DNSSEC Debugger - nuodeme.wo.lt

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-11-09 12:30:56 UTC

Analyzing DNSSEC problems for nuodeme.wo.lt

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 38088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcorNxNc9t0ue1ZenPjVMRujlQ2YLBJ0pR/4XMjHby9vr03cRxFSKnWpxeg5PL384D9VeqdS 1bjrGyTsHtoagzI3NiXFd8sjHMOnZxu5pp/+UBIg7tasYgVMMdUiM1Yu/c+t30d1Qw/v6NYLNnOn ywTu6HuUh7Y1sZRq/GZcrxLENXHQoyKpOrOr8R3+qd6wK69IKB80ZBZtkX9rdEqKJk+yYXjEZzZ0 zkAFthmNgCreAoU9PVlU66dyOsaLjf3wKUlUm9SNOKs+tK6LuSmRbK6+1T/tPaRaMBSEuv2G6vXf nJ1uyMbGvtpRn/YDcvTjrp6DzE6XyF44QdwJ3oKx4ek= ) ; keytag 8763`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20261121000000 20261031000000 38696 . UFkJYhexq5ZgfvP+oIz2WUJQgF8bhW8st3LnXtIBP0eRcSQXrYg7+luxwQYg+3iiZV2+BJPcNmf/ pDu+uNPaplkHPJLXh9WS0oEVZKUNk/0wk3A0XL5UOSTdPWn/IoTWWxyGxun+udV7eRQqVpRvSdlB FaqPWSDIDkX0QQIfye72TB4tsPBnA2iWDye6U157EcPBdNeKv4cfh1cAOlePIaxLs1NoNHIu/Zrq EY5zM+GNJ4Z72Tba09jYjz3ayBSPVinI64OYOORqZsYtuLXUrBdD6UWfV8Ljf3b0MGfBs7BoZYAJ xVyNr5CQF13CLw+4xrbMsmQWdTBqzp5iEtB9VA== )`
	RRSIG=38696 and DNSKEY=38696/SEP verifies the DNSKEY RRset
	DNSKEY=8763 is now in the chain-of-trust
	Query to i.root-servers.net for nuodeme.wo.lt/A
	Received 685 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 685 octets ;; HEADER SECTION ;; id = 15695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nuodeme.wo.lt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lt. 172800 IN NS a.tld.lt. lt. 172800 IN NS f.tld.lt. lt. 172800 IN NS b.tld.lt. lt. 172800 IN NS e.tld.lt. lt. 172800 IN NS d.tld.lt. lt. 172800 IN NS r.tld.lt. lt. 86400 IN DS ( 1765 13 2 cd9c628a13b8d780e3e2fb66ef6252f1127412d33c54d582e16c74a86faecb17 ) lt. 86400 IN RRSIG ( DS 8 1 86400 20261122050000 20261109040000 8763 . N6Fbtq7KIBPXdYUvkQ7IHBNNOesWBgONR+7E6kVRNOQOV9HhpBXp1CMLEU8FvNRs4avm+sIIV1RR eCkQlRZhNDp5qBhE+gUncYfKyUHJJ9hcf+mw5Bz78I215e357azva4m2EQolGqKHE11uShtOoYrT fZhlATi2SxpEWy9z+gxVW118KwCSqJM7W0M6LIt1G1Y5P1ZBj+i1Y1gk2MnH1x2k++hqqKbPy78y zUyaF7pkpW3a0CB4hbhwvifH+0fMBtqUwdEtzeYzs+NQ7JGRJl3vkpLslQom7aqiI7Fl5M4pqpuC fmfzQF7BoVTfaifGAy3c6M7umYGPykyi6RfQlg== ) ;; ADDITIONAL SECTION (11 records) a.tld.lt. 172800 IN A 185.150.40.131 b.tld.lt. 172800 IN A 194.0.20.1 d.tld.lt. 172800 IN A 194.0.3.1 e.tld.lt. 172800 IN A 194.0.18.1 f.tld.lt. 172800 IN A 194.0.19.1 r.tld.lt. 172800 IN A 194.0.25.46 b.tld.lt. 172800 IN AAAA 2001:678:19::1 d.tld.lt. 172800 IN AAAA 2001:678:6::1 f.tld.lt. 172800 IN AAAA 2001:678:8c::1 r.tld.lt. 172800 IN AAAA 2001:678:20::46 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for lt/DNSKEY
	Received 676 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 676 octets ;; HEADER SECTION ;; id = 64964 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) lt. 172800 IN NS f.tld.lt. lt. 172800 IN NS r.tld.lt. lt. 172800 IN NS d.tld.lt. lt. 172800 IN NS a.tld.lt. lt. 172800 IN NS e.tld.lt. lt. 172800 IN NS b.tld.lt. lt. 86400 IN DS ( 1765 13 2 cd9c628a13b8d780e3e2fb66ef6252f1127412d33c54d582e16c74a86faecb17 ) lt. 86400 IN RRSIG ( DS 8 1 86400 20261122050000 20261109040000 8763 . N6Fbtq7KIBPXdYUvkQ7IHBNNOesWBgONR+7E6kVRNOQOV9HhpBXp1CMLEU8FvNRs4avm+sIIV1RR eCkQlRZhNDp5qBhE+gUncYfKyUHJJ9hcf+mw5Bz78I215e357azva4m2EQolGqKHE11uShtOoYrT fZhlATi2SxpEWy9z+gxVW118KwCSqJM7W0M6LIt1G1Y5P1ZBj+i1Y1gk2MnH1x2k++hqqKbPy78y zUyaF7pkpW3a0CB4hbhwvifH+0fMBtqUwdEtzeYzs+NQ7JGRJl3vkpLslQom7aqiI7Fl5M4pqpuC fmfzQF7BoVTfaifGAy3c6M7umYGPykyi6RfQlg== ) ;; ADDITIONAL SECTION (11 records) r.tld.lt. 172800 IN A 194.0.25.46 f.tld.lt. 172800 IN A 194.0.19.1 e.tld.lt. 172800 IN A 194.0.18.1 d.tld.lt. 172800 IN A 194.0.3.1 b.tld.lt. 172800 IN A 194.0.20.1 a.tld.lt. 172800 IN A 185.150.40.131 r.tld.lt. 172800 IN AAAA 2001:678:20::46 f.tld.lt. 172800 IN AAAA 2001:678:8c::1 d.tld.lt. 172800 IN AAAA 2001:678:6::1 b.tld.lt. 172800 IN AAAA 2001:678:19::1 ;; { "EDNS-VERSION": 0 }
	Found child zone lt

	Checking DS between . and lt
	Query to l.root-servers.net for lt/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 49028 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lt. IN DS ;; ANSWER SECTION (2 records) lt. 86400 IN DS ( 1765 13 2 cd9c628a13b8d780e3e2fb66ef6252f1127412d33c54d582e16c74a86faecb17 ) lt. 86400 IN RRSIG ( DS 8 1 86400 20261122050000 20261109040000 8763 . N6Fbtq7KIBPXdYUvkQ7IHBNNOesWBgONR+7E6kVRNOQOV9HhpBXp1CMLEU8FvNRs4avm+sIIV1RR eCkQlRZhNDp5qBhE+gUncYfKyUHJJ9hcf+mw5Bz78I215e357azva4m2EQolGqKHE11uShtOoYrT fZhlATi2SxpEWy9z+gxVW118KwCSqJM7W0M6LIt1G1Y5P1ZBj+i1Y1gk2MnH1x2k++hqqKbPy78y zUyaF7pkpW3a0CB4hbhwvifH+0fMBtqUwdEtzeYzs+NQ7JGRJl3vkpLslQom7aqiI7Fl5M4pqpuC fmfzQF7BoVTfaifGAy3c6M7umYGPykyi6RfQlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for lt in the . zone
	DS=1765/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`lt. 86400 IN RRSIG ( DS 8 1 86400 20261122050000 20261109040000 8763 . N6Fbtq7KIBPXdYUvkQ7IHBNNOesWBgONR+7E6kVRNOQOV9HhpBXp1CMLEU8FvNRs4avm+sIIV1RR eCkQlRZhNDp5qBhE+gUncYfKyUHJJ9hcf+mw5Bz78I215e357azva4m2EQolGqKHE11uShtOoYrT fZhlATi2SxpEWy9z+gxVW118KwCSqJM7W0M6LIt1G1Y5P1ZBj+i1Y1gk2MnH1x2k++hqqKbPy78y zUyaF7pkpW3a0CB4hbhwvifH+0fMBtqUwdEtzeYzs+NQ7JGRJl3vkpLslQom7aqiI7Fl5M4pqpuC fmfzQF7BoVTfaifGAy3c6M7umYGPykyi6RfQlg== )`
	RRSIG=8763 and DNSKEY=8763 verifies the DS RRset
	DS=1765/SHA-256 is now in the chain-of-trust
	`lt. 86400 IN DS ( 1765 13 2 cd9c628a13b8d780e3e2fb66ef6252f1127412d33c54d582e16c74a86faecb17 )`
	Query to r.tld.lt for lt/DNSKEY
	Received 289 bytes from 194.0.25.46
	;; Response received from [194.0.25.46] 289 octets ;; HEADER SECTION ;; id = 18733 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; lt. IN DNSKEY ;; ANSWER SECTION (3 records) lt. 7200 IN DNSKEY ( 256 3 13 h1kLIx/LDXMDaD1Q3dRr39iQGAW1Xg8DOtgVppsfvwucvE23ThR1MNItxVoT12rn2LSVchQcbNTW sBrAx6dNqw== ) ; keytag 26545 lt. 7200 IN DNSKEY ( 257 3 13 /eiEbUWzsMfbZEkuQTee1M3zolPOCfFs6K8xKdNl2ieaC2gqwmTwSFsWvsBRsFfKccOtdCipxtkq FMzxqutlXw== ) ; keytag 1765 lt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20261123030013 20261109013013 1765 lt. hKW7H8hitpKDsG/9X6DYd9ov3HUqweuscYU/NX/HjGoYZGLbQzZHbq2gnPZAWU3ssBC/pMILAvWV ybBn3IqC4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for lt
	`lt. 7200 IN DNSKEY ( 256 3 13 h1kLIx/LDXMDaD1Q3dRr39iQGAW1Xg8DOtgVppsfvwucvE23ThR1MNItxVoT12rn2LSVchQcbNTW sBrAx6dNqw== ) ; keytag 26545`
	`lt. 7200 IN DNSKEY ( 257 3 13 /eiEbUWzsMfbZEkuQTee1M3zolPOCfFs6K8xKdNl2ieaC2gqwmTwSFsWvsBRsFfKccOtdCipxtkq FMzxqutlXw== ) ; keytag 1765`
	DNSKEY=1765/SEP is now in the chain-of-trust
	DS=1765/SHA-256 verifies DNSKEY=1765/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`lt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20261123030013 20261109013013 1765 lt. hKW7H8hitpKDsG/9X6DYd9ov3HUqweuscYU/NX/HjGoYZGLbQzZHbq2gnPZAWU3ssBC/pMILAvWV ybBn3IqC4Q== )`
	RRSIG=1765 and DNSKEY=1765/SEP verifies the DNSKEY RRset
	DNSKEY=26545 is now in the chain-of-trust
	Query to a.tld.lt for nuodeme.wo.lt/A
	Received 537 bytes from 185.150.40.131
	;; Response received from [185.150.40.131] 537 octets ;; HEADER SECTION ;; id = 16896 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nuodeme.wo.lt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) wo.lt. 7200 IN NS ns-583.awsdns-08.net. wo.lt. 7200 IN NS ns-1245.awsdns-27.org. wo.lt. 7200 IN NS ns-2018.awsdns-60.co.uk. wo.lt. 7200 IN NS ns-235.awsdns-29.com. dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN NSEC3 ( 1 1 0 - drp05vvadleoeela3i08f95ierk7bg49 NS SOA RRSIG DNSKEY NSEC3PARAM ) dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261118040013 20261104023013 26545 lt. POVIr4UATd+Pfr6ZlpxWQE5cGLyaUpW5cyNV/DS7G++QgE65Ar4d5kuUPPjHD9Mwsia8rNDKZNPi /bvZgCBSxg== ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN NSEC3 ( 1 1 0 - tqrcsre4vkp7d8tt01gsoiotr977rubd NS DS RRSIG ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261119090012 20261105073012 26545 lt. FhQkgszpwhgJU9adLIfV4zbMGbQMEHJ8soNZt1EruJvSGtzb+8C0AyW7sFLdm10tFCsWSkYaUwAj S4gHYWE/OQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.tld.lt for wo.lt/DNSKEY
	Received 529 bytes from 185.150.40.131
	;; Response received from [185.150.40.131] 529 octets ;; HEADER SECTION ;; id = 57950 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wo.lt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) wo.lt. 7200 IN NS ns-583.awsdns-08.net. wo.lt. 7200 IN NS ns-1245.awsdns-27.org. wo.lt. 7200 IN NS ns-2018.awsdns-60.co.uk. wo.lt. 7200 IN NS ns-235.awsdns-29.com. dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN NSEC3 ( 1 1 0 - drp05vvadleoeela3i08f95ierk7bg49 NS SOA RRSIG DNSKEY NSEC3PARAM ) dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261118040013 20261104023013 26545 lt. POVIr4UATd+Pfr6ZlpxWQE5cGLyaUpW5cyNV/DS7G++QgE65Ar4d5kuUPPjHD9Mwsia8rNDKZNPi /bvZgCBSxg== ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN NSEC3 ( 1 1 0 - tqrcsre4vkp7d8tt01gsoiotr977rubd NS DS RRSIG ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261119090012 20261105073012 26545 lt. FhQkgszpwhgJU9adLIfV4zbMGbQMEHJ8soNZt1EruJvSGtzb+8C0AyW7sFLdm10tFCsWSkYaUwAj S4gHYWE/OQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone wo.lt

wo.lt

	Checking DS between lt and wo.lt
	Query to d.tld.lt for wo.lt/DS
	Received 547 bytes from 194.0.3.1
	;; Response received from [194.0.3.1] 547 octets ;; HEADER SECTION ;; id = 64559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wo.lt. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) lt. 900 IN SOA ( a.tld.lt. hostmaster.domreg.lt. 1794225613 ;serial 3600 ;refresh 300 ;retry 604800 ;expire 900 ;minimum ) lt. 900 IN RRSIG ( SOA 13 1 7200 20261123120013 20261109103013 26545 lt. 6qLkEqx0ZsN5f3tGD0sQPtBfXcwGe3hc1f8Llyh7FXqAdkopK1xCLWHe46KiQwQ2hmUTr8IDeh7Q rgFY8XSpTg== ) dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN NSEC3 ( 1 1 0 - drp05vvadleoeela3i08f95ierk7bg49 NS SOA RRSIG DNSKEY NSEC3PARAM ) dro48uu7mn8cnm0vf1qmneijj5aqooai.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261118040013 20261104023013 26545 lt. POVIr4UATd+Pfr6ZlpxWQE5cGLyaUpW5cyNV/DS7G++QgE65Ar4d5kuUPPjHD9Mwsia8rNDKZNPi /bvZgCBSxg== ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN NSEC3 ( 1 1 0 - tqrcsre4vkp7d8tt01gsoiotr977rubd NS DS RRSIG ) tqlnnoeffk6747sb8i2gba8p5q4fccso.lt. 900 IN RRSIG ( NSEC3 13 2 900 20261119090012 20261105073012 26545 lt. FhQkgszpwhgJU9adLIfV4zbMGbQMEHJ8soNZt1EruJvSGtzb+8C0AyW7sFLdm10tFCsWSkYaUwAj S4gHYWE/OQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for wo.lt in the lt zone
	Query to ns-583.awsdns-08.net for wo.lt/DNSKEY
	Received 115 bytes from 205.251.194.71
	;; Response received from [205.251.194.71] 115 octets ;; HEADER SECTION ;; id = 50213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wo.lt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wo.lt. 900 IN SOA ( ns-235.awsdns-29.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-2018.awsdns-60.co.uk for nuodeme.wo.lt/A
	Received 123 bytes from 205.251.199.226
	;; Response received from [205.251.199.226] 123 octets ;; HEADER SECTION ;; id = 17266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NXDOMAIN ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nuodeme.wo.lt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) wo.lt. 900 IN SOA ( ns-235.awsdns-29.com. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Zone wo.lt (205.251.199.226) returns NXDOMAIN for nuodeme.wo.lt
	No NSEC records in response

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nuodeme.wo.lt at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: