DNSSEC Debugger - ondruska.sk

Domain Name:

Time: 2024-04-23 11:57:00 UTC

Analyzing DNSSEC problems for ondruska.sk

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 50275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240512000000 20240421000000 20326 . chrbIYUGGLqwnTPAoPqkezDjL8sO2WS6icjHEvOp7RFmEXqfmadcW71mI3bFaZy/wcCo5DElwFYz AY+1hFstrlD3rZHh7GLYf2NFotdlq5dSHYOgAAdnZBz/pXhUKOsOCEUSm7jIGdr5eMfD6BGQShNy Dm+1BRNwYXp8A0K7ulYtd3QY+n5nA0QGsUbYtVWMLK5cnHruWD7DynxHYffu8QXToX132qIsbQZd /cctNgwhppBCWHyO7Y5XzNG4z/ZvEVF8OUezro+7dvGQdsF0yj11zjnTUdtTten9naNzMwPgxK4O QImcChmYbKk25IrSSl8Rpvo/y1vzaa1plaxQlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240512000000 20240421000000 20326 . chrbIYUGGLqwnTPAoPqkezDjL8sO2WS6icjHEvOp7RFmEXqfmadcW71mI3bFaZy/wcCo5DElwFYz AY+1hFstrlD3rZHh7GLYf2NFotdlq5dSHYOgAAdnZBz/pXhUKOsOCEUSm7jIGdr5eMfD6BGQShNy Dm+1BRNwYXp8A0K7ulYtd3QY+n5nA0QGsUbYtVWMLK5cnHruWD7DynxHYffu8QXToX132qIsbQZd /cctNgwhppBCWHyO7Y5XzNG4z/ZvEVF8OUezro+7dvGQdsF0yj11zjnTUdtTten9naNzMwPgxK4O QImcChmYbKk25IrSSl8Rpvo/y1vzaa1plaxQlQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to e.root-servers.net for ondruska.sk/A
	Received 799 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 799 octets ;; HEADER SECTION ;; id = 15752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240506050000 20240423040000 5613 . fmN45dB8WL/KO+jogqLU4tIDH/OJXuRghk2b3nZ3nhm9xL7tiPNrcDJT3ljGOFaqgmqxbXYYXkPV GST53/T0LBSt62bCp05JGOjMyzqCzEjj7gdmuhjGyTjyad7mxs0db5LfyR0LaYEH+GFtpYq0/wGU sq0Boq4GytT8Fm2Y1YUCxXeCnz514lEsiwhcD+z3Y2SVgYWlY7Hp8B6bjzaWFIYEISsKCxTKIVX5 MiVynsH563HwwCjyuN4XqUv0Erp4jiN17IfnAIYQeo9wgv5kSQZeSWiE64ooK+uyRG8IRC+zk453 e+2Yq7yZ9hA98PLWAh+aNrDojkDeGTxYSwIsuQ== ) ;; ADDITIONAL SECTION (15 records) a.tld.sk. 172800 IN A 194.0.45.1 b.tld.sk. 172800 IN A 84.245.96.1 c.tld.sk. 172800 IN A 195.12.159.1 e.tld.sk. 172800 IN A 194.169.218.16 f.tld.sk. 172800 IN A 185.24.64.16 g.tld.sk. 172800 IN A 212.18.248.16 h.tld.sk. 172800 IN A 212.18.249.16 a.tld.sk. 172800 IN AAAA 2001:678:70::1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for sk/DNSKEY
	Received 790 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 790 octets ;; HEADER SECTION ;; id = 35030 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) sk. 172800 IN NS a.tld.sk. sk. 172800 IN NS b.tld.sk. sk. 172800 IN NS c.tld.sk. sk. 172800 IN NS e.tld.sk. sk. 172800 IN NS f.tld.sk. sk. 172800 IN NS g.tld.sk. sk. 172800 IN NS h.tld.sk. sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240506050000 20240423040000 5613 . fmN45dB8WL/KO+jogqLU4tIDH/OJXuRghk2b3nZ3nhm9xL7tiPNrcDJT3ljGOFaqgmqxbXYYXkPV GST53/T0LBSt62bCp05JGOjMyzqCzEjj7gdmuhjGyTjyad7mxs0db5LfyR0LaYEH+GFtpYq0/wGU sq0Boq4GytT8Fm2Y1YUCxXeCnz514lEsiwhcD+z3Y2SVgYWlY7Hp8B6bjzaWFIYEISsKCxTKIVX5 MiVynsH563HwwCjyuN4XqUv0Erp4jiN17IfnAIYQeo9wgv5kSQZeSWiE64ooK+uyRG8IRC+zk453 e+2Yq7yZ9hA98PLWAh+aNrDojkDeGTxYSwIsuQ== ) ;; ADDITIONAL SECTION (15 records) a.tld.sk. 172800 IN A 194.0.45.1 b.tld.sk. 172800 IN A 84.245.96.1 c.tld.sk. 172800 IN A 195.12.159.1 e.tld.sk. 172800 IN A 194.169.218.16 f.tld.sk. 172800 IN A 185.24.64.16 g.tld.sk. 172800 IN A 212.18.248.16 h.tld.sk. 172800 IN A 212.18.249.16 a.tld.sk. 172800 IN AAAA 2001:678:70::1 b.tld.sk. 172800 IN AAAA 2001:678:90::1 c.tld.sk. 172800 IN AAAA 2001:678:9c::1 e.tld.sk. 172800 IN AAAA 2001:67c:13cc::1:16 f.tld.sk. 172800 IN AAAA 2a04:2b00:13cc::1:16 g.tld.sk. 172800 IN AAAA 2a04:2b00:13ee::16 h.tld.sk. 172800 IN AAAA 2a04:2b00:13ff::16 ;; { "EDNS-VERSION": 0 }
	Found child zone sk

	Checking DS between . and sk
	Query to e.root-servers.net for sk/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 21689 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DS ;; ANSWER SECTION (2 records) sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 ) sk. 86400 IN RRSIG ( DS 8 1 86400 20240506050000 20240423040000 5613 . fmN45dB8WL/KO+jogqLU4tIDH/OJXuRghk2b3nZ3nhm9xL7tiPNrcDJT3ljGOFaqgmqxbXYYXkPV GST53/T0LBSt62bCp05JGOjMyzqCzEjj7gdmuhjGyTjyad7mxs0db5LfyR0LaYEH+GFtpYq0/wGU sq0Boq4GytT8Fm2Y1YUCxXeCnz514lEsiwhcD+z3Y2SVgYWlY7Hp8B6bjzaWFIYEISsKCxTKIVX5 MiVynsH563HwwCjyuN4XqUv0Erp4jiN17IfnAIYQeo9wgv5kSQZeSWiE64ooK+uyRG8IRC+zk453 e+2Yq7yZ9hA98PLWAh+aNrDojkDeGTxYSwIsuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sk in the . zone
	DS=2324/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sk. 86400 IN RRSIG ( DS 8 1 86400 20240506050000 20240423040000 5613 . fmN45dB8WL/KO+jogqLU4tIDH/OJXuRghk2b3nZ3nhm9xL7tiPNrcDJT3ljGOFaqgmqxbXYYXkPV GST53/T0LBSt62bCp05JGOjMyzqCzEjj7gdmuhjGyTjyad7mxs0db5LfyR0LaYEH+GFtpYq0/wGU sq0Boq4GytT8Fm2Y1YUCxXeCnz514lEsiwhcD+z3Y2SVgYWlY7Hp8B6bjzaWFIYEISsKCxTKIVX5 MiVynsH563HwwCjyuN4XqUv0Erp4jiN17IfnAIYQeo9wgv5kSQZeSWiE64ooK+uyRG8IRC+zk453 e+2Yq7yZ9hA98PLWAh+aNrDojkDeGTxYSwIsuQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=2324/SHA-256 is now in the chain-of-trust
	`sk. 86400 IN DS ( 2324 13 2 3e7e4f60eccc4ad8f96c654563265c9a4e56b9f1ac998e88e1cf8150ff1a5205 )`
	Query to c.tld.sk for sk/DNSKEY
	Received 547 bytes from 195.12.159.1
	;; Response received from [195.12.159.1] 547 octets ;; HEADER SECTION ;; id = 50903 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sk. IN DNSKEY ;; ANSWER SECTION (6 records) sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311 sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492 sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324 sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267 sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240521171755 20240421033348 2324 sk. hSjOr/fXl+l4aYoZYhb563sDon5ZijajAeliCh7kmz5cKV7HqKPLwRniM3Uhi7TPerfRPAz7ReHD 3B52y3RhUw== ) sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240521171755 20240421033348 38311 sk. bJoNHLXzfNqt+3TYEBRKUJOi/PRUC1XmW8K1FU6NeYD2Q4IwjpttEmOVpNKxnR/YdAbIlHWe995B WxsjnPi4Dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for sk
	`sk. 3600 IN DNSKEY ( 257 3 13 0daAK0XI0fRxPfIzwYBU2LaD7XVZxXBOz5b5+pTuQV6zh8FEatDQBBWpBzdn8qLDJfgz0tSeTvvg k1keCDwJmQ== ) ; Key ID = 38311`
	`sk. 3600 IN DNSKEY ( 256 3 13 +M946LTGgGUdBZU41L3BxK3emhnxmsZnnOBj8rq37rnuAtNCy5pzVocVuKi0JK+M4fdvXq7MXVjh PP8u9BMTKQ== ) ; Key ID = 34492`
	`sk. 3600 IN DNSKEY ( 257 3 13 RYBmurcP4msJZB6nf+BTEHThCAVGyEEVMUlJicr8UB+utd4onkNFUjcKCIEKxDnEw9fAq/m+gIfM lXB1dUyD9w== ) ; Key ID = 2324`
	`sk. 3600 IN DNSKEY ( 256 3 13 77XSaP+CqI5DcMx+HkHqhoouFl64Q9THh+EC6QWz2BhJXSPq11jPgVNeFShuSVyKolGY47/dnXdx +kTQrn428A== ) ; Key ID = 39267`
	DNSKEY=2324/SEP is now in the chain-of-trust
	DS=2324/SHA-256 verifies DNSKEY=2324/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240521171755 20240421033348 2324 sk. hSjOr/fXl+l4aYoZYhb563sDon5ZijajAeliCh7kmz5cKV7HqKPLwRniM3Uhi7TPerfRPAz7ReHD 3B52y3RhUw== )`
	`sk. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240521171755 20240421033348 38311 sk. bJoNHLXzfNqt+3TYEBRKUJOi/PRUC1XmW8K1FU6NeYD2Q4IwjpttEmOVpNKxnR/YdAbIlHWe995B WxsjnPi4Dg== )`
	RRSIG=2324 and DNSKEY=2324/SEP verifies the DNSKEY RRset
	RRSIG=38311 and DNSKEY=38311/SEP verifies the DNSKEY RRset
	DNSKEY=38311/SEP is now in the chain-of-trust
	DNSKEY=34492 is now in the chain-of-trust
	DNSKEY=39267 is now in the chain-of-trust
	Query to a.tld.sk for ondruska.sk/A
	Received 468 bytes from 194.0.45.1
	;; Response received from [194.0.45.1] 468 octets ;; HEADER SECTION ;; id = 50304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ondruska.sk. 3600 IN NS ns1.hcom.sk. ondruska.sk. 3600 IN NS ns2.hcom.sk. 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN NSEC3 ( 1 1 1 - 97ippbal4t7uaf2r69jpmno2hjq8npdu NS SOA RRSIG DNSKEY NSEC3PARAM ) 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240513030250 20240413123649 34492 sk. nQXHIaqQrVgdaSdexkkn+k5uZmHs1yItvUlpxjomNzMS1zMAOw3XxOUX3T7USMHfRcPAJuT5N+UW v+hMXN2qlg== ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN NSEC3 ( 1 1 1 - kj1943ulau1r04od8nmk72f0qcpaq3em NS DS RRSIG ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240522032717 20240421133053 34492 sk. ydkxdg2mfHsHXs23zeFvmsf87r+DRFEc2EMvK+xgBMo8PLbH83HxMo18A+F7j7uMdb85fiD89cD3 oyBZs1eFNg== ) ;; ADDITIONAL SECTION (3 records) ns1.hcom.sk. 3600 IN A 78.41.170.20 ns2.hcom.sk. 3600 IN A 81.92.251.226 ;; { "EDNS-VERSION": 0 }
	Query to f.tld.sk for ondruska.sk/DNSKEY
	Timeout querying f.tld.sk/2a04:2b00:13cc:0:0:0:1:16 for ondruska.sk/DNSKEY
	Received 468 bytes from 185.24.64.16
	;; Response received from [185.24.64.16] 468 octets ;; HEADER SECTION ;; id = 64443 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ondruska.sk. 3600 IN NS ns1.hcom.sk. ondruska.sk. 3600 IN NS ns2.hcom.sk. 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN NSEC3 ( 1 1 1 - 97ippbal4t7uaf2r69jpmno2hjq8npdu NS SOA RRSIG DNSKEY NSEC3PARAM ) 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240513030250 20240413123649 34492 sk. nQXHIaqQrVgdaSdexkkn+k5uZmHs1yItvUlpxjomNzMS1zMAOw3XxOUX3T7USMHfRcPAJuT5N+UW v+hMXN2qlg== ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN NSEC3 ( 1 1 1 - kj1943ulau1r04od8nmk72f0qcpaq3em NS DS RRSIG ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240522032717 20240421133053 34492 sk. ydkxdg2mfHsHXs23zeFvmsf87r+DRFEc2EMvK+xgBMo8PLbH83HxMo18A+F7j7uMdb85fiD89cD3 oyBZs1eFNg== ) ;; ADDITIONAL SECTION (3 records) ns1.hcom.sk. 3600 IN A 78.41.170.20 ns2.hcom.sk. 3600 IN A 81.92.251.226 ;; { "EDNS-VERSION": 0 }
	Found child zone ondruska.sk

ondruska.sk

	Checking DS between sk and ondruska.sk
	Query to a.tld.sk for ondruska.sk/DS
	Received 553 bytes from 194.0.45.1
	;; Response received from [194.0.45.1] 553 octets ;; HEADER SECTION ;; id = 25284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) sk. 3600 IN SOA ( m.tld.sk. hostmaster.sk-nic.sk. 2018097888 ;serial 60 ;refresh 300 ;retry 3600000 ;expire 3600 ;minimum ) sk. 3600 IN RRSIG ( SOA 13 1 3600 20240523085911 20240423095148 34492 sk. x1JLc5iDNxYf2jmcHmYBy/L2VfRvO0T+OTkjO+ICZp1OHHz7FSU91OwmY9o2ird1dDfYnsw1vZGj 1DHy70LWmw== ) 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN NSEC3 ( 1 1 1 - 97ippbal4t7uaf2r69jpmno2hjq8npdu NS SOA RRSIG DNSKEY NSEC3PARAM ) 97iomm39jdqnuedfjpmusaj6ga11997n.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240513030250 20240413123649 34492 sk. nQXHIaqQrVgdaSdexkkn+k5uZmHs1yItvUlpxjomNzMS1zMAOw3XxOUX3T7USMHfRcPAJuT5N+UW v+hMXN2qlg== ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN NSEC3 ( 1 1 1 - kj1943ulau1r04od8nmk72f0qcpaq3em NS DS RRSIG ) kj14hm3tt7n1je65avivk248j73sb7e4.sk. 3600 IN RRSIG ( NSEC3 13 2 3600 20240522032717 20240421133053 34492 sk. ydkxdg2mfHsHXs23zeFvmsf87r+DRFEc2EMvK+xgBMo8PLbH83HxMo18A+F7j7uMdb85fiD89cD3 oyBZs1eFNg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ondruska.sk in the sk zone
	Query to ns1.hcom.sk for ondruska.sk/DNSKEY
	Received 93 bytes from 78.41.170.20
	;; Response received from [78.41.170.20] 93 octets ;; HEADER SECTION ;; id = 52409 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ondruska.sk. 3600 IN SOA ( ns1.hcom.sk. admin.hcom.sk. 2022081702 ;serial 7200 ;refresh 540 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.hcom.sk for ondruska.sk/A
	Received 105 bytes from 78.41.170.20
	;; Response received from [78.41.170.20] 105 octets ;; HEADER SECTION ;; id = 60237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (1 record) ondruska.sk. 3600 IN A 195.181.248.219 ;; AUTHORITY SECTION (2 records) ondruska.sk. 3600 IN NS ns2.hcom.sk. ondruska.sk. 3600 IN NS ns1.hcom.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.hcom.sk is authoritative for ondruska.sk
	Query to ns2.hcom.sk for ondruska.sk/SOA
	Received 131 bytes from 81.92.251.226
	;; Response received from [81.92.251.226] 131 octets ;; HEADER SECTION ;; id = 23090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN SOA ;; ANSWER SECTION (1 record) ondruska.sk. 3600 IN SOA ( ns1.hcom.sk. admin.hcom.sk. 2022081702 ;serial 7200 ;refresh 540 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (2 records) ondruska.sk. 3600 IN NS ns2.hcom.sk. ondruska.sk. 3600 IN NS ns1.hcom.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.hcom.sk for ondruska.sk/A
	Received 105 bytes from 78.41.170.20
	;; Response received from [78.41.170.20] 105 octets ;; HEADER SECTION ;; id = 2390 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (1 record) ondruska.sk. 3600 IN A 195.181.248.219 ;; AUTHORITY SECTION (2 records) ondruska.sk. 3600 IN NS ns1.hcom.sk. ondruska.sk. 3600 IN NS ns2.hcom.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ondruska.sk A RR has value 195.181.248.219
	No RRSIGs found

ondruska.sk

	Query to ns2.hcom.sk for ondruska.sk/A
	Received 105 bytes from 81.92.251.226
	;; Response received from [81.92.251.226] 105 octets ;; HEADER SECTION ;; id = 60918 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (1 record) ondruska.sk. 3600 IN A 195.181.248.219 ;; AUTHORITY SECTION (2 records) ondruska.sk. 3600 IN NS ns1.hcom.sk. ondruska.sk. 3600 IN NS ns2.hcom.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.hcom.sk is authoritative for ondruska.sk
	Query to ns2.hcom.sk for ondruska.sk/A
	Received 105 bytes from 81.92.251.226
	;; Response received from [81.92.251.226] 105 octets ;; HEADER SECTION ;; id = 49532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; ondruska.sk. IN A ;; ANSWER SECTION (1 record) ondruska.sk. 3600 IN A 195.181.248.219 ;; AUTHORITY SECTION (2 records) ondruska.sk. 3600 IN NS ns2.hcom.sk. ondruska.sk. 3600 IN NS ns1.hcom.sk. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ondruska.sk A RR has value 195.181.248.219
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ondruska.sk at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: