DNSSEC Analyzer - kilotin.se

Domain Name:

Time: 2021-03-19 02:29:39 UTC, NTP stratum 4

Analyzing DNSSEC problems for kilotin.se

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 24812 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbKGKkqc1VAvQr48iPf9Nd39f337MitggxF0AB9kLKRNSuq9joOEPC/R6PD/4lTzUms8U9oP +aiF0rVC2rGOKSdOLxPHRLA3ameMFT2/3bmVCFsRsn03IVTdN5VUAfczjqjmA0t9NM7bbN5oVzuQ L3P1FyQb1q6HX4M1qg+htMNEd9PdlPLMFcrUg5fcYtTr2llVkO1Xo3lAdrjmmxfGeIyQnskpwPyW 88J527DEytmgPo5KzLBYLMoL2Q41PK0ul0rs7yN+g5IG4LnJOcjew1yrmHXrp/OzrpsO4FkicufY t/ygfQKkT5HYbr/yFgeZAfaF80nYyc7wgDYxOeHdiRk= ) ; Key ID = 42351`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210402000000 20210312000000 20326 . m4qjWhV4eOHhyN+ybfdLjIw3p9PTHYsrbKEER5Z1YOkcbDdFR5TSACRxCPKEwM9RVW93Dh+kJjdt 774hN2TnDphcondv4eR5qlXNVH/McItwzWUl8v4szlBLJTfMflSc90VEXZW3jjMrzT1/nKn7qqbI T3eM0VveBxeXHbg4QweQOiL7Ua17UWi1upYO5YfOmYc14cqXFuoUUFJ9CUgBsMI1v3f0h1cUOujI 30PkULoAo9yG3dq8NGJcQDbok7WelJrGru5Vff30N2ugUpTy1E0G0nxsaMoPMMSg4Mnh1Xax22Hc cfftFot+0RpOATfccrkiEsYV+b0LQtGPzdvP5g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=42351 is now in the chain-of-trust
	Query to k.root-servers.net for kilotin.se/A
	Received 977 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (977 bytes) ;; HEADER SECTION ;; id = 40410 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; kilotin.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . KfRcr/8y+mq3HuTYt5aKmf+Rh1Lli22kKV3lkHWrdL9iyXSrDI9LOVyMcRJlnkYMbDuCU1oJTS0w rh3ertGHgRvvdYVpDPtaf/OhiVwa8O1y/16fi2HaW6wfk2qJpBpvsubNsAp1ry+WdlUtblgBVfsg 5ZBg0JrJhIBsb5zVnCsmqzGRk1e+hl8aadBLCvv1ENt/8C4xdgFRoejEC8sORu58Ctdv3pViD3Jl D3gg9YjLzESfPZny0cAMvc+NGcrc1djtF0cHxWThKy6BDP6eW98UmLoLAMSL4Z6/1yqUyUAKv7S1 ZYJUjjYgMZJm6boI4syBW3y6eNwgf4+hWo9GDw== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN A 192.36.133.107 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN A 192.36.135.107 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN A 192.71.53.53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN A 130.239.5.114 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN A 194.146.106.22 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN A 194.0.11.112 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN A 213.108.25.4 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN A 185.159.197.150 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN A 185.159.198.150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.root-servers.net for se/DNSKEY
	Received 969 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (969 bytes) ;; HEADER SECTION ;; id = 6888 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . KfRcr/8y+mq3HuTYt5aKmf+Rh1Lli22kKV3lkHWrdL9iyXSrDI9LOVyMcRJlnkYMbDuCU1oJTS0w rh3ertGHgRvvdYVpDPtaf/OhiVwa8O1y/16fi2HaW6wfk2qJpBpvsubNsAp1ry+WdlUtblgBVfsg 5ZBg0JrJhIBsb5zVnCsmqzGRk1e+hl8aadBLCvv1ENt/8C4xdgFRoejEC8sORu58Ctdv3pViD3Jl D3gg9YjLzESfPZny0cAMvc+NGcrc1djtF0cHxWThKy6BDP6eW98UmLoLAMSL4Z6/1yqUyUAKv7S1 ZYJUjjYgMZJm6boI4syBW3y6eNwgf4+hWo9GDw== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 b.ns.se. 172800 IN A 192.36.133.107 c.ns.se. 172800 IN A 192.36.135.107 f.ns.se. 172800 IN A 192.71.53.53 g.ns.se. 172800 IN A 130.239.5.114 i.ns.se. 172800 IN A 194.146.106.22 m.ns.se. 172800 IN A 194.0.11.112 x.ns.se. 172800 IN A 213.108.25.4 y.ns.se. 172800 IN A 185.159.197.150 z.ns.se. 172800 IN A 185.159.198.150 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone se

	Checking DS between . and se
	Query to m.root-servers.net for se/DS
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 33957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DS ;; ANSWER SECTION (2 records) se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . KfRcr/8y+mq3HuTYt5aKmf+Rh1Lli22kKV3lkHWrdL9iyXSrDI9LOVyMcRJlnkYMbDuCU1oJTS0w rh3ertGHgRvvdYVpDPtaf/OhiVwa8O1y/16fi2HaW6wfk2qJpBpvsubNsAp1ry+WdlUtblgBVfsg 5ZBg0JrJhIBsb5zVnCsmqzGRk1e+hl8aadBLCvv1ENt/8C4xdgFRoejEC8sORu58Ctdv3pViD3Jl D3gg9YjLzESfPZny0cAMvc+NGcrc1djtF0cHxWThKy6BDP6eW98UmLoLAMSL4Z6/1yqUyUAKv7S1 ZYJUjjYgMZJm6boI4syBW3y6eNwgf4+hWo9GDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for se in the . zone
	DS=59407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`se. 86400 IN RRSIG ( DS 8 1 86400 20210331170000 20210318160000 42351 . KfRcr/8y+mq3HuTYt5aKmf+Rh1Lli22kKV3lkHWrdL9iyXSrDI9LOVyMcRJlnkYMbDuCU1oJTS0w rh3ertGHgRvvdYVpDPtaf/OhiVwa8O1y/16fi2HaW6wfk2qJpBpvsubNsAp1ry+WdlUtblgBVfsg 5ZBg0JrJhIBsb5zVnCsmqzGRk1e+hl8aadBLCvv1ENt/8C4xdgFRoejEC8sORu58Ctdv3pViD3Jl D3gg9YjLzESfPZny0cAMvc+NGcrc1djtF0cHxWThKy6BDP6eW98UmLoLAMSL4Z6/1yqUyUAKv7S1 ZYJUjjYgMZJm6boI4syBW3y6eNwgf4+hWo9GDw== )`
	RRSIG=42351 and DNSKEY=42351 verifies the DS RRset
	DS=59407/SHA-256 is now in the chain-of-trust
	`se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 )`
	Query to y.ns.se for se/DNSKEY
	Received 873 bytes from 185.159.197.150
	;; Answer received from 185.159.197.150 (873 bytes) ;; HEADER SECTION ;; id = 53442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (3 records) se. 3600 IN DNSKEY ( 256 3 8 AwEAAaPZOVgJwGZ4DVysUmCMEgw9yZclyXQ3nsAmRqV0mPIC2sZC0eL1JB6iy6HyYqO/2OW8fSBG CQYdzeGMZ/j/JMphBytbXa/vSPbaraC4WkUco+g1HSk8I6CrbzK9bN6y+45a9v0N3MIySPIxT+E0 gXMso836XAfrCB2KJ+x3R+GmM84B+b+kjorW5zEqctgIh+M+hSsx+pMDk6T5SXSOfU6A8Yl4el9n G6DDmqok+piYHOrxDpykSwRRofBFePIfqzNo0vFHoHxDrdpbcaExPpYn3NZALhzjeVIG7PHyMmG4 IFfrcqyHvfUDJQXGBR4s2o+jK8sE1R1NxuecZc+6tfk= ) ; Key ID = 24331 se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407 se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210401203239 20210318161126 59407 se. WOG9DWAjAvqEOKX18ui0tELt0l5Wb9hXdOHn103TAgwBh4qWBrZF8xIHo/0p6if/7KgfvXkOn0Eo 2IMknuBguf7IEjFadCrFx4HDLfVM+FO1HGTjCDHPVtJXIJjS1gNWFPzkQTRpYQCjDlVPpkw9JgKG dq08MOhCmVDPwvfjVCSImEET7mt/cT7mrq9LDu5JI8MRlpXX+bte4cnIy4iZHSS87585yMvAPUlR WhwumfNO1R1YnMfD9UqPiTJGakohJKi5mDi38f81Sxwc1v+ITWxlI09bmkZ9q4OxiwtPEHUdC1FY U5wOK7nuDP6jtI2cY+8BlGoWU/IN6veIUxIduA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for se
	`se. 3600 IN DNSKEY ( 256 3 8 AwEAAaPZOVgJwGZ4DVysUmCMEgw9yZclyXQ3nsAmRqV0mPIC2sZC0eL1JB6iy6HyYqO/2OW8fSBG CQYdzeGMZ/j/JMphBytbXa/vSPbaraC4WkUco+g1HSk8I6CrbzK9bN6y+45a9v0N3MIySPIxT+E0 gXMso836XAfrCB2KJ+x3R+GmM84B+b+kjorW5zEqctgIh+M+hSsx+pMDk6T5SXSOfU6A8Yl4el9n G6DDmqok+piYHOrxDpykSwRRofBFePIfqzNo0vFHoHxDrdpbcaExPpYn3NZALhzjeVIG7PHyMmG4 IFfrcqyHvfUDJQXGBR4s2o+jK8sE1R1NxuecZc+6tfk= ) ; Key ID = 24331`
	`se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407`
	DNSKEY=59407/SEP is now in the chain-of-trust
	DS=59407/SHA-256 verifies DNSKEY=59407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210401203239 20210318161126 59407 se. WOG9DWAjAvqEOKX18ui0tELt0l5Wb9hXdOHn103TAgwBh4qWBrZF8xIHo/0p6if/7KgfvXkOn0Eo 2IMknuBguf7IEjFadCrFx4HDLfVM+FO1HGTjCDHPVtJXIJjS1gNWFPzkQTRpYQCjDlVPpkw9JgKG dq08MOhCmVDPwvfjVCSImEET7mt/cT7mrq9LDu5JI8MRlpXX+bte4cnIy4iZHSS87585yMvAPUlR WhwumfNO1R1YnMfD9UqPiTJGakohJKi5mDi38f81Sxwc1v+ITWxlI09bmkZ9q4OxiwtPEHUdC1FY U5wOK7nuDP6jtI2cY+8BlGoWU/IN6veIUxIduA== )`
	RRSIG=59407 and DNSKEY=59407/SEP verifies the DNSKEY RRset
	DNSKEY=24331 is now in the chain-of-trust
	Query to z.ns.se for kilotin.se/A
	Received 1053 bytes from 185.159.198.150
	;; Answer received from 185.159.198.150 (1053 bytes) ;; HEADER SECTION ;; id = 13231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; kilotin.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) se. 7200 IN SOA ( catcher-in-the-rye.nic.se. registry-default.nic.se. 2021031902 ;serial 1800 ;refresh 1800 ;retry 864000 ;expire 7200 ;minimum ) kilotex.se. 7200 IN NSEC kiloview.se. NS RRSIG NSEC se. 7200 IN NSEC 0.se. NS SOA TXT RRSIG NSEC DNSKEY se. 7200 IN RRSIG ( SOA 8 1 172800 20210331101039 20210319011126 24331 se. hGthj0iPo8javo6hKBqh5lqGrOIx9u3JZZDQA6dMWiSRBEmx9kRjB7M/V5PQWFOnhC2bVG95XoxA LKxZJvlmF4DZnM1LOgEXzxDDgrC1t5PjrsJauO7/wu2sg1RQIwdWq+sSGNt9CVKOZyq7OlKS624f P4SbsNqyjhbzf+cET+auqq2hB5j2w0LucLj37K3WuxDECfBScHd3aTfQlATeS2dX+8ZCtCKWXXln OAEeaEW+S8iRf/9LPTbSwqxF87hH0IyILWMrDIRaeZ9GoIQTI/gq/2XL4riLRawCH3uXMPukNO1v FA/PqMv1ajNpUYlZkex338J2fk+ggO+2Y3Fwaw== ) kilotex.se. 7200 IN RRSIG ( NSEC 8 2 7200 20210329141518 20210316201113 24331 se. QKKQ5Z7A4EkRUldsDJowtUtkSaKg36ciViCb6q5N4vP77drtcdHkAVVcmXpwjTdnxPDOg9jkDxWQ WN80iaT23I5sXRXDORVrq5XcVwsoDUgMQ5LiSZz3pDsfHwqFHSvLmy1Im4nXEk/160F8Zt33dq5T X+jBlsvjfC8rV8j9RZwQB1NH+gukrVq6hXWFtL58Q62NuVPnUKVhfxhku7VY3SVNjtBnPXXdeDmq 171bpwHZhqumkRVUzmTSID/e/DxwOyjMDuYObEN+eVrWcu/IlBgJH5LvX/zodaumv/C5jOdefITB 3tIUtMCOVGzOgetEg4YH7jnKtlO9y8ph2D5duQ== ) se. 7200 IN RRSIG ( NSEC 8 1 7200 20210331194503 20210318101124 24331 se. NxuZBsE5oKSMceqJIijshCQ8XpraZg3mHfoarjm2JclergHUS7VVmtr08lhRSf5bpAqNTJp1YTSU ZYfwYwpruY2NwZ7rk/91aiHl0wWtF2W7w730FRvQoTeeknlmmusIIXgNdBnSjBxAPCjr3hDCxxtU kpm60drvbzOXwqHq9KXNIh9DiB4+66aSieY7rNrZOAipyUzHCdCY2TZV/x4so7L9hephL8K1ACdd dxzGIrpp0Sobxt6cSNKzIu704Cl93kCUs23Athm+295hpCo1oS2DDwKWahWS1hvHjiLpqAysvF2S 5MJ6HeRccj0AwnHeqYF+tFglUYk77uPRz318oA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Zone se (185.159.198.150) returns NXDOMAIN for kilotin.se
	Checking NSEC records for an NXDOMAIN response
	Found 1 RRSIGs over NSEC RRset
	`kilotex.se. 7200 IN RRSIG ( NSEC 8 2 7200 20210329141518 20210316201113 24331 se. QKKQ5Z7A4EkRUldsDJowtUtkSaKg36ciViCb6q5N4vP77drtcdHkAVVcmXpwjTdnxPDOg9jkDxWQ WN80iaT23I5sXRXDORVrq5XcVwsoDUgMQ5LiSZz3pDsfHwqFHSvLmy1Im4nXEk/160F8Zt33dq5T X+jBlsvjfC8rV8j9RZwQB1NH+gukrVq6hXWFtL58Q62NuVPnUKVhfxhku7VY3SVNjtBnPXXdeDmq 171bpwHZhqumkRVUzmTSID/e/DxwOyjMDuYObEN+eVrWcu/IlBgJH5LvX/zodaumv/C5jOdefITB 3tIUtMCOVGzOgetEg4YH7jnKtlO9y8ph2D5duQ== )`
	RRSIG=24331 and DNSKEY=24331 verifies the NSEC RRset
	NSEC proves no records exist with name kilotin.se
	Found 1 RRSIGs over NSEC RRset
	`se. 7200 IN RRSIG ( NSEC 8 1 7200 20210331194503 20210318101124 24331 se. NxuZBsE5oKSMceqJIijshCQ8XpraZg3mHfoarjm2JclergHUS7VVmtr08lhRSf5bpAqNTJp1YTSU ZYfwYwpruY2NwZ7rk/91aiHl0wWtF2W7w730FRvQoTeeknlmmusIIXgNdBnSjBxAPCjr3hDCxxtU kpm60drvbzOXwqHq9KXNIh9DiB4+66aSieY7rNrZOAipyUzHCdCY2TZV/x4so7L9hephL8K1ACdd dxzGIrpp0Sobxt6cSNKzIu704Cl93kCUs23Athm+295hpCo1oS2DDwKWahWS1hvHjiLpqAysvF2S 5MJ6HeRccj0AwnHeqYF+tFglUYk77uPRz318oA== )`
	RRSIG=24331 and DNSKEY=24331 verifies the NSEC RRset
	NSEC proves no records exist with name *.se

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test kilotin.se at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: