DNSSEC Analyzer - saeca.es

Domain Name:

Time: 2023-01-30 00:38:33 UTC, NTP stratum 4

Analyzing DNSSEC problems for saeca.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 865 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (865 octets) ;; HEADER SECTION ;; id = 62557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230211000000 20230121000000 20326 . UTKe6Ir/OYc+YxQKtVtll09sl7Iirz0ajr6Wtu6KZjDoXg0hSze1NKIlth7kqvXY0q1lBub5Biyk SeACSmjDUZKJ3JK4tSgMg/UqWi/Se6v8fRfv120nJZKWmUg4Iy8GXJGDLmbghz4hHW62pZ2KKDaN Fm2+u7AcRFPmyCDGCxouTFZUfjQGiO8p3+T1BESqbq+zwMF78Mls/e5qtTqSF9mQBJNGJ99FIbPc p006e5KFaP5DoL9dtbUOvmLZVzmtBiEpQUUxD/FXWQwZckKbebF8/Ja8FdctXYngrJOwaYyxnVkc 8julOAEtzRlmJOzFHVyau1QESCOfT5F1SlYrpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230211000000 20230121000000 20326 . UTKe6Ir/OYc+YxQKtVtll09sl7Iirz0ajr6Wtu6KZjDoXg0hSze1NKIlth7kqvXY0q1lBub5Biyk SeACSmjDUZKJ3JK4tSgMg/UqWi/Se6v8fRfv120nJZKWmUg4Iy8GXJGDLmbghz4hHW62pZ2KKDaN Fm2+u7AcRFPmyCDGCxouTFZUfjQGiO8p3+T1BESqbq+zwMF78Mls/e5qtTqSF9mQBJNGJ99FIbPc p006e5KFaP5DoL9dtbUOvmLZVzmtBiEpQUUxD/FXWQwZckKbebF8/Ja8FdctXYngrJOwaYyxnVkc 8julOAEtzRlmJOzFHVyau1QESCOfT5F1SlYrpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=951 is now in the chain-of-trust
	Query to b.root-servers.net for saeca.es/A
	Received 616 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (616 octets) ;; HEADER SECTION ;; id = 55303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to k.root-servers.net for es/DNSKEY
	Received 610 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (610 octets) ;; HEADER SECTION ;; id = 15251 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to k.root-servers.net for es/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (366 octets) ;; HEADER SECTION ;; id = 3136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for es in the . zone
	DS=44375/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== )`
	RRSIG=951 and DNSKEY=951 verifies the DS RRset
	DS=44375/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 )`
	Query to h.nic.es for es/DNSKEY
	Received 873 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (873 octets) ;; HEADER SECTION ;; id = 2213 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375 es. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/TD9L+Q6heYdEVbRokA8ffNIovn8RBJfi4NkLPrO+TyNeOuHkx92/RnTViO4auqrBuDptW h9jkWxsKL/vIWntDVI9AbZA3I9mc03uhneJQArWP1oaIGpETlFEnJG7bo0ekFnJ/SPbnDxr/ZP+9 VwTdHyKAQoM+CH/c9LR0ZcC3KZPgY+iWt90VFrQ27dSytau12dkTThvAqi1c72h6PZtWkAlO3ooK UtGq/oh5X7GcgM5NZoHjJ8lei+lU95KyMHQKutXF8vCbV46zTkEpOFzA81dybgzREInK1KjbwkLU oaQHoz73sT91c/bkEGOc+YEGjTolbV19HE8eSR5qTvc= ) ; Key ID = 32974 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230208135103 20230125160500 44375 es. TWQljxT8utgvariuCqCt+FW3XYj5HZzIQKDLt/lVoSxWtBvKXrNZGYG1hE5EM4s7h+0m0+KUNyLe xis3In5/MWNkIqdtHPVrBndNxdDi4Klukmu8DSdGeb21YRMg0+NhxXM+gQ3o/6eUbP4pskZSpQWb qK2EuBLRrDYGTLb0X9wIQqzmWPcKok59wO6OJUrmqIvrzviE28xxeKJ0m+yXSHZVjNl5SM8VLUJS LkoRm6+SGcXEskxTMho4+danM/reRsnT92mStOZzukfqgnvAxJ/k1CpVkf9VXy3U6m7KdE/XAksu 3DtkUdF4CKfVlO/SlTBEnpUkqRAQXFbhJ8cCbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/TD9L+Q6heYdEVbRokA8ffNIovn8RBJfi4NkLPrO+TyNeOuHkx92/RnTViO4auqrBuDptW h9jkWxsKL/vIWntDVI9AbZA3I9mc03uhneJQArWP1oaIGpETlFEnJG7bo0ekFnJ/SPbnDxr/ZP+9 VwTdHyKAQoM+CH/c9LR0ZcC3KZPgY+iWt90VFrQ27dSytau12dkTThvAqi1c72h6PZtWkAlO3ooK UtGq/oh5X7GcgM5NZoHjJ8lei+lU95KyMHQKutXF8vCbV46zTkEpOFzA81dybgzREInK1KjbwkLU oaQHoz73sT91c/bkEGOc+YEGjTolbV19HE8eSR5qTvc= ) ; Key ID = 32974`
	DNSKEY=44375/SEP is now in the chain-of-trust
	DS=44375/SHA-256 verifies DNSKEY=44375/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230208135103 20230125160500 44375 es. TWQljxT8utgvariuCqCt+FW3XYj5HZzIQKDLt/lVoSxWtBvKXrNZGYG1hE5EM4s7h+0m0+KUNyLe xis3In5/MWNkIqdtHPVrBndNxdDi4Klukmu8DSdGeb21YRMg0+NhxXM+gQ3o/6eUbP4pskZSpQWb qK2EuBLRrDYGTLb0X9wIQqzmWPcKok59wO6OJUrmqIvrzviE28xxeKJ0m+yXSHZVjNl5SM8VLUJS LkoRm6+SGcXEskxTMho4+danM/reRsnT92mStOZzukfqgnvAxJ/k1CpVkf9VXy3U6m7KdE/XAksu 3DtkUdF4CKfVlO/SlTBEnpUkqRAQXFbhJ8cCbw== )`
	RRSIG=44375 and DNSKEY=44375/SEP verifies the DNSKEY RRset
	DNSKEY=32974 is now in the chain-of-trust
	Query to g.nic.es for saeca.es/A
	Received 840 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (840 octets) ;; HEADER SECTION ;; id = 3216 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) saeca.es. 86400 IN NS ns0.intervia.com. saeca.es. 86400 IN NS ns1.intervia.com. 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a hm8lg31rrcuo9sbraf1c7bks1m1409o5 NS DS RRSIG ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212011139 20230129040435 32974 es. jfE96HuKGReizZ4eXzYBF+fEJQrk1s2q05eVqnqv9kLr/izIllxtqrq01LwmZsJikfY+XoLbmlqu Tf6kfEDuZ68KmNAJxD3JNPknRnfeKPxqks94adGQVz4KwKO2OkL2Ih0mcSFnt0eeAJve3dH01bnS lHYz7NRLucTKYA6AXHhctfJzXEvoX7jR0QZBWJtPeJTFeRwWwvn9DyZCaf/BBrHoSO+Cy4dhOekS gsBBAqhsGwYUdbMP0vxjWfC8Y+tgjw6DJaGxEXQYn/gy+TALksPC4YxazPoejHLrMwhIZpFO3Ag6 BOFhujlDV4yliipq9qgP6EPq0kVJYh+VVluvXw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.es for saeca.es/DNSKEY
	Received 840 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (840 octets) ;; HEADER SECTION ;; id = 61328 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) saeca.es. 86400 IN NS ns1.intervia.com. saeca.es. 86400 IN NS ns0.intervia.com. 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a hm8lg31rrcuo9sbraf1c7bks1m1409o5 NS DS RRSIG ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212011139 20230129040435 32974 es. jfE96HuKGReizZ4eXzYBF+fEJQrk1s2q05eVqnqv9kLr/izIllxtqrq01LwmZsJikfY+XoLbmlqu Tf6kfEDuZ68KmNAJxD3JNPknRnfeKPxqks94adGQVz4KwKO2OkL2Ih0mcSFnt0eeAJve3dH01bnS lHYz7NRLucTKYA6AXHhctfJzXEvoX7jR0QZBWJtPeJTFeRwWwvn9DyZCaf/BBrHoSO+Cy4dhOekS gsBBAqhsGwYUdbMP0vxjWfC8Y+tgjw6DJaGxEXQYn/gy+TALksPC4YxazPoejHLrMwhIZpFO3Ag6 BOFhujlDV4yliipq9qgP6EPq0kVJYh+VVluvXw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone saeca.es

saeca.es

	Checking DS between es and saeca.es
	Query to c.nic.es for saeca.es/DS
	Received 1137 bytes from 194.0.34.53
	;; Response received from 194.0.34.53 (1137 octets) ;; HEADER SECTION ;; id = 37494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2023012906 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a hm8lg31rrcuo9sbraf1c7bks1m1409o5 NS DS RRSIG ) es. 3600 IN RRSIG ( SOA 8 1 3600 20230213011450 20230129200450 32974 es. FgBGKIV347S2l9psj/LOrZz26xfMHYY7mX9UZvvDh50WorXcmD0MEPG1IdCM0q0QKuavDXOmXqX1 SUmtgCGoOeRVrI8lE3o5BP1rE3TT6cTvP5FbJ+J2ob+H7Ooay1QERltj+OlvOZXvYOv6nOW+SSg1 a2dKeA9Ok+DwGyG0ZOQQ/ZFEB98bihnyno7Gvwu8zlfmyo3sJ/tgO9o5xY14MiIQTbNKoUrG390Y uOZvSmP0NOYmxNtBCEGZHS+HWlPmqOmXWgzXgRGZP8YTy5Moan0n7XEnqQ6Bn5tjaAo0IjS9qh+i PywcAjUZYhvADCgFTiBeMPAaDXwS/oiEKwsHgw== ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) hm73s68n5rqf5r0hm90gautmceu4njd9.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212011139 20230129040435 32974 es. jfE96HuKGReizZ4eXzYBF+fEJQrk1s2q05eVqnqv9kLr/izIllxtqrq01LwmZsJikfY+XoLbmlqu Tf6kfEDuZ68KmNAJxD3JNPknRnfeKPxqks94adGQVz4KwKO2OkL2Ih0mcSFnt0eeAJve3dH01bnS lHYz7NRLucTKYA6AXHhctfJzXEvoX7jR0QZBWJtPeJTFeRwWwvn9DyZCaf/BBrHoSO+Cy4dhOekS gsBBAqhsGwYUdbMP0vxjWfC8Y+tgjw6DJaGxEXQYn/gy+TALksPC4YxazPoejHLrMwhIZpFO3Ag6 BOFhujlDV4yliipq9qgP6EPq0kVJYh+VVluvXw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for saeca.es in the es zone
	Query to ns0.intervia.com for saeca.es/DNSKEY
	Received 100 bytes from 95.211.136.209
	;; Response received from 95.211.136.209 (100 octets) ;; HEADER SECTION ;; id = 57927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) saeca.es. 300 IN SOA ( ns0.intervia.com. postmaster.intervia.com. 2022092901 ;serial 3600 ;refresh 1200 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns1.intervia.com for saeca.es/A
	Received 167 bytes from 5.79.75.205
	;; Response received from 5.79.75.205 (167 octets) ;; HEADER SECTION ;; id = 29027 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns0.intervia.com. saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. ;; ADDITIONAL SECTION (4 records) ns0.intervia.com. 300 IN A 95.211.136.209 ns1.intervia.com. 300 IN A 5.79.75.205 ns2.intervia.com. 300 IN A 78.159.100.245 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.intervia.com is authoritative for saeca.es
	Query to ns0.intervia.com for saeca.es/SOA
	Received 198 bytes from 95.211.136.209
	;; Response received from 95.211.136.209 (198 octets) ;; HEADER SECTION ;; id = 2795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN SOA ;; ANSWER SECTION (1 record) saeca.es. 300 IN SOA ( ns0.intervia.com. postmaster.intervia.com. 2022092901 ;serial 3600 ;refresh 1200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns2.intervia.com. saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns0.intervia.com. ;; ADDITIONAL SECTION (4 records) ns0.intervia.com. 300 IN A 95.211.136.209 ns1.intervia.com. 300 IN A 5.79.75.205 ns2.intervia.com. 300 IN A 78.159.100.245 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.intervia.com for saeca.es/SOA
	Received 150 bytes from 78.159.100.245
	;; Response received from 78.159.100.245 (150 octets) ;; HEADER SECTION ;; id = 668 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN SOA ;; ANSWER SECTION (1 record) saeca.es. 300 IN SOA ( ns0.intervia.com. postmaster.intervia.com. 2022092901 ;serial 3600 ;refresh 1200 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns0.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.intervia.com for saeca.es/A
	Received 167 bytes from 5.79.75.205
	;; Response received from 5.79.75.205 (167 octets) ;; HEADER SECTION ;; id = 40818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. saeca.es. 300 IN NS ns0.intervia.com. ;; ADDITIONAL SECTION (4 records) ns0.intervia.com. 300 IN A 95.211.136.209 ns1.intervia.com. 300 IN A 5.79.75.205 ns2.intervia.com. 300 IN A 78.159.100.245 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saeca.es A RR has value 37.48.116.53
	No RRSIGs found

saeca.es

	Query to ns2.intervia.com for saeca.es/A
	Received 119 bytes from 78.159.100.245
	;; Response received from 78.159.100.245 (119 octets) ;; HEADER SECTION ;; id = 5483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. saeca.es. 300 IN NS ns0.intervia.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.intervia.com is authoritative for saeca.es
	Query to ns2.intervia.com for saeca.es/A
	Received 119 bytes from 78.159.100.245
	;; Response received from 78.159.100.245 (119 octets) ;; HEADER SECTION ;; id = 20216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns2.intervia.com. saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns0.intervia.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	saeca.es A RR has value 37.48.116.53
	No RRSIGs found

saeca.es

	Query to ns0.intervia.com for saeca.es/A
	Received 167 bytes from 95.211.136.209
	;; Response received from 95.211.136.209 (167 octets) ;; HEADER SECTION ;; id = 45715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns0.intervia.com. saeca.es. 300 IN NS ns1.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. ;; ADDITIONAL SECTION (4 records) ns0.intervia.com. 300 IN A 95.211.136.209 ns1.intervia.com. 300 IN A 5.79.75.205 ns2.intervia.com. 300 IN A 78.159.100.245 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns0.intervia.com is authoritative for saeca.es
	Query to ns0.intervia.com for saeca.es/A
	Received 167 bytes from 95.211.136.209
	;; Response received from 95.211.136.209 (167 octets) ;; HEADER SECTION ;; id = 40671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; saeca.es. IN A ;; ANSWER SECTION (1 record) saeca.es. 300 IN A 37.48.116.53 ;; AUTHORITY SECTION (3 records) saeca.es. 300 IN NS ns0.intervia.com. saeca.es. 300 IN NS ns2.intervia.com. saeca.es. 300 IN NS ns1.intervia.com. ;; ADDITIONAL SECTION (4 records) ns0.intervia.com. 300 IN A 95.211.136.209 ns1.intervia.com. 300 IN A 5.79.75.205 ns2.intervia.com. 300 IN A 78.159.100.245 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	saeca.es A RR has value 37.48.116.53
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test saeca.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: