DNSSEC Debugger - opapolli.life

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-07-09 06:32:45 UTC

Analyzing DNSSEC problems for opapolli.life

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1414 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1414 octets ;; HEADER SECTION ;; id = 50873 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeCYD6Z7WWKVLeuWgowKP+3g+Gs1cnLKq7a3CaQxQpv8bfuFVI0WnG33qaSH/Mw9IBgifrdz f4XY/DQLnyBJ9MfaOyAWuEaEmYJ+GQPiwVVfstGwSA1McfFJUttTgq2Huu74KARhtA8wPo/N3Xcy YQtNhz+qCM5NBb3ecx/naw6sYab9LxS6f2cU0q03++BP5Ks0Uef8WJCa/1izCYE+vMkwoltV+tEN a3hpXiZ7jle/xdgaZrPi5ZGmyLVI34g1XVYrNlsCCTmNvFQIfzW5STFQFsQpizczyFn9r3LzSxxP CNwdlCG84bER0BmdwqbF6Tanv+FxMOavrahkj4wIy5k= ) ; keytag 57780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260722000000 20260701000000 20326 . PIWRr97cYGmtOj+ITFeA8BqCHizd3FW/RykfcnMqVXQ7OqcE3lACjOoYfj+aj1iZfAP59iNsOWJz /J7AUAqxb7CpPIO9bJxllbhHyRkKEJhCO4M/MvlYAMmc6G8gnI4yBZEIiRPaFOP0Ux04kX/CMk4K oM89Rv4sQy02hsF7HeQb7GAowyKSW3hy0TazdwGeRyC00SjDCVZMVNCc8gPF4ZZsWgSmkpDDj3H1 V5JSzLiu/mtf0k/6oHTi0IrsaBKywdQO9JgAOvayfW0hhySQ2FoQSrZC5Hb1btjvkzj49LxGTy0q voRdHLjmnrsk8BqNlekAhJoLtIB+HEla/s1/DQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	DNSKEY=57780 is now in the chain-of-trust
	Query to h.root-servers.net for opapolli.life/A
	Received 759 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 759 octets ;; HEADER SECTION ;; id = 46678 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) life. 172800 IN NS v0n0.nic.life. life. 172800 IN NS v0n1.nic.life. life. 172800 IN NS v0n2.nic.life. life. 172800 IN NS v0n3.nic.life. life. 172800 IN NS v2n0.nic.life. life. 172800 IN NS v2n1.nic.life. life. 86400 IN DS ( 11164 8 2 aa2dbff1c2f5e1c3c430e1bfc84208722612a39d3ca8e3974ddc5e0934564328 ) life. 86400 IN RRSIG ( DS 8 1 86400 20260722050000 20260709040000 57780 . meyFK8szkMjYX10pEFmEGcCND0WvBNYfffXEkCS/aaqbVkhH8LF/5VDNmWA2UQR2UxwVIIz1KmAB F0hT8jus7kKfpsZ2RCAIp2EsZPAwKwHE2FUO4gszoV4pffHHV7zR3QQOQDFQurY0lVYP31pN66z0 sy+kBtNfiwK6ffI/3rORYSy7jydhBZfG1wzmCsT0GISUga5WO/qg0heRYKwtGoQWmDdFiYg0YyKR /6vt8N/thS8x917CgqGueh5O/AdWYQOz3nFBDzijOke0NlfCcIXXtP8IBZ6Sb+KRZkfW7e9nxU/z 2kqgoN/z5nof3CcmLyr/kuv00e7puq3BGgy+CA== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.life. 172800 IN A 65.22.20.35 v0n1.nic.life. 172800 IN A 65.22.21.35 v0n2.nic.life. 172800 IN A 65.22.22.35 v0n3.nic.life. 172800 IN A 161.232.10.35 v2n0.nic.life. 172800 IN A 65.22.23.35 v2n1.nic.life. 172800 IN A 161.232.11.35 v0n0.nic.life. 172800 IN AAAA 2a01:8840:16::35 v0n1.nic.life. 172800 IN AAAA 2a01:8840:17::35 v0n2.nic.life. 172800 IN AAAA 2a01:8840:18::35 v0n3.nic.life. 172800 IN AAAA 2a01:8840:f4::35 v2n0.nic.life. 172800 IN AAAA 2a01:8840:19::35 v2n1.nic.life. 172800 IN AAAA 2a01:8840:f5::35 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for life/DNSKEY
	Received 750 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 750 octets ;; HEADER SECTION ;; id = 56155 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; life. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) life. 172800 IN NS v0n1.nic.life. life. 172800 IN NS v0n3.nic.life. life. 172800 IN NS v2n1.nic.life. life. 172800 IN NS v0n0.nic.life. life. 172800 IN NS v0n2.nic.life. life. 172800 IN NS v2n0.nic.life. life. 86400 IN DS ( 11164 8 2 aa2dbff1c2f5e1c3c430e1bfc84208722612a39d3ca8e3974ddc5e0934564328 ) life. 86400 IN RRSIG ( DS 8 1 86400 20260722050000 20260709040000 57780 . meyFK8szkMjYX10pEFmEGcCND0WvBNYfffXEkCS/aaqbVkhH8LF/5VDNmWA2UQR2UxwVIIz1KmAB F0hT8jus7kKfpsZ2RCAIp2EsZPAwKwHE2FUO4gszoV4pffHHV7zR3QQOQDFQurY0lVYP31pN66z0 sy+kBtNfiwK6ffI/3rORYSy7jydhBZfG1wzmCsT0GISUga5WO/qg0heRYKwtGoQWmDdFiYg0YyKR /6vt8N/thS8x917CgqGueh5O/AdWYQOz3nFBDzijOke0NlfCcIXXtP8IBZ6Sb+KRZkfW7e9nxU/z 2kqgoN/z5nof3CcmLyr/kuv00e7puq3BGgy+CA== ) ;; ADDITIONAL SECTION (13 records) v0n1.nic.life. 172800 IN A 65.22.21.35 v0n1.nic.life. 172800 IN AAAA 2a01:8840:17::35 v0n3.nic.life. 172800 IN A 161.232.10.35 v0n3.nic.life. 172800 IN AAAA 2a01:8840:f4::35 v2n1.nic.life. 172800 IN A 161.232.11.35 v2n1.nic.life. 172800 IN AAAA 2a01:8840:f5::35 v0n0.nic.life. 172800 IN A 65.22.20.35 v0n0.nic.life. 172800 IN AAAA 2a01:8840:16::35 v0n2.nic.life. 172800 IN A 65.22.22.35 v0n2.nic.life. 172800 IN AAAA 2a01:8840:18::35 v2n0.nic.life. 172800 IN A 65.22.23.35 v2n0.nic.life. 172800 IN AAAA 2a01:8840:19::35 ;; { "EDNS-VERSION": 0 }
	Found child zone life

life

	Checking DS between . and life
	Query to j.root-servers.net for life/DS
	Received 368 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 368 octets ;; HEADER SECTION ;; id = 27328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; life. IN DS ;; ANSWER SECTION (2 records) life. 86400 IN DS ( 11164 8 2 aa2dbff1c2f5e1c3c430e1bfc84208722612a39d3ca8e3974ddc5e0934564328 ) life. 86400 IN RRSIG ( DS 8 1 86400 20260722050000 20260709040000 57780 . meyFK8szkMjYX10pEFmEGcCND0WvBNYfffXEkCS/aaqbVkhH8LF/5VDNmWA2UQR2UxwVIIz1KmAB F0hT8jus7kKfpsZ2RCAIp2EsZPAwKwHE2FUO4gszoV4pffHHV7zR3QQOQDFQurY0lVYP31pN66z0 sy+kBtNfiwK6ffI/3rORYSy7jydhBZfG1wzmCsT0GISUga5WO/qg0heRYKwtGoQWmDdFiYg0YyKR /6vt8N/thS8x917CgqGueh5O/AdWYQOz3nFBDzijOke0NlfCcIXXtP8IBZ6Sb+KRZkfW7e9nxU/z 2kqgoN/z5nof3CcmLyr/kuv00e7puq3BGgy+CA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for life in the . zone
	DS=11164/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`life. 86400 IN RRSIG ( DS 8 1 86400 20260722050000 20260709040000 57780 . meyFK8szkMjYX10pEFmEGcCND0WvBNYfffXEkCS/aaqbVkhH8LF/5VDNmWA2UQR2UxwVIIz1KmAB F0hT8jus7kKfpsZ2RCAIp2EsZPAwKwHE2FUO4gszoV4pffHHV7zR3QQOQDFQurY0lVYP31pN66z0 sy+kBtNfiwK6ffI/3rORYSy7jydhBZfG1wzmCsT0GISUga5WO/qg0heRYKwtGoQWmDdFiYg0YyKR /6vt8N/thS8x917CgqGueh5O/AdWYQOz3nFBDzijOke0NlfCcIXXtP8IBZ6Sb+KRZkfW7e9nxU/z 2kqgoN/z5nof3CcmLyr/kuv00e7puq3BGgy+CA== )`
	RRSIG=57780 and DNSKEY=57780 verifies the DS RRset
	DS=11164/SHA-256 is now in the chain-of-trust
	`life. 86400 IN DS ( 11164 8 2 aa2dbff1c2f5e1c3c430e1bfc84208722612a39d3ca8e3974ddc5e0934564328 )`
	Query to v0n2.nic.life for life/DNSKEY
	Received 897 bytes from 65.22.22.35
	;; Response received from [65.22.22.35] 897 octets ;; HEADER SECTION ;; id = 3736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; life. IN DNSKEY ;; ANSWER SECTION (4 records) life. 3600 IN DNSKEY ( 256 3 8 AwEAAbs/rueygXWD9WBDRtZTtl//fF9limkQdwKcMrLzccK/LONZSK2qGYKj5wyVKWxZgu4lXp1W VeSInXJSwBD2cMm2+NZ5ApG8TSWvH0F82P5yNrh/53eJitn6K+BMez1CqF7p0hG+jm2bcv16aHq2 6ncRfnUeQIlpW81xJAPTO5K7 ) ; keytag 21441 life. 3600 IN DNSKEY ( 256 3 8 AwEAAdPyXHiLBeXjzQnYKV38W415072hMrtjpPMbrwzbzbz2r4WcBFld36TnabiVBY1IpC+i9ZQ8 Pl2qZjmq4qEnMieBeaJQNoUpYjQHKNY3g5tuSWRGh/X0MAT+2dtm0Gp+eGdYMg5T9HUNTeXfe5jg qhJvh5PC4RL8ZpkPo65SQMF3 ) ; keytag 48294 life. 3600 IN DNSKEY ( 257 3 8 AwEAAcbpz6uJyU9k6lO826LtHMksJg7QQAd1FYfOZbGrhcrwBvahGMPRbLZFDwuP0MZCNQFoPNkC 0gSM5j9JAXL4QuF3gv2gKN8OFUV2AbQMaoRgD3BznN+evGBmitN78X5ejmDNO4JBFGzBj+eWURKe 0xRNBLFMwRLbUHdPzRs3oR/oK7/EdanQMOh9ghvbuyDHWRynjd7t0xEV4eA6pt02/ld+PuZqKhzp vYmof7Ed1DOLvWHUhR5WUsGr0jK4NneEzpY7z9HsxLuugMpUrRtlF4vCERIbFzZV8uQGsaehhp+h ltRNSk3sBu/6utz78ivH9PeBi7dWDHDcAZTlqtum2cU= ) ; keytag 11164 life. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260722153230 20260701143230 11164 life. xg0qk7kUBH7LODRXe+p4vWgLby4VaM+VN8KJ/ded79npa3JIqJw/s9KSCSMzBO0tvBtbWrGMCuNu V6TqmfRPEJ/I62XGhXVoZILuZ5lbeDDNttPUENJFI+nljrpNexUx+hB/HP5IAL7gVMoza2RUm6uf O9hmSN1nHcFntglIQpP27qYaCa7sKCkbRyz/Gp5nku28FIpQieY/6/lq9wrv+OGdIoUwNnh0SpeH VNuAl7jzRC4UneptTdsLJB5vh5iDU5HtCcLox6jFq7g5m3ZFvaKgvikSLJMAGue/t3cq7LwGkZRi JUV0KDdFluryHbLLKFoallnGo2H3YP5OtPX4CQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for life
	`life. 3600 IN DNSKEY ( 256 3 8 AwEAAbs/rueygXWD9WBDRtZTtl//fF9limkQdwKcMrLzccK/LONZSK2qGYKj5wyVKWxZgu4lXp1W VeSInXJSwBD2cMm2+NZ5ApG8TSWvH0F82P5yNrh/53eJitn6K+BMez1CqF7p0hG+jm2bcv16aHq2 6ncRfnUeQIlpW81xJAPTO5K7 ) ; keytag 21441`
	`life. 3600 IN DNSKEY ( 256 3 8 AwEAAdPyXHiLBeXjzQnYKV38W415072hMrtjpPMbrwzbzbz2r4WcBFld36TnabiVBY1IpC+i9ZQ8 Pl2qZjmq4qEnMieBeaJQNoUpYjQHKNY3g5tuSWRGh/X0MAT+2dtm0Gp+eGdYMg5T9HUNTeXfe5jg qhJvh5PC4RL8ZpkPo65SQMF3 ) ; keytag 48294`
	`life. 3600 IN DNSKEY ( 257 3 8 AwEAAcbpz6uJyU9k6lO826LtHMksJg7QQAd1FYfOZbGrhcrwBvahGMPRbLZFDwuP0MZCNQFoPNkC 0gSM5j9JAXL4QuF3gv2gKN8OFUV2AbQMaoRgD3BznN+evGBmitN78X5ejmDNO4JBFGzBj+eWURKe 0xRNBLFMwRLbUHdPzRs3oR/oK7/EdanQMOh9ghvbuyDHWRynjd7t0xEV4eA6pt02/ld+PuZqKhzp vYmof7Ed1DOLvWHUhR5WUsGr0jK4NneEzpY7z9HsxLuugMpUrRtlF4vCERIbFzZV8uQGsaehhp+h ltRNSk3sBu/6utz78ivH9PeBi7dWDHDcAZTlqtum2cU= ) ; keytag 11164`
	DNSKEY=11164/SEP is now in the chain-of-trust
	DS=11164/SHA-256 verifies DNSKEY=11164/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`life. 3600 IN RRSIG ( DNSKEY 8 1 3600 20260722153230 20260701143230 11164 life. xg0qk7kUBH7LODRXe+p4vWgLby4VaM+VN8KJ/ded79npa3JIqJw/s9KSCSMzBO0tvBtbWrGMCuNu V6TqmfRPEJ/I62XGhXVoZILuZ5lbeDDNttPUENJFI+nljrpNexUx+hB/HP5IAL7gVMoza2RUm6uf O9hmSN1nHcFntglIQpP27qYaCa7sKCkbRyz/Gp5nku28FIpQieY/6/lq9wrv+OGdIoUwNnh0SpeH VNuAl7jzRC4UneptTdsLJB5vh5iDU5HtCcLox6jFq7g5m3ZFvaKgvikSLJMAGue/t3cq7LwGkZRi JUV0KDdFluryHbLLKFoallnGo2H3YP5OtPX4CQ== )`
	RRSIG=11164 and DNSKEY=11164/SEP verifies the DNSKEY RRset
	DNSKEY=21441 is now in the chain-of-trust
	DNSKEY=48294 is now in the chain-of-trust
	Query to v2n0.nic.life for opapolli.life/A
	Received 580 bytes from 65.22.23.35
	;; Response received from [65.22.23.35] 580 octets ;; HEADER SECTION ;; id = 3427 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) opapolli.life. 3600 IN NS ns6.myservers.net. opapolli.life. 3600 IN NS ns5.myservers.net. 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN NSEC3 ( 1 1 0 73 0mepkmla15sp7fl3basf4bpm0s8ph792 NS SOA RRSIG DNSKEY NSEC3PARAM ) 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260730063040 20260709053040 48294 life. J2FmptGoNTzLAztdLW0fajvM1B8fHchIMXIU6SSItNeytA81MK7aDSvsVT5qiIT6BOzmdOgvRNFr PW5HdjhVa19ME2OLQf06hADNxVV3daxpkH4HlXXxLcIaWoTMtDBszvhNSqtIrz/JeK7ZAc9UN5Nz UJ6NomrVvCSs776uoG4= ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN NSEC3 ( 1 1 0 73 kms00b4qg1ndud7c6vdppp445vebs62k NS DS RRSIG ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260722153230 20260701143230 48294 life. SmMJi8wP73YWiFu/xwd17wX+bFmLrfs8uP6uG8QFmDzfeRpy8iAip2JlrQkd1LRNDucdBqlSs6rb HuzgLUKpG8pl+ob1w2Ku0jhEgB1di5l5Beeju/9PgAxE92f/rD1fliAzuorhXoeFdWnZYgW+2agi kAIW/xc7NGM4GEV15go= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n2.nic.life for opapolli.life/DNSKEY
	Received 580 bytes from 65.22.22.35
	;; Response received from [65.22.22.35] 580 octets ;; HEADER SECTION ;; id = 27398 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) opapolli.life. 3600 IN NS ns6.myservers.net. opapolli.life. 3600 IN NS ns5.myservers.net. 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN NSEC3 ( 1 1 0 73 0mepkmla15sp7fl3basf4bpm0s8ph792 NS SOA RRSIG DNSKEY NSEC3PARAM ) 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260730063040 20260709053040 48294 life. J2FmptGoNTzLAztdLW0fajvM1B8fHchIMXIU6SSItNeytA81MK7aDSvsVT5qiIT6BOzmdOgvRNFr PW5HdjhVa19ME2OLQf06hADNxVV3daxpkH4HlXXxLcIaWoTMtDBszvhNSqtIrz/JeK7ZAc9UN5Nz UJ6NomrVvCSs776uoG4= ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN NSEC3 ( 1 1 0 73 kms00b4qg1ndud7c6vdppp445vebs62k NS DS RRSIG ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260722153230 20260701143230 48294 life. SmMJi8wP73YWiFu/xwd17wX+bFmLrfs8uP6uG8QFmDzfeRpy8iAip2JlrQkd1LRNDucdBqlSs6rb HuzgLUKpG8pl+ob1w2Ku0jhEgB1di5l5Beeju/9PgAxE92f/rD1fliAzuorhXoeFdWnZYgW+2agi kAIW/xc7NGM4GEV15go= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone opapolli.life

opapolli.life

	Checking DS between life and opapolli.life
	Query to v0n0.nic.life for opapolli.life/DS
	Received 763 bytes from 65.22.20.35
	;; Response received from [65.22.20.35] 763 octets ;; HEADER SECTION ;; id = 1236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN NSEC3 ( 1 1 0 73 0mepkmla15sp7fl3basf4bpm0s8ph792 NS SOA RRSIG DNSKEY NSEC3PARAM ) 0mec7koklprprj8f53127qoscvptvsjm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260730063040 20260709053040 48294 life. J2FmptGoNTzLAztdLW0fajvM1B8fHchIMXIU6SSItNeytA81MK7aDSvsVT5qiIT6BOzmdOgvRNFr PW5HdjhVa19ME2OLQf06hADNxVV3daxpkH4HlXXxLcIaWoTMtDBszvhNSqtIrz/JeK7ZAc9UN5Nz UJ6NomrVvCSs776uoG4= ) life. 3600 IN SOA ( v0n0.nic.life. hostmaster.donuts.email. 1783578289 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) life. 3600 IN RRSIG ( SOA 8 1 3600 20260730063040 20260709053040 48294 life. thZcJyVdpB98DOcPZIjHhwDQ4ERZoWRMlTjDjfIcrib2aIIewJnS3Q7xcV7gpsnjj0MZb48Ud6A4 Rr4kB8X0kAJr+kJDhAqnghwtFgGTlgp1mVCAe5YZd1Wp8bDzFmmbhriAmdPr8WRwJE9Wts/zmqMJ wJQmf2mj9Htb6/Tb7Cw= ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN NSEC3 ( 1 1 0 73 kms00b4qg1ndud7c6vdppp445vebs62k NS DS RRSIG ) kmpc0ug1ofhatrosb04gqabbjp3dehtm.life. 3600 IN RRSIG ( NSEC3 8 2 3600 20260722153230 20260701143230 48294 life. SmMJi8wP73YWiFu/xwd17wX+bFmLrfs8uP6uG8QFmDzfeRpy8iAip2JlrQkd1LRNDucdBqlSs6rb HuzgLUKpG8pl+ob1w2Ku0jhEgB1di5l5Beeju/9PgAxE92f/rD1fliAzuorhXoeFdWnZYgW+2agi kAIW/xc7NGM4GEV15go= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for opapolli.life in the life zone
	Query to ns5.myservers.net for opapolli.life/DNSKEY
	Received 122 bytes from 198.252.96.180
	;; Response received from [198.252.96.180] 122 octets ;; HEADER SECTION ;; id = 21416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) opapolli.life. 86400 IN SOA ( dns5.domain-host.net. server.arandomserver.com. 2026070807 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns6.myservers.net for opapolli.life/A
	Received 58 bytes from 198.252.97.180
	;; Response received from [198.252.97.180] 58 octets ;; HEADER SECTION ;; id = 19657 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN A ;; ANSWER SECTION (1 record) opapolli.life. 256 IN A 172.96.191.180 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns6.myservers.net is authoritative for opapolli.life
	Query to ns5.myservers.net for opapolli.life/SOA
	Received 122 bytes from 198.252.96.180
	;; Response received from [198.252.96.180] 122 octets ;; HEADER SECTION ;; id = 31705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN SOA ;; ANSWER SECTION (1 record) opapolli.life. 41686 IN SOA ( dns5.domain-host.net. server.arandomserver.com. 2026070805 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.myservers.net for opapolli.life/A
	opapolli.life A RR has value 172.96.191.180
	No RRSIGs found

opapolli.life

	Query to ns5.myservers.net for opapolli.life/A
	Received 58 bytes from 198.252.96.180
	;; Response received from [198.252.96.180] 58 octets ;; HEADER SECTION ;; id = 40667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; opapolli.life. IN A ;; ANSWER SECTION (1 record) opapolli.life. 14400 IN A 172.96.191.180 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns5.myservers.net is authoritative for opapolli.life
	Query to ns5.myservers.net for opapolli.life/A
	opapolli.life A RR has value 172.96.191.180
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test opapolli.life at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: