DNSSEC Analyzer - mirror.cyberbits.eu

Domain Name:

Time: 2020-10-24 09:32:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for mirror.cyberbits.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 64277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to c.root-servers.net for mirror.cyberbits.eu/A
	Received 661 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (661 bytes) ;; HEADER SECTION ;; id = 55961 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . 0QkHe/jmBJJ4xCmwlOYy+T/ZyDD4wJr68NvkY9eA/+XydXG5fub/AX26p7FvfuP92CG1H5WZpUKZ mZ26WwpvSw+BP8EbwoSlU6ivqAe33+JGJyBaJiQsv3VTDrB1gGCDwmQKUwOAoQDrr8YDHi69wkmk tTzNFVS4QQB5MZKg/nSVBZwCrKWSxl3O6sDrrM4rAJCrikailARfE9hsCRTHsUSXTMas8l5u7nT9 yQb3/ieWI9ZSz5PHtPB9nMKAnhFm8E5XBfLXMK6Dm5X0Tf9YMAAfq1U8OErnrBONRYyzIwb4ognC xb6BJ+kmjc5qnJQbaGyyXWX8WdDioXJKy/VcZg== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for eu/DNSKEY
	Received 644 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (644 bytes) ;; HEADER SECTION ;; id = 39275 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . 0QkHe/jmBJJ4xCmwlOYy+T/ZyDD4wJr68NvkY9eA/+XydXG5fub/AX26p7FvfuP92CG1H5WZpUKZ mZ26WwpvSw+BP8EbwoSlU6ivqAe33+JGJyBaJiQsv3VTDrB1gGCDwmQKUwOAoQDrr8YDHi69wkmk tTzNFVS4QQB5MZKg/nSVBZwCrKWSxl3O6sDrrM4rAJCrikailARfE9hsCRTHsUSXTMas8l5u7nT9 yQb3/ieWI9ZSz5PHtPB9nMKAnhFm8E5XBfLXMK6Dm5X0Tf9YMAAfq1U8OErnrBONRYyzIwb4ognC xb6BJ+kmjc5qnJQbaGyyXWX8WdDioXJKy/VcZg== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to h.root-servers.net for eu/DS
	Received 366 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (366 bytes) ;; HEADER SECTION ;; id = 8257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . 0QkHe/jmBJJ4xCmwlOYy+T/ZyDD4wJr68NvkY9eA/+XydXG5fub/AX26p7FvfuP92CG1H5WZpUKZ mZ26WwpvSw+BP8EbwoSlU6ivqAe33+JGJyBaJiQsv3VTDrB1gGCDwmQKUwOAoQDrr8YDHi69wkmk tTzNFVS4QQB5MZKg/nSVBZwCrKWSxl3O6sDrrM4rAJCrikailARfE9hsCRTHsUSXTMas8l5u7nT9 yQb3/ieWI9ZSz5PHtPB9nMKAnhFm8E5XBfLXMK6Dm5X0Tf9YMAAfq1U8OErnrBONRYyzIwb4ognC xb6BJ+kmjc5qnJQbaGyyXWX8WdDioXJKy/VcZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . 0QkHe/jmBJJ4xCmwlOYy+T/ZyDD4wJr68NvkY9eA/+XydXG5fub/AX26p7FvfuP92CG1H5WZpUKZ mZ26WwpvSw+BP8EbwoSlU6ivqAe33+JGJyBaJiQsv3VTDrB1gGCDwmQKUwOAoQDrr8YDHi69wkmk tTzNFVS4QQB5MZKg/nSVBZwCrKWSxl3O6sDrrM4rAJCrikailARfE9hsCRTHsUSXTMas8l5u7nT9 yQb3/ieWI9ZSz5PHtPB9nMKAnhFm8E5XBfLXMK6Dm5X0Tf9YMAAfq1U8OErnrBONRYyzIwb4ognC xb6BJ+kmjc5qnJQbaGyyXWX8WdDioXJKy/VcZg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to si.dns.eu for eu/DNSKEY
	Received 1055 bytes from 193.2.221.60
	;; Answer received from 193.2.221.60 (1055 bytes) ;; HEADER SECTION ;; id = 28721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (5 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbfBTLrYK4vw45JCUmjhjiKdjuET1lu+8g3/g22ihphb4OyK0YKjA/mdVtR5qm+tm3q0xP7Q COefKHATp8dJ9ZIhaNh6y2jmDFSM/8iqQ1aX7D4pKwxWYp3/WrISeLFQfZDrTM8NL3h6suZV4aL8 QUumNusWsK8n88PKrhI0UUfl ) ; Key ID = 49485 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbMAp2VcJaI7EjZ7alYB+Kk2ducd4YLGeN1MtCJ0VHfsGMgV0uTIDmn15q3VWT9EWx0kbG4U n5CgiA/1YlpKZwFdHmWijGKBkfVXIqtvEsI84C+OBxdlQlQdJdYlqkERb6Zou2T3kM92XXCXsOx0 BKPKe6gUr6qwAdrXaIU/7B9x ) ; Key ID = 25866 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201028090000 20201021080000 49485 eu. tN7pN3EcbFL5vXzw6uJH3LGrBxcPJL8BcNl/hKh4jvlRdys84wq1uJdGZKNrNN3yMxuqur+dRxZY +QAlE5Dr+O2b4OaFU3l4hCFRntEs0g2Bmie5q5Ih+UbTKejDchmo+RaMrg7zzRV5yoMFcNK8RLR2 GeR2d8t07h5jU/P7F60= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201028090000 20201021080000 59479 eu. sm6PA/LPoZy5RHW8H3RYdIqImbWuRAScUJvvugu+gsJ4kd2UMrPWv26W7OZ01oqYbsgbgRORcAyR QVBTDNryJsGgfcDHue5eNm05XmVw9EZUz5+/2nCaFvYQbwDLNtPJQwWgmGu2jah/iVTgEfmW8HQf 11FM4s+7PH0cSv1HzSaQ4JpoQ3y6x3a3dx7qnRGIw0qtQxiorhYyJqBpwEJttyl29b0jpsqrThle Edlc+a4BiDg4fZRrskrqJVQBxDsPVR0OIJ2Uen9clgxOZL5h1dKeRf9ZIrD8EJVNXxHMkt3FEl4L TNCEAdiBchvp7bAlO3gyeYdq+W7NTUBhDQ9xcw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbfBTLrYK4vw45JCUmjhjiKdjuET1lu+8g3/g22ihphb4OyK0YKjA/mdVtR5qm+tm3q0xP7Q COefKHATp8dJ9ZIhaNh6y2jmDFSM/8iqQ1aX7D4pKwxWYp3/WrISeLFQfZDrTM8NL3h6suZV4aL8 QUumNusWsK8n88PKrhI0UUfl ) ; Key ID = 49485`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbMAp2VcJaI7EjZ7alYB+Kk2ducd4YLGeN1MtCJ0VHfsGMgV0uTIDmn15q3VWT9EWx0kbG4U n5CgiA/1YlpKZwFdHmWijGKBkfVXIqtvEsI84C+OBxdlQlQdJdYlqkERb6Zou2T3kM92XXCXsOx0 BKPKe6gUr6qwAdrXaIU/7B9x ) ; Key ID = 25866`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201028090000 20201021080000 49485 eu. tN7pN3EcbFL5vXzw6uJH3LGrBxcPJL8BcNl/hKh4jvlRdys84wq1uJdGZKNrNN3yMxuqur+dRxZY +QAlE5Dr+O2b4OaFU3l4hCFRntEs0g2Bmie5q5Ih+UbTKejDchmo+RaMrg7zzRV5yoMFcNK8RLR2 GeR2d8t07h5jU/P7F60= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20201028090000 20201021080000 59479 eu. sm6PA/LPoZy5RHW8H3RYdIqImbWuRAScUJvvugu+gsJ4kd2UMrPWv26W7OZ01oqYbsgbgRORcAyR QVBTDNryJsGgfcDHue5eNm05XmVw9EZUz5+/2nCaFvYQbwDLNtPJQwWgmGu2jah/iVTgEfmW8HQf 11FM4s+7PH0cSv1HzSaQ4JpoQ3y6x3a3dx7qnRGIw0qtQxiorhYyJqBpwEJttyl29b0jpsqrThle Edlc+a4BiDg4fZRrskrqJVQBxDsPVR0OIJ2Uen9clgxOZL5h1dKeRf9ZIrD8EJVNXxHMkt3FEl4L TNCEAdiBchvp7bAlO3gyeYdq+W7NTUBhDQ9xcw== )`
	RRSIG=49485 and DNSKEY=49485 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=49485 is now in the chain-of-trust
	DNSKEY=25866 is now in the chain-of-trust
	Query to w.dns.eu for mirror.cyberbits.eu/A
	Received 335 bytes from 194.0.25.28
	;; Answer received from 194.0.25.28 (335 bytes) ;; HEADER SECTION ;; id = 56083 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) cyberbits.eu. 86400 IN NS ns-91-b.gandi.net. cyberbits.eu. 86400 IN NS ns-207-a.gandi.net. cyberbits.eu. 86400 IN NS ns-222-c.gandi.net. cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20201030083430 20201023080332 49485 eu. HSII9L/fCdIikqihdMG6vHTWSDV6B/7feJb8RUciAb7ImYY2Cm8LMY1bRmZKR3eRuhVCkwbRpfaq 1y+TzeOwMsLuU4A3vCPCIKS/kkHz1w/Xu6DDDH9JltVuhuYnEiBubDfn3uhHWL6Pj0Iqg2tmb9it DI2NdeSdn+ZuzmOtfck= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to x.dns.eu for cyberbits.eu/DNSKEY
	Received 328 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (328 bytes) ;; HEADER SECTION ;; id = 45801 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) cyberbits.eu. 86400 IN NS ns-91-b.gandi.net. cyberbits.eu. 86400 IN NS ns-222-c.gandi.net. cyberbits.eu. 86400 IN NS ns-207-a.gandi.net. cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20201030083430 20201023080332 49485 eu. HSII9L/fCdIikqihdMG6vHTWSDV6B/7feJb8RUciAb7ImYY2Cm8LMY1bRmZKR3eRuhVCkwbRpfaq 1y+TzeOwMsLuU4A3vCPCIKS/kkHz1w/Xu6DDDH9JltVuhuYnEiBubDfn3uhHWL6Pj0Iqg2tmb9it DI2NdeSdn+ZuzmOtfck= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberbits.eu

cyberbits.eu

	Checking DS between eu and cyberbits.eu
	Query to x.dns.eu for cyberbits.eu/DS
	Received 251 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (251 bytes) ;; HEADER SECTION ;; id = 9098 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DS ;; ANSWER SECTION (2 records) cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20201030083430 20201023080332 49485 eu. HSII9L/fCdIikqihdMG6vHTWSDV6B/7feJb8RUciAb7ImYY2Cm8LMY1bRmZKR3eRuhVCkwbRpfaq 1y+TzeOwMsLuU4A3vCPCIKS/kkHz1w/Xu6DDDH9JltVuhuYnEiBubDfn3uhHWL6Pj0Iqg2tmb9it DI2NdeSdn+ZuzmOtfck= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberbits.eu in the eu zone
	DS=15361/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20201030083430 20201023080332 49485 eu. HSII9L/fCdIikqihdMG6vHTWSDV6B/7feJb8RUciAb7ImYY2Cm8LMY1bRmZKR3eRuhVCkwbRpfaq 1y+TzeOwMsLuU4A3vCPCIKS/kkHz1w/Xu6DDDH9JltVuhuYnEiBubDfn3uhHWL6Pj0Iqg2tmb9it DI2NdeSdn+ZuzmOtfck= )`
	RRSIG=49485 and DNSKEY=49485 verifies the DS RRset
	DS=15361/SHA-256 is now in the chain-of-trust
	`cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d )`
	Query to ns-207-a.gandi.net for cyberbits.eu/DNSKEY
	Received 229 bytes from 173.246.100.208
	;; Answer received from 173.246.100.208 (229 bytes) ;; HEADER SECTION ;; id = 15579 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN DNSKEY ( 256 3 13 9aNhCQKuxeF5ImMG+RjqhwNowO6bWmcI1AnFSjYYlta5gv5gcT2FA6TloxdgFj9FCFSLqz9NBNNH 8Ec/Lr0AZg== ) ; Key ID = 15361 cyberbits.eu. 10800 IN RRSIG ( DNSKEY 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. pDn+odwgxH6Yzfx6MC4qTxqO0egThFJrKTiUqkxRWXyvjI8pur4Mt3T+nkqjx3raTDf9PCwQ8i0J su70nZKdig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for cyberbits.eu
	`cyberbits.eu. 10800 IN DNSKEY ( 256 3 13 9aNhCQKuxeF5ImMG+RjqhwNowO6bWmcI1AnFSjYYlta5gv5gcT2FA6TloxdgFj9FCFSLqz9NBNNH 8Ec/Lr0AZg== ) ; Key ID = 15361`
	DNSKEY=15361 is now in the chain-of-trust
	DS=15361/SHA-256 verifies DNSKEY=15361
	Found 1 RRSIGs over DNSKEY RRset
	`cyberbits.eu. 10800 IN RRSIG ( DNSKEY 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. pDn+odwgxH6Yzfx6MC4qTxqO0egThFJrKTiUqkxRWXyvjI8pur4Mt3T+nkqjx3raTDf9PCwQ8i0J su70nZKdig== )`
	RRSIG=15361 and DNSKEY=15361 verifies the DNSKEY RRset
	Query to ns-222-c.gandi.net for mirror.cyberbits.eu/A
	Received 172 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (172 bytes) ;; HEADER SECTION ;; id = 37029 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (2 records) mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20201105000000 20201015000000 15361 cyberbits.eu. 5kaI97dz1H2OMn9INkAdMFKdkukrvD6F86QITe80rseOj9kGMBkBMC/wKN23exOMFzCLk840sF8N 8/3SbqTjyA== ) mirror.cyberbits.eu. 1800 IN A 62.210.124.230 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cyberbits.eu is authoritative for mirror.cyberbits.eu
	Query to ns-207-a.gandi.net for mirror.cyberbits.eu/DNSKEY
	Received 407 bytes from 173.246.100.208
	;; Answer received from 173.246.100.208 (407 bytes) ;; HEADER SECTION ;; id = 52153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1597736730 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. sUqyEAB+R+pPWs3TpPIiHU8OrypGTaoLiewfxhPO1/0Ce79Z/cBBJROgALlNhakjF+QZZUac+ex+ 8hKPUPNN5A== ) hqcd3kvlrd4gjtt4nj69tephbim2rnoi.cyberbits.eu. 10800 IN NSEC3 ( 1 0 3 ea33014a hqcd3kvlrd4gjtt4nj69tephbim2rnoj A AAAA RRSIG ) hqcd3kvlrd4gjtt4nj69tephbim2rnoi.cyberbits.eu. 10800 IN RRSIG ( NSEC3 13 3 10800 20201105000000 20201015000000 15361 cyberbits.eu. om9swbBPWYSUQdGutsA3sQ5uQuJCjRl/L/ICPS+sw2OKNz4qUCfNxearl01SiNMXka16UENn32D0 TLndaCUnDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cyberbits.eu zone
	Query to ns-222-c.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (209 bytes) ;; HEADER SECTION ;; id = 51322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1603324800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. 705X5qhW/iLzeVmWY87khDsJTCvIksvAcdNA8uc8rilAyaHrl0LCSoVraC+GUyav2AOJ468lrUO7 fTpjiWVugA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-207-a.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 173.246.100.208
	;; Answer received from 173.246.100.208 (209 bytes) ;; HEADER SECTION ;; id = 38850 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1603324800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. HxedGGw0Q0ukpADspe6PeIB6zrAzO2Z2vKsm5l9SkDe6MlWRrr23LALkGeQCNK8C9uxYDkoR20Ti P5++xmLFEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-91-b.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 213.167.230.92
	;; Answer received from 213.167.230.92 (209 bytes) ;; HEADER SECTION ;; id = 59702 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1603324800 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20201105000000 20201015000000 15361 cyberbits.eu. OI6+C5EatlhtYxJSBZAJQN6QVKfjP+pWfw+ELqQxDdpDWrDwxzWArhXmjaqx4nHNGYwsDAarZMMQ U2hUKe4gYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-222-c.gandi.net for mirror.cyberbits.eu/A
	Received 172 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (172 bytes) ;; HEADER SECTION ;; id = 6911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (2 records) mirror.cyberbits.eu. 1800 IN A 62.210.124.230 mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20201105000000 20201015000000 15361 cyberbits.eu. /sQAwFDZ+txjHbyR616y1kRmm+/q5CHDYrQZoW4X5gujn2TNPlv6ZE3afAfH9D0PWYlghZ5qkyon YGkvSOWgWw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	mirror.cyberbits.eu A RR has value 62.210.124.230
	Found 1 RRSIGs over A RRset
	`mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20201105000000 20201015000000 15361 cyberbits.eu. /sQAwFDZ+txjHbyR616y1kRmm+/q5CHDYrQZoW4X5gujn2TNPlv6ZE3afAfH9D0PWYlghZ5qkyon YGkvSOWgWw== )`
	RRSIG=15361 and DNSKEY=15361 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test mirror.cyberbits.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: