DNSSEC Debugger - ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2025-03-27 00:13:29 UTC

Analyzing DNSSEC problems for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1417 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1417 octets ;; HEADER SECTION ;; id = 56435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250412000000 20250322000000 20326 . b2kcHcO2v3F/EEvNO86YQXeOTVzFdOgE2DfKaLv76yf5ysmz+W2/2Nyk8c6l+JRyclrKXPeWjI2k 6E2MneyTCXosQLDMXxw/aQ+lxVWJzBqC1c5rtlTD11cbYV1KQQl/AIdrKheI5FMmmwi7e+LV7pN9 MV1Q7oImWQoRpCjhwic3zBmLUs3wUc2hb6nBswUQsecqOxkBQeqfCb8tOwiylzr8rg5G7dTeYzMt pJqSOoL/QfsuoQrGNZOEkMHKesbg8FP+tCF/iQpWU1zLpZ/jB7sF0C/FJFo9dKn6lzPKvL+VoJfr NO7GcXUspveBZUXlSbFlcbw8QmVmVxjAvHcrtg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=26470 is now in the chain-of-trust
	Query to l.root-servers.net for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 594 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 594 octets ;; HEADER SECTION ;; id = 4052 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . nCw8oH9m5hw8iDCSPs8GXajAJLglxBhX8isRjtQC47GspJrgy70U9fhA0Ysr7c3nIHuUxjSxHMWs tIxZhVqK68uqVO4Sb6DmfMfiZzfOxF+Lx2LScGf+kZ8mmnmJgl4/lnnYavXaJz1MWHE4zXlgtouy P5btslx+STlBE6gOKEOMc2jFqWJXVHd+ahmETujcBsjLTdgzenDJFFEyYJ0KJIjtvf+V3MeUXxhy 2CsbKaA17LGNGGBmSJe35p363B3Wgimf0vgq+QIxd4q2RvQk5+pakzkaU8RMPMVa7CTqQJFPyifG W+FPa983qstT4+byvwbcZiDPsBdKjDFTM5rYig== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 556 octets ;; HEADER SECTION ;; id = 20197 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . nCw8oH9m5hw8iDCSPs8GXajAJLglxBhX8isRjtQC47GspJrgy70U9fhA0Ysr7c3nIHuUxjSxHMWs tIxZhVqK68uqVO4Sb6DmfMfiZzfOxF+Lx2LScGf+kZ8mmnmJgl4/lnnYavXaJz1MWHE4zXlgtouy P5btslx+STlBE6gOKEOMc2jFqWJXVHd+ahmETujcBsjLTdgzenDJFFEyYJ0KJIjtvf+V3MeUXxhy 2CsbKaA17LGNGGBmSJe35p363B3Wgimf0vgq+QIxd4q2RvQk5+pakzkaU8RMPMVa7CTqQJFPyifG W+FPa983qstT4+byvwbcZiDPsBdKjDFTM5rYig== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to b.root-servers.net for nl/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 38768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . nCw8oH9m5hw8iDCSPs8GXajAJLglxBhX8isRjtQC47GspJrgy70U9fhA0Ysr7c3nIHuUxjSxHMWs tIxZhVqK68uqVO4Sb6DmfMfiZzfOxF+Lx2LScGf+kZ8mmnmJgl4/lnnYavXaJz1MWHE4zXlgtouy P5btslx+STlBE6gOKEOMc2jFqWJXVHd+ahmETujcBsjLTdgzenDJFFEyYJ0KJIjtvf+V3MeUXxhy 2CsbKaA17LGNGGBmSJe35p363B3Wgimf0vgq+QIxd4q2RvQk5+pakzkaU8RMPMVa7CTqQJFPyifG W+FPa983qstT4+byvwbcZiDPsBdKjDFTM5rYig== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20250408200000 20250326190000 26470 . nCw8oH9m5hw8iDCSPs8GXajAJLglxBhX8isRjtQC47GspJrgy70U9fhA0Ysr7c3nIHuUxjSxHMWs tIxZhVqK68uqVO4Sb6DmfMfiZzfOxF+Lx2LScGf+kZ8mmnmJgl4/lnnYavXaJz1MWHE4zXlgtouy P5btslx+STlBE6gOKEOMc2jFqWJXVHd+ahmETujcBsjLTdgzenDJFFEyYJ0KJIjtvf+V3MeUXxhy 2CsbKaA17LGNGGBmSJe35p363B3Wgimf0vgq+QIxd4q2RvQk5+pakzkaU8RMPMVa7CTqQJFPyifG W+FPa983qstT4+byvwbcZiDPsBdKjDFTM5rYig== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 369 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 369 octets ;; HEADER SECTION ;; id = 9772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (4 records) nl. 3600 IN DNSKEY ( 256 3 13 PeWVfwEfWJLat9BlNM5j50r+2BHzmhkEi0H6h5rADNMgQO/zMCZfBLPt4r6N5bvQV1WaAsrvgoOB U/XSQevSUg== ) ; keytag 7156 nl. 3600 IN DNSKEY ( 256 3 13 wrRoZBeA7KuxmEgDuXzrTVdlc1CflBfib3CdB9gDlSJ8IE9inKMuRYQIZZ91b4TrRMA+s61vi0lb jICSKjKy8A== ) ; keytag 48480 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250409131030 20250326060931 17153 nl. b/I1V+PSyx1wJ35I3UoEOoPUfS4kNyGzeNhWXGs3iYG82iCgCV8IsBPAB/iZHjTdYT84ozkk6kj4 saBdYdhB1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 PeWVfwEfWJLat9BlNM5j50r+2BHzmhkEi0H6h5rADNMgQO/zMCZfBLPt4r6N5bvQV1WaAsrvgoOB U/XSQevSUg== ) ; keytag 7156`
	`nl. 3600 IN DNSKEY ( 256 3 13 wrRoZBeA7KuxmEgDuXzrTVdlc1CflBfib3CdB9gDlSJ8IE9inKMuRYQIZZ91b4TrRMA+s61vi0lb jICSKjKy8A== ) ; keytag 48480`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; keytag 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250409131030 20250326060931 17153 nl. b/I1V+PSyx1wJ35I3UoEOoPUfS4kNyGzeNhWXGs3iYG82iCgCV8IsBPAB/iZHjTdYT84ozkk6kj4 saBdYdhB1Q== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=7156 is now in the chain-of-trust
	DNSKEY=48480 is now in the chain-of-trust
	Query to ns3.dns.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 406 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 406 octets ;; HEADER SECTION ;; id = 50143 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20250407120732 20250324040721 48480 nl. na5VNV273ZHTeIEZR6VEHRJYdlLHGLPOTx8JNWj+ErE3PKj9bW025P0kaLNwlVwMR5vyygLkw8ZB ovVyXjSnLQ== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; { "EDNS-VERSION": 0 }
	Query to ns3.dns.nl for sidnlabs.nl/DNSKEY
	Received 377 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 377 octets ;; HEADER SECTION ;; id = 45074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20250407120732 20250324040721 48480 nl. na5VNV273ZHTeIEZR6VEHRJYdlLHGLPOTx8JNWj+ErE3PKj9bW025P0kaLNwlVwMR5vyygLkw8ZB ovVyXjSnLQ== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns2.sidnlabs.nl. 3600 IN A 194.0.28.11 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidnlabs.nl. 3600 IN AAAA 2001:678:2c:0:194:0:28:11 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns4.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 186 octets ;; HEADER SECTION ;; id = 16386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20250407120732 20250324040721 48480 nl. na5VNV273ZHTeIEZR6VEHRJYdlLHGLPOTx8JNWj+ErE3PKj9bW025P0kaLNwlVwMR5vyygLkw8ZB ovVyXjSnLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20250407120732 20250324040721 48480 nl. na5VNV273ZHTeIEZR6VEHRJYdlLHGLPOTx8JNWj+ErE3PKj9bW025P0kaLNwlVwMR5vyygLkw8ZB ovVyXjSnLQ== )`
	RRSIG=48480 and DNSKEY=48480 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns5.sidn.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 145.40.68.55
	;; Response received from [145.40.68.55] 227 octets ;; HEADER SECTION ;; id = 28976 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250408081018 20250325075651 11261 sidnlabs.nl. krIk75IsUpUhAKsE7RappdEx7v8SpJpdNBG87AaLfSbn1W2lwJ65XOeLeSpTmccJ+cLVoDcU/Xt9 0TvVjYsvQw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; keytag 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250408081018 20250325075651 11261 sidnlabs.nl. krIk75IsUpUhAKsE7RappdEx7v8SpJpdNBG87AaLfSbn1W2lwJ65XOeLeSpTmccJ+cLVoDcU/Xt9 0TvVjYsvQw== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns2.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 1188 bytes from 194.0.28.11
	;; Response received from [194.0.28.11] 1188 octets ;; HEADER SECTION ;; id = 7209 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20250407205407 20250324205055 11261 sidnlabs.nl. z/mFf13uSzmXeN9KJEzXNNJxY2IhVRz2Ro+e0UeVUcPZ1n7OP90c5c6v2LJHyw8ZVqOEgBToNk7g h9siry5Rvw== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20250407201411 20250324200132 11261 sidnlabs.nl. 056n7tzHL1pMtXxOe9vh0gphBJst+JD0b39EkA4Poa23gB3l6anl5xCu3xIBeiTmslBcECKObSHx KpBe6leJSQ== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20250407201411 20250324200132 11261 sidnlabs.nl. uaxRrhIDfAXHG1bMapa2FXtTDrIub18CwP++iDzO3KVCc4dk6/E2sRpG7Qjqvdrq3b7MMxBE2gFP weJg66KAGw== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20250408054639 20250325052039 11261 sidnlabs.nl. Og8mCuDhteLm8TXTGM/O3fPVw1NR41ivwvVd6NaDuJjMAUhHoHE+HirlbhvY+OnWkYIIk5xdyTaZ n6nBgQ+HtQ== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20250408054639 20250325052039 11261 sidnlabs.nl. KOBgJ9mx0I6CSQxS7jkSFPgrnNzdca5nY9/HOXJD5fpA9q4RVWnN4hLFUxR9/XF1FPnTPAYQ9cqm pIzHl5WQrA== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20250408020022 20250325014812 11261 sidnlabs.nl. W8iudEsbGW9YgDQPLg2ATXkQBcdKYxgQ3EvooQRO4os0gFNoNyRSvpCSezZlBFeIpRhqvTmLu5LC JOkDZi3+Eg== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20250408020022 20250325014812 11261 sidnlabs.nl. TSgm1fL54EftI+6p7fGfp/XwQ/ijKdLIZopECmpWsFTDrk3j/KdxrROeIZZMkAtZLp1OiTO7Edeo b/Dl6RIa3w== ) ;; { "EDNS-VERSION": 0 }
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 300 bytes from 94.198.159.8
	;; Response received from [94.198.159.8] 300 octets ;; HEADER SECTION ;; id = 10802 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20250407205407 20250324205055 11261 sidnlabs.nl. z/mFf13uSzmXeN9KJEzXNNJxY2IhVRz2Ro+e0UeVUcPZ1n7OP90c5c6v2LJHyw8ZVqOEgBToNk7g h9siry5Rvw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 94.198.159.8
	;; Response received from [94.198.159.8] 198 octets ;; HEADER SECTION ;; id = 29085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20250407205407 20250324205055 11261 sidnlabs.nl. z/mFf13uSzmXeN9KJEzXNNJxY2IhVRz2Ro+e0UeVUcPZ1n7OP90c5c6v2LJHyw8ZVqOEgBToNk7g h9siry5Rvw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20250407205407 20250324205055 11261 sidnlabs.nl. z/mFf13uSzmXeN9KJEzXNNJxY2IhVRz2Ro+e0UeVUcPZ1n7OP90c5c6v2LJHyw8ZVqOEgBToNk7g h9siry5Rvw== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to powerdns.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 897 octets ;; HEADER SECTION ;; id = 39997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; keytag 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; keytag 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to yadifa.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	All Queries to yadifa.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A timed out or failed
	Query to nsd4.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 587 octets ;; HEADER SECTION ;; id = 37488 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 387 octets ;; HEADER SECTION ;; id = 51061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 341 octets ;; HEADER SECTION ;; id = 59650 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 404 octets ;; HEADER SECTION ;; id = 58907 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 387 octets ;; HEADER SECTION ;; id = 17302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; keytag 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 598 octets ;; HEADER SECTION ;; id = 10240 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 393 octets ;; HEADER SECTION ;; id = 38731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694 ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 358 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 358 octets ;; HEADER SECTION ;; id = 15042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. iXv7hXJy+xAt6y6pJkl/pjcvP2Z6b6tlr911JPeNzX8Ez2+OEXLySaR0nG1Vt6Ob9AwbnqcZxiux kdErB+kyLUOu9roA8gNYh0w5nA5tkrlvcUbDTsZDlDuSKdCMgLzsI6AvYyTUH9P1UKKhtvAh7b54 ir3B7uGHfVxsR2PZX+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.bad-dnssec.wb.sidnlabs.nl nameservers: nsd4.sidnlabs.nl, powerdns.sidnlabs.nl, knot.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl

ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 290 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 290 octets ;; HEADER SECTION ;; id = 34395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f ) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=31694/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=31694/SHA-256 is now in the chain-of-trust
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f )`
	Query to knot.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 393 octets ;; HEADER SECTION ;; id = 42144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694 ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.bad-dnssec.wb.sidnlabs.nl
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; keytag 31694`
	DNSKEY=31694/SEP is now in the chain-of-trust
	DS=31694/SHA-256 verifies DNSKEY=31694/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 285 octets ;; HEADER SECTION ;; id = 33277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	All Queries to yadifa.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY timed out or failed
	Query to powerdns.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 411 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 411 octets ;; HEADER SECTION ;; id = 62943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. c9f0j/TOuGYvEFkq2Y9ySH8UYnJ071P0GB14WvjvsS1KRHz8NmK0vEwK0cCkRsT3j7IndCP1vHIW 55fDo5CaucAoVQFliv5YLu1O7IXHe9ldbW/ekKEOC4VFWuVARD8YWLb7IlawyEkQkcM8ptw0nc8O KRi7a5pd/H8YgAOQNDg= ) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAb0mWxT25pwdAsfAIeUT4P2lABzQqOEetjGbCrAg7KzT1qy3wGnQ99BKX573VYP3ysQELVbw 1/pdLNOxdcPekW+hA25vkDMYSzhKFQLHCKF+t+inIKnKHRasZF9xX3eTlMtxa/u/HAWmHuo/ooAJ gJjeIfJzKLncEu+VZCfRaT9N ) ; keytag 11611 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 365 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 365 octets ;; HEADER SECTION ;; id = 16164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. sQXHmpnaQs6PHlacMkIm/I/J+vuINyFKWCDmGvCBHeWynFXS1Jbmy7Y90NikJ8ZpLoUap2/o2jnM Fi5G+q39CyzGYOoO7umlV7P+IKFSo8ppf+yN+ZB5Oeu0d5T/8YKkTi/MW7RHyvzBBjZQBYRjBd4B YLbckWXBW3L+cjBzfok= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bogussig.ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

bogussig.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.bad-dnssec.wb.sidnlabs.nl and bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 302 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 302 octets ;; HEADER SECTION ;; id = 55890 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. XVchxGlp2z88PcZx3KWo/oo7v68CB3WTD5W41pJfhn+743BE5MiL67phoESxrYIv73sAu6T+Kcbv 7RaerSAMeCUYTUsmfg5mY8GyPq1vLGs+n23Xjz6P8MsvrLNJTvrTptwVN+HYsgycsGeWEDNd4oac Mp1buHAqa0nXIwtLDp0= ) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 11611 8 2 f121d505a41316156f164e6d9055b6f4286059793fdc089cdc52f2455288dbe3 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bogussig.ok.bad-dnssec.wb.sidnlabs.nl in the ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=11611/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. XVchxGlp2z88PcZx3KWo/oo7v68CB3WTD5W41pJfhn+743BE5MiL67phoESxrYIv73sAu6T+Kcbv 7RaerSAMeCUYTUsmfg5mY8GyPq1vLGs+n23Xjz6P8MsvrLNJTvrTptwVN+HYsgycsGeWEDNd4oac Mp1buHAqa0nXIwtLDp0= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DS RRset
	DS=11611/SHA-256 is now in the chain-of-trust
	`bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 11611 8 2 f121d505a41316156f164e6d9055b6f4286059793fdc089cdc52f2455288dbe3 )`
	Query to bind9.sidnlabs.nl for bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 411 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 411 octets ;; HEADER SECTION ;; id = 3684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAb0mWxT25pwdAsfAIeUT4P2lABzQqOEetjGbCrAg7KzT1qy3wGnQ99BKX573VYP3ysQELVbw 1/pdLNOxdcPekW+hA25vkDMYSzhKFQLHCKF+t+inIKnKHRasZF9xX3eTlMtxa/u/HAWmHuo/ooAJ gJjeIfJzKLncEu+VZCfRaT9N ) ; keytag 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. c9f0j/TOuGYvEFkq2Y9ySH8UYnJ071P0GB14WvjvsS1KRHz8NmK0vEwK0cCkRsT3j7IndCP1vHIW 55fDo5CaucAoVQFliv5YLu1O7IXHe9ldbW/ekKEOC4VFWuVARD8YWLb7IlawyEkQkcM8ptw0nc8O KRi7a5pd/H8YgAOQNDg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	`bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAb0mWxT25pwdAsfAIeUT4P2lABzQqOEetjGbCrAg7KzT1qy3wGnQ99BKX573VYP3ysQELVbw 1/pdLNOxdcPekW+hA25vkDMYSzhKFQLHCKF+t+inIKnKHRasZF9xX3eTlMtxa/u/HAWmHuo/ooAJ gJjeIfJzKLncEu+VZCfRaT9N ) ; keytag 11611`
	DNSKEY=11611/SEP is now in the chain-of-trust
	DS=11611/SHA-256 verifies DNSKEY=11611/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. c9f0j/TOuGYvEFkq2Y9ySH8UYnJ071P0GB14WvjvsS1KRHz8NmK0vEwK0cCkRsT3j7IndCP1vHIW 55fDo5CaucAoVQFliv5YLu1O7IXHe9ldbW/ekKEOC4VFWuVARD8YWLb7IlawyEkQkcM8ptw0nc8O KRi7a5pd/H8YgAOQNDg= )`
	RRSIG=11611 and DNSKEY=11611/SEP does not verify the DNSKEY RRset (signature verification failed)
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	The DNSKEY RRset was not signed by any trusted keys
	Query to nsd4.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 587 octets ;; HEADER SECTION ;; id = 64952 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 417 octets ;; HEADER SECTION ;; id = 2376 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. UIeAl1iP8DcqQ++B+/wDIdATINrHPzRj/5+F3NAV4t4Lvk74u5qTQaE754vxjcZhE591dDvkMx28 /FdXPtVdQsqQRtxObHGS/KqmWAEjJo7IRNT19HTkxkbHgziSnH6gnsU7UsEAZ3vPTH6OTAByfJZh N0+1BTCTFe4YEynf46Q= ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcl5gqGT1+SKfpj9IJgZ+ZEd6t4UOFctcj/45bqGnYq0ppVZ7y37/XWcn1p3wyL4vfEVMkTD T/el1aZQSg+v9JwOBzR7qinBi56eDFaPrN/9g8PiAme0aDc6vBvokpnYKN/OOwjdpWR5g4cd6ui5 pUT8E4DmBtJNk2srOLVy5wQ5 ) ; keytag 37357 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 371 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 371 octets ;; HEADER SECTION ;; id = 19566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 6 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bogussig.ok.bad-dnssec.wb.sidnlabs.nl and ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 314 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 314 octets ;; HEADER SECTION ;; id = 37678 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. FIE6U3XSyjtIppke/V1laB39r8qKCxpytwX4vt7qCt21h+XNwHG8hDu+cc385kzKyC9UPRGNfB+P XwLsZGGzLeFnr91Asw/+IFXvqeLAYwkxmr7SRv3AJhqu09vpNrqxz58BETI6tVeqqct0BA3Idwpf 9arLQTeGfPPkYJECXVQ= ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 37357 8 2 6152eb7b5e0cdfcf52b47a140e8d9aa774a927c3ce40bbb5687ba5f9d42e1403 ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl in the bogussig.ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=37357/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 11611 bogussig.ok.bad-dnssec.wb.sidnlabs.nl. FIE6U3XSyjtIppke/V1laB39r8qKCxpytwX4vt7qCt21h+XNwHG8hDu+cc385kzKyC9UPRGNfB+P XwLsZGGzLeFnr91Asw/+IFXvqeLAYwkxmr7SRv3AJhqu09vpNrqxz58BETI6tVeqqct0BA3Idwpf 9arLQTeGfPPkYJECXVQ= )`
	RRSIG=11611 and DNSKEY=11611/SEP does not verify the DS RRset (signature verification failed)
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 37357 8 2 6152eb7b5e0cdfcf52b47a140e8d9aa774a927c3ce40bbb5687ba5f9d42e1403 )`
	Query to bind9.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 417 octets ;; HEADER SECTION ;; id = 63019 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcl5gqGT1+SKfpj9IJgZ+ZEd6t4UOFctcj/45bqGnYq0ppVZ7y37/XWcn1p3wyL4vfEVMkTD T/el1aZQSg+v9JwOBzR7qinBi56eDFaPrN/9g8PiAme0aDc6vBvokpnYKN/OOwjdpWR5g4cd6ui5 pUT8E4DmBtJNk2srOLVy5wQ5 ) ; keytag 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. UIeAl1iP8DcqQ++B+/wDIdATINrHPzRj/5+F3NAV4t4Lvk74u5qTQaE754vxjcZhE591dDvkMx28 /FdXPtVdQsqQRtxObHGS/KqmWAEjJo7IRNT19HTkxkbHgziSnH6gnsU7UsEAZ3vPTH6OTAByfJZh N0+1BTCTFe4YEynf46Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcl5gqGT1+SKfpj9IJgZ+ZEd6t4UOFctcj/45bqGnYq0ppVZ7y37/XWcn1p3wyL4vfEVMkTD T/el1aZQSg+v9JwOBzR7qinBi56eDFaPrN/9g8PiAme0aDc6vBvokpnYKN/OOwjdpWR5g4cd6ui5 pUT8E4DmBtJNk2srOLVy5wQ5 ) ; keytag 37357`
	DS=37357/SHA-256 verifies DNSKEY=37357/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. UIeAl1iP8DcqQ++B+/wDIdATINrHPzRj/5+F3NAV4t4Lvk74u5qTQaE754vxjcZhE591dDvkMx28 /FdXPtVdQsqQRtxObHGS/KqmWAEjJo7IRNT19HTkxkbHgziSnH6gnsU7UsEAZ3vPTH6OTAByfJZh N0+1BTCTFe4YEynf46Q= )`
	RRSIG=37357 and DNSKEY=37357/SEP verifies the DNSKEY RRset
	Query to knot.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 285 octets ;; HEADER SECTION ;; id = 31262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 322 octets ;; HEADER SECTION ;; id = 57110 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. iim2nuG7r+x4iH7nmGgqu6JeIHatQYNl6dPCdJBz1b9VP5TEG0g1mPRASvsl7J70xcQdFpNCHOMy g8ybf814lO2F5v5aWVKuQHq1DC2Ur1GL4neM7Pfcnzg9sA9FRn9FGZKiyzC6wWUjmkIU2QvR4rnT g2e/mLCtEX8LFOZtSiw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to bind9.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 629 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 629 octets ;; HEADER SECTION ;; id = 29062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. iim2nuG7r+x4iH7nmGgqu6JeIHatQYNl6dPCdJBz1b9VP5TEG0g1mPRASvsl7J70xcQdFpNCHOMy g8ybf814lO2F5v5aWVKuQHq1DC2Ur1GL4neM7Pfcnzg9sA9FRn9FGZKiyzC6wWUjmkIU2QvR4rnT g2e/mLCtEX8LFOZtSiw= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsd4.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 618 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 618 octets ;; HEADER SECTION ;; id = 17021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. iim2nuG7r+x4iH7nmGgqu6JeIHatQYNl6dPCdJBz1b9VP5TEG0g1mPRASvsl7J70xcQdFpNCHOMy g8ybf814lO2F5v5aWVKuQHq1DC2Ur1GL4neM7Pfcnzg9sA9FRn9FGZKiyzC6wWUjmkIU2QvR4rnT g2e/mLCtEX8LFOZtSiw= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to knot.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 285 octets ;; HEADER SECTION ;; id = 4611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= )`
	RRSIG=37357 and DNSKEY=37357/SEP verifies the A RRset

ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 285 octets ;; HEADER SECTION ;; id = 42486 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 285 octets ;; HEADER SECTION ;; id = 9965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= )`
	RRSIG=37357 and DNSKEY=37357/SEP verifies the A RRset

ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 587 octets ;; HEADER SECTION ;; id = 37408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 587 octets ;; HEADER SECTION ;; id = 43217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= )`
	RRSIG=37357 and DNSKEY=37357/SEP verifies the A RRset

ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 598 octets ;; HEADER SECTION ;; id = 29552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 598 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 598 octets ;; HEADER SECTION ;; id = 57059 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= ) ;; AUTHORITY SECTION (6 records) ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. CGjyojQba8isYTlWHnu9WiQvCscDr/1emkEh6DeU6E+OQ8HkcKgQM0eHkqYw0u/8hdF7nAzJsauJ QMqsTsbvzZZhI+r9L9winb6/Xgnsrif7+kbOWSa/LcZ/Ye/j+o0QTezH7v47LJ2HIIs28KYGFj9i oIvwQrOIxBw0kxwgIBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 7 3600 20300101000000 20201218103315 37357 ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl. S1Dzi3gqfysVm1/k7Utka1G0AnVmOoM6ICCrL2C3bwKddq6eaWJOCQVbQkIRRiaV82vufsKdb1bz p1ZzBrVUpzarah6WL7Q5BEo6T9Krc63z0xWPLl9SJO5DTdo6aEmf/4W1Uegrf0Lp7Ir6O5MD09fe oVpLXSYm6Bs8RzS4y+8= )`
	RRSIG=37357 and DNSKEY=37357/SEP verifies the A RRset

ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl

No response from ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ok.bogussig.ok.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: