DNSSEC Analyzer - loirette.fr

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 22:14:21 UTC, NTP stratum 4

Analyzing DNSSEC problems for loirette.fr

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1139 bytes) ;; HEADER SECTION ;; id = 32224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to g.root-servers.net for loirette.fr/A
	Error querying g.root-servers.net/2001:500:12:0:0:0:0:d0d for loirette.fr/A: 'IPv6 transport disabled'
	Received 731 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (731 bytes) ;; HEADER SECTION ;; id = 6895 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS d.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 86400 IN DS ( 42104 8 2 8d913a49c3fa2a39ba0065b4e18ba793e3ad128f7c6c8aa008aefe0a14435dd5 ) fr. 86400 IN DS ( 35095 8 2 23c6caadc9927ee98061f2b52c9b8da6b53f3f648f814a4a86a0faf9843e2c4e ) fr. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . Sdiv6oxwXjRnYrxqDjPnHQMOMAxR3PKY2O65VZT3mXEbJ/XLXajD0ytxMud6Y7D7vO2tTbmJcL/z qSFV1C06dpp1tWJtW10wg81bgZ5WnPoBBmgd+M2oOW3IPGS0KL5SRWZLVcpFukufDFMTRadsEsMi 3J9Te/eW1jlYSeg06iq7PJGrKwPy+PQJS6sC6VwRQ7NyBRuwwjkjOx8btLlQxAsaUddmQmqs/TyW ZllQp2FkZxbhLyUXnyNnvXT8S5Pe5CzD5d8yzlWkx4vBf3ZOap2RfWrhBF1l6/I0hL+5zCb/JjRM E70iccCATDQgtdfP70zVd5jO9SHDLlg8Kmo1ew== ) ;; ADDITIONAL SECTION (11 records) d.ext.nic.fr. 172800 IN A 192.5.4.2 d.nic.fr. 172800 IN A 194.0.9.1 e.ext.nic.fr. 172800 IN A 193.176.144.22 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.ext.nic.fr. 172800 IN AAAA 2001:500:2e::2 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for fr/DNSKEY
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for fr/DNSKEY: 'IPv6 transport disabled'
	Received 722 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (722 bytes) ;; HEADER SECTION ;; id = 20376 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fr. 172800 IN NS d.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 35095 8 2 23c6caadc9927ee98061f2b52c9b8da6b53f3f648f814a4a86a0faf9843e2c4e ) fr. 86400 IN DS ( 42104 8 2 8d913a49c3fa2a39ba0065b4e18ba793e3ad128f7c6c8aa008aefe0a14435dd5 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . Sdiv6oxwXjRnYrxqDjPnHQMOMAxR3PKY2O65VZT3mXEbJ/XLXajD0ytxMud6Y7D7vO2tTbmJcL/z qSFV1C06dpp1tWJtW10wg81bgZ5WnPoBBmgd+M2oOW3IPGS0KL5SRWZLVcpFukufDFMTRadsEsMi 3J9Te/eW1jlYSeg06iq7PJGrKwPy+PQJS6sC6VwRQ7NyBRuwwjkjOx8btLlQxAsaUddmQmqs/TyW ZllQp2FkZxbhLyUXnyNnvXT8S5Pe5CzD5d8yzlWkx4vBf3ZOap2RfWrhBF1l6/I0hL+5zCb/JjRM E70iccCATDQgtdfP70zVd5jO9SHDLlg8Kmo1ew== ) ;; ADDITIONAL SECTION (11 records) d.ext.nic.fr. 172800 IN A 192.5.4.2 d.nic.fr. 172800 IN A 194.0.9.1 e.ext.nic.fr. 172800 IN A 193.176.144.22 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.ext.nic.fr. 172800 IN AAAA 2001:500:2e::2 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone fr

	Checking DS between . and fr
	Query to b.root-servers.net for fr/DS
	Received 414 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (414 bytes) ;; HEADER SECTION ;; id = 57471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (3 records) fr. 86400 IN DS ( 42104 8 2 8d913a49c3fa2a39ba0065b4e18ba793e3ad128f7c6c8aa008aefe0a14435dd5 ) fr. 86400 IN DS ( 35095 8 2 23c6caadc9927ee98061f2b52c9b8da6b53f3f648f814a4a86a0faf9843e2c4e ) fr. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . Sdiv6oxwXjRnYrxqDjPnHQMOMAxR3PKY2O65VZT3mXEbJ/XLXajD0ytxMud6Y7D7vO2tTbmJcL/z qSFV1C06dpp1tWJtW10wg81bgZ5WnPoBBmgd+M2oOW3IPGS0KL5SRWZLVcpFukufDFMTRadsEsMi 3J9Te/eW1jlYSeg06iq7PJGrKwPy+PQJS6sC6VwRQ7NyBRuwwjkjOx8btLlQxAsaUddmQmqs/TyW ZllQp2FkZxbhLyUXnyNnvXT8S5Pe5CzD5d8yzlWkx4vBf3ZOap2RfWrhBF1l6/I0hL+5zCb/JjRM E70iccCATDQgtdfP70zVd5jO9SHDLlg8Kmo1ew== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for fr in the . zone
	DS=42104/SHA-256 has algorithm RSASHA256
	DS=35095/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . Sdiv6oxwXjRnYrxqDjPnHQMOMAxR3PKY2O65VZT3mXEbJ/XLXajD0ytxMud6Y7D7vO2tTbmJcL/z qSFV1C06dpp1tWJtW10wg81bgZ5WnPoBBmgd+M2oOW3IPGS0KL5SRWZLVcpFukufDFMTRadsEsMi 3J9Te/eW1jlYSeg06iq7PJGrKwPy+PQJS6sC6VwRQ7NyBRuwwjkjOx8btLlQxAsaUddmQmqs/TyW ZllQp2FkZxbhLyUXnyNnvXT8S5Pe5CzD5d8yzlWkx4vBf3ZOap2RfWrhBF1l6/I0hL+5zCb/JjRM E70iccCATDQgtdfP70zVd5jO9SHDLlg8Kmo1ew== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=42104/SHA-256 is now in the chain-of-trust
	DS=35095/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 42104 8 2 8d913a49c3fa2a39ba0065b4e18ba793e3ad128f7c6c8aa008aefe0a14435dd5 )`
	`fr. 86400 IN DS ( 35095 8 2 23c6caadc9927ee98061f2b52c9b8da6b53f3f648f814a4a86a0faf9843e2c4e )`
	Query to d.nic.fr for fr/DNSKEY
	Error querying d.nic.fr/2001:678:c:0:0:0:0:1 for fr/DNSKEY: 'IPv6 transport disabled'
	Received 893 bytes from 194.0.9.1
	;; Answer received from 194.0.9.1 (893 bytes) ;; HEADER SECTION ;; id = 33496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option: ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (4 records) fr. 172800 IN DNSKEY ( 257 3 8 AwEAAdR9pshmjn5uOHaEGQaIBBrPK7/nJpGlCxTzhYKo/C3qkF/i5i3cVfkQa/06JzGnWofUOyFU O/v1ikn5qrVM9jugo7iJo0PjkzGTGYeiQcD51LtcZLZ0phHGzIz5DBSIzg07JO4CdzJwZzS0U58D KqcFeBDHw/JplpJBzxauE4Td5R7sUiPU6a0fMSheQQ6Ag+QFjZ4vGkuO/Y2YuXOWzycsE4OBlqaF 2b5SvZfmYjPNNXpXHJyARQwyd1CLhxtHOI+AQLyColFn0xEHMdwAvGs6+OYvP+QaQwBLtujr0VSP UfUBngWXvJIkYiN8+RpGkuyd82jMKjbBap3+dY/ImPc= ) ; Key ID = 42104 fr. 172800 IN DNSKEY ( 256 3 8 AwEAAbCgB/8XHoSGddV2Kgx+ecaOg0IilTjV8V5KArhTSQaeprmtUlQCKgWBCgC3AATmCAmB9z5Z llh7sHTi84+OGOuznWsaXVzxsfjl4m/WSaxRV24Q4GRm2l2OAqcEivT1GGHk6gjWeCqylU0ad2aQ QtmTyLcyCB7JXM/JgwuWcwUT ) ; Key ID = 50650 fr. 172800 IN DNSKEY ( 256 3 8 AwEAAbGKnhFuXbQBhp0nQZ7YsiLTQGy73DdbfzUsKUJ05s7k4W80nJzvmVEjUZ2hFEWw5l1MSfwk rl7v8rE7/Bo3buc0rbrZyNYFCdsbMJccpJ8GYKUtReZ+obrtQ9D47la9g5tax1vTb+p64fCQ3dEK 3GPwe4tGDH9EJdm4X5PfvOwN ) ; Key ID = 24135 fr. 172800 IN RRSIG ( DNSKEY 8 1 172800 20190118090943 20181119090943 42104 fr. hA0sCA5ZYnvZD/pWrfpqPQzmTAhtoayHLQPirSdrOCWMTzHMGYX1baTMu4EAleDlzP663CxgPjLu Fv+6HnYgHPA3Xlxay0MXrIXP62O+AI8SJOcozCXEo7GeGIxz6DctxztD/R3VemXSiJxWo1+Uy2em dckkiCfT/gHa7EB2tEFrQgcrQ3hquKopAnoGC0fDr9A0NYnqZzpKvusxzFYqzk6tsomwkdVBbkSr 9P3pc6NOUuTNJB1DELQyJYMW/Ku2pGrahmmcUmRaH1n/gbuQmyQjCUCv2p/1YBSXgTnSmlSu36Fz f/QFH/LFD3PXHk9S60frCIbdTW+DA3pasXroXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1432 ;; option:
	Found 3 DNSKEY records for fr
	`fr. 172800 IN DNSKEY ( 257 3 8 AwEAAdR9pshmjn5uOHaEGQaIBBrPK7/nJpGlCxTzhYKo/C3qkF/i5i3cVfkQa/06JzGnWofUOyFU O/v1ikn5qrVM9jugo7iJo0PjkzGTGYeiQcD51LtcZLZ0phHGzIz5DBSIzg07JO4CdzJwZzS0U58D KqcFeBDHw/JplpJBzxauE4Td5R7sUiPU6a0fMSheQQ6Ag+QFjZ4vGkuO/Y2YuXOWzycsE4OBlqaF 2b5SvZfmYjPNNXpXHJyARQwyd1CLhxtHOI+AQLyColFn0xEHMdwAvGs6+OYvP+QaQwBLtujr0VSP UfUBngWXvJIkYiN8+RpGkuyd82jMKjbBap3+dY/ImPc= ) ; Key ID = 42104`
	`fr. 172800 IN DNSKEY ( 256 3 8 AwEAAbCgB/8XHoSGddV2Kgx+ecaOg0IilTjV8V5KArhTSQaeprmtUlQCKgWBCgC3AATmCAmB9z5Z llh7sHTi84+OGOuznWsaXVzxsfjl4m/WSaxRV24Q4GRm2l2OAqcEivT1GGHk6gjWeCqylU0ad2aQ QtmTyLcyCB7JXM/JgwuWcwUT ) ; Key ID = 50650`
	`fr. 172800 IN DNSKEY ( 256 3 8 AwEAAbGKnhFuXbQBhp0nQZ7YsiLTQGy73DdbfzUsKUJ05s7k4W80nJzvmVEjUZ2hFEWw5l1MSfwk rl7v8rE7/Bo3buc0rbrZyNYFCdsbMJccpJ8GYKUtReZ+obrtQ9D47la9g5tax1vTb+p64fCQ3dEK 3GPwe4tGDH9EJdm4X5PfvOwN ) ; Key ID = 24135`
	DNSKEY=42104/SEP is now in the chain-of-trust
	DS=42104/SHA-256 verifies DNSKEY=42104/SEP
	DS=35095/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 172800 IN RRSIG ( DNSKEY 8 1 172800 20190118090943 20181119090943 42104 fr. hA0sCA5ZYnvZD/pWrfpqPQzmTAhtoayHLQPirSdrOCWMTzHMGYX1baTMu4EAleDlzP663CxgPjLu Fv+6HnYgHPA3Xlxay0MXrIXP62O+AI8SJOcozCXEo7GeGIxz6DctxztD/R3VemXSiJxWo1+Uy2em dckkiCfT/gHa7EB2tEFrQgcrQ3hquKopAnoGC0fDr9A0NYnqZzpKvusxzFYqzk6tsomwkdVBbkSr 9P3pc6NOUuTNJB1DELQyJYMW/Ku2pGrahmmcUmRaH1n/gbuQmyQjCUCv2p/1YBSXgTnSmlSu36Fz f/QFH/LFD3PXHk9S60frCIbdTW+DA3pasXroXQ== )`
	RRSIG=42104 and DNSKEY=42104/SEP verifies the DNSKEY RRset
	DNSKEY=50650 is now in the chain-of-trust
	DNSKEY=24135 is now in the chain-of-trust
	Query to g.ext.nic.fr for loirette.fr/A
	Error querying g.ext.nic.fr/2001:678:4c:0:0:0:0:1 for loirette.fr/A: 'IPv6 transport disabled'
	Received 329 bytes from 194.0.36.1
	;; Answer received from 194.0.36.1 (329 bytes) ;; HEADER SECTION ;; id = 9847 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) loirette.fr. 172800 IN NS ns.loirette.net. loirette.fr. 172800 IN NS ks22012.kimsufi.com. loirette.fr. 172800 IN NS ns.kimsufi.com. loirette.fr. 172800 IN DS ( 53329 8 2 269af7072980ccd65eebf454ab9bb4fc42876e1d41c77b8beefdb7d147b69bf4 ) loirette.fr. 172800 IN RRSIG ( DS 8 2 172800 20190118090943 20181119090943 24135 fr. L+B9yEOyeyvVrks5jTP0nyFCLDV4AK10rpOBeWr1QHxh/Jg/w+KVQNxMaM7v+lHmD0GLLLClrQVu L1/X1Rnyw4qKWIYrczXspx5joPT9r8s3F8H4X+ZQFxrXk5gYlhiLAqQTWe0sr4be16jUWSzvorwa POcVQGqkdw74kkRVuKI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.ext.nic.fr for loirette.fr/DNSKEY
	Error querying d.ext.nic.fr/2001:500:2e:0:0:0:0:2 for loirette.fr/DNSKEY: 'IPv6 transport disabled'
	Received 329 bytes from 192.5.4.2
	;; Answer received from 192.5.4.2 (329 bytes) ;; HEADER SECTION ;; id = 63120 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) loirette.fr. 172800 IN NS ns.loirette.net. loirette.fr. 172800 IN NS ks22012.kimsufi.com. loirette.fr. 172800 IN NS ns.kimsufi.com. loirette.fr. 172800 IN DS ( 53329 8 2 269af7072980ccd65eebf454ab9bb4fc42876e1d41c77b8beefdb7d147b69bf4 ) loirette.fr. 172800 IN RRSIG ( DS 8 2 172800 20190118090943 20181119090943 24135 fr. L+B9yEOyeyvVrks5jTP0nyFCLDV4AK10rpOBeWr1QHxh/Jg/w+KVQNxMaM7v+lHmD0GLLLClrQVu L1/X1Rnyw4qKWIYrczXspx5joPT9r8s3F8H4X+ZQFxrXk5gYlhiLAqQTWe0sr4be16jUWSzvorwa POcVQGqkdw74kkRVuKI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone loirette.fr

loirette.fr

	Checking DS between fr and loirette.fr
	Query to f.ext.nic.fr for loirette.fr/DS
	Error querying f.ext.nic.fr/2001:67c:1010:11:0:0:0:53 for loirette.fr/DS: 'IPv6 transport disabled'
	Received 250 bytes from 194.146.106.46
	;; Answer received from 194.146.106.46 (250 bytes) ;; HEADER SECTION ;; id = 9009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN DS ;; ANSWER SECTION (2 records) loirette.fr. 172800 IN DS ( 53329 8 2 269af7072980ccd65eebf454ab9bb4fc42876e1d41c77b8beefdb7d147b69bf4 ) loirette.fr. 172800 IN RRSIG ( DS 8 2 172800 20190118090943 20181119090943 24135 fr. L+B9yEOyeyvVrks5jTP0nyFCLDV4AK10rpOBeWr1QHxh/Jg/w+KVQNxMaM7v+lHmD0GLLLClrQVu L1/X1Rnyw4qKWIYrczXspx5joPT9r8s3F8H4X+ZQFxrXk5gYlhiLAqQTWe0sr4be16jUWSzvorwa POcVQGqkdw74kkRVuKI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for loirette.fr in the fr zone
	DS=53329/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`loirette.fr. 172800 IN RRSIG ( DS 8 2 172800 20190118090943 20181119090943 24135 fr. L+B9yEOyeyvVrks5jTP0nyFCLDV4AK10rpOBeWr1QHxh/Jg/w+KVQNxMaM7v+lHmD0GLLLClrQVu L1/X1Rnyw4qKWIYrczXspx5joPT9r8s3F8H4X+ZQFxrXk5gYlhiLAqQTWe0sr4be16jUWSzvorwa POcVQGqkdw74kkRVuKI= )`
	RRSIG=24135 and DNSKEY=24135 verifies the DS RRset
	DS=53329/SHA-256 is now in the chain-of-trust
	`loirette.fr. 172800 IN DS ( 53329 8 2 269af7072980ccd65eebf454ab9bb4fc42876e1d41c77b8beefdb7d147b69bf4 )`
	Query to ks22012.kimsufi.com for loirette.fr/DNSKEY
	Received 1190 bytes from 213.251.187.186
	;; Answer received from 213.251.187.186 (1190 bytes) ;; HEADER SECTION ;; id = 11516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN DNSKEY ;; ANSWER SECTION (4 records) loirette.fr. 604800 IN DNSKEY ( 256 3 8 AwEAAeR4Ab9HU6ZQtsZoRJK8jwgZe1eqS8jRGbUJXYr61QlLVLMAQpun7XaE1jeTpncbE0eLjams GtmdxgWoMONoqRitteFGvE5Dd4tvmGYi1ukCBH/Il+eXHwxZ6uItFahCMFC3clcTuharc+5gkPjE Ep7cCbN7yz98zBJKe1H20J2OPKBNAuKErAfODG48ARwG59tmrxrH+xyXZ5Woyn6XjfipkPmuh1Zl yaDlTPAUC7u41djgRa2E+/M40O71mSOpCBKZXHdGkaaS7YZdh2bQFyAl3ItFkROD3Q0Ky9TCe7ZH sMmK9ls9MG0XBhp9DpSUOx9TwneAhhEEj502HWwGtzc= ) ; Key ID = 37911 loirette.fr. 604800 IN DNSKEY ( 257 3 8 AwEAAcKt4OvyS5KEeUc1J64ymkD87vVjp4yRpoGEOS48ue8j9xNwpoLJ0d9Trbas43oLxU7llxPh 5Fn964MCCV9gr6vk+5SGXC0FR81Z4+fdmAXF9Y+1JeWqO3l04fFevMUSdF8jWkd6kSGbTAuohupK NAHHUTglbV+NU5zbVj2xknagql/8eaVgG3WpwYfHJNQ+NIZ6alXc+dESgbZM1EtQM6Hk1OVk4OH/ sMTZZ8tNrTyw/OM6VyUFSwdZbRnS1gHL2EvDuG98w9xd1k1Zhog4idsgHGZ1psSy+BK2NYzG+zTS ulzcGk7Er00v73rujEAJPg0kZMqmNeFxyCluBPVmECU= ) ; Key ID = 53329 loirette.fr. 604800 IN RRSIG ( DNSKEY 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. pMp10Ji3C1kS1W4ejpYTcfcrs/cC9UG/FbxkFKEuG+wMr2ny9kaUif/iZskKL6YxQjOp52uFm1Qi IL2uNTH+PbnfUkglwYdxLpw3fm7pePKEsU/GvpyJdTv7Bh9lWZRK75AdloS+DNMSD44NbmDRyNVO 5SHzziCWgy+ukLUKSe3AFSiaggexpmYQUNyKPJsBCslks9Q3RwcJR2350G8f09N9DvDJXMcgL6mt wH8hNfsE8UyyjeJZTw5ljjNb3vGiamgldS3fXRWs4vN/cmVKE8/DRDaACsHaC2FNKRm7vQKYffCc Qg3FEmkDLu7sd21IKn6tVYAsvT+rxJ39x+VA5A== ) loirette.fr. 604800 IN RRSIG ( DNSKEY 8 2 604800 20190310005202 20181210005202 53329 loirette.fr. G9uefjPEDPJPIkUFnoEIc3VtEgK+xcHNAtT/1Ffnjc/TJTr9FVXDmm8Sl5A4tuhiJh/XYMT0UTN8 pYTTJ87FxOHgmjSpgsK4xPnd0orUNUkPv85Xc/ZkGS/Hwf0NeXrR7ZyH8mo6UCnHmijXEc1HmMje DBQ4755XQYXZSTOfmjyTukP6j4MXFmbu5+39CfhWQwaEzuLF9uNn8bIG8hggYwvnr3PVftx0U4IY YetYH7BZVPyQzkWGVvwiyvPDvomVhOrD9iKL9ajZx7bxe/HlrV9z1rnnkMRwO+BeXrCkGaV+7bJf 05xbx9dVwD+tZgE+fv8nJfbI11x3eY0VWyRG9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for loirette.fr
	`loirette.fr. 604800 IN DNSKEY ( 256 3 8 AwEAAeR4Ab9HU6ZQtsZoRJK8jwgZe1eqS8jRGbUJXYr61QlLVLMAQpun7XaE1jeTpncbE0eLjams GtmdxgWoMONoqRitteFGvE5Dd4tvmGYi1ukCBH/Il+eXHwxZ6uItFahCMFC3clcTuharc+5gkPjE Ep7cCbN7yz98zBJKe1H20J2OPKBNAuKErAfODG48ARwG59tmrxrH+xyXZ5Woyn6XjfipkPmuh1Zl yaDlTPAUC7u41djgRa2E+/M40O71mSOpCBKZXHdGkaaS7YZdh2bQFyAl3ItFkROD3Q0Ky9TCe7ZH sMmK9ls9MG0XBhp9DpSUOx9TwneAhhEEj502HWwGtzc= ) ; Key ID = 37911`
	`loirette.fr. 604800 IN DNSKEY ( 257 3 8 AwEAAcKt4OvyS5KEeUc1J64ymkD87vVjp4yRpoGEOS48ue8j9xNwpoLJ0d9Trbas43oLxU7llxPh 5Fn964MCCV9gr6vk+5SGXC0FR81Z4+fdmAXF9Y+1JeWqO3l04fFevMUSdF8jWkd6kSGbTAuohupK NAHHUTglbV+NU5zbVj2xknagql/8eaVgG3WpwYfHJNQ+NIZ6alXc+dESgbZM1EtQM6Hk1OVk4OH/ sMTZZ8tNrTyw/OM6VyUFSwdZbRnS1gHL2EvDuG98w9xd1k1Zhog4idsgHGZ1psSy+BK2NYzG+zTS ulzcGk7Er00v73rujEAJPg0kZMqmNeFxyCluBPVmECU= ) ; Key ID = 53329`
	DNSKEY=53329/SEP is now in the chain-of-trust
	DS=53329/SHA-256 verifies DNSKEY=53329/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`loirette.fr. 604800 IN RRSIG ( DNSKEY 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. pMp10Ji3C1kS1W4ejpYTcfcrs/cC9UG/FbxkFKEuG+wMr2ny9kaUif/iZskKL6YxQjOp52uFm1Qi IL2uNTH+PbnfUkglwYdxLpw3fm7pePKEsU/GvpyJdTv7Bh9lWZRK75AdloS+DNMSD44NbmDRyNVO 5SHzziCWgy+ukLUKSe3AFSiaggexpmYQUNyKPJsBCslks9Q3RwcJR2350G8f09N9DvDJXMcgL6mt wH8hNfsE8UyyjeJZTw5ljjNb3vGiamgldS3fXRWs4vN/cmVKE8/DRDaACsHaC2FNKRm7vQKYffCc Qg3FEmkDLu7sd21IKn6tVYAsvT+rxJ39x+VA5A== )`
	`loirette.fr. 604800 IN RRSIG ( DNSKEY 8 2 604800 20190310005202 20181210005202 53329 loirette.fr. G9uefjPEDPJPIkUFnoEIc3VtEgK+xcHNAtT/1Ffnjc/TJTr9FVXDmm8Sl5A4tuhiJh/XYMT0UTN8 pYTTJ87FxOHgmjSpgsK4xPnd0orUNUkPv85Xc/ZkGS/Hwf0NeXrR7ZyH8mo6UCnHmijXEc1HmMje DBQ4755XQYXZSTOfmjyTukP6j4MXFmbu5+39CfhWQwaEzuLF9uNn8bIG8hggYwvnr3PVftx0U4IY YetYH7BZVPyQzkWGVvwiyvPDvomVhOrD9iKL9ajZx7bxe/HlrV9z1rnnkMRwO+BeXrCkGaV+7bJf 05xbx9dVwD+tZgE+fv8nJfbI11x3eY0VWyRG9g== )`
	RRSIG=37911 and DNSKEY=37911 verifies the DNSKEY RRset
	RRSIG=53329 and DNSKEY=53329/SEP verifies the DNSKEY RRset
	DNSKEY=37911 is now in the chain-of-trust
	Query to ns.kimsufi.com for loirette.fr/A
	Received 355 bytes from 213.186.33.199
	;; Answer received from 213.186.33.199 (355 bytes) ;; HEADER SECTION ;; id = 15040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN A ;; ANSWER SECTION (2 records) loirette.fr. 604800 IN A 213.251.187.186 loirette.fr. 604800 IN RRSIG ( A 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. g6sV+fksjd8poZ6ThZ+40ZbZcIhQFRK6FfJuaoDHXFLmSDxJxe16BvxSgYDDuTe6OK0f5JKn50S0 kTLCPEuuSExO1gxvUjvcI+ixfWMndtj+5v2BjrOx0eAiWgqCsSTK+k5oIjgxjhaPq3lwWXkNWory rSRV1AhgS2aojL9oRi/y8djeZ1tdUhuotK1iIRHd7E4QRdz5ebRw67h1YvKIsQAXbvL7HXQ8yDXJ x47jT320nfrGPo4eP4TaKm2giMfqgZVsLl5AFtm8JtVXWaj7skg5iXAPzSlT4H5hZJ1N9ZorYlpM /vP8ix9jFA3mBAdLuBk1xdij/Hkc2039Xm0kzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	loirette.fr is authoritative for loirette.fr
	Found RRSIG signed by loirette.fr zone
	Query to ns.kimsufi.com for loirette.fr/SOA
	Error querying ns.kimsufi.com/2001:41d0:3:1c7:0:0:0:1 for loirette.fr/SOA: 'IPv6 transport disabled'
	Received 413 bytes from 213.186.33.199
	;; Answer received from 213.186.33.199 (413 bytes) ;; HEADER SECTION ;; id = 24495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN SOA ;; ANSWER SECTION (2 records) loirette.fr. 604800 IN SOA ( ks22012.kimsufi.com. webmaster.loirette.com. 2018121002 ;serial 86400 ;refresh 7200 ;retry 2419200 ;expire 604800 ;minimum ) loirette.fr. 604800 IN RRSIG ( SOA 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. CabAp1KsNIj6sEXFkm/gjT5l7d3ENcHyEfHtbwD4FxsegJNwEvgfuEZka2tP2OenZc97k00C2s+5 THIEbYAbAExg5yRFPnCqkAa5RkJZKoqCXZq7R9sXMX/NONZ/X/jafASxuwLEqs+21mWo7TjC4eJa KVkRurYyyOq9m4UsGHEDB3TnY6ZHmocCrwRhoZHHNkpm4B2znpE/lZdvg30P3XS8rqxdbZruX4qB IlWWoXaBP5tEfDd9YTkwIFCL3CRCh0e9XVvsbeimr1Yd7I51Jo3DFecoVq/IPWl4T8p/xNbugQA6 CCB0yM38FUfZJna7hDxPvAvoqe7eVWKpGPq6Ag== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.loirette.net for loirette.fr/SOA
	Received 772 bytes from 213.251.187.186
	;; Answer received from 213.251.187.186 (772 bytes) ;; HEADER SECTION ;; id = 23629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN SOA ;; ANSWER SECTION (2 records) loirette.fr. 604800 IN SOA ( ks22012.kimsufi.com. webmaster.loirette.com. 2018121002 ;serial 86400 ;refresh 7200 ;retry 2419200 ;expire 604800 ;minimum ) loirette.fr. 604800 IN RRSIG ( SOA 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. CabAp1KsNIj6sEXFkm/gjT5l7d3ENcHyEfHtbwD4FxsegJNwEvgfuEZka2tP2OenZc97k00C2s+5 THIEbYAbAExg5yRFPnCqkAa5RkJZKoqCXZq7R9sXMX/NONZ/X/jafASxuwLEqs+21mWo7TjC4eJa KVkRurYyyOq9m4UsGHEDB3TnY6ZHmocCrwRhoZHHNkpm4B2znpE/lZdvg30P3XS8rqxdbZruX4qB IlWWoXaBP5tEfDd9YTkwIFCL3CRCh0e9XVvsbeimr1Yd7I51Jo3DFecoVq/IPWl4T8p/xNbugQA6 CCB0yM38FUfZJna7hDxPvAvoqe7eVWKpGPq6Ag== ) ;; AUTHORITY SECTION (4 records) loirette.fr. 604800 IN NS ns.kimsufi.com. loirette.fr. 604800 IN NS ns.loirette.net. loirette.fr. 604800 IN NS ks22012.kimsufi.com. loirette.fr. 604800 IN RRSIG ( NS 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. RDJmOwJDvX5UxfYlzYhzQ8ei34Fp8U79SZA316BM/KU1FnOYAUjklTu8DvCdVwaZtcN7KvGO9nr/ r6PKWWSg9/sqmApnA+eqxtpBK3nrwLQGe1rZiQGGiXsopTcPYjL+6h2Y4y84XEF5d70btD25NNDP WRFssAatasY5nUKaTD5FUlV04ql+GUloiwO38A7r5SADaKO3X2Nypy+/GvfDj2MGqVfMX8241Wl8 ezGNaHxdQyxfH011Uh63VBJZw67ALyTGehkiaP5dlYk0iZiCTuES5S8H1sMlJtNmZrEnX/jawsr6 oByxMUWXfB5CXxkc8XgCXwsq20Lf5B+CFtdB4w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ks22012.kimsufi.com for loirette.fr/SOA
	Received 772 bytes from 213.251.187.186
	;; Answer received from 213.251.187.186 (772 bytes) ;; HEADER SECTION ;; id = 47248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN SOA ;; ANSWER SECTION (2 records) loirette.fr. 604800 IN SOA ( ks22012.kimsufi.com. webmaster.loirette.com. 2018121002 ;serial 86400 ;refresh 7200 ;retry 2419200 ;expire 604800 ;minimum ) loirette.fr. 604800 IN RRSIG ( SOA 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. CabAp1KsNIj6sEXFkm/gjT5l7d3ENcHyEfHtbwD4FxsegJNwEvgfuEZka2tP2OenZc97k00C2s+5 THIEbYAbAExg5yRFPnCqkAa5RkJZKoqCXZq7R9sXMX/NONZ/X/jafASxuwLEqs+21mWo7TjC4eJa KVkRurYyyOq9m4UsGHEDB3TnY6ZHmocCrwRhoZHHNkpm4B2znpE/lZdvg30P3XS8rqxdbZruX4qB IlWWoXaBP5tEfDd9YTkwIFCL3CRCh0e9XVvsbeimr1Yd7I51Jo3DFecoVq/IPWl4T8p/xNbugQA6 CCB0yM38FUfZJna7hDxPvAvoqe7eVWKpGPq6Ag== ) ;; AUTHORITY SECTION (4 records) loirette.fr. 604800 IN NS ns.loirette.net. loirette.fr. 604800 IN NS ks22012.kimsufi.com. loirette.fr. 604800 IN NS ns.kimsufi.com. loirette.fr. 604800 IN RRSIG ( NS 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. RDJmOwJDvX5UxfYlzYhzQ8ei34Fp8U79SZA316BM/KU1FnOYAUjklTu8DvCdVwaZtcN7KvGO9nr/ r6PKWWSg9/sqmApnA+eqxtpBK3nrwLQGe1rZiQGGiXsopTcPYjL+6h2Y4y84XEF5d70btD25NNDP WRFssAatasY5nUKaTD5FUlV04ql+GUloiwO38A7r5SADaKO3X2Nypy+/GvfDj2MGqVfMX8241Wl8 ezGNaHxdQyxfH011Uh63VBJZw67ALyTGehkiaP5dlYk0iZiCTuES5S8H1sMlJtNmZrEnX/jawsr6 oByxMUWXfB5CXxkc8XgCXwsq20Lf5B+CFtdB4w== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.kimsufi.com for loirette.fr/A
	Error querying ns.kimsufi.com/2001:41d0:3:1c7:0:0:0:1 for loirette.fr/A: 'IPv6 transport disabled'
	Received 355 bytes from 213.186.33.199
	;; Answer received from 213.186.33.199 (355 bytes) ;; HEADER SECTION ;; id = 50034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; loirette.fr. IN A ;; ANSWER SECTION (2 records) loirette.fr. 604800 IN A 213.251.187.186 loirette.fr. 604800 IN RRSIG ( A 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. g6sV+fksjd8poZ6ThZ+40ZbZcIhQFRK6FfJuaoDHXFLmSDxJxe16BvxSgYDDuTe6OK0f5JKn50S0 kTLCPEuuSExO1gxvUjvcI+ixfWMndtj+5v2BjrOx0eAiWgqCsSTK+k5oIjgxjhaPq3lwWXkNWory rSRV1AhgS2aojL9oRi/y8djeZ1tdUhuotK1iIRHd7E4QRdz5ebRw67h1YvKIsQAXbvL7HXQ8yDXJ x47jT320nfrGPo4eP4TaKm2giMfqgZVsLl5AFtm8JtVXWaj7skg5iXAPzSlT4H5hZJ1N9ZorYlpM /vP8ix9jFA3mBAdLuBk1xdij/Hkc2039Xm0kzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	loirette.fr A RR has value 213.251.187.186
	Found 1 RRSIGs over A RRset
	`loirette.fr. 604800 IN RRSIG ( A 8 2 604800 20190310005202 20181210005202 37911 loirette.fr. g6sV+fksjd8poZ6ThZ+40ZbZcIhQFRK6FfJuaoDHXFLmSDxJxe16BvxSgYDDuTe6OK0f5JKn50S0 kTLCPEuuSExO1gxvUjvcI+ixfWMndtj+5v2BjrOx0eAiWgqCsSTK+k5oIjgxjhaPq3lwWXkNWory rSRV1AhgS2aojL9oRi/y8djeZ1tdUhuotK1iIRHd7E4QRdz5ebRw67h1YvKIsQAXbvL7HXQ8yDXJ x47jT320nfrGPo4eP4TaKm2giMfqgZVsLl5AFtm8JtVXWaj7skg5iXAPzSlT4H5hZJ1N9ZorYlpM /vP8ix9jFA3mBAdLuBk1xdij/Hkc2039Xm0kzg== )`
	RRSIG=37911 and DNSKEY=37911 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test loirette.fr at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: