DNSSEC Analyzer - mirror.cyberbits.eu

Domain Name:

Time: 2020-08-09 15:14:16 UTC, NTP stratum 4

Analyzing DNSSEC problems for mirror.cyberbits.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 865 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (865 bytes) ;; HEADER SECTION ;; id = 54897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200821000000 20200731000000 20326 . L2rJadIIoGRdheHJ6xBo8t8XCcTO2rA0F7ZLsAPKtjK4lmvoBWL/vVuBNkUkeecei038w3FrmzzL KeKNPvlC6iRihYvJZJk7yvmmWBcus7QZ9Z550LRrThnArghMSOGOFrEn0RN5RccsyU/WoaGDZ5gF 42YEb6qCRuSDuWk7nCGXVEFD3t3u+GOfdkYMVddTX5ocYe2o6mb0U3rNc9JycOpm5Na4hilxDzq7 Y64H8ekRviWuQAOibhzMOtuaX3aI+5PxEza/362iOnQrK64OSE5m8Yg8903bebeVCytTnJFXGM20 1AVOJH8yzcnTdVi2lTHxH2iCMCsNvfqZvfk1nw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200821000000 20200731000000 20326 . L2rJadIIoGRdheHJ6xBo8t8XCcTO2rA0F7ZLsAPKtjK4lmvoBWL/vVuBNkUkeecei038w3FrmzzL KeKNPvlC6iRihYvJZJk7yvmmWBcus7QZ9Z550LRrThnArghMSOGOFrEn0RN5RccsyU/WoaGDZ5gF 42YEb6qCRuSDuWk7nCGXVEFD3t3u+GOfdkYMVddTX5ocYe2o6mb0U3rNc9JycOpm5Na4hilxDzq7 Y64H8ekRviWuQAOibhzMOtuaX3aI+5PxEza/362iOnQrK64OSE5m8Yg8903bebeVCytTnJFXGM20 1AVOJH8yzcnTdVi2lTHxH2iCMCsNvfqZvfk1nw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to d.root-servers.net for mirror.cyberbits.eu/A
	Received 661 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (661 bytes) ;; HEADER SECTION ;; id = 50664 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . nbiqNHAgXju/LYl3gikvMEKHI+81m6rwZzVgWFY/Ebqcda0gnHRHmXacKxFEFA3g6o5/gSrGpmIs 4+x6n99i5cLpA6Vs7olO0+PCb7Fbu9EAsoAk08PhjsI3LRxfKB7Zxm5+4SZ0OEw4XDWVUk2XGG7V tDVDl6Orpv+iYBlyuGOt0c79PatmE49f3InIuqrZy0Z46lINad6bobXtC0CrDg5ycQCwItYeOnTZ unNBYhKhVRKfP/WvdNQ2CGyux8wPqqZHQXi/x4zI0V2DqIgUW9PllbQtPLVX71Co2YYqmC85txXV 1eABArmr4EazSe8Dg7TPIqrk6yZUKYBwyKNsqw== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to i.root-servers.net for eu/DNSKEY
	Received 644 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (644 bytes) ;; HEADER SECTION ;; id = 24690 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . nbiqNHAgXju/LYl3gikvMEKHI+81m6rwZzVgWFY/Ebqcda0gnHRHmXacKxFEFA3g6o5/gSrGpmIs 4+x6n99i5cLpA6Vs7olO0+PCb7Fbu9EAsoAk08PhjsI3LRxfKB7Zxm5+4SZ0OEw4XDWVUk2XGG7V tDVDl6Orpv+iYBlyuGOt0c79PatmE49f3InIuqrZy0Z46lINad6bobXtC0CrDg5ycQCwItYeOnTZ unNBYhKhVRKfP/WvdNQ2CGyux8wPqqZHQXi/x4zI0V2DqIgUW9PllbQtPLVX71Co2YYqmC85txXV 1eABArmr4EazSe8Dg7TPIqrk6yZUKYBwyKNsqw== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN A 185.151.141.1 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN A 194.146.106.90 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to j.root-servers.net for eu/DS
	Received 366 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (366 bytes) ;; HEADER SECTION ;; id = 14274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . nbiqNHAgXju/LYl3gikvMEKHI+81m6rwZzVgWFY/Ebqcda0gnHRHmXacKxFEFA3g6o5/gSrGpmIs 4+x6n99i5cLpA6Vs7olO0+PCb7Fbu9EAsoAk08PhjsI3LRxfKB7Zxm5+4SZ0OEw4XDWVUk2XGG7V tDVDl6Orpv+iYBlyuGOt0c79PatmE49f3InIuqrZy0Z46lINad6bobXtC0CrDg5ycQCwItYeOnTZ unNBYhKhVRKfP/WvdNQ2CGyux8wPqqZHQXi/x4zI0V2DqIgUW9PllbQtPLVX71Co2YYqmC85txXV 1eABArmr4EazSe8Dg7TPIqrk6yZUKYBwyKNsqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20200822050000 20200809040000 46594 . nbiqNHAgXju/LYl3gikvMEKHI+81m6rwZzVgWFY/Ebqcda0gnHRHmXacKxFEFA3g6o5/gSrGpmIs 4+x6n99i5cLpA6Vs7olO0+PCb7Fbu9EAsoAk08PhjsI3LRxfKB7Zxm5+4SZ0OEw4XDWVUk2XGG7V tDVDl6Orpv+iYBlyuGOt0c79PatmE49f3InIuqrZy0Z46lINad6bobXtC0CrDg5ycQCwItYeOnTZ unNBYhKhVRKfP/WvdNQ2CGyux8wPqqZHQXi/x4zI0V2DqIgUW9PllbQtPLVX71Co2YYqmC85txXV 1eABArmr4EazSe8Dg7TPIqrk6yZUKYBwyKNsqw== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to w.dns.eu for eu/DNSKEY
	Received 907 bytes from 194.0.25.28
	;; Answer received from 194.0.25.28 (907 bytes) ;; HEADER SECTION ;; id = 65232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbZxXhQPJY3FG3Gkmrzoi60biaMxaTk/AFQsacte1WacbkTUVkXuUGfKvTVbf5XikCfecHif NsLNmtfVfSNqeYrqAvuqDL+4KewkeSPJvChaWSP4iBEmTJFcqGmI+t8TaUAhbssQt67mvpcyDgVZ Xxt+7Fz0FYCx2IEBQr3PAlYJ ) ; Key ID = 50124 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200815011322 20200808005008 50124 eu. IhOndvA4HsQVqQgT9j509nRV+6kFfOSi7B9vTcFNMDa9gDcjCgOqo0NoePc9hTyWmr4nN9sMvRZz 6tLVKDtXUCV98q4Q+t3C9nj0G2oTkswMBp0mZ8UiY2gR7shGura8hlnt0P638m3VlJp/fdeF56V5 mqrHk7lHdciIObMao4Q= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200815011322 20200808005008 59479 eu. sMi9snuC9RDnFQtVEHXMA0keQSuW4iU2+dzTtHBT4RdcHx4tIb4Aauw7PFWlrpIXuc7Mg78zdxb0 HHlG118kevjvhPTOqpxqTFU1zMvF+XMqBtQK1Rz5wYH1NR9/jbwng6/tREAsv/5uTa7ZQmDPJeTP PjzBihCXW19gTE1ItQuXDhAx1U0H8caCfEdhy0MlIwSEPJOV/+1gtei0NhS+1MIy8l1FU9Hfbwlr nSJIQzwHl7SPEElUhBX4x5BOih1+Ul3f+1FjQTX0UJBJIvq5CUpqGcRaNiyhE+beu8QGPg7TGXKP 3m9HUfb7JsmUfYCgy/DcEXzoZVUxBt2jF/ZrVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbZxXhQPJY3FG3Gkmrzoi60biaMxaTk/AFQsacte1WacbkTUVkXuUGfKvTVbf5XikCfecHif NsLNmtfVfSNqeYrqAvuqDL+4KewkeSPJvChaWSP4iBEmTJFcqGmI+t8TaUAhbssQt67mvpcyDgVZ Xxt+7Fz0FYCx2IEBQr3PAlYJ ) ; Key ID = 50124`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200815011322 20200808005008 50124 eu. IhOndvA4HsQVqQgT9j509nRV+6kFfOSi7B9vTcFNMDa9gDcjCgOqo0NoePc9hTyWmr4nN9sMvRZz 6tLVKDtXUCV98q4Q+t3C9nj0G2oTkswMBp0mZ8UiY2gR7shGura8hlnt0P638m3VlJp/fdeF56V5 mqrHk7lHdciIObMao4Q= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20200815011322 20200808005008 59479 eu. sMi9snuC9RDnFQtVEHXMA0keQSuW4iU2+dzTtHBT4RdcHx4tIb4Aauw7PFWlrpIXuc7Mg78zdxb0 HHlG118kevjvhPTOqpxqTFU1zMvF+XMqBtQK1Rz5wYH1NR9/jbwng6/tREAsv/5uTa7ZQmDPJeTP PjzBihCXW19gTE1ItQuXDhAx1U0H8caCfEdhy0MlIwSEPJOV/+1gtei0NhS+1MIy8l1FU9Hfbwlr nSJIQzwHl7SPEElUhBX4x5BOih1+Ul3f+1FjQTX0UJBJIvq5CUpqGcRaNiyhE+beu8QGPg7TGXKP 3m9HUfb7JsmUfYCgy/DcEXzoZVUxBt2jF/ZrVw== )`
	RRSIG=50124 and DNSKEY=50124 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=50124 is now in the chain-of-trust
	Query to y.dns.eu for mirror.cyberbits.eu/A
	Received 335 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (335 bytes) ;; HEADER SECTION ;; id = 59338 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) cyberbits.eu. 86400 IN NS ns-91-b.gandi.net. cyberbits.eu. 86400 IN NS ns-207-a.gandi.net. cyberbits.eu. 86400 IN NS ns-222-c.gandi.net. cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20200812221345 20200805220404 50124 eu. U5NQ9KYSaXzlUdlIw//sTeA6Rdlm++hQrLqA702nHmPSE2zPqKSlQFj9B5kcALjgXE8MJV/jhbDQ gClSLbEGR48PNvWK4VEyfMYEXxCJgGhx92HsRixIKbfRiKU9R3fXFrt5UyHkJTpx/0g06VdHfb5H ynxA/arDurl7YKHh3j0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to w.dns.eu for cyberbits.eu/DNSKEY
	Received 328 bytes from 194.0.25.28
	;; Answer received from 194.0.25.28 (328 bytes) ;; HEADER SECTION ;; id = 17340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) cyberbits.eu. 86400 IN NS ns-91-b.gandi.net. cyberbits.eu. 86400 IN NS ns-207-a.gandi.net. cyberbits.eu. 86400 IN NS ns-222-c.gandi.net. cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20200812221345 20200805220404 50124 eu. U5NQ9KYSaXzlUdlIw//sTeA6Rdlm++hQrLqA702nHmPSE2zPqKSlQFj9B5kcALjgXE8MJV/jhbDQ gClSLbEGR48PNvWK4VEyfMYEXxCJgGhx92HsRixIKbfRiKU9R3fXFrt5UyHkJTpx/0g06VdHfb5H ynxA/arDurl7YKHh3j0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cyberbits.eu

cyberbits.eu

	Checking DS between eu and cyberbits.eu
	Query to w.dns.eu for cyberbits.eu/DS
	Received 251 bytes from 194.0.25.28
	;; Answer received from 194.0.25.28 (251 bytes) ;; HEADER SECTION ;; id = 56881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DS ;; ANSWER SECTION (2 records) cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d ) cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20200812221345 20200805220404 50124 eu. U5NQ9KYSaXzlUdlIw//sTeA6Rdlm++hQrLqA702nHmPSE2zPqKSlQFj9B5kcALjgXE8MJV/jhbDQ gClSLbEGR48PNvWK4VEyfMYEXxCJgGhx92HsRixIKbfRiKU9R3fXFrt5UyHkJTpx/0g06VdHfb5H ynxA/arDurl7YKHh3j0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cyberbits.eu in the eu zone
	DS=15361/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cyberbits.eu. 86400 IN RRSIG ( DS 8 2 86400 20200812221345 20200805220404 50124 eu. U5NQ9KYSaXzlUdlIw//sTeA6Rdlm++hQrLqA702nHmPSE2zPqKSlQFj9B5kcALjgXE8MJV/jhbDQ gClSLbEGR48PNvWK4VEyfMYEXxCJgGhx92HsRixIKbfRiKU9R3fXFrt5UyHkJTpx/0g06VdHfb5H ynxA/arDurl7YKHh3j0= )`
	RRSIG=50124 and DNSKEY=50124 verifies the DS RRset
	DS=15361/SHA-256 is now in the chain-of-trust
	`cyberbits.eu. 86400 IN DS ( 15361 13 2 abd590676f91b0768b568d8f5bc6ebcb8b1b04cfd5adfbb3af63320acf97224d )`
	Query to ns-222-c.gandi.net for cyberbits.eu/DNSKEY
	Received 229 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (229 bytes) ;; HEADER SECTION ;; id = 42313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN RRSIG ( DNSKEY 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. 9JJpXys8ZF8mwczmEIiRXM368M8o/YivfrdupGGKO10layv8yGS1uTnlMbEqDnKdomm1dPvmsOWD IypNjT3+9w== ) cyberbits.eu. 10800 IN DNSKEY ( 256 3 13 9aNhCQKuxeF5ImMG+RjqhwNowO6bWmcI1AnFSjYYlta5gv5gcT2FA6TloxdgFj9FCFSLqz9NBNNH 8Ec/Lr0AZg== ) ; Key ID = 15361 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for cyberbits.eu
	`cyberbits.eu. 10800 IN DNSKEY ( 256 3 13 9aNhCQKuxeF5ImMG+RjqhwNowO6bWmcI1AnFSjYYlta5gv5gcT2FA6TloxdgFj9FCFSLqz9NBNNH 8Ec/Lr0AZg== ) ; Key ID = 15361`
	DNSKEY=15361 is now in the chain-of-trust
	DS=15361/SHA-256 verifies DNSKEY=15361
	Found 1 RRSIGs over DNSKEY RRset
	`cyberbits.eu. 10800 IN RRSIG ( DNSKEY 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. 9JJpXys8ZF8mwczmEIiRXM368M8o/YivfrdupGGKO10layv8yGS1uTnlMbEqDnKdomm1dPvmsOWD IypNjT3+9w== )`
	RRSIG=15361 and DNSKEY=15361 verifies the DNSKEY RRset
	Query to ns-222-c.gandi.net for mirror.cyberbits.eu/A
	Received 172 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (172 bytes) ;; HEADER SECTION ;; id = 49919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (2 records) mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20200820000000 20200730000000 15361 cyberbits.eu. ihtOAh23N2uqgFSd9xCvNkD22B0ihWa3j+q+JvOj/MojguKZmZOpQp85Vc9XPMhyGGQEfpK7kgE2 ryVoJ5OuBA== ) mirror.cyberbits.eu. 1800 IN A 62.210.124.230 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cyberbits.eu is authoritative for mirror.cyberbits.eu
	Query to ns-91-b.gandi.net for mirror.cyberbits.eu/DNSKEY
	Received 407 bytes from 213.167.230.92
	;; Answer received from 213.167.230.92 (407 bytes) ;; HEADER SECTION ;; id = 17207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1594998091 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. Q3vwvTOci7iLs5AsxLo4Qz2teXE1vF3UfGUBUAhc3DbZlAGV4GKqfjw5iDK2+MWSgocEVU1u/jrB N4mZT35IpQ== ) hqcd3kvlrd4gjtt4nj69tephbim2rnoi.cyberbits.eu. 10800 IN NSEC3 ( 1 0 3 ea33014a hqcd3kvlrd4gjtt4nj69tephbim2rnoj A AAAA RRSIG ) hqcd3kvlrd4gjtt4nj69tephbim2rnoi.cyberbits.eu. 10800 IN RRSIG ( NSEC3 13 3 10800 20200820000000 20200730000000 15361 cyberbits.eu. 1vtEQajDDldQGdHm2xprUhlAOAp5npT8SluvVCBeQUZgr8FQQaB8Q4c7tXVq4+AGi6edDRYUimAk yKaG3W12pA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found RRSIG signed by cyberbits.eu zone
	Query to ns-222-c.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (209 bytes) ;; HEADER SECTION ;; id = 32658 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. a7C/lr8uPZeQet1TJm6VtQWybx9taz7Qq9J1rUqCuy013CK6n2cTVLRMz2JR4zFUlqI8IrUAJn1G 6U6BpRvIog== ) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1596672000 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-207-a.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 173.246.100.208
	;; Answer received from 173.246.100.208 (209 bytes) ;; HEADER SECTION ;; id = 14875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1596672000 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. vbTO75bllL3SXc8AaTsJNF6he47b9YlbiYU49C4Sf6Rj6T42y7f+AUrcPd2V8AeS7RSfa2MC7pTl kqKPMmzAaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-91-b.gandi.net for cyberbits.eu/SOA
	Received 209 bytes from 213.167.230.92
	;; Answer received from 213.167.230.92 (209 bytes) ;; HEADER SECTION ;; id = 55496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cyberbits.eu. IN SOA ;; ANSWER SECTION (2 records) cyberbits.eu. 10800 IN RRSIG ( SOA 13 2 10800 20200820000000 20200730000000 15361 cyberbits.eu. 5sJwHnNxdIQY7vcOVlmtov+nJD4wWPsS72mGYJaNzARs6Alc7HduaBSQZaX1ZrTimbvc/8M0sAiR BQy72CfIGw== ) cyberbits.eu. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1596672000 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-222-c.gandi.net for mirror.cyberbits.eu/A
	Received 172 bytes from 217.70.187.223
	;; Answer received from 217.70.187.223 (172 bytes) ;; HEADER SECTION ;; id = 28074 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; mirror.cyberbits.eu. IN A ;; ANSWER SECTION (2 records) mirror.cyberbits.eu. 1800 IN A 62.210.124.230 mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20200820000000 20200730000000 15361 cyberbits.eu. NSnWnfYwRqcNPa8g7ZfRUP5NMdhdNBdY2MOPtQ0WpLuhVzF+VNGNJWLAhyAGBJwB5CvQQuxn8iax nwT1BTeIaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	mirror.cyberbits.eu A RR has value 62.210.124.230
	Found 1 RRSIGs over A RRset
	`mirror.cyberbits.eu. 1800 IN RRSIG ( A 13 3 1800 20200820000000 20200730000000 15361 cyberbits.eu. NSnWnfYwRqcNPa8g7ZfRUP5NMdhdNBdY2MOPtQ0WpLuhVzF+VNGNJWLAhyAGBJwB5CvQQuxn8iax nwT1BTeIaA== )`
	RRSIG=15361 and DNSKEY=15361 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test mirror.cyberbits.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: