hvhKQu2YYLN+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for dk in the . zone
	DS=20109/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG ( DS 8 1 86400 20251104170000 20251022160000 61809 . yCI59R34+e5IEAnzuAo5K5a0/PWt5WxFSYUz4jfz46nlTa81eAQm5NWR/r+/po6YiWlLWyl9zw3H gLw6lJocOWVz4IfAjgfHRYcshDSAwBakCd+X1EtUHEX4HhmxK1IT8wIrLzS2D7FtmYdnV8oxOiLe zRHZDMiLe2KW2jleirYch80BikgJPWF6Rb4VOiII3bgjPbZJv5QfGdrpONEOvvJk83281NsXZy/3 n1j10zPbjiANT7ASNcBwYTELaZ+5JoyIsNaGmUXk7aTYbTB8XOBHZwnd1OsTcc6OTBMbIun+21BN m47DjQPypfFAkK78IqJ0/1QL5hvhKQu2YYLN+w== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=20109/SHA-256 is now in the chain-of-trust
	`dk. 86400 IN DS ( 20109 13 2 5c86a68ae2c3ab74182b3ad0749b46e55f892b835f9578cfa12f9093fb252bd0 )`
	Query to h.nic.dk for dk/DNSKEY
	Received 289 bytes from 46.30.126.214
	;; Response received from [46.30.126.214] 289 octets ;; HEADER SECTION ;; id = 29032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (3 records) dk. 86400 IN DNSKEY ( 256 3 13 fspv4pDTCNb2E151CJoliPtTKDfbeWq9nA6h4OSKukDOF7OmLZzdEQ8nj2Lddi9OicMYlGnkR2Rx ycO4RiNqaQ== ) ; keytag 50934 dk. 86400 IN DNSKEY ( 257 3 13 8+hCy8HQ+2JNbZrpyEosYhX+GA9jtrAICwbpV06x//uNQRi07a+x9c5/S8AEyppjheETWk3cgjvf ZY+MNBHpWw== ) ; keytag 20109 dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251118103901 20251021090901 20109 dk. raTjvTvyZ60LkRWMtWCO5TwQ80llnyAodw1afOg4skRIxqIuGWhFnI06/1QKctP4ShLV/lGijeid 2fw1mVyHrg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dk
	`dk. 86400 IN DNSKEY ( 256 3 13 fspv4pDTCNb2E151CJoliPtTKDfbeWq9nA6h4OSKukDOF7OmLZzdEQ8nj2Lddi9OicMYlGnkR2Rx ycO4RiNqaQ== ) ; keytag 50934`
	`dk. 86400 IN DNSKEY ( 257 3 13 8+hCy8HQ+2JNbZrpyEosYhX+GA9jtrAICwbpV06x//uNQRi07a+x9c5/S8AEyppjheETWk3cgjvf ZY+MNBHpWw== ) ; keytag 20109`
	DNSKEY=20109/SEP is now in the chain-of-trust
	DS=20109/SHA-256 verifies DNSKEY=20109/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG ( DNSKEY 13 1 86400 20251118103901 20251021090901 20109 dk. raTjvTvyZ60LkRWMtWCO5TwQ80llnyAodw1afOg4skRIxqIuGWhFnI06/1QKctP4ShLV/lGijeid 2fw1mVyHrg== )`
	RRSIG=20109 and DNSKEY=20109/SEP verifies the DNSKEY RRset
	DNSKEY=50934 is now in the chain-of-trust
	Query to b.nic.dk for jobnet.dk/A
	Received 259 bytes from 193.163.102.222
	;; Response received from [193.163.102.222] 259 octets ;; HEADER SECTION ;; id = 45394 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jobnet.dk. 86400 IN NS ns7.sitnet.dk. jobnet.dk. 86400 IN NS ns6.sitnet.dk. jobnet.dk. 7200 IN DS ( 542 13 2 e73bfc172adf316e52d5697814805246cb2395e435b7d7f2e82dee3a312c3aea ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20251117110002 20251020093002 50934 dk. 3/7cScJRNpdnc9dcmHYW0zaa9Wob5rpmUsAF7GvNmRZZzl2I+MN7LFP2iCBe6YqS78AyqFtDt5BV qcuJd5Cq4A== ) ;; ADDITIONAL SECTION (3 records) ns7.sitnet.dk. 86400 IN A 107.162.176.221 ns6.sitnet.dk. 86400 IN A 107.162.234.197 ;; { "EDNS-VERSION": 0 }
	Query to l.nic.dk for jobnet.dk/DNSKEY
	Received 259 bytes from 130.226.213.138
	;; Response received from [130.226.213.138] 259 octets ;; HEADER SECTION ;; id = 42233 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 3 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) jobnet.dk. 86400 IN NS ns6.sitnet.dk. jobnet.dk. 86400 IN NS ns7.sitnet.dk. jobnet.dk. 7200 IN DS ( 542 13 2 e73bfc172adf316e52d5697814805246cb2395e435b7d7f2e82dee3a312c3aea ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20251117110002 20251020093002 50934 dk. 3/7cScJRNpdnc9dcmHYW0zaa9Wob5rpmUsAF7GvNmRZZzl2I+MN7LFP2iCBe6YqS78AyqFtDt5BV qcuJd5Cq4A== ) ;; ADDITIONAL SECTION (3 records) ns6.sitnet.dk. 86400 IN A 107.162.234.197 ns7.sitnet.dk. 86400 IN A 107.162.176.221 ;; { "EDNS-VERSION": 0 }
	Found child zone jobnet.dk

jobnet.dk

	Checking DS between dk and jobnet.dk
	Query to c.nic.dk for jobnet.dk/DS
	Received 184 bytes from 185.159.199.45
	;; Response received from [185.159.199.45] 184 octets ;; HEADER SECTION ;; id = 41722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DS ;; ANSWER SECTION (2 records) jobnet.dk. 7200 IN DS ( 542 13 2 e73bfc172adf316e52d5697814805246cb2395e435b7d7f2e82dee3a312c3aea ) jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20251117110002 20251020093002 50934 dk. 3/7cScJRNpdnc9dcmHYW0zaa9Wob5rpmUsAF7GvNmRZZzl2I+MN7LFP2iCBe6YqS78AyqFtDt5BV qcuJd5Cq4A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for jobnet.dk in the dk zone
	DS=542/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`jobnet.dk. 7200 IN RRSIG ( DS 13 2 7200 20251117110002 20251020093002 50934 dk. 3/7cScJRNpdnc9dcmHYW0zaa9Wob5rpmUsAF7GvNmRZZzl2I+MN7LFP2iCBe6YqS78AyqFtDt5BV qcuJd5Cq4A== )`
	RRSIG=50934 and DNSKEY=50934 verifies the DS RRset
	DS=542/SHA-256 is now in the chain-of-trust
	`jobnet.dk. 7200 IN DS ( 542 13 2 e73bfc172adf316e52d5697814805246cb2395e435b7d7f2e82dee3a312c3aea )`
	Query to ns7.sitnet.dk for jobnet.dk/DNSKEY
	Received 736 bytes from 107.162.176.221
	;; Response received from [107.162.176.221] 736 octets ;; HEADER SECTION ;; id = 34902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN DNSKEY ;; ANSWER SECTION (7 records) jobnet.dk. 172800 IN DNSKEY ( 256 3 13 RzEusnvMQK4THf3b3AQAeuW/9RZi7rgQ6ouItBNCwibpQFcg52Q1RhhWeJlBP7jWhmLW/bokaYE+ m/x6C0gmAw== ) ; keytag 14300 jobnet.dk. 172800 IN DNSKEY ( 256 3 13 YRDcGp3wqRnVXR/av7V+Raqdckd0blBTKrUIyYQ0kXq51w1Ny4ERkbonZAnfyo9q+Av80v3RhSw3 vL/fwSgMvw== ) ; keytag 21833 jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 63280 jobnet.dk. 4FmMBlNTcRplOrxy+91JA2GB+kwkotdN9v1tW0Fel23NKTxRaUzc2Xscx3zLUji56HKB+WHA5HD3 7brurVQXzA== ) jobnet.dk. 172800 IN DNSKEY ( 257 3 13 OdB8jLcuImOzgOvHmxcXUQf5oEJP1vqeuCAaSW6eGdspXShNrLejjQQ3jIVZXGFYERsUo8XtC0Be //xXVVIu+A== ) ; keytag 63280 jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 542 jobnet.dk. xFXtYFY1g9GSYX7L64KtzfuYyZjy+JjvdUtltKcG2FvnEeuoSSdi313FMfL+C6nPWz8RB2iDPXz5 N6tAKdmbBg== ) jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 21833 jobnet.dk. roImUd4R4qdnEOkQH4c0ZVjp8qzGmDH5F+mrEnDZJKYToDyhK2PMXxgvXZ6GcUp9nZTxoIcRCjgy zn7Eq4+IXA== ) jobnet.dk. 172800 IN DNSKEY ( 257 3 13 lDyO8Dj0ZMiRXUMlSlWb/zc7Ax3NhYxB/8ZFQtM2RqJt26HLSHhhDnq072Yp4qciph5ZX1DzLwTz ULcDOWE30w== ) ; keytag 542 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for jobnet.dk
	`jobnet.dk. 172800 IN DNSKEY ( 256 3 13 RzEusnvMQK4THf3b3AQAeuW/9RZi7rgQ6ouItBNCwibpQFcg52Q1RhhWeJlBP7jWhmLW/bokaYE+ m/x6C0gmAw== ) ; keytag 14300`
	`jobnet.dk. 172800 IN DNSKEY ( 256 3 13 YRDcGp3wqRnVXR/av7V+Raqdckd0blBTKrUIyYQ0kXq51w1Ny4ERkbonZAnfyo9q+Av80v3RhSw3 vL/fwSgMvw== ) ; keytag 21833`
	`jobnet.dk. 172800 IN DNSKEY ( 257 3 13 OdB8jLcuImOzgOvHmxcXUQf5oEJP1vqeuCAaSW6eGdspXShNrLejjQQ3jIVZXGFYERsUo8XtC0Be //xXVVIu+A== ) ; keytag 63280`
	`jobnet.dk. 172800 IN DNSKEY ( 257 3 13 lDyO8Dj0ZMiRXUMlSlWb/zc7Ax3NhYxB/8ZFQtM2RqJt26HLSHhhDnq072Yp4qciph5ZX1DzLwTz ULcDOWE30w== ) ; keytag 542`
	DNSKEY=542/SEP is now in the chain-of-trust
	DS=542/SHA-256 verifies DNSKEY=542/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 63280 jobnet.dk. 4FmMBlNTcRplOrxy+91JA2GB+kwkotdN9v1tW0Fel23NKTxRaUzc2Xscx3zLUji56HKB+WHA5HD3 7brurVQXzA== )`
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 542 jobnet.dk. xFXtYFY1g9GSYX7L64KtzfuYyZjy+JjvdUtltKcG2FvnEeuoSSdi313FMfL+C6nPWz8RB2iDPXz5 N6tAKdmbBg== )`
	`jobnet.dk. 172800 IN RRSIG ( DNSKEY 13 2 172800 20251026115828 20251022113210 21833 jobnet.dk. roImUd4R4qdnEOkQH4c0ZVjp8qzGmDH5F+mrEnDZJKYToDyhK2PMXxgvXZ6GcUp9nZTxoIcRCjgy zn7Eq4+IXA== )`
	RRSIG=63280 and DNSKEY=63280/SEP verifies the DNSKEY RRset
	RRSIG=542 and DNSKEY=542/SEP verifies the DNSKEY RRset
	RRSIG=21833 and DNSKEY=21833 verifies the DNSKEY RRset
	DNSKEY=14300 is now in the chain-of-trust
	DNSKEY=21833 is now in the chain-of-trust
	DNSKEY=63280/SEP is now in the chain-of-trust
	Query to ns6.sitnet.dk for jobnet.dk/A
	Received 177 bytes from 107.162.234.197
	;; Response received from [107.162.234.197] 177 octets ;; HEADER SECTION ;; id = 32705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 60 IN A 128.140.25.84 jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.sitnet.dk is authoritative for jobnet.dk
	Found RRSIG signed by jobnet.dk zone
	Query to ns7.sitnet.dk for jobnet.dk/SOA
	Received 234 bytes from 107.162.176.221
	;; Response received from [107.162.176.221] 234 octets ;; HEADER SECTION ;; id = 62238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN SOA ;; ANSWER SECTION (2 records) jobnet.dk. 3600 IN RRSIG ( SOA 13 2 3600 20251027004023 20251022234023 21833 jobnet.dk. oKHnrh9p+W3G7zPOoIgFPC6x4VYGvwsSP99B6ku9WQxUs1uMrr/cOsTlOO9qW+ntLBZgZI9J5LqF qzHps4FNjw== ) jobnet.dk. 3600 IN SOA ( ns6.sitnet.dk. hostmaster.statens-it.dk. 63893 ;serial 10800 ;refresh 1080 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.sitnet.dk for jobnet.dk/A
	Received 177 bytes from 107.162.234.197
	;; Response received from [107.162.234.197] 177 octets ;; HEADER SECTION ;; id = 8510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 60 IN A 128.140.25.84 jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobnet.dk A RR has value 128.140.25.84
	Found 1 RRSIGs over A RRset
	`jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== )`
	RRSIG=21833 and DNSKEY=21833 verifies the A RRset

jobnet.dk

	Query to ns7.sitnet.dk for jobnet.dk/A
	Received 177 bytes from 107.162.176.221
	;; Response received from [107.162.176.221] 177 octets ;; HEADER SECTION ;; id = 12040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== ) jobnet.dk. 60 IN A 128.140.25.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns7.sitnet.dk is authoritative for jobnet.dk
	Found RRSIG signed by jobnet.dk zone
	Query to ns7.sitnet.dk for jobnet.dk/A
	Received 177 bytes from 107.162.176.221
	;; Response received from [107.162.176.221] 177 octets ;; HEADER SECTION ;; id = 54462 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; jobnet.dk. IN A ;; ANSWER SECTION (2 records) jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== ) jobnet.dk. 60 IN A 128.140.25.84 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	jobnet.dk A RR has value 128.140.25.84
	Found 1 RRSIGs over A RRset
	`jobnet.dk. 60 IN RRSIG ( A 13 2 60 20251026115858 20251022114159 21833 jobnet.dk. mXUTliZ1bPRr9Ff826DcHMP1ZddmD8kmP7RL6vXl8B2uU95nZ5gtOxxuaE/sZernbHfBHOgDLnq5 HpXKIBsRCw== )`
	RRSIG=21833 and DNSKEY=21833 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test jobnet.dk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: