DNSSEC Analyzer - rodier.me

Domain Name:

Time: 2022-05-20 11:16:19 UTC, NTP stratum 16

Analyzing DNSSEC problems for rodier.me

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 40634 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	Query to g.root-servers.net for rodier.me/A
	Received 684 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (684 octets) ;; HEADER SECTION ;; id = 49695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) me. 172800 IN NS b0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS a0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . gPWKsrJwKkuJmUNfmJZYabygV+DxLHuGVbZv2m5Gjze3HMsGvSPr08OEinqCOQPV2bCAANgkDC5H s4Ofc2bIYWa1eUdWXUd+6+7OUkYMwjmXWNswlLoOVt8pjwqbS1iAz1OZeyUC8edIMUhsv+dUTrWA hcBgx03TjD4pypRyfptqnhp+Ut79JRdedlWi8ULS4RkTfXvGmISXYvha+NHsYnDaGVOCLJ8zfYmo kjehvBmGRNDfuOZPbqxyE/6q6ucbXjLl3/LqoDzjY2UOb49U3VNseydYJrNk/31qtTqVU98FyH4d 4imRcKriZUEf4gL1grvV+Hc+FJNLjKTc4H2HYg== ) ;; ADDITIONAL SECTION (11 records) c0.nic.me. 172800 IN A 199.253.61.1 b2.nic.me. 172800 IN A 199.249.127.1 b0.nic.me. 172800 IN A 199.253.60.1 a2.nic.me. 172800 IN A 199.249.119.1 a0.nic.me. 172800 IN A 199.253.59.1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for me/DNSKEY
	Received 675 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (675 octets) ;; HEADER SECTION ;; id = 30475 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . gPWKsrJwKkuJmUNfmJZYabygV+DxLHuGVbZv2m5Gjze3HMsGvSPr08OEinqCOQPV2bCAANgkDC5H s4Ofc2bIYWa1eUdWXUd+6+7OUkYMwjmXWNswlLoOVt8pjwqbS1iAz1OZeyUC8edIMUhsv+dUTrWA hcBgx03TjD4pypRyfptqnhp+Ut79JRdedlWi8ULS4RkTfXvGmISXYvha+NHsYnDaGVOCLJ8zfYmo kjehvBmGRNDfuOZPbqxyE/6q6ucbXjLl3/LqoDzjY2UOb49U3VNseydYJrNk/31qtTqVU98FyH4d 4imRcKriZUEf4gL1grvV+Hc+FJNLjKTc4H2HYg== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN A 199.249.119.1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN A 199.253.60.1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN A 199.249.127.1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN A 199.253.61.1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone me

	Checking DS between . and me
	Query to a.root-servers.net for me/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (366 octets) ;; HEADER SECTION ;; id = 44332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DS ;; ANSWER SECTION (2 records) me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . gPWKsrJwKkuJmUNfmJZYabygV+DxLHuGVbZv2m5Gjze3HMsGvSPr08OEinqCOQPV2bCAANgkDC5H s4Ofc2bIYWa1eUdWXUd+6+7OUkYMwjmXWNswlLoOVt8pjwqbS1iAz1OZeyUC8edIMUhsv+dUTrWA hcBgx03TjD4pypRyfptqnhp+Ut79JRdedlWi8ULS4RkTfXvGmISXYvha+NHsYnDaGVOCLJ8zfYmo kjehvBmGRNDfuOZPbqxyE/6q6ucbXjLl3/LqoDzjY2UOb49U3VNseydYJrNk/31qtTqVU98FyH4d 4imRcKriZUEf4gL1grvV+Hc+FJNLjKTc4H2HYg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for me in the . zone
	DS=45352/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`me. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . gPWKsrJwKkuJmUNfmJZYabygV+DxLHuGVbZv2m5Gjze3HMsGvSPr08OEinqCOQPV2bCAANgkDC5H s4Ofc2bIYWa1eUdWXUd+6+7OUkYMwjmXWNswlLoOVt8pjwqbS1iAz1OZeyUC8edIMUhsv+dUTrWA hcBgx03TjD4pypRyfptqnhp+Ut79JRdedlWi8ULS4RkTfXvGmISXYvha+NHsYnDaGVOCLJ8zfYmo kjehvBmGRNDfuOZPbqxyE/6q6ucbXjLl3/LqoDzjY2UOb49U3VNseydYJrNk/31qtTqVU98FyH4d 4imRcKriZUEf4gL1grvV+Hc+FJNLjKTc4H2HYg== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=45352/SHA-256 is now in the chain-of-trust
	`me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 )`
	Query to a0.nic.me for me/DNSKEY
	Received 893 bytes from 199.253.59.1
	;; Response received from 199.253.59.1 (893 octets) ;; HEADER SECTION ;; id = 55893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (4 records) me. 900 IN DNSKEY ( 256 3 8 AwEAAb9qVcL0byX/49bLJaviAXRjssn8afogquEUTdukv1LMSrzQULwmCdUkts9ByeN5zXUQh19o CIzw4RUxIWjgCOH3lp0V2bI8u9poQVgccYyBV+CMyV2I4EXcnS7DZTgcYU0YBtQQmjLdRHVR8d+0 gdIqm8c1+Hb8FFgySG77X845 ) ; Key ID = 65286 me. 900 IN DNSKEY ( 257 3 8 AwEAAcEDvjoqpHaGqwG6GyN5n/EI0MBTDf41zr3TILeryFHRq/GRN40VUSfhf7ApYoOFSCs0rDsE IJPWCXV0s27id+MdIAAycocbx20XYtqzM5fqrpfYU5MtpalohqG3xhvFL80fHyPHAmpI+hsZDLi5 fUK0W0mUjEUYfv7Dx4Z4EmJ6AiDlSXw27k6SRS+1wb2i3Orr9xwOOQmmGl1kmN/EHHHNBBLbv0Qu Q8N4yftAQ6FSPP184yDOKfzmBttzqMeBULmAjbi7cYmIWNekjq2IcPNktuJxrGQv4xYN47xEtaic z54h4q5ah3JT20lfYRqKFqZX962a65BtW8nIbyiDte0= ) ; Key ID = 45352 me. 900 IN DNSKEY ( 256 3 8 AwEAAbv5t2q517uCtmM8gd5fZF6jpf5MEa1RREmnHW7WHaU369jTtid5OgaErFhuz96FUBqtZJ/R R5+s54vGaR+Safrw6twR27SKbLuXZdz4l98LcZpsy34NGJLTnEUSIPtmkR5EjaLBmUm30cXQbYqh BY5w5I6vMq0g/n7WYEi0koFt ) ; Key ID = 6984 me. 900 IN RRSIG ( DNSKEY 8 1 900 20220607153543 20220517143543 45352 me. Divp/avTV1t0MgHyH8+TwwaVFUsxol4BaxG69NopEqmWzi7v4JYM+NfcFo2WaN68jT2UXT3D1psm aoK7tYboaTmqOkaMgAi/pw5s3ZPuKsQ8kwYh9FC7M6X6iX5LRrSz1+FwmUVdPFO+Z6IDfCGHsom+ Jil9oYKigXWULmP47ZgXoLedKAMYA9dHb1pGbm1oass/18//k0ioqKrSsLTl4sBTBK67HgduX6NG blzVLGoXyn/pqziuOW/sUHT46cJWdLHMHvNy1ex6D+mdkc+eJG1c54Vu95vTQN1WVbMpjRROjOwl nVGd2/2SidniCn51UuayfGG0L1nAsr8pIN+1oA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for me
	`me. 900 IN DNSKEY ( 256 3 8 AwEAAb9qVcL0byX/49bLJaviAXRjssn8afogquEUTdukv1LMSrzQULwmCdUkts9ByeN5zXUQh19o CIzw4RUxIWjgCOH3lp0V2bI8u9poQVgccYyBV+CMyV2I4EXcnS7DZTgcYU0YBtQQmjLdRHVR8d+0 gdIqm8c1+Hb8FFgySG77X845 ) ; Key ID = 65286`
	`me. 900 IN DNSKEY ( 257 3 8 AwEAAcEDvjoqpHaGqwG6GyN5n/EI0MBTDf41zr3TILeryFHRq/GRN40VUSfhf7ApYoOFSCs0rDsE IJPWCXV0s27id+MdIAAycocbx20XYtqzM5fqrpfYU5MtpalohqG3xhvFL80fHyPHAmpI+hsZDLi5 fUK0W0mUjEUYfv7Dx4Z4EmJ6AiDlSXw27k6SRS+1wb2i3Orr9xwOOQmmGl1kmN/EHHHNBBLbv0Qu Q8N4yftAQ6FSPP184yDOKfzmBttzqMeBULmAjbi7cYmIWNekjq2IcPNktuJxrGQv4xYN47xEtaic z54h4q5ah3JT20lfYRqKFqZX962a65BtW8nIbyiDte0= ) ; Key ID = 45352`
	`me. 900 IN DNSKEY ( 256 3 8 AwEAAbv5t2q517uCtmM8gd5fZF6jpf5MEa1RREmnHW7WHaU369jTtid5OgaErFhuz96FUBqtZJ/R R5+s54vGaR+Safrw6twR27SKbLuXZdz4l98LcZpsy34NGJLTnEUSIPtmkR5EjaLBmUm30cXQbYqh BY5w5I6vMq0g/n7WYEi0koFt ) ; Key ID = 6984`
	DNSKEY=45352/SEP is now in the chain-of-trust
	DS=45352/SHA-256 verifies DNSKEY=45352/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`me. 900 IN RRSIG ( DNSKEY 8 1 900 20220607153543 20220517143543 45352 me. Divp/avTV1t0MgHyH8+TwwaVFUsxol4BaxG69NopEqmWzi7v4JYM+NfcFo2WaN68jT2UXT3D1psm aoK7tYboaTmqOkaMgAi/pw5s3ZPuKsQ8kwYh9FC7M6X6iX5LRrSz1+FwmUVdPFO+Z6IDfCGHsom+ Jil9oYKigXWULmP47ZgXoLedKAMYA9dHb1pGbm1oass/18//k0ioqKrSsLTl4sBTBK67HgduX6NG blzVLGoXyn/pqziuOW/sUHT46cJWdLHMHvNy1ex6D+mdkc+eJG1c54Vu95vTQN1WVbMpjRROjOwl nVGd2/2SidniCn51UuayfGG0L1nAsr8pIN+1oA== )`
	RRSIG=45352 and DNSKEY=45352/SEP verifies the DNSKEY RRset
	DNSKEY=65286 is now in the chain-of-trust
	DNSKEY=6984 is now in the chain-of-trust
	Query to b2.nic.me for rodier.me/A
	Received 424 bytes from 199.249.127.1
	;; Response received from 199.249.127.1 (424 octets) ;; HEADER SECTION ;; id = 65064 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rodier.me. 86400 IN NS main.rodier.me. rodier.me. 86400 IN NS backup.rodier.me. rodier.me. 86400 IN DS ( 22668 8 2 4d7f92cc7ada3bf85d885069b839c4e4ba2ce8fe9cee77433e83204cd69de041 ) rodier.me. 86400 IN DS ( 57226 8 2 24ec539803ff100e643a304f1786ba36f8a6abab4dda7a3576f14bcddcb6e6ff ) rodier.me. 86400 IN RRSIG ( DS 8 2 86400 20220607153543 20220517143543 65286 me. UMzVYb5/2MRoAMOaAtMQ2uo8NlWy49O+jyLcTRV4HmMZ0ycEQFWsLSXK4a3wFyglmWUSik5xEhyM SkTrPGi85cmt4A87cT23iE2IZ8QSmJtqi20CVuSwZWXxpxIQjGtYcn7Wk9eqP61DkghFiur99mDG 725cBZf0YjC1+T3J9T4= ) ;; ADDITIONAL SECTION (5 records) backup.rodier.me. 86400 IN A 82.68.21.220 main.rodier.me. 86400 IN A 82.68.21.220 backup.rodier.me. 86400 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 86400 IN AAAA 2a02:8010:684b:3::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b2.nic.me for rodier.me/DNSKEY
	Received 424 bytes from 199.249.127.1
	;; Response received from 199.249.127.1 (424 octets) ;; HEADER SECTION ;; id = 3879 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rodier.me. 86400 IN NS main.rodier.me. rodier.me. 86400 IN NS backup.rodier.me. rodier.me. 86400 IN DS ( 22668 8 2 4d7f92cc7ada3bf85d885069b839c4e4ba2ce8fe9cee77433e83204cd69de041 ) rodier.me. 86400 IN DS ( 57226 8 2 24ec539803ff100e643a304f1786ba36f8a6abab4dda7a3576f14bcddcb6e6ff ) rodier.me. 86400 IN RRSIG ( DS 8 2 86400 20220607153543 20220517143543 65286 me. UMzVYb5/2MRoAMOaAtMQ2uo8NlWy49O+jyLcTRV4HmMZ0ycEQFWsLSXK4a3wFyglmWUSik5xEhyM SkTrPGi85cmt4A87cT23iE2IZ8QSmJtqi20CVuSwZWXxpxIQjGtYcn7Wk9eqP61DkghFiur99mDG 725cBZf0YjC1+T3J9T4= ) ;; ADDITIONAL SECTION (5 records) backup.rodier.me. 86400 IN A 82.68.21.220 main.rodier.me. 86400 IN A 82.68.21.220 backup.rodier.me. 86400 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 86400 IN AAAA 2a02:8010:684b:3::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone rodier.me

rodier.me

	Checking DS between me and rodier.me
	Query to a2.nic.me for rodier.me/DS
	Received 296 bytes from 199.249.119.1
	;; Response received from 199.249.119.1 (296 octets) ;; HEADER SECTION ;; id = 14184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN DS ;; ANSWER SECTION (3 records) rodier.me. 86400 IN DS ( 22668 8 2 4d7f92cc7ada3bf85d885069b839c4e4ba2ce8fe9cee77433e83204cd69de041 ) rodier.me. 86400 IN DS ( 57226 8 2 24ec539803ff100e643a304f1786ba36f8a6abab4dda7a3576f14bcddcb6e6ff ) rodier.me. 86400 IN RRSIG ( DS 8 2 86400 20220607153543 20220517143543 65286 me. UMzVYb5/2MRoAMOaAtMQ2uo8NlWy49O+jyLcTRV4HmMZ0ycEQFWsLSXK4a3wFyglmWUSik5xEhyM SkTrPGi85cmt4A87cT23iE2IZ8QSmJtqi20CVuSwZWXxpxIQjGtYcn7Wk9eqP61DkghFiur99mDG 725cBZf0YjC1+T3J9T4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for rodier.me in the me zone
	DS=22668/SHA-256 has algorithm RSASHA256
	DS=57226/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`rodier.me. 86400 IN RRSIG ( DS 8 2 86400 20220607153543 20220517143543 65286 me. UMzVYb5/2MRoAMOaAtMQ2uo8NlWy49O+jyLcTRV4HmMZ0ycEQFWsLSXK4a3wFyglmWUSik5xEhyM SkTrPGi85cmt4A87cT23iE2IZ8QSmJtqi20CVuSwZWXxpxIQjGtYcn7Wk9eqP61DkghFiur99mDG 725cBZf0YjC1+T3J9T4= )`
	RRSIG=65286 and DNSKEY=65286 verifies the DS RRset
	DS=22668/SHA-256 is now in the chain-of-trust
	DS=57226/SHA-256 is now in the chain-of-trust
	`rodier.me. 86400 IN DS ( 22668 8 2 4d7f92cc7ada3bf85d885069b839c4e4ba2ce8fe9cee77433e83204cd69de041 )`
	`rodier.me. 86400 IN DS ( 57226 8 2 24ec539803ff100e643a304f1786ba36f8a6abab4dda7a3576f14bcddcb6e6ff )`
	Query to main.rodier.me for rodier.me/DNSKEY
	Received 928 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (928 octets) ;; HEADER SECTION ;; id = 57585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN DNSKEY ;; ANSWER SECTION (4 records) rodier.me. 3600 IN DNSKEY ( 256 3 8 AwEAAbjeijpF+QSwZqcmESx/nO9uFN8Cn0IqCMFpAWmcOfvxG4DghWGiZJ4Hq9wmjkvQPLTF/QOd rLL02cPY530aHTcB6mtOWBsp7Bh9Tb5fpaS/iITVZ06kSZYV27k+qBE2+nGSRBUWlupWbNM0isol x/svctzO/E4+bTz5uDvaealB ) ; Key ID = 22668 rodier.me. 3600 IN DNSKEY ( 257 3 8 AwEAAa7qoJ3vhbfRPqMVrKwnMfLWnyTB8oPi3XOvPmYpcUvAU+ANnUsDpQ7aKROvkqUtg1sBXaNB +KjlWwXWU8D0GNSOyV53sJopqdFpByeFqGHAEE0aRSh7ywpqTbX7R7X5m6gTKEeXF5qIPUyOrZag 9EO94XPQvp2/hKK94a2HyeIvf0TsVzbK/UlCAbAlHV1T0pgXNDXgz1zgopOCbRD7e9W4EHt3mv2Q YYsnQNQyi5dvJr1iP8KSHo4XHUGD6oeVDTV0HOExVnqdOQ1PIX2NmOYI3RfnPoasICPjXC96jXsD 7ZjFCGEbW+bRzFLSds79JmviXhpzQJBPR3GuNthtUtc= ) ; Key ID = 57226 rodier.me. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220617083308 20220518074809 22668 rodier.me. jzWJ56y3mTtC6rTE8/luHpe5O2s60g0iJ4NRtaKso03BzS7ylAu4buDiuL9GVWmPffkkVvoM+Cwz xhgS2iuNH/WjDPgctYvABr1Go96gzum5svCcz636O08iFcGR4szD4QfIQz1Q8/s5+cWE+BxYu6mK FdTC+jRYDZSpEtALm30= ) rodier.me. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220617083308 20220518074809 57226 rodier.me. j4xwn7LmzbBheSyh6aQU2Roe6js+AWjVEL7UpkYJt+9gUD4zDz4LONn4M7RqebMHboIRWvfe6fD5 A3CqbmIQvrkdsm0Wd7VadgAejmGgVEFcC/nkUnYl0t0KdplHQuPtn4+x19g/nv9ESwy8m3W8XiSs YVHksITAmuSOkwA9764f09ipzWSF+qk11K6pgONsAzCKg+jedxvuCKPN3okODWoixRTBUyKwZSmN Lz7nZ6+6k5ar7LCqK8qV/2VzYwSTvsk06Xk9aQ3ZTKpy0lNtdyOkgj7+9GrbqMv07n/AeeDXQhKl S8L0imLGpMONrg+1SA0RetoYOVCU1BFop+jD6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for rodier.me
	`rodier.me. 3600 IN DNSKEY ( 256 3 8 AwEAAbjeijpF+QSwZqcmESx/nO9uFN8Cn0IqCMFpAWmcOfvxG4DghWGiZJ4Hq9wmjkvQPLTF/QOd rLL02cPY530aHTcB6mtOWBsp7Bh9Tb5fpaS/iITVZ06kSZYV27k+qBE2+nGSRBUWlupWbNM0isol x/svctzO/E4+bTz5uDvaealB ) ; Key ID = 22668`
	`rodier.me. 3600 IN DNSKEY ( 257 3 8 AwEAAa7qoJ3vhbfRPqMVrKwnMfLWnyTB8oPi3XOvPmYpcUvAU+ANnUsDpQ7aKROvkqUtg1sBXaNB +KjlWwXWU8D0GNSOyV53sJopqdFpByeFqGHAEE0aRSh7ywpqTbX7R7X5m6gTKEeXF5qIPUyOrZag 9EO94XPQvp2/hKK94a2HyeIvf0TsVzbK/UlCAbAlHV1T0pgXNDXgz1zgopOCbRD7e9W4EHt3mv2Q YYsnQNQyi5dvJr1iP8KSHo4XHUGD6oeVDTV0HOExVnqdOQ1PIX2NmOYI3RfnPoasICPjXC96jXsD 7ZjFCGEbW+bRzFLSds79JmviXhpzQJBPR3GuNthtUtc= ) ; Key ID = 57226`
	DNSKEY=22668 is now in the chain-of-trust
	DS=22668/SHA-256 verifies DNSKEY=22668
	DNSKEY=57226/SEP is now in the chain-of-trust
	DS=57226/SHA-256 verifies DNSKEY=57226/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`rodier.me. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220617083308 20220518074809 22668 rodier.me. jzWJ56y3mTtC6rTE8/luHpe5O2s60g0iJ4NRtaKso03BzS7ylAu4buDiuL9GVWmPffkkVvoM+Cwz xhgS2iuNH/WjDPgctYvABr1Go96gzum5svCcz636O08iFcGR4szD4QfIQz1Q8/s5+cWE+BxYu6mK FdTC+jRYDZSpEtALm30= )`
	`rodier.me. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220617083308 20220518074809 57226 rodier.me. j4xwn7LmzbBheSyh6aQU2Roe6js+AWjVEL7UpkYJt+9gUD4zDz4LONn4M7RqebMHboIRWvfe6fD5 A3CqbmIQvrkdsm0Wd7VadgAejmGgVEFcC/nkUnYl0t0KdplHQuPtn4+x19g/nv9ESwy8m3W8XiSs YVHksITAmuSOkwA9764f09ipzWSF+qk11K6pgONsAzCKg+jedxvuCKPN3okODWoixRTBUyKwZSmN Lz7nZ6+6k5ar7LCqK8qV/2VzYwSTvsk06Xk9aQ3ZTKpy0lNtdyOkgj7+9GrbqMv07n/AeeDXQhKl S8L0imLGpMONrg+1SA0RetoYOVCU1BFop+jD6w== )`
	RRSIG=22668 and DNSKEY=22668 verifies the DNSKEY RRset
	RRSIG=57226 and DNSKEY=57226/SEP verifies the DNSKEY RRset
	Query to main.rodier.me for rodier.me/A
	Received 1196 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (1196 octets) ;; HEADER SECTION ;; id = 41826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (2 records) rodier.me. 3600 IN A 82.68.21.220 rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= ) ;; AUTHORITY SECTION (3 records) rodier.me. 3600 IN NS main.rodier.me. rodier.me. 3600 IN NS backup.rodier.me. rodier.me. 3600 IN RRSIG ( NS 8 2 3600 20220609124951 20220510120953 22668 rodier.me. QXhUIPFN+tQbbdb2NLfvArzY2+RUuUCz6AAC3Ch6OwDBXAS1rZlNJTAcYCFUopvyL902XhsfoN2g 1lJHUGy8MHn+DXj2b5GcbPkTktsF2GPc3ZnVhw5pTdNJ+g1n97txgDXAMvHtu8Xb3aOYevqqDqJl hCoc3+l0z8vGTKXqc+E= ) ;; ADDITIONAL SECTION (9 records) main.rodier.me. 3600 IN A 82.68.21.220 backup.rodier.me. 3600 IN A 82.68.21.220 main.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 backup.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220530105345 20220507140928 22668 rodier.me. ZDviwQXHavKE/lSVBBurpSb813cYI3Wg3N5FPC0zWxtXemb3FYV+dnOXIqD+eqQlKL3c/oqOQoEJ SV/ACvibYHkEZw7iWkrHsWtd5svNHiVttScdkmeLFGLysyRenC/xUB8l3F9eHmpNpKafHNIANobw Uhe7KKkYV+LfN/TjWuc= ) main.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220618024940 20220519022720 22668 rodier.me. P8efRu5Um6kIWng5LjKq4nxPdw7hdFpXEmNsaH8c0HpHLZ/TdTAsVjzFCQHicKex2VTdcpdwQLU/ oohc21Jd2iii3DiWguDDQHKzsJzhBR/2piENqwaa3VDvv/Eo1CNe16e6EReocfGGhYWKTh5mOlRi Fd40ZHYafg0CSM/ipWw= ) backup.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220614212016 20220515210204 22668 rodier.me. B1yjY9XZFTkdDv8Y2/JpNE7he4Sq84NPFOqexAq367trzNLUCAD4eANy82jRkivh0AjFWFrTifb8 6mWBu2SXS2FDNPOsL4MvM+HDhXe6zb+Hcdg8ZBMt8gbrvo5tVzVKnONjhVlOg47anQKThlNrDLXw 1qyOCJ/Uilh4b41HDTg= ) backup.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220528121511 20220507140928 22668 rodier.me. mC2mRfFzSfA16dVLKlS28aL1SgtQM8hZRtWi+OIcT6xymO2vEAhhcRCZk30MM26lrWvTHgGmtBkv w28+3BshsLF2CWWgSmllOXVOwskZYW3VQnHS6VFmAPg3FPNI/vY7yvejoxO3MLVjACT20U40AUfe bZ93wvWtxzFF6TNcwZ0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	main.rodier.me is authoritative for rodier.me
	Found RRSIG signed by rodier.me zone
	Query to backup.rodier.me for rodier.me/SOA
	Received 1058 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (1058 octets) ;; HEADER SECTION ;; id = 20170 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 8 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN SOA ;; ANSWER SECTION (2 records) rodier.me. 3600 IN SOA ( main.rodier.me. hostmaster.rodier.me. 1644607504 ;serial 86400 ;refresh 7200 ;retry 3600000 ;expire 172800 ;minimum ) rodier.me. 3600 IN RRSIG ( SOA 8 2 3600 20220618234809 20220519224809 22668 rodier.me. EIoD6LCfdBlrXjXnI5M/ZGFjaU2kD9JfIjvSTyPA04wE6O0j7b5Crm2TZtzPHrnpX//+X9tFRn3w lDmO1zjmbPEY3JTD+1FhD8vuCVubFFHWc0768Tvye7nMHySVSCfe5aXDfLylE8BlgiYix0jhDzMR nmTv89UYr1/3+n5ulS0= ) ;; AUTHORITY SECTION (3 records) rodier.me. 3600 IN NS backup.rodier.me. rodier.me. 3600 IN NS main.rodier.me. rodier.me. 3600 IN RRSIG ( NS 8 2 3600 20220609124951 20220510120953 22668 rodier.me. QXhUIPFN+tQbbdb2NLfvArzY2+RUuUCz6AAC3Ch6OwDBXAS1rZlNJTAcYCFUopvyL902XhsfoN2g 1lJHUGy8MHn+DXj2b5GcbPkTktsF2GPc3ZnVhw5pTdNJ+g1n97txgDXAMvHtu8Xb3aOYevqqDqJl hCoc3+l0z8vGTKXqc+E= ) ;; ADDITIONAL SECTION (8 records) main.rodier.me. 3600 IN A 82.68.21.220 backup.rodier.me. 3600 IN A 82.68.21.220 main.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 backup.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220530105345 20220507140928 22668 rodier.me. ZDviwQXHavKE/lSVBBurpSb813cYI3Wg3N5FPC0zWxtXemb3FYV+dnOXIqD+eqQlKL3c/oqOQoEJ SV/ACvibYHkEZw7iWkrHsWtd5svNHiVttScdkmeLFGLysyRenC/xUB8l3F9eHmpNpKafHNIANobw Uhe7KKkYV+LfN/TjWuc= ) main.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220618024940 20220519022720 22668 rodier.me. P8efRu5Um6kIWng5LjKq4nxPdw7hdFpXEmNsaH8c0HpHLZ/TdTAsVjzFCQHicKex2VTdcpdwQLU/ oohc21Jd2iii3DiWguDDQHKzsJzhBR/2piENqwaa3VDvv/Eo1CNe16e6EReocfGGhYWKTh5mOlRi Fd40ZHYafg0CSM/ipWw= ) backup.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220614212016 20220515210204 22668 rodier.me. B1yjY9XZFTkdDv8Y2/JpNE7he4Sq84NPFOqexAq367trzNLUCAD4eANy82jRkivh0AjFWFrTifb8 6mWBu2SXS2FDNPOsL4MvM+HDhXe6zb+Hcdg8ZBMt8gbrvo5tVzVKnONjhVlOg47anQKThlNrDLXw 1qyOCJ/Uilh4b41HDTg= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to main.rodier.me for rodier.me/A
	Received 1196 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (1196 octets) ;; HEADER SECTION ;; id = 30009 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (2 records) rodier.me. 3600 IN A 82.68.21.220 rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= ) ;; AUTHORITY SECTION (3 records) rodier.me. 3600 IN NS main.rodier.me. rodier.me. 3600 IN NS backup.rodier.me. rodier.me. 3600 IN RRSIG ( NS 8 2 3600 20220609124951 20220510120953 22668 rodier.me. QXhUIPFN+tQbbdb2NLfvArzY2+RUuUCz6AAC3Ch6OwDBXAS1rZlNJTAcYCFUopvyL902XhsfoN2g 1lJHUGy8MHn+DXj2b5GcbPkTktsF2GPc3ZnVhw5pTdNJ+g1n97txgDXAMvHtu8Xb3aOYevqqDqJl hCoc3+l0z8vGTKXqc+E= ) ;; ADDITIONAL SECTION (9 records) main.rodier.me. 3600 IN A 82.68.21.220 backup.rodier.me. 3600 IN A 82.68.21.220 main.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 backup.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220530105345 20220507140928 22668 rodier.me. ZDviwQXHavKE/lSVBBurpSb813cYI3Wg3N5FPC0zWxtXemb3FYV+dnOXIqD+eqQlKL3c/oqOQoEJ SV/ACvibYHkEZw7iWkrHsWtd5svNHiVttScdkmeLFGLysyRenC/xUB8l3F9eHmpNpKafHNIANobw Uhe7KKkYV+LfN/TjWuc= ) main.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220618024940 20220519022720 22668 rodier.me. P8efRu5Um6kIWng5LjKq4nxPdw7hdFpXEmNsaH8c0HpHLZ/TdTAsVjzFCQHicKex2VTdcpdwQLU/ oohc21Jd2iii3DiWguDDQHKzsJzhBR/2piENqwaa3VDvv/Eo1CNe16e6EReocfGGhYWKTh5mOlRi Fd40ZHYafg0CSM/ipWw= ) backup.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220614212016 20220515210204 22668 rodier.me. B1yjY9XZFTkdDv8Y2/JpNE7he4Sq84NPFOqexAq367trzNLUCAD4eANy82jRkivh0AjFWFrTifb8 6mWBu2SXS2FDNPOsL4MvM+HDhXe6zb+Hcdg8ZBMt8gbrvo5tVzVKnONjhVlOg47anQKThlNrDLXw 1qyOCJ/Uilh4b41HDTg= ) backup.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220528121511 20220507140928 22668 rodier.me. mC2mRfFzSfA16dVLKlS28aL1SgtQM8hZRtWi+OIcT6xymO2vEAhhcRCZk30MM26lrWvTHgGmtBkv w28+3BshsLF2CWWgSmllOXVOwskZYW3VQnHS6VFmAPg3FPNI/vY7yvejoxO3MLVjACT20U40AUfe bZ93wvWtxzFF6TNcwZ0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	rodier.me A RR has value 82.68.21.220
	Found 1 RRSIGs over A RRset
	`rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= )`
	RRSIG=22668 and DNSKEY=22668 verifies the A RRset

rodier.me

	Query to backup.rodier.me for rodier.me/A
	Received 1196 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (1196 octets) ;; HEADER SECTION ;; id = 26434 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (2 records) rodier.me. 3600 IN A 82.68.21.220 rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= ) ;; AUTHORITY SECTION (3 records) rodier.me. 3600 IN NS main.rodier.me. rodier.me. 3600 IN NS backup.rodier.me. rodier.me. 3600 IN RRSIG ( NS 8 2 3600 20220609124951 20220510120953 22668 rodier.me. QXhUIPFN+tQbbdb2NLfvArzY2+RUuUCz6AAC3Ch6OwDBXAS1rZlNJTAcYCFUopvyL902XhsfoN2g 1lJHUGy8MHn+DXj2b5GcbPkTktsF2GPc3ZnVhw5pTdNJ+g1n97txgDXAMvHtu8Xb3aOYevqqDqJl hCoc3+l0z8vGTKXqc+E= ) ;; ADDITIONAL SECTION (9 records) main.rodier.me. 3600 IN A 82.68.21.220 backup.rodier.me. 3600 IN A 82.68.21.220 main.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 backup.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220530105345 20220507140928 22668 rodier.me. ZDviwQXHavKE/lSVBBurpSb813cYI3Wg3N5FPC0zWxtXemb3FYV+dnOXIqD+eqQlKL3c/oqOQoEJ SV/ACvibYHkEZw7iWkrHsWtd5svNHiVttScdkmeLFGLysyRenC/xUB8l3F9eHmpNpKafHNIANobw Uhe7KKkYV+LfN/TjWuc= ) main.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220618024940 20220519022720 22668 rodier.me. P8efRu5Um6kIWng5LjKq4nxPdw7hdFpXEmNsaH8c0HpHLZ/TdTAsVjzFCQHicKex2VTdcpdwQLU/ oohc21Jd2iii3DiWguDDQHKzsJzhBR/2piENqwaa3VDvv/Eo1CNe16e6EReocfGGhYWKTh5mOlRi Fd40ZHYafg0CSM/ipWw= ) backup.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220614212016 20220515210204 22668 rodier.me. B1yjY9XZFTkdDv8Y2/JpNE7he4Sq84NPFOqexAq367trzNLUCAD4eANy82jRkivh0AjFWFrTifb8 6mWBu2SXS2FDNPOsL4MvM+HDhXe6zb+Hcdg8ZBMt8gbrvo5tVzVKnONjhVlOg47anQKThlNrDLXw 1qyOCJ/Uilh4b41HDTg= ) backup.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220528121511 20220507140928 22668 rodier.me. mC2mRfFzSfA16dVLKlS28aL1SgtQM8hZRtWi+OIcT6xymO2vEAhhcRCZk30MM26lrWvTHgGmtBkv w28+3BshsLF2CWWgSmllOXVOwskZYW3VQnHS6VFmAPg3FPNI/vY7yvejoxO3MLVjACT20U40AUfe bZ93wvWtxzFF6TNcwZ0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	backup.rodier.me is authoritative for rodier.me
	Found RRSIG signed by rodier.me zone
	Query to backup.rodier.me for rodier.me/A
	Received 1196 bytes from 82.68.21.220
	;; Response received from 82.68.21.220 (1196 octets) ;; HEADER SECTION ;; id = 9668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rodier.me. IN A ;; ANSWER SECTION (2 records) rodier.me. 3600 IN A 82.68.21.220 rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= ) ;; AUTHORITY SECTION (3 records) rodier.me. 3600 IN NS backup.rodier.me. rodier.me. 3600 IN NS main.rodier.me. rodier.me. 3600 IN RRSIG ( NS 8 2 3600 20220609124951 20220510120953 22668 rodier.me. QXhUIPFN+tQbbdb2NLfvArzY2+RUuUCz6AAC3Ch6OwDBXAS1rZlNJTAcYCFUopvyL902XhsfoN2g 1lJHUGy8MHn+DXj2b5GcbPkTktsF2GPc3ZnVhw5pTdNJ+g1n97txgDXAMvHtu8Xb3aOYevqqDqJl hCoc3+l0z8vGTKXqc+E= ) ;; ADDITIONAL SECTION (9 records) main.rodier.me. 3600 IN A 82.68.21.220 backup.rodier.me. 3600 IN A 82.68.21.220 main.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 backup.rodier.me. 3600 IN AAAA 2a02:8010:684b:3::2 main.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220530105345 20220507140928 22668 rodier.me. ZDviwQXHavKE/lSVBBurpSb813cYI3Wg3N5FPC0zWxtXemb3FYV+dnOXIqD+eqQlKL3c/oqOQoEJ SV/ACvibYHkEZw7iWkrHsWtd5svNHiVttScdkmeLFGLysyRenC/xUB8l3F9eHmpNpKafHNIANobw Uhe7KKkYV+LfN/TjWuc= ) main.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220618024940 20220519022720 22668 rodier.me. P8efRu5Um6kIWng5LjKq4nxPdw7hdFpXEmNsaH8c0HpHLZ/TdTAsVjzFCQHicKex2VTdcpdwQLU/ oohc21Jd2iii3DiWguDDQHKzsJzhBR/2piENqwaa3VDvv/Eo1CNe16e6EReocfGGhYWKTh5mOlRi Fd40ZHYafg0CSM/ipWw= ) backup.rodier.me. 3600 IN RRSIG ( A 8 3 3600 20220614212016 20220515210204 22668 rodier.me. B1yjY9XZFTkdDv8Y2/JpNE7he4Sq84NPFOqexAq367trzNLUCAD4eANy82jRkivh0AjFWFrTifb8 6mWBu2SXS2FDNPOsL4MvM+HDhXe6zb+Hcdg8ZBMt8gbrvo5tVzVKnONjhVlOg47anQKThlNrDLXw 1qyOCJ/Uilh4b41HDTg= ) backup.rodier.me. 3600 IN RRSIG ( AAAA 8 3 3600 20220528121511 20220507140928 22668 rodier.me. mC2mRfFzSfA16dVLKlS28aL1SgtQM8hZRtWi+OIcT6xymO2vEAhhcRCZk30MM26lrWvTHgGmtBkv w28+3BshsLF2CWWgSmllOXVOwskZYW3VQnHS6VFmAPg3FPNI/vY7yvejoxO3MLVjACT20U40AUfe bZ93wvWtxzFF6TNcwZ0= ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	rodier.me A RR has value 82.68.21.220
	Found 1 RRSIGs over A RRset
	`rodier.me. 3600 IN RRSIG ( A 8 2 3600 20220530105345 20220507140928 22668 rodier.me. E7P41brxkn/ngpSR0M7xuXlEY3fpkBtyxzmLn4dF6TxpuL4mYiW7o/YXThkVZZ9ta6cPwKvBb1lk geDBFshvAGKOB9QCwyWNMxXbT0wnaAg2i7bAqy/q5uuaqg80y2hmiR2gufT2lJ+Z/K1IBav5Flxs BIayZ/7sB8PaiqzOeF8= )`
	RRSIG=22668 and DNSKEY=22668 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rodier.me at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: