DNSSEC Analyzer - riffgauche.net

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-05-21 14:39:28 UTC, NTP stratum 4

Analyzing DNSSEC problems for riffgauche.net

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (864 bytes) ;; HEADER SECTION ;; id = 2358 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190611000000 20190521000000 20326 . otBkINZAQu7AvPKjr/xWIEE7+SoZtKgF8bzVynX6bfJMJuPay8jPvNmwXkZOdSoYlvFp0bk9JWJK Ch8y5uoNfMFkN6OSrDkr3t0E+c8c0Mnmwkk5CETH3Gqxthi0yyRX5T4VlHU06/Ks4zI+XAgl3FBp Oc554ivdzez8YCjAIGx7XgzzooEb7heMSlLc7S7/HNjw51TPRs4RxrAVcezieKCzPPpeWBhjE6R3 oiSwrl0SBD4/yplrDlr7UHs/Atcm3MSgemdyr2sOoOUkVQCVpcj3SQQezoD2tCM7861CXEQdg5fj eHDtz285xHt5HJpA5cOcctRo4ihybfow/+V7AQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	Query to j.root-servers.net for riffgauche.net/A
	Error querying j.root-servers.net/2001:503:c27:0:0:0:2:30 for riffgauche.net/A: 'IPv6 transport disabled'
	Received 1171 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1171 bytes) ;; HEADER SECTION ;; id = 40840 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . XxRb7Bv+wo3C8VHfy6kDCB+MH28x5DkuimgcpUg/VFUuV9qvX+EvsI1CrLPjnfBKav03jvypQ1EI okrFgTNfhqN98l5EGyVHoDlCNJ5O0tcVDM8jEB6QsxXMfgWm6stqGkIxmgXtgCFT0R/8EUDASn8+ djiYDLgiAQm/9hlRA6W8bSsggLA5Io94Yyi5DROMXMSNN+rl7L6T481GeB45UBY9sD54ryNho8An WQEFftxlEIPYoesIoSDtp5LgxKayR0wckUfMfHKPJBTluU3CAcObiJrJkDXR0IiXF5W5B3VaeocI hyp9lhXVx/Yeu6FP9sIQS3EJ966oYtR5cniKMw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to i.root-servers.net for net/DNSKEY
	Error querying i.root-servers.net/2001:7fe:0:0:0:0:0:53 for net/DNSKEY: 'IPv6 transport disabled'
	Received 1160 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (1160 bytes) ;; HEADER SECTION ;; id = 37671 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . XxRb7Bv+wo3C8VHfy6kDCB+MH28x5DkuimgcpUg/VFUuV9qvX+EvsI1CrLPjnfBKav03jvypQ1EI okrFgTNfhqN98l5EGyVHoDlCNJ5O0tcVDM8jEB6QsxXMfgWm6stqGkIxmgXtgCFT0R/8EUDASn8+ djiYDLgiAQm/9hlRA6W8bSsggLA5Io94Yyi5DROMXMSNN+rl7L6T481GeB45UBY9sD54ryNho8An WQEFftxlEIPYoesIoSDtp5LgxKayR0wckUfMfHKPJBTluU3CAcObiJrJkDXR0IiXF5W5B3VaeocI hyp9lhXVx/Yeu6FP9sIQS3EJ966oYtR5cniKMw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to c.root-servers.net for net/DS
	Error querying c.root-servers.net/2001:500:2:0:0:0:0:c for net/DS: 'IPv6 transport disabled'
	Received 367 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (367 bytes) ;; HEADER SECTION ;; id = 6753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . XxRb7Bv+wo3C8VHfy6kDCB+MH28x5DkuimgcpUg/VFUuV9qvX+EvsI1CrLPjnfBKav03jvypQ1EI okrFgTNfhqN98l5EGyVHoDlCNJ5O0tcVDM8jEB6QsxXMfgWm6stqGkIxmgXtgCFT0R/8EUDASn8+ djiYDLgiAQm/9hlRA6W8bSsggLA5Io94Yyi5DROMXMSNN+rl7L6T481GeB45UBY9sD54ryNho8An WQEFftxlEIPYoesIoSDtp5LgxKayR0wckUfMfHKPJBTluU3CAcObiJrJkDXR0IiXF5W5B3VaeocI hyp9lhXVx/Yeu6FP9sIQS3EJ966oYtR5cniKMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20190603050000 20190521040000 25266 . XxRb7Bv+wo3C8VHfy6kDCB+MH28x5DkuimgcpUg/VFUuV9qvX+EvsI1CrLPjnfBKav03jvypQ1EI okrFgTNfhqN98l5EGyVHoDlCNJ5O0tcVDM8jEB6QsxXMfgWm6stqGkIxmgXtgCFT0R/8EUDASn8+ djiYDLgiAQm/9hlRA6W8bSsggLA5Io94Yyi5DROMXMSNN+rl7L6T481GeB45UBY9sD54ryNho8An WQEFftxlEIPYoesIoSDtp5LgxKayR0wckUfMfHKPJBTluU3CAcObiJrJkDXR0IiXF5W5B3VaeocI hyp9lhXVx/Yeu6FP9sIQS3EJ966oYtR5cniKMw== )`
	RRSIG=25266 and DNSKEY=25266 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to a.gtld-servers.net for net/DNSKEY
	Received 743 bytes from 192.5.6.30
	;; Answer received from 192.5.6.30 (743 bytes) ;; HEADER SECTION ;; id = 8207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQPB6mADOfWU6hTegl+pTl1wtjTll+ZnWIuRb8+cU9XNWNPpc3mX+rUqPeiw0RpKkD4QkTqTefWj MqjXMvYn2TxX4V4FMQXYMJr0bgiZXGosA9C9Aa7RgYyt4GJCToXqlM+mTqBjXDkh7yBa8I2X3p6T t/PoKhiqCtmNl6sggTanJw== ) ; Key ID = 2129 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190604153857 20190520153357 35886 net. cb1GrFgUSWRn+pzQvWHxDf7XzmRHnQ7EE42RwrDnoTfrmNKkwpRYTbdsg3+KxnYiRAA6aaPJxzIC bo6+ZQS5aILKCyqSW2PcfGHDYEXp9UEGmbLn9qYviiB7ERf0zpqclU97SbWuuMCk1U+m5n1711Mw xHEF8hI6JLD7htcXhSZj9aKv7Z1VQe5034ApaqfxnUEUGk84aqKTbG/K1/m7WmpxXlcGto8/Ynt+ KVybX2YM9lf5fAnZ5boZQo6ZglLRMw6cZf/slObi2yIZuB1EmmGUYdBO2ANfQVUF/wdpoABuewWV V5w7GYP8MUwoiRVmp0hz5rT8/hY/8uvvsB/pxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQPB6mADOfWU6hTegl+pTl1wtjTll+ZnWIuRb8+cU9XNWNPpc3mX+rUqPeiw0RpKkD4QkTqTefWj MqjXMvYn2TxX4V4FMQXYMJr0bgiZXGosA9C9Aa7RgYyt4GJCToXqlM+mTqBjXDkh7yBa8I2X3p6T t/PoKhiqCtmNl6sggTanJw== ) ; Key ID = 2129`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190604153857 20190520153357 35886 net. cb1GrFgUSWRn+pzQvWHxDf7XzmRHnQ7EE42RwrDnoTfrmNKkwpRYTbdsg3+KxnYiRAA6aaPJxzIC bo6+ZQS5aILKCyqSW2PcfGHDYEXp9UEGmbLn9qYviiB7ERf0zpqclU97SbWuuMCk1U+m5n1711Mw xHEF8hI6JLD7htcXhSZj9aKv7Z1VQe5034ApaqfxnUEUGk84aqKTbG/K1/m7WmpxXlcGto8/Ynt+ KVybX2YM9lf5fAnZ5boZQo6ZglLRMw6cZf/slObi2yIZuB1EmmGUYdBO2ANfQVUF/wdpoABuewWV V5w7GYP8MUwoiRVmp0hz5rT8/hY/8uvvsB/pxA== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=2129 is now in the chain-of-trust
	Query to a.gtld-servers.net for riffgauche.net/A
	Error querying a.gtld-servers.net/2001:503:a83e:0:0:0:2:30 for riffgauche.net/A: 'IPv6 transport disabled'
	Received 615 bytes from 192.5.6.30
	;; Answer received from 192.5.6.30 (615 bytes) ;; HEADER SECTION ;; id = 22486 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) riffgauche.net. 172800 IN NS ns6.gandi.net. riffgauche.net. 172800 IN NS odysseus.creamen.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190527055419 20190520044419 2129 net. hjcYCr47ppt7iqtQAzzodAD75SSq+KyQ5EqrqsDBDRY9Ctyrnr+6BEyjzZAU1HMTRI7b/XsKmKOa oq+f1ZWpqXC9HQVMv7sNhPiSr1+sFvBt60GHQu5YHrbvjBfDw9+02Tk/2ZYhcCwzMvFQE31QoZZd JfvCetOqGG9dRZCWDZw= ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN NSEC3 ( 1 1 0 - qg3845v3febciqbhoee2lokebbja4grq NS DS RRSIG ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190525054543 20190518043543 2129 net. gLbKx/aMqFd9VroY9kcNYQEib+nvh0CI+FVxJ4ST1oBzX6tiF+6xymm3CqiuXztpSIWPSCETfp+h cbZfiK0slFN5q7jtX4s6uxPp6MwPr4/CGY/oPKCTvF5OQODN9KJTIV7CK0u8tU1lDvOqk5lhwCV+ 5uwkEib7Ax3q328Sgkg= ) ;; ADDITIONAL SECTION (3 records) ns6.gandi.net. 172800 IN A 217.70.177.40 odysseus.creamen.net. 172800 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.gtld-servers.net for riffgauche.net/DNSKEY
	Received 615 bytes from 192.42.93.30
	;; Answer received from 192.42.93.30 (615 bytes) ;; HEADER SECTION ;; id = 10516 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) riffgauche.net. 172800 IN NS ns6.gandi.net. riffgauche.net. 172800 IN NS odysseus.creamen.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190527055419 20190520044419 2129 net. hjcYCr47ppt7iqtQAzzodAD75SSq+KyQ5EqrqsDBDRY9Ctyrnr+6BEyjzZAU1HMTRI7b/XsKmKOa oq+f1ZWpqXC9HQVMv7sNhPiSr1+sFvBt60GHQu5YHrbvjBfDw9+02Tk/2ZYhcCwzMvFQE31QoZZd JfvCetOqGG9dRZCWDZw= ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN NSEC3 ( 1 1 0 - qg3845v3febciqbhoee2lokebbja4grq NS DS RRSIG ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190525054543 20190518043543 2129 net. gLbKx/aMqFd9VroY9kcNYQEib+nvh0CI+FVxJ4ST1oBzX6tiF+6xymm3CqiuXztpSIWPSCETfp+h cbZfiK0slFN5q7jtX4s6uxPp6MwPr4/CGY/oPKCTvF5OQODN9KJTIV7CK0u8tU1lDvOqk5lhwCV+ 5uwkEib7Ax3q328Sgkg= ) ;; ADDITIONAL SECTION (3 records) ns6.gandi.net. 172800 IN A 217.70.177.40 odysseus.creamen.net. 172800 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone riffgauche.net

riffgauche.net

	Checking DS between net and riffgauche.net
	Query to d.gtld-servers.net for riffgauche.net/DS
	Error querying d.gtld-servers.net/2001:500:856e:0:0:0:0:30 for riffgauche.net/DS: 'IPv6 transport disabled'
	Received 764 bytes from 192.31.80.30
	;; Answer received from 192.31.80.30 (764 bytes) ;; HEADER SECTION ;; id = 65305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1ruuffjkct2q54p78f8ejgj8jbk7i8b NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190527055419 20190520044419 2129 net. hjcYCr47ppt7iqtQAzzodAD75SSq+KyQ5EqrqsDBDRY9Ctyrnr+6BEyjzZAU1HMTRI7b/XsKmKOa oq+f1ZWpqXC9HQVMv7sNhPiSr1+sFvBt60GHQu5YHrbvjBfDw9+02Tk/2ZYhcCwzMvFQE31QoZZd JfvCetOqGG9dRZCWDZw= ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1558449547 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20190528143907 20190521132907 2129 net. udnE7oBHNtaB67tU5IQ4dqXEgLteegUO3NDTrDP70dt+5IkLwlQQ7AlXW95NSou4bzYYKO0AFhMU aHscOYDR96gy7HRG2RRyia+P92WXl/kNPUh8kt5LsK6SZGs66q1uOy2GpPqWSC7B2PONyVtm9ntu VTCFaR1QRmllyfo1kMM= ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN NSEC3 ( 1 1 0 - qg3845v3febciqbhoee2lokebbja4grq NS DS RRSIG ) QG32BSFBEGAU4PGV6AGB0AF6R4NCR8H4.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20190525054543 20190518043543 2129 net. gLbKx/aMqFd9VroY9kcNYQEib+nvh0CI+FVxJ4ST1oBzX6tiF+6xymm3CqiuXztpSIWPSCETfp+h cbZfiK0slFN5q7jtX4s6uxPp6MwPr4/CGY/oPKCTvF5OQODN9KJTIV7CK0u8tU1lDvOqk5lhwCV+ 5uwkEib7Ax3q328Sgkg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for riffgauche.net in the net zone
	Query to odysseus.creamen.net for riffgauche.net/DNSKEY
	Received 851 bytes from 62.210.148.182
	;; Answer received from 62.210.148.182 (851 bytes) ;; HEADER SECTION ;; id = 25198 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN DNSKEY ;; ANSWER SECTION (2 records) riffgauche.net. 3600 IN DNSKEY ( 257 3 7 AwEAAbyD8sQYlwBj8kgXF8nW1h4diLbIqdCpg2/KSAlYdQKSTTZMC5LN4rOSG1jvFg+CkQGnr5JE 8GleciZ6OVBSjN6TLoiJGgJIf3v6KxAkVhR8nQ7UqFQUWjxMRkXWZfoUg1B8arAT4wAKg97KE1gm duFrCJ4ibDYFLZFVd+wjnwbZ4NsOtIw8JwOdL8y+79XM+OcZFtoMiicv2ACDJAtO6ofD2uRuSXGU sz47dfd7wsNrCVUk+SGuXdYsnQtprJ85vrfRYdUen6qaLXfpY1qkEizDV7h+RN7rsQWwypQgZ+JB mLcLyYgV7Zbp36R3+dqV4gdt/ad5VQyh/VWk5mamj/jkzngOOj1Qcje+x664V0Oh6RXSSfsbnXzi 5GOh2tnozQlIt0h4ZXi3UqUTg7t7oBRrWUg68+3p8kWUzOjvXKZi3CBHlCaUfauoS86nUs7HgwmG EJBWdEwGizycTHUzOmZmjU0JDtbUmfa38e/BbFHRYrQ9KZbv+y8DLqIOIyYqeWYnwEKQyf4lnW6I 9UeFOsMxbNeF5tlR/ndKnPvpPaG36wIAWSskHVIPHVk4XJnpFevYCxmmYubvgSKmcWZKhj0PR1UR 4NiCEohSqSBsRKoXAQQgH6ctJsgugnKcZ813LSZXQ+qy5J2S2r/Ke5kFb4X7m1uSbckn6qQ2rSOo 6Hh7 ) ; Key ID = 64146 riffgauche.net. 3600 IN DNSKEY ( 256 3 7 AwEAAbYyL3eFInUX3YLkUvD2rj7T9Sp2SDPC+PvWSWAUYGcp64EY32g7FefFQIhjgp8kMCXjETyM qJODHXSnDrrBQDJaPxMZTl82bCLsgYOammUsrIBhNlQrKhzV0wOL81mjkJBCTEf+TDK0l0lqEJcg YIzd+jNnkSZLXHBrXmq41ITu23J51oTGig0bYGm3blxHTPFdLpWodM+U0KI9VjQVw8XIvlfci8fh rW5vE7zICraR8FQqo0nmkU4Zmk2CYG7sMVQZuvkvkRIeRDlR4hYjGvsU1aMCr/vfyyf6YvtogLue QAodsh5FUlePHPYn+vmIUba5xX21FdShILyPNufH1qk= ) ; Key ID = 794 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for riffgauche.net
	riffgauche.net. 3600 IN DNSKEY ( 257 3 7 AwEAAbyD8sQYlwBj8kgXF8nW1h4diLbIqdCpg2/KSAlYdQKSTTZMC5LN4rOSG1jvFg+CkQGnr5JE 8GleciZ6OVBSjN6TLoiJGgJIf3v6KxAkVhR8nQ7UqFQUWjxMRkXWZfoUg1B8arAT4wAKg97KE1gm duFrCJ4ibDYFLZFVd+wjnwbZ4NsOtIw8JwOdL8y+79XM+OcZFtoMiicv2ACDJAtO6ofD2uRuSXGU sz47dfd7wsNrCVUk+SGuXdYsnQtprJ85vrfRYdUen6qaLXfpY1qkEizDV7h+RN7rsQWwypQgZ+JB mLcLyYgV7Zbp36R3+dqV4gdt/ad5VQyh/VWk5mamj/jkzngOOj1Qcje+x664V0Oh6RXSSfsbnXzi 5GOh2tnozQlIt0h4ZXi3UqUTg7t7oBRrWUg68+3p8kWUzOjvXKZi3CBHlCaUfauoS86nUs7HgwmG EJBWdEwGizycTHUzOmZmjU0JDtbUmfa38e/BbFHRYrQ9KZbv+y8DLqIOIyYqeWYnwEKQyf4lnW6I 9UeFOsMxbNeF5tlR/ndKnPvpPaG36wIAWSskHVIPHVk4XJnpFevYCxmmYubvgSKmcWZKhj0PR1UR 4NiCEohSqSBsRKoXAQQgH6ctJsgugnKcZ813LSZXQ+qy5J2S2r/Ke5kFb4X7m1uSbckn6qQ2rSOo 6Hh7 ) ; Key ID = 64146
	`riffgauche.net. 3600 IN DNSKEY ( 256 3 7 AwEAAbYyL3eFInUX3YLkUvD2rj7T9Sp2SDPC+PvWSWAUYGcp64EY32g7FefFQIhjgp8kMCXjETyM qJODHXSnDrrBQDJaPxMZTl82bCLsgYOammUsrIBhNlQrKhzV0wOL81mjkJBCTEf+TDK0l0lqEJcg YIzd+jNnkSZLXHBrXmq41ITu23J51oTGig0bYGm3blxHTPFdLpWodM+U0KI9VjQVw8XIvlfci8fh rW5vE7zICraR8FQqo0nmkU4Zmk2CYG7sMVQZuvkvkRIeRDlR4hYjGvsU1aMCr/vfyyf6YvtogLue QAodsh5FUlePHPYn+vmIUba5xX21FdShILyPNufH1qk= ) ; Key ID = 794`
	No RRSIGs found
	Query to odysseus.creamen.net for riffgauche.net/A
	Received 98 bytes from 62.210.148.182
	;; Answer received from 62.210.148.182 (98 bytes) ;; HEADER SECTION ;; id = 63236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN A ;; ANSWER SECTION (1 record) riffgauche.net. 3600 IN A 62.210.148.182 ;; AUTHORITY SECTION (1 record) riffgauche.net. 3600 IN NS odysseus.riffgauche.net. ;; ADDITIONAL SECTION (2 records) odysseus.riffgauche.net. 3600 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	riffgauche.net is authoritative for riffgauche.net
	Query to odysseus.creamen.net for riffgauche.net/SOA
	Received 123 bytes from 62.210.148.182
	;; Answer received from 62.210.148.182 (123 bytes) ;; HEADER SECTION ;; id = 61882 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN SOA ;; ANSWER SECTION (1 record) riffgauche.net. 3600 IN SOA ( odysseus.riffgauche.net. root.odysseus.riffgauche.net. 2018050301 ;serial 3600 ;refresh 3600 ;retry 3600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (1 record) riffgauche.net. 3600 IN NS odysseus.riffgauche.net. ;; ADDITIONAL SECTION (2 records) odysseus.riffgauche.net. 3600 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to odysseus.riffgauche.net for riffgauche.net/SOA
	Received 123 bytes from 62.210.148.182
	;; Answer received from 62.210.148.182 (123 bytes) ;; HEADER SECTION ;; id = 54637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN SOA ;; ANSWER SECTION (1 record) riffgauche.net. 3600 IN SOA ( odysseus.riffgauche.net. root.odysseus.riffgauche.net. 2018050301 ;serial 3600 ;refresh 3600 ;retry 3600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (1 record) riffgauche.net. 3600 IN NS odysseus.riffgauche.net. ;; ADDITIONAL SECTION (2 records) odysseus.riffgauche.net. 3600 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns6.gandi.net for riffgauche.net/SOA
	Received 123 bytes from 217.70.177.40
	;; Answer received from 217.70.177.40 (123 bytes) ;; HEADER SECTION ;; id = 7875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN SOA ;; ANSWER SECTION (1 record) riffgauche.net. 3600 IN SOA ( odysseus.riffgauche.net. root.odysseus.riffgauche.net. 2018050301 ;serial 3600 ;refresh 3600 ;retry 3600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (1 record) riffgauche.net. 3600 IN NS odysseus.riffgauche.net. ;; ADDITIONAL SECTION (2 records) odysseus.riffgauche.net. 3600 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to odysseus.creamen.net for riffgauche.net/A
	Received 98 bytes from 62.210.148.182
	;; Answer received from 62.210.148.182 (98 bytes) ;; HEADER SECTION ;; id = 22715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 1 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; riffgauche.net. IN A ;; ANSWER SECTION (1 record) riffgauche.net. 3600 IN A 62.210.148.182 ;; AUTHORITY SECTION (1 record) riffgauche.net. 3600 IN NS odysseus.riffgauche.net. ;; ADDITIONAL SECTION (2 records) odysseus.riffgauche.net. 3600 IN A 62.210.148.182 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	riffgauche.net A RR has value 62.210.148.182
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test riffgauche.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: