DNSSEC Debugger - lowend.box

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-19 03:46:09 UTC

Analyzing DNSSEC problems for lowend.box

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 56925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260801000000 20260711000000 20326 . UR8aFDzTrvuP+LQH7NgPIau8IJlyf9kN9SRU6o6eR8GPOOTiMO24KVLBKqfPUHSWe4IoJDPgzRLi KJO281dRTQtMot+lDoJdMMqLI+dhD4BTr+Nm6xK0QqfQ8FVeZmm75bCjtJ7chnvyxoGqkIX6dDO2 m3uQnlnMMm9yqMLaPTQLp9uV1Rs8SF53Lv01aNcpOT1eHZNmBg4JtKHBPwSVjoepqahHUXzR+3LT pQ27pNgsOCcqfKMG/ac8lSpVVxQbGDe8LQcMq7RVL/MJ1F3Yqcbld13d3mCiPj7JobKTsp0X0dbR nRbWhh3NiKA99i3880pBYnj15FlUW7W5iUnDNw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260801000000 20260711000000 20326 . UR8aFDzTrvuP+LQH7NgPIau8IJlyf9kN9SRU6o6eR8GPOOTiMO24KVLBKqfPUHSWe4IoJDPgzRLi KJO281dRTQtMot+lDoJdMMqLI+dhD4BTr+Nm6xK0QqfQ8FVeZmm75bCjtJ7chnvyxoGqkIX6dDO2 m3uQnlnMMm9yqMLaPTQLp9uV1Rs8SF53Lv01aNcpOT1eHZNmBg4JtKHBPwSVjoepqahHUXzR+3LT pQ27pNgsOCcqfKMG/ac8lSpVVxQbGDe8LQcMq7RVL/MJ1F3Yqcbld13d3mCiPj7JobKTsp0X0dbR nRbWhh3NiKA99i3880pBYnj15FlUW7W5iUnDNw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=57780 is now in the chain-of-trust
	Query to f.root-servers.net for lowend.box/A
	Received 666 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 666 octets ;; HEADER SECTION ;; id = 1182 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) box. 172800 IN NS a.nic.box. box. 172800 IN NS b.nic.box. box. 172800 IN NS c.nic.box. box. 172800 IN NS d.nic.box. box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . zJcqzqUZX54+dlpiLj7VlCKZ8f66eTblYdiu/pFwc4Y7LdgzSLveBRINKIjs9efn6sa5p8vhhS9E R+rXsoh1wPYZEJVqXTm7Py9bmpWopkGs5vN6FBTr9PSgiwdBw3jQfD5IuvutOB5H6Qr9WGB1LfOb DRtSZhHYe5kLvPpjZNoxKibIiwib9BIaU6JUuU47/dRz6ql3XgXGDElh18ir2mCeBDaOxznApYDM xlOS0P6UJQ/zezOPQrE0NcC3ozPuTr1qGrgAVUzOwLR1xwSjGYv10iqnMn70qaXeYi6WIfog0Hfc dWfswCodNruXHHez946TQofH9H5/f2O7YGU3Og== ) ;; ADDITIONAL SECTION (9 records) a.nic.box. 172800 IN A 194.169.218.139 a.nic.box. 172800 IN AAAA 2001:67c:13cc::1:139 b.nic.box. 172800 IN A 185.24.64.139 b.nic.box. 172800 IN AAAA 2a04:2b00:13cc::1:139 c.nic.box. 172800 IN A 212.18.248.139 c.nic.box. 172800 IN AAAA 2a04:2b00:13ee::139 d.nic.box. 172800 IN A 212.18.249.139 d.nic.box. 172800 IN AAAA 2a04:2b00:13ff::139 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for box/DNSKEY
	Received 659 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 659 octets ;; HEADER SECTION ;; id = 41872 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 9 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) box. 172800 IN NS c.nic.box. box. 172800 IN NS b.nic.box. box. 172800 IN NS a.nic.box. box. 172800 IN NS d.nic.box. box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . zJcqzqUZX54+dlpiLj7VlCKZ8f66eTblYdiu/pFwc4Y7LdgzSLveBRINKIjs9efn6sa5p8vhhS9E R+rXsoh1wPYZEJVqXTm7Py9bmpWopkGs5vN6FBTr9PSgiwdBw3jQfD5IuvutOB5H6Qr9WGB1LfOb DRtSZhHYe5kLvPpjZNoxKibIiwib9BIaU6JUuU47/dRz6ql3XgXGDElh18ir2mCeBDaOxznApYDM xlOS0P6UJQ/zezOPQrE0NcC3ozPuTr1qGrgAVUzOwLR1xwSjGYv10iqnMn70qaXeYi6WIfog0Hfc dWfswCodNruXHHez946TQofH9H5/f2O7YGU3Og== ) ;; ADDITIONAL SECTION (9 records) a.nic.box. 172800 IN A 194.169.218.139 b.nic.box. 172800 IN A 185.24.64.139 c.nic.box. 172800 IN A 212.18.248.139 d.nic.box. 172800 IN A 212.18.249.139 a.nic.box. 172800 IN AAAA 2001:67c:13cc::1:139 b.nic.box. 172800 IN AAAA 2a04:2b00:13cc::1:139 c.nic.box. 172800 IN AAAA 2a04:2b00:13ee::139 d.nic.box. 172800 IN AAAA 2a04:2b00:13ff::139 ;; { "EDNS-VERSION": 0 }
	Found child zone box

box

	Checking DS between . and box
	Query to l.root-servers.net for box/DS
	Received 415 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 415 octets ;; HEADER SECTION ;; id = 42200 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DS ;; ANSWER SECTION (3 records) box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 ) box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d ) box. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . zJcqzqUZX54+dlpiLj7VlCKZ8f66eTblYdiu/pFwc4Y7LdgzSLveBRINKIjs9efn6sa5p8vhhS9E R+rXsoh1wPYZEJVqXTm7Py9bmpWopkGs5vN6FBTr9PSgiwdBw3jQfD5IuvutOB5H6Qr9WGB1LfOb DRtSZhHYe5kLvPpjZNoxKibIiwib9BIaU6JUuU47/dRz6ql3XgXGDElh18ir2mCeBDaOxznApYDM xlOS0P6UJQ/zezOPQrE0NcC3ozPuTr1qGrgAVUzOwLR1xwSjGYv10iqnMn70qaXeYi6WIfog0Hfc dWfswCodNruXHHez946TQofH9H5/f2O7YGU3Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for box in the . zone
	DS=62294/SHA-256 has algorithm RSASHA256
	DS=63242/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`box. 86400 IN RRSIG ( DS 8 1 86400 20260731170000 20260718160000 57780 . zJcqzqUZX54+dlpiLj7VlCKZ8f66eTblYdiu/pFwc4Y7LdgzSLveBRINKIjs9efn6sa5p8vhhS9E R+rXsoh1wPYZEJVqXTm7Py9bmpWopkGs5vN6FBTr9PSgiwdBw3jQfD5IuvutOB5H6Qr9WGB1LfOb DRtSZhHYe5kLvPpjZNoxKibIiwib9BIaU6JUuU47/dRz6ql3XgXGDElh18ir2mCeBDaOxznApYDM xlOS0P6UJQ/zezOPQrE0NcC3ozPuTr1qGrgAVUzOwLR1xwSjGYv10iqnMn70qaXeYi6WIfog0Hfc dWfswCodNruXHHez946TQofH9H5/f2O7YGU3Og== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=62294/SHA-256 is now in the chain-of-trust
	DS=63242/SHA-256 is now in the chain-of-trust
	`box. 86400 IN DS ( 62294 8 2 29a911bdbf1fc105d593ea39a619bf1e89cb1bfe73ff70fb7e80b75ab9a7a8b8 )`
	`box. 86400 IN DS ( 63242 8 2 f63250257503cce60195e71c2e346a2d8bde06dcbd666b9ee4f860d75988702d )`
	Query to c.nic.box for box/DNSKEY
	Received 1462 bytes from 212.18.248.139
	;; Response received from [212.18.248.139] 1462 octets ;; HEADER SECTION ;; id = 53277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; box. IN DNSKEY ;; ANSWER SECTION (6 records) box. 3600 IN DNSKEY ( 256 3 8 AwEAAccGRg2Qj5QttySCEKRmk2r/EaYxvQ50P3yuBLkfCd5hsnVILfPb9o0kABoenG1NFIDIuQBR xP/Nq4JoTJrmlwfkDPd/VPFXyzCXIILEhldrOM7yk2GMeBMMzupFTbfnkQU1/LnUVkMmib1yzRtz 47GDG3iEiXwcq6KwWgnKFeBV ) ; keytag 25033 box. 3600 IN DNSKEY ( 256 3 8 AwEAAcwQNVdoNI+v2EIFm+WrboTV4RHkInn8z8iU/Pet6gkN2+kUmGNYNjLhGqTVFIAN5VnhLV/4 3U3iW6tWcYKprSfCqobHngJ0fulsVtthtw4AQ3FG3/H5jn1jvAeWoAAjY+Ib9wNTAV8f1ArGr2en RIUNrzC4jUmHUo8jzsh/eHrx ) ; keytag 23355 box. 3600 IN DNSKEY ( 257 3 8 AwEAAaoJKery7GVCKNtr8cPWliWOq1eKsS2qBG7UP5U5EfYegpAMv07ePikfPSvL+jGE3AdcD53R 2ZNpGnj2gk+7moEv+GrYTo/NbC9Z0iILDNna4oGFpMuwlBvfvqUUOPq9yF1j56wGMIO9v822FoAr 67+DIFmwjfQ8PPP/xzX7s7sD9v+7DpaLDJwvxfi7r/SsHcezL5E1DqT7A+0oaIKb8sw1Y/6iqhwf swMu/YhVjeRetUuOfNsmP35xR6FEaMhjqrZwxib2toW6K1eezym/bESavuVm1tBhV6qlEZkvt2+N F6VS3isu1jnCFVKjD6opJ8Ctp8E5B+Vt2sk5+RqwGok= ) ; keytag 872 box. 3600 IN DNSKEY ( 257 3 8 AwEAAcIhQI5yeNXIBM5P/ZUR3lyfiqxV6wcaWLctNY5rl/hz3o6XnIq0NLzwuHhfBPcE9/7ChqJz AHirek1FJxkzbvj/is1BSJi8AjwvU4MrhQZLuGCoXpnlKAeSPFI6ObTkhtgINJaklEtRcxXLOOMc apNrD8F1xmtdP7hEv4c7cIwgh3DzCwwNQuoDePlwWKBhs3JXJ3FxXndlO4SfUEbzpVKbh91dyip2 N66rsVxYzA8ozN5gdhAvvfUnqDT62Ry7iUp/mggtYm8qByOEcv64NBqeqnvZAxNJ+6+YO8TwYVn6 LhCPZf2MzS2jb/juVle82mR5TYPpbwBdwQ81aTuZ6qU= ) ; keytag 62294 box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811082011 20260712065011 872 box. XdzjQNLassFCfT64uM8WMNzPjHMxEOwwNHr9buDNoA3shT4kLuHC7TBjhpGShQ6KV6uFzXB3DhOX 5bS2oSwzrR0UZ0ybmHpi8dRPAMEmpGbOdgNs9T0/9riqmX9DnOyVXeSggkznwPMfHUSVfQsqBe4I bZb17kmg6dzDDeSHV2ju4oSCQqFQtCoJdtP4Bg2NlSp+BXlo5v8XbYoi7AkouN+L4pf5Ug2QZlc9 /n5BPvR8ajF4X3tyL2C445/iEABXo5ehJHaZCi7gnhUDzYuKffCAA4ud+/e9DJBgewvWbXSuuebT 9PukWBJILyGJ4stQa3AARWX9xS3VMYJtU+KFbw== ) box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811082011 20260712065011 62294 box. D1OSsRd8rYlYBzRqt+qViF6ry8HpkzVWtFc0oeN9TvAmArPa7sKGNu1mcGF2k6KbCF92yX/Umoqe r0h1dPJWKNEoOD28g+O67iyZS3CBQHffhuZhwE1Gu4dhdu5wAMC4J5czEiYCXGNsGSo+kuFXIrQ8 EZRBjVs0gOWE4CzDFcHPifD2yxm1Pe9ObZpgmhVgMWuzqOMbpTJcfasS7cWngpF0jV72iMMgprD8 VAL7q92hIQRgofDGeYkZmLzxj1tb9X3+FR81sqV6OEkO86JLZ40vfiYIANHgRigFvwzi/MWeq5Db u1IMxcQXmIbLI+xRCfbWkRh27Ca5vyow/8flLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for box
	`box. 3600 IN DNSKEY ( 256 3 8 AwEAAccGRg2Qj5QttySCEKRmk2r/EaYxvQ50P3yuBLkfCd5hsnVILfPb9o0kABoenG1NFIDIuQBR xP/Nq4JoTJrmlwfkDPd/VPFXyzCXIILEhldrOM7yk2GMeBMMzupFTbfnkQU1/LnUVkMmib1yzRtz 47GDG3iEiXwcq6KwWgnKFeBV ) ; keytag 25033`
	`box. 3600 IN DNSKEY ( 256 3 8 AwEAAcwQNVdoNI+v2EIFm+WrboTV4RHkInn8z8iU/Pet6gkN2+kUmGNYNjLhGqTVFIAN5VnhLV/4 3U3iW6tWcYKprSfCqobHngJ0fulsVtthtw4AQ3FG3/H5jn1jvAeWoAAjY+Ib9wNTAV8f1ArGr2en RIUNrzC4jUmHUo8jzsh/eHrx ) ; keytag 23355`
	`box. 3600 IN DNSKEY ( 257 3 8 AwEAAaoJKery7GVCKNtr8cPWliWOq1eKsS2qBG7UP5U5EfYegpAMv07ePikfPSvL+jGE3AdcD53R 2ZNpGnj2gk+7moEv+GrYTo/NbC9Z0iILDNna4oGFpMuwlBvfvqUUOPq9yF1j56wGMIO9v822FoAr 67+DIFmwjfQ8PPP/xzX7s7sD9v+7DpaLDJwvxfi7r/SsHcezL5E1DqT7A+0oaIKb8sw1Y/6iqhwf swMu/YhVjeRetUuOfNsmP35xR6FEaMhjqrZwxib2toW6K1eezym/bESavuVm1tBhV6qlEZkvt2+N F6VS3isu1jnCFVKjD6opJ8Ctp8E5B+Vt2sk5+RqwGok= ) ; keytag 872`
	`box. 3600 IN DNSKEY ( 257 3 8 AwEAAcIhQI5yeNXIBM5P/ZUR3lyfiqxV6wcaWLctNY5rl/hz3o6XnIq0NLzwuHhfBPcE9/7ChqJz AHirek1FJxkzbvj/is1BSJi8AjwvU4MrhQZLuGCoXpnlKAeSPFI6ObTkhtgINJaklEtRcxXLOOMc apNrD8F1xmtdP7hEv4c7cIwgh3DzCwwNQuoDePlwWKBhs3JXJ3FxXndlO4SfUEbzpVKbh91dyip2 N66rsVxYzA8ozN5gdhAvvfUnqDT62Ry7iUp/mggtYm8qByOEcv64NBqeqnvZAxNJ+6+YO8TwYVn6 LhCPZf2MzS2jb/juVle82mR5TYPpbwBdwQ81aTuZ6qU= ) ; keytag 62294`
	DNSKEY=62294/SEP is now in the chain-of-trust
	DS=62294/SHA-256 verifies DNSKEY=62294/SEP
	DS=63242/SHA-256 is published, but a corresponding DNSKEY is not
	Found 2 RRSIGs over DNSKEY RRset
	`box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811082011 20260712065011 872 box. XdzjQNLassFCfT64uM8WMNzPjHMxEOwwNHr9buDNoA3shT4kLuHC7TBjhpGShQ6KV6uFzXB3DhOX 5bS2oSwzrR0UZ0ybmHpi8dRPAMEmpGbOdgNs9T0/9riqmX9DnOyVXeSggkznwPMfHUSVfQsqBe4I bZb17kmg6dzDDeSHV2ju4oSCQqFQtCoJdtP4Bg2NlSp+BXlo5v8XbYoi7AkouN+L4pf5Ug2QZlc9 /n5BPvR8ajF4X3tyL2C445/iEABXo5ehJHaZCi7gnhUDzYuKffCAA4ud+/e9DJBgewvWbXSuuebT 9PukWBJILyGJ4stQa3AARWX9xS3VMYJtU+KFbw== )`
	`box. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260811082011 20260712065011 62294 box. D1OSsRd8rYlYBzRqt+qViF6ry8HpkzVWtFc0oeN9TvAmArPa7sKGNu1mcGF2k6KbCF92yX/Umoqe r0h1dPJWKNEoOD28g+O67iyZS3CBQHffhuZhwE1Gu4dhdu5wAMC4J5czEiYCXGNsGSo+kuFXIrQ8 EZRBjVs0gOWE4CzDFcHPifD2yxm1Pe9ObZpgmhVgMWuzqOMbpTJcfasS7cWngpF0jV72iMMgprD8 VAL7q92hIQRgofDGeYkZmLzxj1tb9X3+FR81sqV6OEkO86JLZ40vfiYIANHgRigFvwzi/MWeq5Db u1IMxcQXmIbLI+xRCfbWkRh27Ca5vyow/8flLg== )`
	RRSIG=872 and DNSKEY=872/SEP verifies the DNSKEY RRset
	RRSIG=62294 and DNSKEY=62294/SEP verifies the DNSKEY RRset
	DNSKEY=25033 is now in the chain-of-trust
	DNSKEY=23355 is now in the chain-of-trust
	DNSKEY=872/SEP is now in the chain-of-trust
	Query to c.nic.box for lowend.box/A
	Received 911 bytes from 212.18.248.139
	;; Response received from [212.18.248.139] 911 octets ;; HEADER SECTION ;; id = 26667 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lowend.box. 3600 IN NS graham.ns.cloudflare.com. lowend.box. 3600 IN NS izabella.ns.cloudflare.com. m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - m1k4m0pmes14htvf726hslvqbfohl3i2 NS DS RRSIG ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. dASLTmpCtGXM9owO4U5cczd9PXVEA4UmaGRA2unBDu4aMAWRFNNJyCyYa3EU1HF/LZR3i/kdRNbo SHz8aZIt48xPV+SE6Ee4rMH0FjYO2H+5OZZdIQw8lNWJMR6ufGmYOW9cCucNJ5nwMB6VrjVxUB17 /kLe55EVIF/btDOepEQ= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. pybryB+fqTVjvCYPXjimRNUM8Z/OnHZiyVraM3i2x6rigeDICyH9UEbGnDBtgMYbt6nbl72cKLOH 1oZU3CcJDXv9ZRZGvZXOZYMODX7nVWjHZ9hbIAFslsrqjoTXZOFZZ4f6hfAo38Hm7RDH7UwvNwUo cWxubw2OM8YeHBFmeTo= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. LuASB9cuPSPWSNpK5WUmOxirDsRbClYY+/Vc1+vgbyPrI1Y/7Yu2zOnBzxR0tfjy4ZIHYfM2lzgH UOIijlB+RWU0vnxAzN5PapEV++6b/f2l/1qmx8vKr0BT0iBjyTD5A/5F6Nn5Ln6c7J1+GQE9so9Q udFbjjerQDAvTcnRluU= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. XhyvEIgMbdDIqz+jzh27fZWzpQgkOOwq91y9ELweVvWYE5EkuHtWQDYZW60ga7yEVGCEiK0sibX4 uK1LeDC7hCZt5yqRejT4K25PCUhMEXUz3H1IVfIvw1oeip2GTT54yU47MUjWOB3YqTtuzBWA90Mq 5pnxdIM6skzeIUUth0M= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.nic.box for lowend.box/DNSKEY
	Received 911 bytes from 194.169.218.139
	;; Response received from [194.169.218.139] 911 octets ;; HEADER SECTION ;; id = 21541 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lowend.box. 3600 IN NS graham.ns.cloudflare.com. lowend.box. 3600 IN NS izabella.ns.cloudflare.com. m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - m1k4m0pmes14htvf726hslvqbfohl3i2 NS DS RRSIG ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. dASLTmpCtGXM9owO4U5cczd9PXVEA4UmaGRA2unBDu4aMAWRFNNJyCyYa3EU1HF/LZR3i/kdRNbo SHz8aZIt48xPV+SE6Ee4rMH0FjYO2H+5OZZdIQw8lNWJMR6ufGmYOW9cCucNJ5nwMB6VrjVxUB17 /kLe55EVIF/btDOepEQ= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. pybryB+fqTVjvCYPXjimRNUM8Z/OnHZiyVraM3i2x6rigeDICyH9UEbGnDBtgMYbt6nbl72cKLOH 1oZU3CcJDXv9ZRZGvZXOZYMODX7nVWjHZ9hbIAFslsrqjoTXZOFZZ4f6hfAo38Hm7RDH7UwvNwUo cWxubw2OM8YeHBFmeTo= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. LuASB9cuPSPWSNpK5WUmOxirDsRbClYY+/Vc1+vgbyPrI1Y/7Yu2zOnBzxR0tfjy4ZIHYfM2lzgH UOIijlB+RWU0vnxAzN5PapEV++6b/f2l/1qmx8vKr0BT0iBjyTD5A/5F6Nn5Ln6c7J1+GQE9so9Q udFbjjerQDAvTcnRluU= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. XhyvEIgMbdDIqz+jzh27fZWzpQgkOOwq91y9ELweVvWYE5EkuHtWQDYZW60ga7yEVGCEiK0sibX4 uK1LeDC7hCZt5yqRejT4K25PCUhMEXUz3H1IVfIvw1oeip2GTT54yU47MUjWOB3YqTtuzBWA90Mq 5pnxdIM6skzeIUUth0M= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone lowend.box

lowend.box

	Checking DS between box and lowend.box
	Query to d.nic.box for lowend.box/DS
	Received 1241 bytes from 212.18.249.139
	;; Response received from [212.18.249.139] 1241 octets ;; HEADER SECTION ;; id = 52917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 9 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN NSEC3 ( 1 1 0 - ov2j9819ppf66ujfcbmb33gi392hj1o7 NS SOA RRSIG DNSKEY NSEC3PARAM ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. dASLTmpCtGXM9owO4U5cczd9PXVEA4UmaGRA2unBDu4aMAWRFNNJyCyYa3EU1HF/LZR3i/kdRNbo SHz8aZIt48xPV+SE6Ee4rMH0FjYO2H+5OZZdIQw8lNWJMR6ufGmYOW9cCucNJ5nwMB6VrjVxUB17 /kLe55EVIF/btDOepEQ= ) m1k4m0pmes14htvf726hslvqbfohl3i2.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. pybryB+fqTVjvCYPXjimRNUM8Z/OnHZiyVraM3i2x6rigeDICyH9UEbGnDBtgMYbt6nbl72cKLOH 1oZU3CcJDXv9ZRZGvZXOZYMODX7nVWjHZ9hbIAFslsrqjoTXZOFZZ4f6hfAo38Hm7RDH7UwvNwUo cWxubw2OM8YeHBFmeTo= ) box. 900 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 1784432645 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) box. 900 IN RRSIG ( SOA 8 1 900 20260818034405 20260719021405 23355 box. EBI+5tJZ3IfQhEJ+XCulj0FRHVs7QebMt/3dJNNgnf3jeemZNQ/jtdlo8QEWm6DvrwKt//IXKga9 YlyvAvTcSCvQm+aI/Vc7wtbjvPjESB2KeS8iO2v6fL5kJ5trayhjPL7azAdQMdwn7sUmg4R5QQY0 erVE/fUH87lXc8uzMvg= ) box. 900 IN RRSIG ( SOA 8 1 900 20260818034405 20260719021405 25033 box. dz1AgC3AS32LFQSBr96WWEVrSgkLjRNc7dAEEIYhAjBlB+9ZRAp/lBWTUI7lkfkIjN4IR36BQ8b+ Zct6S1Vr0hPwPm35F8ElcaKCzeQoJEONBM/F2MkvAYSvOmNM6PmoJjEl5nAd9gbLnzUghIrD9eVx XP4x2MZdHRaMYN7e+FE= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN NSEC3 ( 1 1 0 - m1k4m0pmes14htvf726hslvqbfohl3i2 NS DS RRSIG ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 23355 box. LuASB9cuPSPWSNpK5WUmOxirDsRbClYY+/Vc1+vgbyPrI1Y/7Yu2zOnBzxR0tfjy4ZIHYfM2lzgH UOIijlB+RWU0vnxAzN5PapEV++6b/f2l/1qmx8vKr0BT0iBjyTD5A/5F6Nn5Ln6c7J1+GQE9so9Q udFbjjerQDAvTcnRluU= ) 44kend9dtc8m5troibn8vggq7dqjvtnp.box. 900 IN RRSIG ( NSEC3 8 2 900 20260811082011 20260712065011 25033 box. XhyvEIgMbdDIqz+jzh27fZWzpQgkOOwq91y9ELweVvWYE5EkuHtWQDYZW60ga7yEVGCEiK0sibX4 uK1LeDC7hCZt5yqRejT4K25PCUhMEXUz3H1IVfIvw1oeip2GTT54yU47MUjWOB3YqTtuzBWA90Mq 5pnxdIM6skzeIUUth0M= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for lowend.box in the box zone
	Query to izabella.ns.cloudflare.com for lowend.box/DNSKEY
	Received 103 bytes from 172.64.34.46
	;; Response received from [172.64.34.46] 103 octets ;; HEADER SECTION ;; id = 8685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) lowend.box. 1800 IN SOA ( graham.ns.cloudflare.com. dns.cloudflare.com. 2406711921 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to izabella.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 172.64.34.46
	;; Response received from [172.64.34.46] 71 octets ;; HEADER SECTION ;; id = 52458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 172.67.170.55 lowend.box. 300 IN A 104.21.28.30 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	izabella.ns.cloudflare.com is authoritative for lowend.box
	Query to graham.ns.cloudflare.com for lowend.box/SOA
	Received 103 bytes from 108.162.193.171
	;; Response received from [108.162.193.171] 103 octets ;; HEADER SECTION ;; id = 14566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN SOA ;; ANSWER SECTION (1 record) lowend.box. 1800 IN SOA ( graham.ns.cloudflare.com. dns.cloudflare.com. 2406711921 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to izabella.ns.cloudflare.com for lowend.box/A
	lowend.box A RR has value 172.67.170.55
	lowend.box A RR has value 104.21.28.30
	No RRSIGs found

lowend.box

	Query to graham.ns.cloudflare.com for lowend.box/A
	Received 71 bytes from 172.64.33.171
	;; Response received from [172.64.33.171] 71 octets ;; HEADER SECTION ;; id = 38242 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lowend.box. IN A ;; ANSWER SECTION (2 records) lowend.box. 300 IN A 172.67.170.55 lowend.box. 300 IN A 104.21.28.30 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	graham.ns.cloudflare.com is authoritative for lowend.box
	Query to graham.ns.cloudflare.com for lowend.box/A
	lowend.box A RR has value 172.67.170.55
	lowend.box A RR has value 104.21.28.30
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test lowend.box at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: