DNSSEC Analyzer

Domain Name:

Time: 2020-07-07 18:58:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for nic.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (1139 bytes) ;; HEADER SECTION ;; id = 52150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903 . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc4qsciJ5MdMUIu4n/pSTsSiU9OCyAanPTe5TcMX4v1hxhpFwiTGQUv3BXT6IAO4litrZKTU aj4vitqHW1+RQsHn3k/gSvt7FwyQwpy0mEnShBgr6RQiGtlBODNY67sTl+W8M/b6SLTAaaDri3BO 5u6wrDs149rMELJAdoVBjmXW+zRH3kZzh3lwyTZsYtk7L+3DYbTiiHq+sRB4F9XoBPAz5Psv4q4E iPq07nW3acbW84zTz3CyQUmQkJT9VB1oUKHz6sNoyccqzcMX4q1GHAYpQ7FAXlKMxidoN1Ay5DWA NgTmgJXzKhcI2nIZoq1x3yq4814O1LQd9QP68gI37+0= ) ; Key ID = 48903`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200722000000 20200701000000 20326 . OegGYuMyXFOfyJusWYcPZbbrbjHTk5zkyAFfgGf8vWUH8tHoLHn02+QK8u2D/RUAvacwChEOoh3/ iAW5n5GJk+CLYtilcgtEt5uKYX5uVt/vM9aDKr/hGmnhq1Z75scHpLRwL9e/icHZuiyQdgElGwwL hh1vn+m29fwwyAim3UG28gNY/DaifSuK/9g6dlCFDCjBHnOuSqOxoM53vfaQB/bGsXSTZbbWtReh ixpccKxVGwjl3XDG27Itgji7s/JQM2AhgYJcDULa0JTN06fGQM5dmhvvXTlkAZ7fhqTVzyBQcsu9 kbRbYGc0mhDCUzPv6qEigw+pKpifMmVC3+Q7sw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=48903 is now in the chain-of-trust
	DNSKEY=46594 is now in the chain-of-trust
	Query to m.root-servers.net for nic.cz/A
	Received 613 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (613 bytes) ;; HEADER SECTION ;; id = 33466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . tkOH+o/pz5scZQ125kyhEslF56UkNR+DsjvKMaEqMJj3GePmXOh67OuTzFJw+Lg4lXa15Oox1YfU 2t1SF//ZfbwlbculMyihQulYWk6IzYJJSD0bQ5zBqoZA9F8u+2p4ZYmLlt1ng8yFXkLYswUmQAYa yzdj3Z1Q9TpK1NTdD6ezHGTOaLkKAzHQ0jMF5+kbR9UaTar5RVjWjktO4mtm1i6cHK8G2nU6rYxl 5cii2kCCsPYMOHgHf9WTI6uguN8iu3hF6kGwIAMpTvwlgUc7x/Tin11GKTxFMNRYSGwy6Yd2uP0u y4gkoeQGqH/pg5qTahMus/1/ewupweEwCbMz4w== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (613 bytes) ;; HEADER SECTION ;; id = 19437 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . tkOH+o/pz5scZQ125kyhEslF56UkNR+DsjvKMaEqMJj3GePmXOh67OuTzFJw+Lg4lXa15Oox1YfU 2t1SF//ZfbwlbculMyihQulYWk6IzYJJSD0bQ5zBqoZA9F8u+2p4ZYmLlt1ng8yFXkLYswUmQAYa yzdj3Z1Q9TpK1NTdD6ezHGTOaLkKAzHQ0jMF5+kbR9UaTar5RVjWjktO4mtm1i6cHK8G2nU6rYxl 5cii2kCCsPYMOHgHf9WTI6uguN8iu3hF6kGwIAMpTvwlgUc7x/Tin11GKTxFMNRYSGwy6Yd2uP0u y4gkoeQGqH/pg5qTahMus/1/ewupweEwCbMz4w== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to k.root-servers.net for cz/DS
	Received 366 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (366 bytes) ;; HEADER SECTION ;; id = 64569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . tkOH+o/pz5scZQ125kyhEslF56UkNR+DsjvKMaEqMJj3GePmXOh67OuTzFJw+Lg4lXa15Oox1YfU 2t1SF//ZfbwlbculMyihQulYWk6IzYJJSD0bQ5zBqoZA9F8u+2p4ZYmLlt1ng8yFXkLYswUmQAYa yzdj3Z1Q9TpK1NTdD6ezHGTOaLkKAzHQ0jMF5+kbR9UaTar5RVjWjktO4mtm1i6cHK8G2nU6rYxl 5cii2kCCsPYMOHgHf9WTI6uguN8iu3hF6kGwIAMpTvwlgUc7x/Tin11GKTxFMNRYSGwy6Yd2uP0u y4gkoeQGqH/pg5qTahMus/1/ewupweEwCbMz4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20200720170000 20200707160000 46594 . tkOH+o/pz5scZQ125kyhEslF56UkNR+DsjvKMaEqMJj3GePmXOh67OuTzFJw+Lg4lXa15Oox1YfU 2t1SF//ZfbwlbculMyihQulYWk6IzYJJSD0bQ5zBqoZA9F8u+2p4ZYmLlt1ng8yFXkLYswUmQAYa yzdj3Z1Q9TpK1NTdD6ezHGTOaLkKAzHQ0jMF5+kbR9UaTar5RVjWjktO4mtm1i6cHK8G2nU6rYxl 5cii2kCCsPYMOHgHf9WTI6uguN8iu3hF6kGwIAMpTvwlgUc7x/Tin11GKTxFMNRYSGwy6Yd2uP0u y4gkoeQGqH/pg5qTahMus/1/ewupweEwCbMz4w== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to d.ns.nic.cz for cz/DNSKEY
	Received 387 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (387 bytes) ;; HEADER SECTION ;; id = 34381 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (4 records) cz. 18000 IN DNSKEY ( 256 3 13 vCLlUrpvver9SfRlGSZvYrlxaHr+l3EvtLfaIzvZkHVK1aVTBB1a1rMk4ZfSKFpWD9l2M83k0s92 jwD97QklNQ== ) ; Key ID = 17880 cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200711000000 20200627000000 20237 cz. cXTTCGoiGXSiCWrzPniyziNrhtJKFp8VE0v5WHyS7fi8yPRP9e6B5pHi3K0NsVFVxhvBt2dbDabt wVUYWON76w== ) cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200720072215 20200707173535 17880 cz. lH+v6bqH9uWDSK/t/l4XGVJOFHKxbSG9xCnYd3dGQVEeYl3hxSngItOUdYEV4evRBf9FwS8M8XwM yTSnPqvXLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 18000 IN DNSKEY ( 256 3 13 vCLlUrpvver9SfRlGSZvYrlxaHr+l3EvtLfaIzvZkHVK1aVTBB1a1rMk4ZfSKFpWD9l2M83k0s92 jwD97QklNQ== ) ; Key ID = 17880`
	`cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200711000000 20200627000000 20237 cz. cXTTCGoiGXSiCWrzPniyziNrhtJKFp8VE0v5WHyS7fi8yPRP9e6B5pHi3K0NsVFVxhvBt2dbDabt wVUYWON76w== )`
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200720072215 20200707173535 17880 cz. lH+v6bqH9uWDSK/t/l4XGVJOFHKxbSG9xCnYd3dGQVEeYl3hxSngItOUdYEV4evRBf9FwS8M8XwM yTSnPqvXLQ== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	RRSIG=17880 and DNSKEY=17880 verifies the DNSKEY RRset
	DNSKEY=17880 is now in the chain-of-trust
	Query to d.ns.nic.cz for nic.cz/A
	Received 1050 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (1050 bytes) ;; HEADER SECTION ;; id = 64834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20200714063455 20200701061048 3445 nic.cz. nNk13tr8b75ehnbKExUbfg2AnBYyOpV8QO0dSx9eAFwP3UAfbgJbcSljws/IUjASIB54w4ZBM1w/ 81wJSxxcYQ== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	cz is authoritative for nic.cz
	Query to a.ns.nic.cz for nic.cz/DNSKEY
	Received 399 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (399 bytes) ;; HEADER SECTION ;; id = 39638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (4 records) nic.cz. 1800 IN DNSKEY ( 256 3 13 +yuvSuYV5d1hog/f5ME56gOsEDKR5vpL+yFA+g+2YyyBN86v/NwuDh8rC39UqNZ1iwo9qqQ+nzRp d8WH8za0xw== ) ; Key ID = 3445 nic.cz. 1800 IN DNSKEY ( 257 3 13 LM4zvjUgZi2XZKsYooDE0HFYGfWp242fKB+O8sLsuox8S6MJTowY8lBDjZD7JKbmaNot3+1H8zU9 TrDzWmmHwQ== ) ; Key ID = 61281 nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714182555 20200701061048 61281 nic.cz. oo/7S9+cXbc32+J/RP2SYdH2KzDqcW3xSscQPtG9+hx8PQr06VITy5H4uvbzLCaLqjxjY2WvRwog quTD0m9tHg== ) nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714211104 20200701061048 3445 nic.cz. LbcNRGV6oX3a03mevtqYgphktG96WAqpFrV8Pnl8vUVLfdmSmxy/MXK+XUfAR0YMEyOrFtX0V3ft q9LqIOESIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nic.cz
	Attempting to learn nameservers for nic.cz
	Query to d.ns.nic.cz for nic.cz/NS
	Received 932 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (932 bytes) ;; HEADER SECTION ;; id = 18164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN NS ;; ANSWER SECTION (4 records) nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found nic.cz nameservers: b.ns.nic.cz, d.ns.nic.cz, a.ns.nic.cz

nic.cz

	Checking DS between cz and nic.cz
	Query to c.ns.nic.cz for nic.cz/DS
	Received 181 bytes from 194.0.14.1
	;; Answer received from 194.0.14.1 (181 bytes) ;; HEADER SECTION ;; id = 20546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DS ;; ANSWER SECTION (2 records) nic.cz. 3600 IN DS ( 61281 13 2 4104d40c8fe2030bf7a09a199fcf37b36f7ec8ddd16f5a84f2e61c248d3afd0f ) nic.cz. 3600 IN RRSIG ( DS 13 2 3600 20200720130206 20200706203532 17880 cz. TaVJaMnv8/huqU7OeFMSMgVgZe8amVokx/PsRh9MCo/mxVi1s2cXXeku/z/fMHpkvghCPKsXql8I TsF3s4HMrw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nic.cz in the cz zone
	DS=61281/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nic.cz. 3600 IN RRSIG ( DS 13 2 3600 20200720130206 20200706203532 17880 cz. TaVJaMnv8/huqU7OeFMSMgVgZe8amVokx/PsRh9MCo/mxVi1s2cXXeku/z/fMHpkvghCPKsXql8I TsF3s4HMrw== )`
	RRSIG=17880 and DNSKEY=17880 verifies the DS RRset
	DS=61281/SHA-256 is now in the chain-of-trust
	`nic.cz. 3600 IN DS ( 61281 13 2 4104d40c8fe2030bf7a09a199fcf37b36f7ec8ddd16f5a84f2e61c248d3afd0f )`
	Query to b.ns.nic.cz for nic.cz/DNSKEY
	Received 399 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (399 bytes) ;; HEADER SECTION ;; id = 24187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (4 records) nic.cz. 1800 IN DNSKEY ( 257 3 13 LM4zvjUgZi2XZKsYooDE0HFYGfWp242fKB+O8sLsuox8S6MJTowY8lBDjZD7JKbmaNot3+1H8zU9 TrDzWmmHwQ== ) ; Key ID = 61281 nic.cz. 1800 IN DNSKEY ( 256 3 13 +yuvSuYV5d1hog/f5ME56gOsEDKR5vpL+yFA+g+2YyyBN86v/NwuDh8rC39UqNZ1iwo9qqQ+nzRp d8WH8za0xw== ) ; Key ID = 3445 nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714182555 20200701061048 61281 nic.cz. oo/7S9+cXbc32+J/RP2SYdH2KzDqcW3xSscQPtG9+hx8PQr06VITy5H4uvbzLCaLqjxjY2WvRwog quTD0m9tHg== ) nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714211104 20200701061048 3445 nic.cz. LbcNRGV6oX3a03mevtqYgphktG96WAqpFrV8Pnl8vUVLfdmSmxy/MXK+XUfAR0YMEyOrFtX0V3ft q9LqIOESIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nic.cz
	`nic.cz. 1800 IN DNSKEY ( 257 3 13 LM4zvjUgZi2XZKsYooDE0HFYGfWp242fKB+O8sLsuox8S6MJTowY8lBDjZD7JKbmaNot3+1H8zU9 TrDzWmmHwQ== ) ; Key ID = 61281`
	`nic.cz. 1800 IN DNSKEY ( 256 3 13 +yuvSuYV5d1hog/f5ME56gOsEDKR5vpL+yFA+g+2YyyBN86v/NwuDh8rC39UqNZ1iwo9qqQ+nzRp d8WH8za0xw== ) ; Key ID = 3445`
	DNSKEY=61281/SEP is now in the chain-of-trust
	DS=61281/SHA-256 verifies DNSKEY=61281/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714182555 20200701061048 61281 nic.cz. oo/7S9+cXbc32+J/RP2SYdH2KzDqcW3xSscQPtG9+hx8PQr06VITy5H4uvbzLCaLqjxjY2WvRwog quTD0m9tHg== )`
	`nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20200714211104 20200701061048 3445 nic.cz. LbcNRGV6oX3a03mevtqYgphktG96WAqpFrV8Pnl8vUVLfdmSmxy/MXK+XUfAR0YMEyOrFtX0V3ft q9LqIOESIg== )`
	RRSIG=61281 and DNSKEY=61281/SEP verifies the DNSKEY RRset
	RRSIG=3445 and DNSKEY=3445 verifies the DNSKEY RRset
	DNSKEY=3445 is now in the chain-of-trust
	Query to d.ns.nic.cz for nic.cz/A
	Received 1050 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (1050 bytes) ;; HEADER SECTION ;; id = 36093 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20200714063455 20200701061048 3445 nic.cz. nNk13tr8b75ehnbKExUbfg2AnBYyOpV8QO0dSx9eAFwP3UAfbgJbcSljws/IUjASIB54w4ZBM1w/ 81wJSxxcYQ== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nic.cz is authoritative for nic.cz
	Found RRSIG signed by nic.cz zone
	Query to b.ns.nic.cz for nic.cz/SOA
	Received 1081 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (1081 bytes) ;; HEADER SECTION ;; id = 5590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA ( a.ns.nic.cz. hostmaster.nic.cz. 1593587448 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) nic.cz. 1800 IN RRSIG ( SOA 13 2 1800 20200714182338 20200701061048 3445 nic.cz. 0UPqO8JsXg0SiGcieySQ6SWrGaj4Oah6/0ITpcX3RnPUqdKlnoevwjxAU9ZOKR1NHeu8WdK7+Ws7 rySx8E/psA== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for nic.cz/SOA
	Received 1081 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (1081 bytes) ;; HEADER SECTION ;; id = 59829 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA ( a.ns.nic.cz. hostmaster.nic.cz. 1593587448 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) nic.cz. 1800 IN RRSIG ( SOA 13 2 1800 20200714182338 20200701061048 3445 nic.cz. 0UPqO8JsXg0SiGcieySQ6SWrGaj4Oah6/0ITpcX3RnPUqdKlnoevwjxAU9ZOKR1NHeu8WdK7+Ws7 rySx8E/psA== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.ns.nic.cz for nic.cz/SOA
	Received 189 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (189 bytes) ;; HEADER SECTION ;; id = 31050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA ( a.ns.nic.cz. hostmaster.nic.cz. 1593587448 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) nic.cz. 1800 IN RRSIG ( SOA 13 2 1800 20200714182338 20200701061048 3445 nic.cz. 0UPqO8JsXg0SiGcieySQ6SWrGaj4Oah6/0ITpcX3RnPUqdKlnoevwjxAU9ZOKR1NHeu8WdK7+Ws7 rySx8E/psA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for nic.cz/A
	Received 1050 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (1050 bytes) ;; HEADER SECTION ;; id = 30116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20200714063455 20200701061048 3445 nic.cz. nNk13tr8b75ehnbKExUbfg2AnBYyOpV8QO0dSx9eAFwP3UAfbgJbcSljws/IUjASIB54w4ZBM1w/ 81wJSxxcYQ== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20200714154541 20200701061048 3445 nic.cz. EN4wzmN6It7Q0abQ1RVBUmHKxEX97fOikwhoCSM/4Cbw+y3/XMRksunhcujifFcqQdZTJnnYqko6 kHxwc1rNQw== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200714165148 20200701061048 3445 nic.cz. +ZIfOWuMJpMkk4nBdWwsGMWqJngrHvn/YJf3/vm0+WxRDtt1N8hfQFr2musJ+UrAlFIIarC4K4Mr ZOdZANl0zA== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714130042 20200701061048 3445 nic.cz. pm/ZUGFrTlyEaQUF6KciMwt+OP5SY4XiP66nQeCzkyuRYvEGFuvQBxkzH476RrrVrWKHEI9sIPUe /GJomxc1Mg== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014950 20200701061048 3445 nic.cz. krUlfjUSUvaunZXKaMJ/zfheUWnXkCjv7Tv4QyDBT8GLk3CrNSxJJLr5Sp3aIx9P700uzIpaUBRZ CGsKt8ytJQ== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200715005425 20200701061048 3445 nic.cz. +i59gxg2JUGx8jIZvoOGzT/fnm4iH8stow4QNCs2KWD1jNQ4h7xrbq3rhD8QzidYZ2DuNTbSE51J iYpChAVYVA== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20200715014848 20200701061048 3445 nic.cz. w5V0nVDbRrUK45hiG+ByTkNtzDMu+fZU8bJiAdHDzw47MpVc2QSSCjcDluE6yLdRinqCTkg9mWHt 9SvuCPDjkQ== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20200714181356 20200701061048 3445 nic.cz. HvlnMf8nih1pHUz5QSrKCmKD70JSdmEYAwCA6V3vV13qcQox0xpW9OlBF4A4JvB8SsxrsxR1oFVT rnOuUSDbWw== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nic.cz A RR has value 217.31.205.50
	Found 1 RRSIGs over A RRset
	`nic.cz. 1800 IN RRSIG ( A 13 2 1800 20200714063455 20200701061048 3445 nic.cz. nNk13tr8b75ehnbKExUbfg2AnBYyOpV8QO0dSx9eAFwP3UAfbgJbcSljws/IUjASIB54w4ZBM1w/ 81wJSxxcYQ== )`
	RRSIG=3445 and DNSKEY=3445 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: