DNSSEC Debugger - policia.es

Domain Name:

Time: 2024-07-27 08:08:39 UTC

Analyzing DNSSEC problems for policia.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 34978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to a.root-servers.net for policia.es/A
	Received 618 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 618 octets ;; HEADER SECTION ;; id = 2427 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . VYX7s+vL8FYm7nGwjenL30JZHNqPnos1fOgRsDCkBAPpLo9O+54AN2ozfzadYar+ZbYIdVk/WJc3 Bjgkku8RDPcV8eMKyM8HVjeIicQQSxnTPKGZ70mzLG8+cODWw+M2DxEVUddFdXz2fKEzXTAXwXDk 6yaoJqTy1Vq4I8bVh4DcYtxJtcxpP4sxnsTd7eRz5o3A5Xyw+PV362RpDPLYv17XWimUb5qIl7fA BNj0fx7/YJNRAsv+bvc+xe4OmiTkMXvEa2Uau4Pg6DlhsroS/5eoDkBFK7CZ6kLeTgWqlEg4P4md /TFF3GICeG81xdmY+YxxHtnU8kBB3uw/INCXQQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for es/DNSKEY
	Received 612 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 612 octets ;; HEADER SECTION ;; id = 49825 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS h.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS c.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . VYX7s+vL8FYm7nGwjenL30JZHNqPnos1fOgRsDCkBAPpLo9O+54AN2ozfzadYar+ZbYIdVk/WJc3 Bjgkku8RDPcV8eMKyM8HVjeIicQQSxnTPKGZ70mzLG8+cODWw+M2DxEVUddFdXz2fKEzXTAXwXDk 6yaoJqTy1Vq4I8bVh4DcYtxJtcxpP4sxnsTd7eRz5o3A5Xyw+PV362RpDPLYv17XWimUb5qIl7fA BNj0fx7/YJNRAsv+bvc+xe4OmiTkMXvEa2Uau4Pg6DlhsroS/5eoDkBFK7CZ6kLeTgWqlEg4P4md /TFF3GICeG81xdmY+YxxHtnU8kBB3uw/INCXQQ== ) ;; ADDITIONAL SECTION (9 records) h.nic.es. 172800 IN A 194.0.33.53 g.nic.es. 172800 IN A 204.61.217.1 c.nic.es. 172800 IN A 194.0.34.53 a.nic.es. 172800 IN A 194.69.254.1 h.nic.es. 172800 IN AAAA 2001:678:40::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN AAAA 2001:678:44::53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 ;; { "EDNS-VERSION": 0 }
	Found child zone es

	Checking DS between . and es
	Query to d.root-servers.net for es/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 56580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . VYX7s+vL8FYm7nGwjenL30JZHNqPnos1fOgRsDCkBAPpLo9O+54AN2ozfzadYar+ZbYIdVk/WJc3 Bjgkku8RDPcV8eMKyM8HVjeIicQQSxnTPKGZ70mzLG8+cODWw+M2DxEVUddFdXz2fKEzXTAXwXDk 6yaoJqTy1Vq4I8bVh4DcYtxJtcxpP4sxnsTd7eRz5o3A5Xyw+PV362RpDPLYv17XWimUb5qIl7fA BNj0fx7/YJNRAsv+bvc+xe4OmiTkMXvEa2Uau4Pg6DlhsroS/5eoDkBFK7CZ6kLeTgWqlEg4P4md /TFF3GICeG81xdmY+YxxHtnU8kBB3uw/INCXQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for es in the . zone
	DS=44375/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . VYX7s+vL8FYm7nGwjenL30JZHNqPnos1fOgRsDCkBAPpLo9O+54AN2ozfzadYar+ZbYIdVk/WJc3 Bjgkku8RDPcV8eMKyM8HVjeIicQQSxnTPKGZ70mzLG8+cODWw+M2DxEVUddFdXz2fKEzXTAXwXDk 6yaoJqTy1Vq4I8bVh4DcYtxJtcxpP4sxnsTd7eRz5o3A5Xyw+PV362RpDPLYv17XWimUb5qIl7fA BNj0fx7/YJNRAsv+bvc+xe4OmiTkMXvEa2Uau4Pg6DlhsroS/5eoDkBFK7CZ6kLeTgWqlEg4P4md /TFF3GICeG81xdmY+YxxHtnU8kBB3uw/INCXQQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=44375/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 )`
	Query to a.nic.es for es/DNSKEY
	Received 873 bytes from 194.69.254.1
	;; Response received from [194.69.254.1] 873 octets ;; HEADER SECTION ;; id = 9205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAadm27VoKsvOzL3c0IDB347+D69FzflWpJorP5cc7eUcuXnbrSW21xM8TEHdAuCkQKUyL1m/ fJh9P406tqxjR6u8UcsF1A2w0lWYoMFEpcSANjZvW5qnPcIcVqyZ6noLscpYiwYItwIoRSZCqWdq LH1LbyInwLevbJqc6eMgvLzdjI0ENMFKVZya7nq9DNbQRnRdQx3ePa11GUdfA2FU9RUPNen/k3i6 oIImsAtBIRisBGehgM5tQ54i99KWN2R2ko+1SSIMz/hiwI2aX5H0fqUyMhRRfAvIcVbP0P4XXL0i IkYZFCLYM6hJvQPrg7LETVZW8FWciX7OMWcPzk/Oihc= ) ; Key ID = 7434 es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240808195508 20240725150504 44375 es. JpfidYpp6ldAVw+xbszwY6JxC1c6cRs1k1wgf5WmGGgbjQlu0KlzXHCchXO/obkoHijluCDEO1jG 2ZkNrX6F0u198+F5KAuIfT7Gr96x+UVKFcSyung3y3WrPXFF9ILhgIhcTGmQagUwTI20P6xRVud4 ydq3R0JxIWHdj1PiNP2idp8oY5Ndlz0gMafbjpA+0cM0XKUFKmX4R/nBMfTvBX9wGBvJWicHxIs5 bWe+meu73A8KQSaEOyQWdfY/1iAL2dkdtua/djCQCa/o4zcfDCqtcbfNUb5sVQFTRiuUxRMWqTpj 7Od8wlKNuDjU8yVvpyx5VhcYNsXWVCxJGjsiJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAadm27VoKsvOzL3c0IDB347+D69FzflWpJorP5cc7eUcuXnbrSW21xM8TEHdAuCkQKUyL1m/ fJh9P406tqxjR6u8UcsF1A2w0lWYoMFEpcSANjZvW5qnPcIcVqyZ6noLscpYiwYItwIoRSZCqWdq LH1LbyInwLevbJqc6eMgvLzdjI0ENMFKVZya7nq9DNbQRnRdQx3ePa11GUdfA2FU9RUPNen/k3i6 oIImsAtBIRisBGehgM5tQ54i99KWN2R2ko+1SSIMz/hiwI2aX5H0fqUyMhRRfAvIcVbP0P4XXL0i IkYZFCLYM6hJvQPrg7LETVZW8FWciX7OMWcPzk/Oihc= ) ; Key ID = 7434`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375`
	DNSKEY=44375/SEP is now in the chain-of-trust
	DS=44375/SHA-256 verifies DNSKEY=44375/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240808195508 20240725150504 44375 es. JpfidYpp6ldAVw+xbszwY6JxC1c6cRs1k1wgf5WmGGgbjQlu0KlzXHCchXO/obkoHijluCDEO1jG 2ZkNrX6F0u198+F5KAuIfT7Gr96x+UVKFcSyung3y3WrPXFF9ILhgIhcTGmQagUwTI20P6xRVud4 ydq3R0JxIWHdj1PiNP2idp8oY5Ndlz0gMafbjpA+0cM0XKUFKmX4R/nBMfTvBX9wGBvJWicHxIs5 bWe+meu73A8KQSaEOyQWdfY/1iAL2dkdtua/djCQCa/o4zcfDCqtcbfNUb5sVQFTRiuUxRMWqTpj 7Od8wlKNuDjU8yVvpyx5VhcYNsXWVCxJGjsiJw== )`
	RRSIG=44375 and DNSKEY=44375/SEP verifies the DNSKEY RRset
	DNSKEY=7434 is now in the chain-of-trust
	Query to c.nic.es for policia.es/A
	Received 893 bytes from 194.0.34.53
	;; Response received from [194.0.34.53] 893 octets ;; HEADER SECTION ;; id = 64721 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns2.policia.es. at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f at6t96lcjq9qbfrehh8i45i1dm5fo1du NS SOA RRSIG DNSKEY NSEC3PARAM ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f u6un1qqnm05ets99pac3i6bitt8esubr NS DS RRSIG ) at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240804010147 20240721030551 7434 es. iC3aZDfFWCcpOM280LGV7Ocrho2VlvHJxGD/2g1aq9viEV2jQ3IiOi3TQmB86xFHDkH3aKh16Md9 2gE5O7q8upLQhBDMP+r3bT1p3Xw5+vyOP+nT2t2ih/Rhr6QJ0dyOq39kCLrTn/LDft8EwlBZCB/6 IfAUkgpJG5VdSXyGVcfyUlfP7B3lXSMABCxfrA5V4NzZj2zRBQcX/NGVBQCgnC34QSzdmYjLP40p bTEqW4cDSY4sozKXwqTEqha7wABhA+Maqyv3qu6n5pM+3U/9TNlqv+2qC5kCkFVOruFdxQORN+EQ YyEuuuKFHAnqWr8cGi/EUWJ249+VdnoLKiD+kQ== ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240803143625 20240720190606 7434 es. DYsiDaaLxWANityp/QY8cGPc7lxZP8JErys4J9db2HU1r0sj/gcgze/4PA01KJoer9Uboyh54j5F HySnH5ptB2+tkWERvqg69C3QNRYXFdQdzDAeONl0tnYaaK8RGerlD1v+a3Lminv0IrQFtXSRW8Pq zofOVV8xhIlSrTqGJYqh+M+ophgZJ9HJ4thkONSxXH4pl2Uu1znbPk4ZcaKWeW3aODFHYBY994y0 CNaxolhVriKZP9pfyGDqWQkok3wVwmN37+Rl08Nu4Jf2MvE9fmjgv2mKFNgqlTUZzUYjkO7yhztY oUiij2blcQt/b/SmExGqRYLzqp8JCFTovs2fXQ== ) ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.es for policia.es/DNSKEY
	Received 887 bytes from 194.69.254.1
	;; Response received from [194.69.254.1] 887 octets ;; HEADER SECTION ;; id = 8089 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS nso.nic.es. at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f at6t96lcjq9qbfrehh8i45i1dm5fo1du NS SOA RRSIG DNSKEY NSEC3PARAM ) at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240804010147 20240721030551 7434 es. iC3aZDfFWCcpOM280LGV7Ocrho2VlvHJxGD/2g1aq9viEV2jQ3IiOi3TQmB86xFHDkH3aKh16Md9 2gE5O7q8upLQhBDMP+r3bT1p3Xw5+vyOP+nT2t2ih/Rhr6QJ0dyOq39kCLrTn/LDft8EwlBZCB/6 IfAUkgpJG5VdSXyGVcfyUlfP7B3lXSMABCxfrA5V4NzZj2zRBQcX/NGVBQCgnC34QSzdmYjLP40p bTEqW4cDSY4sozKXwqTEqha7wABhA+Maqyv3qu6n5pM+3U/9TNlqv+2qC5kCkFVOruFdxQORN+EQ YyEuuuKFHAnqWr8cGi/EUWJ249+VdnoLKiD+kQ== ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f u6un1qqnm05ets99pac3i6bitt8esubr NS DS RRSIG ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240803143625 20240720190606 7434 es. DYsiDaaLxWANityp/QY8cGPc7lxZP8JErys4J9db2HU1r0sj/gcgze/4PA01KJoer9Uboyh54j5F HySnH5ptB2+tkWERvqg69C3QNRYXFdQdzDAeONl0tnYaaK8RGerlD1v+a3Lminv0IrQFtXSRW8Pq zofOVV8xhIlSrTqGJYqh+M+ophgZJ9HJ4thkONSxXH4pl2Uu1znbPk4ZcaKWeW3aODFHYBY994y0 CNaxolhVriKZP9pfyGDqWQkok3wVwmN37+Rl08Nu4Jf2MvE9fmjgv2mKFNgqlTUZzUYjkO7yhztY oUiij2blcQt/b/SmExGqRYLzqp8JCFTovs2fXQ== ) ;; ADDITIONAL SECTION (3 records) dns2.policia.es. 86400 IN A 195.55.116.97 dns.policia.es. 86400 IN A 195.55.116.93 ;; { "EDNS-VERSION": 0 }
	Found child zone policia.es

policia.es

	Checking DS between es and policia.es
	Query to g.nic.es for policia.es/DS
	Received 1141 bytes from 204.61.217.1
	;; Response received from [204.61.217.1] 1141 octets ;; HEADER SECTION ;; id = 14068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f at6t96lcjq9qbfrehh8i45i1dm5fo1du NS SOA RRSIG DNSKEY NSEC3PARAM ) at6pjk6qm0imi9p452lc3nm1r0himjp9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240804010147 20240721030551 7434 es. iC3aZDfFWCcpOM280LGV7Ocrho2VlvHJxGD/2g1aq9viEV2jQ3IiOi3TQmB86xFHDkH3aKh16Md9 2gE5O7q8upLQhBDMP+r3bT1p3Xw5+vyOP+nT2t2ih/Rhr6QJ0dyOq39kCLrTn/LDft8EwlBZCB/6 IfAUkgpJG5VdSXyGVcfyUlfP7B3lXSMABCxfrA5V4NzZj2zRBQcX/NGVBQCgnC34QSzdmYjLP40p bTEqW4cDSY4sozKXwqTEqha7wABhA+Maqyv3qu6n5pM+3U/9TNlqv+2qC5kCkFVOruFdxQORN+EQ YyEuuuKFHAnqWr8cGi/EUWJ249+VdnoLKiD+kQ== ) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2024072703 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 3600 IN RRSIG ( SOA 8 1 3600 20240810020919 20240727070513 7434 es. FYAW4H0DViOC8SW9BDV8xzg2K5Y9BA3+zdIO5oPNG0OL3NwqkjERkNqG+5klpup2VcNSFxc+F+G8 x4XPta9Hj0YTe9d7NrOIAtFHtfCi4JbRrYGmNV/hXaGNXMLBRZWQ+vBldn2nFdHTBhTpK0+Ex20z CaoodqSTR0pKYjgo8LsAYH+D7lS3B00kaYB/Tmy+CufB/6qA3IQ7fU+phIIbmwudb5vprkreBE3H sWqAUHBCaiNoRxK1Nn/qnwgNB01YEmHXwB0AU9fX/SJOiNFMtSiT+WVfHdfn6KlPyr0AqgeczhVc khb6uaeudFIJCKVysun1NKxi1BFMbY7d7rXuwg== ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN NSEC3 ( 1 1 5 4c6a8621a6b1f35f u6un1qqnm05ets99pac3i6bitt8esubr NS DS RRSIG ) u6u4p2cp7f2q7jttvu1g8bodpfhcl5gn.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20240803143625 20240720190606 7434 es. DYsiDaaLxWANityp/QY8cGPc7lxZP8JErys4J9db2HU1r0sj/gcgze/4PA01KJoer9Uboyh54j5F HySnH5ptB2+tkWERvqg69C3QNRYXFdQdzDAeONl0tnYaaK8RGerlD1v+a3Lminv0IrQFtXSRW8Pq zofOVV8xhIlSrTqGJYqh+M+ophgZJ9HJ4thkONSxXH4pl2Uu1znbPk4ZcaKWeW3aODFHYBY994y0 CNaxolhVriKZP9pfyGDqWQkok3wVwmN37+Rl08Nu4Jf2MvE9fmjgv2mKFNgqlTUZzUYjkO7yhztY oUiij2blcQt/b/SmExGqRYLzqp8JCFTovs2fXQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for policia.es in the es zone
	Query to dns2.policia.es for policia.es/DNSKEY
	Received 87 bytes from 195.55.116.97
	;; Response received from [195.55.116.97] 87 octets ;; HEADER SECTION ;; id = 6153 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) policia.es. 86400 IN SOA ( dns.policia.es. soporte.policia.es. 2024071601 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to nso.nic.es for policia.es/A
	Received 148 bytes from 194.69.254.2
	;; Response received from [194.69.254.2] 148 octets ;; HEADER SECTION ;; id = 54804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns2.policia.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	nso.nic.es is authoritative for policia.es
	Query to dns.policia.es for policia.es/SOA
	Received 176 bytes from 195.55.116.93
	;; Response received from [195.55.116.93] 176 octets ;; HEADER SECTION ;; id = 32628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN SOA ;; ANSWER SECTION (1 record) policia.es. 86400 IN SOA ( dns.policia.es. soporte.policia.es. 2024071601 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS dns2.policia.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	Query to dns2.policia.es for policia.es/SOA
	Received 176 bytes from 195.55.116.97
	;; Response received from [195.55.116.97] 176 octets ;; HEADER SECTION ;; id = 18985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN SOA ;; ANSWER SECTION (1 record) policia.es. 86400 IN SOA ( dns.policia.es. soporte.policia.es. 2024071601 ;serial 86400 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS nso.nic.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	Query to nso.nic.es for policia.es/A
	Received 148 bytes from 194.69.254.2
	;; Response received from [194.69.254.2] 148 octets ;; HEADER SECTION ;; id = 63634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns.policia.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	policia.es A RR has value 195.55.116.75
	No RRSIGs found

policia.es

	Query to dns2.policia.es for policia.es/A
	Received 148 bytes from 195.55.116.97
	;; Response received from [195.55.116.97] 148 octets ;; HEADER SECTION ;; id = 46075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS nso.nic.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	dns2.policia.es is authoritative for policia.es
	Query to dns2.policia.es for policia.es/A
	Received 148 bytes from 195.55.116.97
	;; Response received from [195.55.116.97] 148 octets ;; HEADER SECTION ;; id = 10277 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns2.policia.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	policia.es A RR has value 195.55.116.75
	No RRSIGs found

policia.es

	Query to dns.policia.es for policia.es/A
	Received 148 bytes from 195.55.116.93
	;; Response received from [195.55.116.93] 148 octets ;; HEADER SECTION ;; id = 63494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns.policia.es. policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS nso.nic.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	dns.policia.es is authoritative for policia.es
	Query to dns.policia.es for policia.es/A
	Received 148 bytes from 195.55.116.93
	;; Response received from [195.55.116.93] 148 octets ;; HEADER SECTION ;; id = 39063 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; policia.es. IN A ;; ANSWER SECTION (1 record) policia.es. 86400 IN A 195.55.116.75 ;; AUTHORITY SECTION (3 records) policia.es. 86400 IN NS dns2.policia.es. policia.es. 86400 IN NS nso.nic.es. policia.es. 86400 IN NS dns.policia.es. ;; ADDITIONAL SECTION (3 records) dns.policia.es. 86400 IN A 195.55.116.93 dns2.policia.es. 86400 IN A 195.55.116.97 ;; { "EDNS-VERSION": 0 }
	policia.es A RR has value 195.55.116.75
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test policia.es at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: