DNSSEC Debugger - kr-vysocina.cz

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-09-26 10:23:36 UTC

Analyzing DNSSEC problems for kr-vysocina.cz

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1414 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1414 octets ;; HEADER SECTION ;; id = 33994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261010000000 20260919000000 20326 . SeT2U+BKi7S4R7OPnQ0EBjS6DtsNPasISEAE3iOUQWl552IWiqHLBYkZOa5au73wjV5oH9vQleMB gtIQleByqX74kORDKMmx+EIhhDmiNOf9w33OqM4+s0Etem28QjqQ9e4QgsKI6N39HDMedL31iybJ n6ghPcDT73IyzgTs6mtyV+Lpu1ZqH1yXNNB34YsEzgquGDKU7QkAlQMupqKlZOhJC2pj4724Fzjr MXq68MYAitHMmfnrm2/iqP8i0jIrIQgIl4mVOO4VxMZEsQa+ESJWEBQJ3Fu3jLRII/xIEq1qXb8F 87yhBvKhzuyLfQGaKttdkN9oudecqKuNezNp0g== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to c.root-servers.net for kr-vysocina.cz/A
	Received 625 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 625 octets ;; HEADER SECTION ;; id = 1969 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20261009050000 20260926040000 57780 . zR3/kWyFqeYuUiNgj/i4EWvGrky6PY4OvDm3nsEfmO44FEBh//181ZklBsjSTdaQ/++z5Qoa/GlQ RT24PvMuls8UUOrzKnZsYaeECsbEj1IiJKzF3Zji0MgoY32+c6P9rBtoML5gsrrgwVu8JH9ZQZB9 JxiG3v3h1og+WTB6NfGFLnpUStCUywAOAIQs2ccGFk1KKjPFOISnM6oJQfmDPZwC/lGdbUyzSbrA L9snmEX0yzgz0nseQ7bIGpzFa8Hg/kPgPzbcVDt56zcPIEB6VU5GLGlbCj2Q00KuRK2IrBwcR6pa A4ENnbL35lFTOGpj/1FmbPPwTG+ZZ0wrmMfptw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 613 octets ;; HEADER SECTION ;; id = 31322 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20261009050000 20260926040000 57780 . zR3/kWyFqeYuUiNgj/i4EWvGrky6PY4OvDm3nsEfmO44FEBh//181ZklBsjSTdaQ/++z5Qoa/GlQ RT24PvMuls8UUOrzKnZsYaeECsbEj1IiJKzF3Zji0MgoY32+c6P9rBtoML5gsrrgwVu8JH9ZQZB9 JxiG3v3h1og+WTB6NfGFLnpUStCUywAOAIQs2ccGFk1KKjPFOISnM6oJQfmDPZwC/lGdbUyzSbrA L9snmEX0yzgz0nseQ7bIGpzFa8Hg/kPgPzbcVDt56zcPIEB6VU5GLGlbCj2Q00KuRK2IrBwcR6pa A4ENnbL35lFTOGpj/1FmbPPwTG+ZZ0wrmMfptw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cz

	Checking DS between . and cz
	Query to j.root-servers.net for cz/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 41298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20261009050000 20260926040000 57780 . zR3/kWyFqeYuUiNgj/i4EWvGrky6PY4OvDm3nsEfmO44FEBh//181ZklBsjSTdaQ/++z5Qoa/GlQ RT24PvMuls8UUOrzKnZsYaeECsbEj1IiJKzF3Zji0MgoY32+c6P9rBtoML5gsrrgwVu8JH9ZQZB9 JxiG3v3h1og+WTB6NfGFLnpUStCUywAOAIQs2ccGFk1KKjPFOISnM6oJQfmDPZwC/lGdbUyzSbrA L9snmEX0yzgz0nseQ7bIGpzFa8Hg/kPgPzbcVDt56zcPIEB6VU5GLGlbCj2Q00KuRK2IrBwcR6pa A4ENnbL35lFTOGpj/1FmbPPwTG+ZZ0wrmMfptw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20261009050000 20260926040000 57780 . zR3/kWyFqeYuUiNgj/i4EWvGrky6PY4OvDm3nsEfmO44FEBh//181ZklBsjSTdaQ/++z5Qoa/GlQ RT24PvMuls8UUOrzKnZsYaeECsbEj1IiJKzF3Zji0MgoY32+c6P9rBtoML5gsrrgwVu8JH9ZQZB9 JxiG3v3h1og+WTB6NfGFLnpUStCUywAOAIQs2ccGFk1KKjPFOISnM6oJQfmDPZwC/lGdbUyzSbrA L9snmEX0yzgz0nseQ7bIGpzFa8Hg/kPgPzbcVDt56zcPIEB6VU5GLGlbCj2Q00KuRK2IrBwcR6pa A4ENnbL35lFTOGpj/1FmbPPwTG+ZZ0wrmMfptw== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to b.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.13.1
	;; Response received from [194.0.13.1] 289 octets ;; HEADER SECTION ;; id = 11742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 256 3 13 HBJJmdH1UQmI855+rriGW5crUyWVBbbbPiEiSCnFcwuQEym97KTeigZy/3AnteocJOFiYMelSMIV peTlFnKx2w== ) ; keytag 5090 cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261008142134 20260924125134 20237 cz. YHtNJnAddqtsrgzu+X5Kbjx2OtRS6qOB1H9DZ9uMccNwH6zaUTw9iNkQRVbNEwD6pI19IApNfnj9 1Deml5E9Eg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 256 3 13 HBJJmdH1UQmI855+rriGW5crUyWVBbbbPiEiSCnFcwuQEym97KTeigZy/3AnteocJOFiYMelSMIV peTlFnKx2w== ) ; keytag 5090`
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; keytag 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20261008142134 20260924125134 20237 cz. YHtNJnAddqtsrgzu+X5Kbjx2OtRS6qOB1H9DZ9uMccNwH6zaUTw9iNkQRVbNEwD6pI19IApNfnj9 1Deml5E9Eg== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=5090 is now in the chain-of-trust
	Query to a.ns.nic.cz for kr-vysocina.cz/A
	Received 315 bytes from 194.0.12.1
	;; Response received from [194.0.12.1] 315 octets ;; HEADER SECTION ;; id = 26162 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) kr-vysocina.cz. 3600 IN NS nse1.kr-vysocina.cz. kr-vysocina.cz. 3600 IN NS nsx1.kr-vysocina.cz. kr-vysocina.cz. 3600 IN DS ( 21556 13 2 c0fc5809eb68c1e45ebaea474df977235af3bfa9ea5b599d09ea909fbc330467 ) kr-vysocina.cz. 3600 IN RRSIG ( DS 13 2 3600 20261008122134 20260924105134 5090 cz. 8rtlTM/NtmqNrfgAmoZ1vDS83QSZohGsEmZ9VIHIz7D3jdUx72AtgnD2hgGe3aQ2oTsJky4xDnWT zDeJyGuMLg== ) ;; ADDITIONAL SECTION (5 records) nse1.kr-vysocina.cz. 3600 IN A 195.93.216.146 nse1.kr-vysocina.cz. 3600 IN AAAA 2001:67c:256c:ff1:c3:5d:d8:92 nsx1.kr-vysocina.cz. 3600 IN A 195.93.216.214 nsx1.kr-vysocina.cz. 3600 IN AAAA 2001:67c:256c:fc0:c3:5d:d8:98 ;; { "EDNS-VERSION": 0 }
	Query to c.ns.nic.cz for kr-vysocina.cz/DNSKEY
	Received 315 bytes from 194.0.14.1
	;; Response received from [194.0.14.1] 315 octets ;; HEADER SECTION ;; id = 20407 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 5 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) kr-vysocina.cz. 3600 IN NS nsx1.kr-vysocina.cz. kr-vysocina.cz. 3600 IN NS nse1.kr-vysocina.cz. kr-vysocina.cz. 3600 IN DS ( 21556 13 2 c0fc5809eb68c1e45ebaea474df977235af3bfa9ea5b599d09ea909fbc330467 ) kr-vysocina.cz. 3600 IN RRSIG ( DS 13 2 3600 20261008122134 20260924105134 5090 cz. 8rtlTM/NtmqNrfgAmoZ1vDS83QSZohGsEmZ9VIHIz7D3jdUx72AtgnD2hgGe3aQ2oTsJky4xDnWT zDeJyGuMLg== ) ;; ADDITIONAL SECTION (5 records) nse1.kr-vysocina.cz. 3600 IN A 195.93.216.146 nsx1.kr-vysocina.cz. 3600 IN A 195.93.216.214 nse1.kr-vysocina.cz. 3600 IN AAAA 2001:67c:256c:ff1:c3:5d:d8:92 nsx1.kr-vysocina.cz. 3600 IN AAAA 2001:67c:256c:fc0:c3:5d:d8:98 ;; { "EDNS-VERSION": 0 }
	Found child zone kr-vysocina.cz

kr-vysocina.cz

	Checking DS between cz and kr-vysocina.cz
	Query to d.ns.nic.cz for kr-vysocina.cz/DS
	Received 189 bytes from 193.29.206.1
	;; Response received from [193.29.206.1] 189 octets ;; HEADER SECTION ;; id = 32887 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN DS ;; ANSWER SECTION (2 records) kr-vysocina.cz. 3600 IN DS ( 21556 13 2 c0fc5809eb68c1e45ebaea474df977235af3bfa9ea5b599d09ea909fbc330467 ) kr-vysocina.cz. 3600 IN RRSIG ( DS 13 2 3600 20261008122134 20260924105134 5090 cz. 8rtlTM/NtmqNrfgAmoZ1vDS83QSZohGsEmZ9VIHIz7D3jdUx72AtgnD2hgGe3aQ2oTsJky4xDnWT zDeJyGuMLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for kr-vysocina.cz in the cz zone
	DS=21556/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`kr-vysocina.cz. 3600 IN RRSIG ( DS 13 2 3600 20261008122134 20260924105134 5090 cz. 8rtlTM/NtmqNrfgAmoZ1vDS83QSZohGsEmZ9VIHIz7D3jdUx72AtgnD2hgGe3aQ2oTsJky4xDnWT zDeJyGuMLg== )`
	RRSIG=5090 and DNSKEY=5090 verifies the DS RRset
	DS=21556/SHA-256 is now in the chain-of-trust
	`kr-vysocina.cz. 3600 IN DS ( 21556 13 2 c0fc5809eb68c1e45ebaea474df977235af3bfa9ea5b599d09ea909fbc330467 )`
	Query to nsx1.kr-vysocina.cz for kr-vysocina.cz/DNSKEY
	Received 423 bytes from 195.93.216.214
	;; Response received from [195.93.216.214] 423 octets ;; HEADER SECTION ;; id = 6960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN DNSKEY ;; ANSWER SECTION (4 records) kr-vysocina.cz. 3600 IN DNSKEY ( 257 3 13 rI7QYW2oaVomZJQ57AG021yLRoyHJu4E8qBsdvdevfg4O5R21JP6Af5Dm7Ktm3xG8LUJd1n8Ge2/ UvOTu0w4mw== ) ; keytag 21556 kr-vysocina.cz. 3600 IN DNSKEY ( 256 3 13 5ofMYVQTGys1CNEbNdTU6QY7RrwR39iyvrwkLRsGWBxsmMpMw/9iXHyF9NdlN8yp4LuFsTPcGslS SAoX85piPQ== ) ; keytag 11383 kr-vysocina.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. Jqe+GwyZiMkMtKyhwaMSVbPX2onG9cXzk8B/TybqwTJ87n/o1P4ISyB2t5Q1oTPIkDcbNQXpK7hh f0EOnUTsTg== ) kr-vysocina.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261027155804 20260917155804 21556 kr-vysocina.cz. Wfa+uggrSo6V3b7sXUTYT3xJtyZU+kbs5wJKlW7gylM//9tqprcgW2kjU/4kiNsEUd5ouvW81cUA XZOJWjJoXw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for kr-vysocina.cz
	`kr-vysocina.cz. 3600 IN DNSKEY ( 257 3 13 rI7QYW2oaVomZJQ57AG021yLRoyHJu4E8qBsdvdevfg4O5R21JP6Af5Dm7Ktm3xG8LUJd1n8Ge2/ UvOTu0w4mw== ) ; keytag 21556`
	`kr-vysocina.cz. 3600 IN DNSKEY ( 256 3 13 5ofMYVQTGys1CNEbNdTU6QY7RrwR39iyvrwkLRsGWBxsmMpMw/9iXHyF9NdlN8yp4LuFsTPcGslS SAoX85piPQ== ) ; keytag 11383`
	DNSKEY=21556/SEP is now in the chain-of-trust
	DS=21556/SHA-256 verifies DNSKEY=21556/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`kr-vysocina.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. Jqe+GwyZiMkMtKyhwaMSVbPX2onG9cXzk8B/TybqwTJ87n/o1P4ISyB2t5Q1oTPIkDcbNQXpK7hh f0EOnUTsTg== )`
	`kr-vysocina.cz. 3600 IN RRSIG ( DNSKEY 13 2 3600 20261027155804 20260917155804 21556 kr-vysocina.cz. Wfa+uggrSo6V3b7sXUTYT3xJtyZU+kbs5wJKlW7gylM//9tqprcgW2kjU/4kiNsEUd5ouvW81cUA XZOJWjJoXw== )`
	RRSIG=11383 and DNSKEY=11383 verifies the DNSKEY RRset
	RRSIG=21556 and DNSKEY=21556/SEP verifies the DNSKEY RRset
	DNSKEY=11383 is now in the chain-of-trust
	Query to nsx1.kr-vysocina.cz for kr-vysocina.cz/A
	Received 845 bytes from 195.93.216.214
	;; Response received from [195.93.216.214] 845 octets ;; HEADER SECTION ;; id = 30178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN A ;; ANSWER SECTION (2 records) kr-vysocina.cz. 3600 IN A 195.93.216.191 kr-vysocina.cz. 3600 IN RRSIG ( A 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. HDagCMQmD3KsROtHjYSlqh77XKGddGAfLDsDQgL2pwGqPigWeeiMF+lnU3CGDha/dzSh3RiP4WVx wJt6pkrvHg== ) ;; AUTHORITY SECTION (3 records) kr-vysocina.cz. 14400 IN NS nsx1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN NS nse1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN RRSIG ( NS 13 2 14400 20261027155804 20260917155804 11383 kr-vysocina.cz. sWtKPXPJu2cdqQzLwkSjMMqKYbtH5Bl2py3bx6Wl2VswBMXEnafpLVdAs7F3XACqzCaZzBQY8kHW sPQpZtNnag== ) ;; ADDITIONAL SECTION (9 records) nse1.kr-vysocina.cz. 1800 IN A 195.93.216.146 nsx1.kr-vysocina.cz. 1800 IN A 195.93.216.214 nse1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:ff1:c3:5d:d8:92 nsx1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:fc0:c3:5d:d8:98 nse1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 2wKp6U1GSjduUUWO8zc6cEO88qrSvMZxCEElOC++9yu4off3/CvgYmUqB806jtMrfTPq+5+AReRr M/W6RDydLQ== ) nse1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 3PpRoNfTUhf6UAmjOEl1o4yAIDTDaEY6sj2wwOahtg6ojKELyWBYUODZGslFli7WFKMF1c4PlypG /BpDkmD7mA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. rPze5be9Uo0YWORoPLhtSE2lPCE3dpheSLHIwLvw5Q3DrApUdOWLxVFmrTtaoTPH6gmYmJQrkqiq f9eAj2sFMA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. Jye0QfT9vYHlXkrhGGgNPFKzrGFOP5acL9r3nuMN+eQU4J85mMyt3O7OEm5dTbNe+Ezvznb0mtwx MjFMVQ0gnA== ) ;; { "EDNS-VERSION": 0 }
	nsx1.kr-vysocina.cz is authoritative for kr-vysocina.cz
	Found RRSIG signed by kr-vysocina.cz zone
	Query to nse1.kr-vysocina.cz for kr-vysocina.cz/SOA
	Received 876 bytes from 195.93.216.146
	;; Response received from [195.93.216.146] 876 octets ;; HEADER SECTION ;; id = 21524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN SOA ;; ANSWER SECTION (2 records) kr-vysocina.cz. 14400 IN SOA ( nse1.kr-vysocina.cz. hostmaster.kr-vysocina.cz. 2026091701 ;serial 14400 ;refresh 3600 ;retry 1209600 ;expire 600 ;minimum ) kr-vysocina.cz. 14400 IN RRSIG ( SOA 13 2 14400 20261027155804 20260917155804 11383 kr-vysocina.cz. A2YeTLwoNPon4n5FsEVmFPEte1spmmcjGNuMA9d7N4KUq/4F6sH6m0hEv2HJNmHLet3wbaJCGiRg gIdOyZmpvg== ) ;; AUTHORITY SECTION (3 records) kr-vysocina.cz. 14400 IN NS nse1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN NS nsx1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN RRSIG ( NS 13 2 14400 20261027155804 20260917155804 11383 kr-vysocina.cz. sWtKPXPJu2cdqQzLwkSjMMqKYbtH5Bl2py3bx6Wl2VswBMXEnafpLVdAs7F3XACqzCaZzBQY8kHW sPQpZtNnag== ) ;; ADDITIONAL SECTION (9 records) nse1.kr-vysocina.cz. 1800 IN A 195.93.216.146 nsx1.kr-vysocina.cz. 1800 IN A 195.93.216.214 nse1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:ff1:c3:5d:d8:92 nsx1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:fc0:c3:5d:d8:98 nse1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 2wKp6U1GSjduUUWO8zc6cEO88qrSvMZxCEElOC++9yu4off3/CvgYmUqB806jtMrfTPq+5+AReRr M/W6RDydLQ== ) nse1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 3PpRoNfTUhf6UAmjOEl1o4yAIDTDaEY6sj2wwOahtg6ojKELyWBYUODZGslFli7WFKMF1c4PlypG /BpDkmD7mA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. rPze5be9Uo0YWORoPLhtSE2lPCE3dpheSLHIwLvw5Q3DrApUdOWLxVFmrTtaoTPH6gmYmJQrkqiq f9eAj2sFMA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. Jye0QfT9vYHlXkrhGGgNPFKzrGFOP5acL9r3nuMN+eQU4J85mMyt3O7OEm5dTbNe+Ezvznb0mtwx MjFMVQ0gnA== ) ;; { "EDNS-VERSION": 0 }
	Query to nsx1.kr-vysocina.cz for kr-vysocina.cz/A
	kr-vysocina.cz A RR has value 195.93.216.191
	Found 1 RRSIGs over A RRset
	`kr-vysocina.cz. 3600 IN RRSIG ( A 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. HDagCMQmD3KsROtHjYSlqh77XKGddGAfLDsDQgL2pwGqPigWeeiMF+lnU3CGDha/dzSh3RiP4WVx wJt6pkrvHg== )`
	RRSIG=11383 and DNSKEY=11383 verifies the A RRset

kr-vysocina.cz

	Query to nse1.kr-vysocina.cz for kr-vysocina.cz/A
	Received 845 bytes from 195.93.216.146
	;; Response received from [195.93.216.146] 845 octets ;; HEADER SECTION ;; id = 26059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 3 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr-vysocina.cz. IN A ;; ANSWER SECTION (2 records) kr-vysocina.cz. 3600 IN A 195.93.216.191 kr-vysocina.cz. 3600 IN RRSIG ( A 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. HDagCMQmD3KsROtHjYSlqh77XKGddGAfLDsDQgL2pwGqPigWeeiMF+lnU3CGDha/dzSh3RiP4WVx wJt6pkrvHg== ) ;; AUTHORITY SECTION (3 records) kr-vysocina.cz. 14400 IN NS nse1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN NS nsx1.kr-vysocina.cz. kr-vysocina.cz. 14400 IN RRSIG ( NS 13 2 14400 20261027155804 20260917155804 11383 kr-vysocina.cz. sWtKPXPJu2cdqQzLwkSjMMqKYbtH5Bl2py3bx6Wl2VswBMXEnafpLVdAs7F3XACqzCaZzBQY8kHW sPQpZtNnag== ) ;; ADDITIONAL SECTION (9 records) nse1.kr-vysocina.cz. 1800 IN A 195.93.216.146 nsx1.kr-vysocina.cz. 1800 IN A 195.93.216.214 nse1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:ff1:c3:5d:d8:92 nsx1.kr-vysocina.cz. 1800 IN AAAA 2001:67c:256c:fc0:c3:5d:d8:98 nse1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 2wKp6U1GSjduUUWO8zc6cEO88qrSvMZxCEElOC++9yu4off3/CvgYmUqB806jtMrfTPq+5+AReRr M/W6RDydLQ== ) nse1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. 3PpRoNfTUhf6UAmjOEl1o4yAIDTDaEY6sj2wwOahtg6ojKELyWBYUODZGslFli7WFKMF1c4PlypG /BpDkmD7mA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( A 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. rPze5be9Uo0YWORoPLhtSE2lPCE3dpheSLHIwLvw5Q3DrApUdOWLxVFmrTtaoTPH6gmYmJQrkqiq f9eAj2sFMA== ) nsx1.kr-vysocina.cz. 1800 IN RRSIG ( AAAA 13 3 1800 20261027155804 20260917155804 11383 kr-vysocina.cz. Jye0QfT9vYHlXkrhGGgNPFKzrGFOP5acL9r3nuMN+eQU4J85mMyt3O7OEm5dTbNe+Ezvznb0mtwx MjFMVQ0gnA== ) ;; { "EDNS-VERSION": 0 }
	nse1.kr-vysocina.cz is authoritative for kr-vysocina.cz
	Found RRSIG signed by kr-vysocina.cz zone
	Query to nse1.kr-vysocina.cz for kr-vysocina.cz/A
	kr-vysocina.cz A RR has value 195.93.216.191
	Found 1 RRSIGs over A RRset
	`kr-vysocina.cz. 3600 IN RRSIG ( A 13 2 3600 20261027155804 20260917155804 11383 kr-vysocina.cz. HDagCMQmD3KsROtHjYSlqh77XKGddGAfLDsDQgL2pwGqPigWeeiMF+lnU3CGDha/dzSh3RiP4WVx wJt6pkrvHg== )`
	RRSIG=11383 and DNSKEY=11383 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test kr-vysocina.cz at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: