DNSSEC Debugger - lowend.box

Domain Name:

Time: 2026-01-19 09:00:26 UTC

Analyzing DNSSEC problems for lowend.box

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 54759 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbNTVC2+pry4pc37pZI9Oj6b8FHxT3VGrvSPKLE1Tjyfe2kUZUtVX5xrv6AV4BVO+ygrYjGZ MNgEnbLU4zknnlnhI2e0g6iTza1aZh0dRZXGH16C1NUNq1CxBkUhIYQhQDeIOtLacx+RmFTc+hSH JJ2MJ79IS00kA7eKi6mofQ7SPJmdJVjI+JAx791y0f5QaB+iHGANU53FwiYXNUQjfAzCrtOaSevG sx8SO8BTaXLAjFq5eewOtwScVwfVDhEXlvpE6e+mIncwhNKaMRD9IPuHENqCNPI5MjxfAMVS6cEY 8eEozIkv/vHc+0Auu3n+Fcx6F2Js4KPXaHEShAXugfU= ) ; keytag 21831`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260201000000 20260111000000 20326 . o5fb3sEBXqMp65iz/RYeHunfketTsbyKhRLUWAiB6chftQ2eNH4VI00qEw67TN2CdVW/V5TCrYSg aGS0iGFHQO230lhtKq11eAD2LYTkDLvVDVejbxNz9maZy98L2xhLvkE2L2Aaz+GgqjHy9VEb6nc+ mtfCNpr2H0/Yet6Mgie6pTOCXE++1tf4g8NWsEx0nE41pwURB7UbC9ssYdsgnYqaTzUwRVxbij99 BCxIDKoEnwNCQBJFqSkr7AKzEtuu8F1ktgFIMcgkWnRAnNFLtLrG8gOoJw8PfpDoFI/Qc0RJddKB /s4akfSood+kpPKR4HNossFw5UTQuDuarMGxuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=21831 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for lowend.box/A
	Received 666 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 666 octets ;; HEADER SECTION ;; id = 61257 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) box. 172800 IN NS a.nic.box. box. 172800 IN NS b.nic.box. box. 172800 IN NS c.nic.box. box. 172800 IN NS d.nic.box. box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN RRSIG ( DS 8 1 86400 20260201050000 20260119040000 21831 . WJ5z/22TpNaTRbZe3dg/Wxq1J/iOR0QBuBrBZOtWrGrnfcMzVevq/lsSGldMkO6hFGVBfWUw5t3D 8nKidMWzNme/LeJ/vFWytksq6BYHoOzG+QbtZVuasFZtuMh+izpFOffP8eB6onzBkTwsPv+amSfS 4sh1cq7iTPOlC38cvLUb9zl6t9F4y56B1fvJGdHYvtVgEYriIneDfaV412uumQb4YfsheR8sjP5W 0KdOygJPNsbVgMRuyMN6ZTNmMOYOJMzeBmFYwwPkvMT2MNOm98MoenFrBwrsQ8dPNi/xas8ykx3S lerLw5Sfrm4F4mCVniSVRqBWSMD/Wo8mAVJOHw== ) ;; ADDITIONAL SECTION (9 records) a.nic.box. 172800 IN A 194.169.218.139 a.nic.box. 172800 IN AAAA 2001:67c:13cc::1:139 b.nic.box. 172800 IN A 185.24.64.139 b.nic.box. 172800 IN AAAA 2a04:2b00:13cc::1:139 c.nic.box. 172800 IN A 212.18.248.139 c.nic.box. 172800 IN AAAA 2a04:2b00:13ee::139 d.nic.box. 172800 IN A 212.18.249.139 d.nic.box. 172800 IN AAAA 2a04:2b00:13ff::139 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for box/DNSKEY
	Received 659 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 659 octets ;; HEADER SECTION ;; id = 16095 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) box. 172800 IN NS a.nic.box. box. 172800 IN NS b.nic.box. box. 172800 IN NS c.nic.box. box. 172800 IN NS d.nic.box. box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN RRSIG ( DS 8 1 86400 20260201050000 20260119040000 21831 . WJ5z/22TpNaTRbZe3dg/Wxq1J/iOR0QBuBrBZOtWrGrnfcMzVevq/lsSGldMkO6hFGVBfWUw5t3D 8nKidMWzNme/LeJ/vFWytksq6BYHoOzG+QbtZVuasFZtuMh+izpFOffP8eB6onzBkTwsPv+amSfS 4sh1cq7iTPOlC38cvLUb9zl6t9F4y56B1fvJGdHYvtVgEYriIneDfaV412uumQb4YfsheR8sjP5W 0KdOygJPNsbVgMRuyMN6ZTNmMOYOJMzeBmFYwwPkvMT2MNOm98MoenFrBwrsQ8dPNi/xas8ykx3S lerLw5Sfrm4F4mCVniSVRqBWSMD/Wo8mAVJOHw== ) ;; ADDITIONAL SECTION (9 records) a.nic.box. 172800 IN A 194.169.218.139 a.nic.box. 172800 IN AAAA 2001:67c:13cc::1:139 b.nic.box. 172800 IN A 185.24.64.139 b.nic.box. 172800 IN AAAA 2a04:2b00:13cc::1:139 c.nic.box. 172800 IN A 212.18.248.139 c.nic.box. 172800 IN AAAA 2a04:2b00:13ee::139 d.nic.box. 172800 IN A 212.18.249.139 d.nic.box. 172800 IN AAAA 2a04:2b00:13ff::139 ;; { "EDNS-VERSION": 0 }
	Found child zone box

box

	Checking DS between . and box
	Query to l.root-servers.net for box/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 415 octets ;; HEADER SECTION ;; id = 39231 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DS ;; ANSWER SECTION (3 records) box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN RRSIG ( DS 8 1 86400 20260201050000 20260119040000 21831 . WJ5z/22TpNaTRbZe3dg/Wxq1J/iOR0QBuBrBZOtWrGrnfcMzVevq/lsSGldMkO6hFGVBfWUw5t3D 8nKidMWzNme/LeJ/vFWytksq6BYHoOzG+QbtZVuasFZtuMh+izpFOffP8eB6onzBkTwsPv+amSfS 4sh1cq7iTPOlC38cvLUb9zl6t9F4y56B1fvJGdHYvtVgEYriIneDfaV412uumQb4YfsheR8sjP5W 0KdOygJPNsbVgMRuyMN6ZTNmMOYOJMzeBmFYwwPkvMT2MNOm98MoenFrBwrsQ8dPNi/xas8ykx3S lerLw5Sfrm4F4mCVniSVRqBWSMD/Wo8mAVJOHw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for box in the . zone
	DS=62294/SHA-256 has algorithm RSASHA256
	DS=63242/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`box. 86400 IN RRSIG ( DS 8 1 86400 20260201050000 20260119040000 21831 . WJ5z/22TpNaTRbZe3dg/Wxq1J/iOR0QBuBrBZOtWrGrnfcMzVevq/lsSGldMkO6hFGVBfWUw5t3D 8nKidMWzNme/LeJ/vFWytksq6BYHoOzG+QbtZVuasFZtuMh+izpFOffP8eB6onzBkTwsPv+amSfS 4sh1cq7iTPOlC38cvLUb9zl6t9F4y56B1fvJGdHYvtVgEYriIneDfaV412uumQb4YfsheR8sjP5W 0KdOygJPNsbVgMRuyMN6ZTNmMOYOJMzeBmFYwwPkvMT2MNOm98MoenFrBwrsQ8dPNi/xas8ykx3S lerLw5Sfrm4F4mCVniSVRqBWSMD/Wo8mAVJOHw== )`
	RRSIG=21831 and DNSKEY=21831 verifies the DS RRset
	DS=62294/SHA-256 is now in the chain-of-trust
	DS=63242/SHA-256 is now in the chain-of-trust
	`box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 )`
	`box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d )`
	Query to d.nic.box for box/DNSKEY
	Received 1462 bytes from 212.18.249.139
	;; Response received from [212.18.249.139] 1462 octets ;; HEADER SECTION ;; id = 35707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DNSKEY ;; ANSWER SECTION (6 records) box. 3600 IN DNSKEY ( 257 3 8 AwEAAcIhQI5yeNXIBM5P/ZUR3lyfiqxV6wcaWLctNY5rl/hz3o6XnIq0NLzwuHhfBPcE9/7ChqJz AHirek1FJxkzbvj/is1BSJi8AjwvU4MrhQZLuGCoXpnlKAeSPFI6ObTkhtgINJaklEtRcxXLOOMc apNrD8F1xmtdP7hEv4c7cIwgh3DzCwwNQuoDePlwWKBhs3JXJ3FxXndlO4SfUEbzpVKbh91dyip2 N66rsVxYzA8ozN5gdhAvvfUnqDT62Ry7iUp/mggtYm8qByOEcv64NBqeqnvZAxNJ+6+YO8TwYVn6 LhCPZf2MzS2jb/juVle82mR5TYPpbwBdwQ81aTuZ6qU= ) ; keytag 62294 box. 3600 IN DNSKEY ( 256 3 8 AwEAAccGRg2Qj5QttySCEKRmk2r/EaYxvQ50P3yuBLkfCd5hsnVILfPb9o0kABoenG1NFIDIuQBR xP/Nq4JoTJrmlwfkDPd/VPFXyzCXIILEhldrOM7yk2GMeBMMzupFTbfnkQU1/LnUVkMmib1yzRtz 47GDG3iEiXwcq6KwWgnKFeBV ) ; keytag 25033 box. 3600 IN DNSKEY ( 256 3 8 AwEAAcwQNVdoNI+v2EIFm+WrboTV4RHkInn8z8iU/Pet6gkN2+kUmGNYNjLhGqTVFIAN5VnhLV/4 3U3iW6tWcYKprSfCqobHngJ0fulsVtthtw4AQ3FG3/H5jn1jvAeWoAAjY+Ib9wNTAV8f1ArGr2en RIUNrzC4jUmHUo8jzsh/eHrx ) ; keytag 23355 box. 3600 IN DNSKEY ( 257 3 8 AwEAAaoJKery7GVCKNtr8cPWliWOq1eKsS2qBG7UP5U5EfYegpAMv07ePikfPSvL+jGE3AdcD53R 2ZNpGnj2gk+7moEv+GrYTo/NbC9Z0iILDNna4oGFpMuwlBvfvqUUOPq9yF1j56wGMIO9v822FoAr 67+DIFmwjfQ8PPP/xzX7s7sD9v+7DpaLDJwvxfi7r/SsHcezL5E1DqT7A+0oaIKb8sw1Y/6iqhwf swMu/YhVjeRetUuOfNsmP35xR6FEaMhjqrZwxib2toW6K1eezym/bESavuVm1tBhV6qlEZkvt2+N F6VS3isu1jnCFVKjD6opJ8Ctp8E5B+Vt2sk5+RqwGok= ) ; keytag 872 box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260216085237 20260117072237 872 box. ia67IHmXbnhThp+tXykIY0JtUDh6aT007ZoXaSD2bQqoZ7UGANEjA9djEQ97RtPgSiYtcPv0XW6r rDnl7bBoskwl3ONSrsjcdybkl5n/eZmP0ZdxVoPYwA66qlmNPqR8/kxtD9+Sc695CoRHxfnGDWQz uNPhFcX3LF4G3KE7MsTE7csIwixWJpiT1lwVcmBTR3ilJlDnBV7CoL6Ly21BNWW/sodKMjOB6u6p 5btZ1lcdp2mVYFoEpe9rBa+qLD0CuWmrVPXz+jFzj+OOyt+g9HH6Xk0nNqdbu5K0iXpVfv6Sj0sO /7D64xzOqMLo0SY6h8BD7PSaTYCwbdwCeruRBA== ) box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260216085237 20260117072237 62294 box. RDXZULQFMSmkaJiCrjebAyod0Jc/9J8UcLkbnjS9GNmFx7KMnwtaEBzJf2RQY+2FxRPc8iUb/0X6 II1h0WyjoJscVVpx2CBQlN8zHXI/NIXJOpsNteWo6us3PM/g7RxeWP2Y+YUG8+knpYhhSqHX/EtG RMStNmQDGO/72saqMfL6g4FdW6y31HJ++kbcypCFdOF4fGnwGzrlkXTxwE+2Og/N5myfC3PcFtLO 2DOhcPKmmdQJCcSSie2PYOrh9tD/aP9ocd2UZ4KOPPxSpDEoscqzmfKENcp1g7g8jYJRtW50NHak BY8GRodtP2s1g7C0TfdXLxgLeh/cLnONvf0wjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for box
	`box. 3600 IN DNSKEY ( 257 3 8 AwEAAcIhQI5yeNXIBM5P/ZUR3lyfiqxV6wcaWLctNY5rl/hz3o6XnIq0NLzwuHhfBPcE9/7ChqJz AHirek1FJxkzbvj/is1BSJi8AjwvU4MrhQZLuGCoXpnlKAeSPFI6ObTkhtgINJaklEtRcxXLOOMc apNrD8F1xmtdP7hEv4c7cIwgh3DzCwwNQuoDePlwWKBhs3JXJ3FxXndlO4SfUEbzpVKbh91dyip2 N66rsVxYzA8ozN5gdhAvvfUnqDT62Ry7iUp/mggtYm8qByOEcv64NBqeqnvZAxNJ+6+YO8TwYVn6 LhCPZf2MzS2jb/juVle82mR5TYPpbwBdwQ81aTuZ6qU= ) ; keytag 62294`
	`box. 3600 IN DNSKEY ( 256 3 8 AwEAAccGRg2Qj5QttySCEKRmk2r/EaYxvQ50P3yuBLkfCd5hsnVILfPb9o0kABoenG1NFIDIuQBR xP/Nq4JoTJrmlwfkDPd/VPFXyzCXIILEhldrOM7yk2GMeBMMzupFTbfnkQU1/LnUVkMmib1yzRtz 47GDG3iEiXwcq6KwWgnKFeBV ) ; keytag 25033`
	`box. 3600 IN DNSKEY ( 256 3 8 AwEAAcwQNVdoNI+v2EIFm+WrboTV4RHkInn8z8iU/Pet6gkN2+kUmGNYNjLhGqTVFIAN5VnhLV/4 3U3iW6tWcYKprSfCqobHngJ0fulsVtthtw4AQ3FG3/H5jn1jvAeWoAAjY+Ib9wNTAV8f1ArGr2en RIUNrzC4jUmHUo8jzsh/eHrx ) ; keytag 23355`
	`box. 3600 IN DNSKEY ( 257 3 8 AwEAAaoJKery7GVCKNtr8cPWliWOq1eKsS2qBG7UP5U5EfYegpAMv07ePikfPSvL+jGE3AdcD53R 2ZNpGnj2gk+7moEv+GrYTo/NbC9Z0iILDNna4oGFpMuwlBvfvqUUOPq9yF1j56wGMIO9v822FoAr 67+DIFmwjfQ8PPP/xzX7s7sD9v+7DpaLDJwvxfi7r/SsHcezL5E1DqT7A+0oaIKb8sw1Y/6iqhwf swMu/YhVjeRetUuOfNsmP35xR6FEaMhjqrZwxib2toW6K1eezym/bESavuVm1tBhV6qlEZkvt2+N F6VS3isu1jnCFVKjD6opJ8Ctp8E5B+Vt2sk5+RqwGok= ) ; keytag 872`
	DNSKEY=62294/SEP is now in the chain-of-trust
	DS=62294/SHA-256 verifies DNSKEY=62294/SEP
	DS=63242/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260216085237 20260117072237 872 box. ia67IHmXbnhThp+tXykIY0JtUDh6aT007ZoXaSD2bQqoZ7UGANEjA9djEQ97RtPgSiYtcPv0XW6r rDnl7bBoskwl3ONSrsjcdybkl5n/eZmP0ZdxVoPYwA66qlmNPqR8/kxtD9+Sc695CoRHxfnGDWQz uNPhFcX3LF4G3KE7MsTE7csIwixWJpiT1lwVcmBTR3ilJlDnBV7CoL6Ly21BNWW/sodKMjOB6u6p 5btZ1lcdp2mVYFoEpe9rBa+qLD0CuWmrVPXz+jFzj+OOyt+g9HH6Xk0nNqdbu5K0iXpVfv6Sj0sO /7D64xzOqMLo0SY6h8BD7PSaTYCwbdwCeruRBA== )`
	`box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260216085237 20260117072237 62294 box. RDXZULQFMSmkaJiCrjebAyod0Jc/9J8UcLkbnjS9GNmFx7KMnwtaEBzJf2RQY+2FxRPc8iUb/0X6 II1h0WyjoJscVVpx2CBQlN8zHXI/NIXJOpsNteWo6us3PM/g7RxeWP2Y+YUG8+knpYhhSqHX/EtG RMStNmQDGO/72saqMfL6g4FdW6y31HJ++kbcypCFdOF4fGnwGzrlkXTxwE+2Og/N5myfC3PcFtLO 2DOhcPKmmdQJCcSSie2PYOrh9tD/aP9ocd2UZ4KOPPxSpDEoscqzmfKENcp1g7g8jYJRtW50NHak BY8GRodtP2s1g7C0TfdXLxgLeh/cLnONvf0wjA== )`
	RRSIG=872 and DNSKEY=872/SEP verifies the DNSKEY RRset
	RRSIG=62294 and DNSKEY=62294/SEP verifies the DNSKEY RRset
	DNSKEY=25033 is now in the chain-of-trust
	DNSKEY=23355 is now in the chain-of-trust
	DNSKEY=872/SEP is now in the chain-of-trust
	Query to a.nic.box for lowend.box/A
	Received 911 bytes from 194.169.218.139
	;; Response received from [194.169.218.139] 911 octets ;; HEADER SECTION ;; id = 60997 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lowend.box. 3600 IN NS graham.ns.cloudflare.com. lowend.box. 3600 IN NS izabella.ns.cloudflare.com. m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - b623iuvbo22cpacisklgtastv26s7vhr NS DS RRSIG ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. ImOa9JRnq8Q09ca6D2DkpXVV0s5/QMpORh9uWIXzDDEWH508iIPhyEOIZThlOcpRG9fyMyV3hT++ 5paqfLNocXkc6toDkVtI6RE08yR8n8Rc9bNF3DtgZiiMLtaMUv8NfmYM57t0xaHHCg67M01BMgV7 G4NH9/zCFsnUkFSQaUI= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. NUmJUT7YQsPi3LwJ1bnEJ5tPz8HMvP8XqWx8Y0PFl9Mkct0b/4KL/B61I5K7kJ/pyCH3/Qt2O71j LyjmSUBw/tbiAgx/NexvoOkVHfQZZR1+H7kKqiWdZmwcFl7LRDYgZZvamYC3eoLi1lduPL6ySWha 3ymCnmIS6s7CLSWxXmQ= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. s5eYtYzrGSHLLdGo6fAb4jiZbbs92GoWPe+KV36QY6QroTG6NACTm5MGh1kImxkiqV5YicJKrXd7 9d4QQZ/VEyMNDhX0A3E6uOeK2WxAiX+xT7+CYwYjuLp4gfoy747yiM0c40P5doqkv8A6yYF05OC9 lR4PVJkXBuSjn+HbxcM= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. L7IRSVA6ChMk6GKWEiLOxfyGv14YhSyz1Im1gFgpHe1EkH9rbWIdhJP3CR5KWXFfjBf1Yu87pKhK /koytH275DG8M7MfhBKlNJZuR8UK9cnzqWjBYaDWPq5QSzdThZKjbJo62mXvJJyugMMYZU53AcDO y03QEu8/G3mEv2x09J0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.nic.box for lowend.box/DNSKEY
	Received 911 bytes from 185.24.64.139
	;; Response received from [185.24.64.139] 911 octets ;; HEADER SECTION ;; id = 50184 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lowend.box. 3600 IN NS graham.ns.cloudflare.com. lowend.box. 3600 IN NS izabella.ns.cloudflare.com. m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. ImOa9JRnq8Q09ca6D2DkpXVV0s5/QMpORh9uWIXzDDEWH508iIPhyEOIZThlOcpRG9fyMyV3hT++ 5paqfLNocXkc6toDkVtI6RE08yR8n8Rc9bNF3DtgZiiMLtaMUv8NfmYM57t0xaHHCg67M01BMgV7 G4NH9/zCFsnUkFSQaUI= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. NUmJUT7YQsPi3LwJ1bnEJ5tPz8HMvP8XqWx8Y0PFl9Mkct0b/4KL/B61I5K7kJ/pyCH3/Qt2O71j LyjmSUBw/tbiAgx/NexvoOkVHfQZZR1+H7kKqiWdZmwcFl7LRDYgZZvamYC3eoLi1lduPL6ySWha 3ymCnmIS6s7CLSWxXmQ= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - b623iuvbo22cpacisklgtastv26s7vhr NS DS RRSIG ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. s5eYtYzrGSHLLdGo6fAb4jiZbbs92GoWPe+KV36QY6QroTG6NACTm5MGh1kImxkiqV5YicJKrXd7 9d4QQZ/VEyMNDhX0A3E6uOeK2WxAiX+xT7+CYwYjuLp4gfoy747yiM0c40P5doqkv8A6yYF05OC9 lR4PVJkXBuSjn+HbxcM= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. L7IRSVA6ChMk6GKWEiLOxfyGv14YhSyz1Im1gFgpHe1EkH9rbWIdhJP3CR5KWXFfjBf1Yu87pKhK /koytH275DG8M7MfhBKlNJZuR8UK9cnzqWjBYaDWPq5QSzdThZKjbJo62mXvJJyugMMYZU53AcDO y03QEu8/G3mEv2x09J0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone lowend.box

lowend.box

	Checking DS between box and lowend.box
	Query to b.nic.box for lowend.box/DS
	Received 1241 bytes from 185.24.64.139
	;; Response received from [185.24.64.139] 1241 octets ;; HEADER SECTION ;; id = 4333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. ImOa9JRnq8Q09ca6D2DkpXVV0s5/QMpORh9uWIXzDDEWH508iIPhyEOIZThlOcpRG9fyMyV3hT++ 5paqfLNocXkc6toDkVtI6RE08yR8n8Rc9bNF3DtgZiiMLtaMUv8NfmYM57t0xaHHCg67M01BMgV7 G4NH9/zCFsnUkFSQaUI= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. NUmJUT7YQsPi3LwJ1bnEJ5tPz8HMvP8XqWx8Y0PFl9Mkct0b/4KL/B61I5K7kJ/pyCH3/Qt2O71j LyjmSUBw/tbiAgx/NexvoOkVHfQZZR1+H7kKqiWdZmwcFl7LRDYgZZvamYC3eoLi1lduPL6ySWha 3ymCnmIS6s7CLSWxXmQ= ) box. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 1768812820 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) box. 900 IN RRSIG ( SOA 8 1 900 20260218085340 20260119072340 23355 box. tbuUk1eXnclBYq87NZvlwIYP5m92klMsHOeodUXWvQaaMcKhfirZhteFQxVvn1FnQLrDc3Fj4pkG /T03oG75JKX63WSvW/AaEcMrRk/2Dy18aci5f2jWWCx8HZUbFEECazfvRt1gifzejEO1Ab4pYgyN Y0O5Ty+Z3AC2g3ef3Ug= ) box. 900 IN RRSIG ( SOA 8 1 900 20260218085340 20260119072340 25033 box. jJ8CzV6p7jY/61qbLQGiHWaXLgihO5EnRTR/pC1coVuYQ7iOCYYqKdtUHsbhOsBIEz5Z+aEYoRrP PN5pCGWgA3Z+GsPuazE2q9hxhE21DcD8WLSES7vZ0lGRBYzgbW10i+LfQgdcxkKLlpXR5yxcBEsc wYVynG3BTLsqrdT7TIw= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - b623iuvbo22cpacisklgtastv26s7vhr NS DS RRSIG ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 23355 box. s5eYtYzrGSHLLdGo6fAb4jiZbbs92GoWPe+KV36QY6QroTG6NACTm5MGh1kImxkiqV5YicJKrXd7 9d4QQZ/VEyMNDhX0A3E6uOeK2WxAiX+xT7+CYwYjuLp4gfoy747yiM0c40P5doqkv8A6yYF05OC9 lR4PVJkXBuSjn+HbxcM= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260216085237 20260117072237 25033 box. L7IRSVA6ChMk6GKWEiLOxfyGv14YhSyz1Im1gFgpHe1EkH9rbWIdhJP3CR5KWXFfjBf1Yu87pKhK /koytH275DG8M7MfhBKlNJZuR8UK9cnzqWjBYaDWPq5QSzdThZKjbJo62mXvJJyugMMYZU53AcDO y03QEu8/G3mEv2x09J0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for lowend.box in the box zone
	Query to izabella.ns.cloudflare.com for lowend.box/DNSKEY
	Received 103 bytes from 108.162.194.46
	;; Response received from [108.162.194.46] 103 octets ;; HEADER SECTION ;; id = 53291 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) lowend.box. 1800 IN SOA ( graham.ns.cloudflare.com. dns.cloudflare.com. 2390986633 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to izabella.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 162.159.38.46
	;; Response received from [162.159.38.46] 71 octets ;; HEADER SECTION ;; id = 2744 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 172.67.170.55 lowend.box. 300 IN A 104.21.28.30 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	izabella.ns.cloudflare.com is authoritative for lowend.box
	Query to graham.ns.cloudflare.com for lowend.box/SOA
	Received 103 bytes from 172.64.33.171
	;; Response received from [172.64.33.171] 103 octets ;; HEADER SECTION ;; id = 56888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN SOA ;; ANSWER SECTION (1 record) lowend.box. 1800 IN SOA ( graham.ns.cloudflare.com. dns.cloudflare.com. 2390986633 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to izabella.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 108.162.194.46
	;; Response received from [108.162.194.46] 71 octets ;; HEADER SECTION ;; id = 16739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 172.67.170.55 lowend.box. 300 IN A 104.21.28.30 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lowend.box A RR has value 172.67.170.55
	lowend.box A RR has value 104.21.28.30
	No RRSIGs found

lowend.box

	Query to graham.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 108.162.193.171
	;; Response received from [108.162.193.171] 71 octets ;; HEADER SECTION ;; id = 39765 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 104.21.28.30 lowend.box. 300 IN A 172.67.170.55 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graham.ns.cloudflare.com is authoritative for lowend.box
	Query to graham.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 173.245.59.171
	;; Response received from [173.245.59.171] 71 octets ;; HEADER SECTION ;; id = 25078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 172.67.170.55 lowend.box. 300 IN A 104.21.28.30 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lowend.box A RR has value 172.67.170.55
	lowend.box A RR has value 104.21.28.30
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lowend.box at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: