DNSSEC Debugger - salvoandrea.eu

Domain Name:

Time: 2025-05-09 06:07:13 UTC

Analyzing DNSSEC problems for salvoandrea.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 35565 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250522000000 20250501000000 20326 . WTJMlb+whz46fmQ9Vxp2cIbP7VOUWCR8FPv0FbUI2koD3mXCZew8oZOwe1atAHpblB9+kN7h8Mzz KTbhkleV88nU7BjvWcijKcKwtvC8vibe+FBwDIEevtMFimXPq4QOdu4W3Tt4LTzLbNBamrWFTLg+ 25lz4t65Oie6TxdDGNR4jA8k39Mof9L4c3YTOspVKrBjUkWmtExKyBxvQOs/Ym7wHYUZmX3SUaq9 1Ucs+EHR6caewSdIgkZobjiW+h5Abrgp4KHkvJdLa4MI6KB+mIHeffKO8FbBQA0rOdaSiaSgma54 DuqAKeB+aXUUPLJlt6bHOHVrU3VeGb4jahiRTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250522000000 20250501000000 20326 . WTJMlb+whz46fmQ9Vxp2cIbP7VOUWCR8FPv0FbUI2koD3mXCZew8oZOwe1atAHpblB9+kN7h8Mzz KTbhkleV88nU7BjvWcijKcKwtvC8vibe+FBwDIEevtMFimXPq4QOdu4W3Tt4LTzLbNBamrWFTLg+ 25lz4t65Oie6TxdDGNR4jA8k39Mof9L4c3YTOspVKrBjUkWmtExKyBxvQOs/Ym7wHYUZmX3SUaq9 1Ucs+EHR6caewSdIgkZobjiW+h5Abrgp4KHkvJdLa4MI6KB+mIHeffKO8FbBQA0rOdaSiaSgma54 DuqAKeB+aXUUPLJlt6bHOHVrU3VeGb4jahiRTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	Query to b.root-servers.net for salvoandrea.eu/A
	Received 656 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 656 octets ;; HEADER SECTION ;; id = 43394 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20250522050000 20250509040000 53148 . sNHMYyAho1DYcQXp8f0onQGAzzbgS4hp79tmiYOAgfIZxmfcE3rx/syN/LdFtugpuLNdJP/znrR4 LNR4PW4cQcBeudBUTN270cUsLd1vaz6VvfNaDS7VbfpmiULBPPYPVkCjaW0ZdrDwP9nI0NdSnXDb GtpZnGwTo/wT872vCBCd0SOus+nLmnvihnFVCpBjNaEzqcpmrJgcXSAAq+CvkqT6fzYcaYMth+kq hF2qI5bDGrB9kRkzDD4340m3Pf/DaXdKNMfEKWuOscACY/3KnUXpvpVxGDZmjKO2x764eg8gJdoj B73el6I/gVfcmJSc7v+tyWXvP2MhGisf0cGQ4g== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN A 185.151.141.1 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN A 194.146.106.90 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 be.dns.eu. 172800 IN A 149.38.1.26 si.dns.eu. 172800 IN A 193.2.221.62 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for eu/DNSKEY
	Received 646 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 646 octets ;; HEADER SECTION ;; id = 33110 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 10 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20250522050000 20250509040000 53148 . sNHMYyAho1DYcQXp8f0onQGAzzbgS4hp79tmiYOAgfIZxmfcE3rx/syN/LdFtugpuLNdJP/znrR4 LNR4PW4cQcBeudBUTN270cUsLd1vaz6VvfNaDS7VbfpmiULBPPYPVkCjaW0ZdrDwP9nI0NdSnXDb GtpZnGwTo/wT872vCBCd0SOus+nLmnvihnFVCpBjNaEzqcpmrJgcXSAAq+CvkqT6fzYcaYMth+kq hF2qI5bDGrB9kRkzDD4340m3Pf/DaXdKNMfEKWuOscACY/3KnUXpvpVxGDZmjKO2x764eg8gJdoj B73el6I/gVfcmJSc7v+tyWXvP2MhGisf0cGQ4g== ) ;; ADDITIONAL SECTION (10 records) si.dns.eu. 172800 IN A 193.2.221.62 be.dns.eu. 172800 IN A 149.38.1.26 y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 w.dns.eu. 172800 IN A 194.0.25.28 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 w.dns.eu. 172800 IN AAAA 2001:678:20::28 ;; { "EDNS-VERSION": 0 }
	Found child zone eu

	Checking DS between . and eu
	Query to g.root-servers.net for eu/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 31482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20250522050000 20250509040000 53148 . sNHMYyAho1DYcQXp8f0onQGAzzbgS4hp79tmiYOAgfIZxmfcE3rx/syN/LdFtugpuLNdJP/znrR4 LNR4PW4cQcBeudBUTN270cUsLd1vaz6VvfNaDS7VbfpmiULBPPYPVkCjaW0ZdrDwP9nI0NdSnXDb GtpZnGwTo/wT872vCBCd0SOus+nLmnvihnFVCpBjNaEzqcpmrJgcXSAAq+CvkqT6fzYcaYMth+kq hF2qI5bDGrB9kRkzDD4340m3Pf/DaXdKNMfEKWuOscACY/3KnUXpvpVxGDZmjKO2x764eg8gJdoj B73el6I/gVfcmJSc7v+tyWXvP2MhGisf0cGQ4g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for eu in the . zone
	DS=35926/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20250522050000 20250509040000 53148 . sNHMYyAho1DYcQXp8f0onQGAzzbgS4hp79tmiYOAgfIZxmfcE3rx/syN/LdFtugpuLNdJP/znrR4 LNR4PW4cQcBeudBUTN270cUsLd1vaz6VvfNaDS7VbfpmiULBPPYPVkCjaW0ZdrDwP9nI0NdSnXDb GtpZnGwTo/wT872vCBCd0SOus+nLmnvihnFVCpBjNaEzqcpmrJgcXSAAq+CvkqT6fzYcaYMth+kq hF2qI5bDGrB9kRkzDD4340m3Pf/DaXdKNMfEKWuOscACY/3KnUXpvpVxGDZmjKO2x764eg8gJdoj B73el6I/gVfcmJSc7v+tyWXvP2MhGisf0cGQ4g== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=35926/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c )`
	Query to w.dns.eu for eu/DNSKEY
	Received 907 bytes from 194.0.25.28
	;; Response received from [194.0.25.28] 907 octets ;; HEADER SECTION ;; id = 32945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAc7dKvibOOyLad+w6XFt6XT1gUbzJLNflSFPiL2JezgEUB2j0urNFGsnqkJPFZx9Tf7AicNS QaIuUE2Kh7eJ84y/KqeXFkCM+JJfGnUaBJVIPpeZBRpnbdJIZVjx78SSrM7mcsnIBcrf5LU12RyW VzwL3n+w+2LkJDMsByz4N6HF ) ; keytag 43428 eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; keytag 35926 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250511191235 20250504191041 35926 eu. bqJGvKkhma4hc8H6KAO6v2GFMBpIhfiXoHTJRMGqcJKcB/R4gVH/3bzZE7/YxpMbvCEsxoQdT9bP H8MsLvghKbnZ/5evd80W2qCLhRcNr1LXOZfXEprvpqRBjHK0pfL5orkO7rdrB41gmXZpdGwjoBa1 ZwzJK0NYiUEY6odKMMftEL1kC9eUVu+K2WVIO8UZiCJ3IF5f6pTYzixE664ChOF6LNLkpvyLTGp2 CvzXiNDaAL05S+WaqNf5mxHeC9VKWYBqjfK/yWL6iI2H6ne+n7pZEeTpWEK2DUz01XNk7YC+BDn8 cJE2eBz0DE/ZFIx3exIODDxbLOYz4mQ7M6T0nw== ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250511191235 20250504191041 43428 eu. lCBTzLjRN7JOJaFe5T6g4dZyWsrnzwEN07YPd36PSaC5M6+P6CXeDVFdwYaWYjsZG3PRKCDs88JD 2zzzl0ywI5g5uZD9V7t5qmQDE6C6h1pGg+diQVki4EO3ZBbYV+kP7hhT3jDuiZ+DiUM4KdWUU+it RxEvkR5lXngFYULwhYE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAc7dKvibOOyLad+w6XFt6XT1gUbzJLNflSFPiL2JezgEUB2j0urNFGsnqkJPFZx9Tf7AicNS QaIuUE2Kh7eJ84y/KqeXFkCM+JJfGnUaBJVIPpeZBRpnbdJIZVjx78SSrM7mcsnIBcrf5LU12RyW VzwL3n+w+2LkJDMsByz4N6HF ) ; keytag 43428`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; keytag 35926`
	DNSKEY=35926/SEP is now in the chain-of-trust
	DS=35926/SHA-256 verifies DNSKEY=35926/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250511191235 20250504191041 35926 eu. bqJGvKkhma4hc8H6KAO6v2GFMBpIhfiXoHTJRMGqcJKcB/R4gVH/3bzZE7/YxpMbvCEsxoQdT9bP H8MsLvghKbnZ/5evd80W2qCLhRcNr1LXOZfXEprvpqRBjHK0pfL5orkO7rdrB41gmXZpdGwjoBa1 ZwzJK0NYiUEY6odKMMftEL1kC9eUVu+K2WVIO8UZiCJ3IF5f6pTYzixE664ChOF6LNLkpvyLTGp2 CvzXiNDaAL05S+WaqNf5mxHeC9VKWYBqjfK/yWL6iI2H6ne+n7pZEeTpWEK2DUz01XNk7YC+BDn8 cJE2eBz0DE/ZFIx3exIODDxbLOYz4mQ7M6T0nw== )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250511191235 20250504191041 43428 eu. lCBTzLjRN7JOJaFe5T6g4dZyWsrnzwEN07YPd36PSaC5M6+P6CXeDVFdwYaWYjsZG3PRKCDs88JD 2zzzl0ywI5g5uZD9V7t5qmQDE6C6h1pGg+diQVki4EO3ZBbYV+kP7hhT3jDuiZ+DiUM4KdWUU+it RxEvkR5lXngFYULwhYE= )`
	RRSIG=35926 and DNSKEY=35926/SEP verifies the DNSKEY RRset
	RRSIG=43428 and DNSKEY=43428 verifies the DNSKEY RRset
	DNSKEY=43428 is now in the chain-of-trust
	Query to si.dns.eu for salvoandrea.eu/A
	Received 312 bytes from 193.2.221.62
	;; Response received from [193.2.221.62] 312 octets ;; HEADER SECTION ;; id = 54776 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) salvoandrea.eu. 86400 IN NS eloise.ns.cloudflare.com. salvoandrea.eu. 86400 IN NS steven.ns.cloudflare.com. salvoandrea.eu. 86400 IN DS ( 2371 13 2 12a43482924c1985e5d51109ca6aa7bc4c6d227cf1812356123a9085fb241000 ) salvoandrea.eu. 86400 IN RRSIG ( DS 8 2 86400 20250514212108 20250507204854 43428 eu. bfXr1F5SOKjauSs3c8sPs8980xCBH65226dgYT7I0bu8nRMa6gnC+jqfV6rdKLzlne1sQtNIN6UG YbyNqvW7RPPqIF/lC+oozHlD2AJPCM/zCfH3DsGLS0rkUhr751VNTV3nUPvXg4jYIsJMw4EwfJXE 9Km3/EC85ZfQVhFHhXs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to si.dns.eu for salvoandrea.eu/DNSKEY
	Received 312 bytes from 193.2.221.62
	;; Response received from [193.2.221.62] 312 octets ;; HEADER SECTION ;; id = 5480 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) salvoandrea.eu. 86400 IN NS eloise.ns.cloudflare.com. salvoandrea.eu. 86400 IN NS steven.ns.cloudflare.com. salvoandrea.eu. 86400 IN DS ( 2371 13 2 12a43482924c1985e5d51109ca6aa7bc4c6d227cf1812356123a9085fb241000 ) salvoandrea.eu. 86400 IN RRSIG ( DS 8 2 86400 20250514212108 20250507204854 43428 eu. bfXr1F5SOKjauSs3c8sPs8980xCBH65226dgYT7I0bu8nRMa6gnC+jqfV6rdKLzlne1sQtNIN6UG YbyNqvW7RPPqIF/lC+oozHlD2AJPCM/zCfH3DsGLS0rkUhr751VNTV3nUPvXg4jYIsJMw4EwfJXE 9Km3/EC85ZfQVhFHhXs= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone salvoandrea.eu

salvoandrea.eu

	Checking DS between eu and salvoandrea.eu
	Query to w.dns.eu for salvoandrea.eu/DS
	Received 253 bytes from 194.0.25.28
	;; Response received from [194.0.25.28] 253 octets ;; HEADER SECTION ;; id = 57942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN DS ;; ANSWER SECTION (2 records) salvoandrea.eu. 86400 IN DS ( 2371 13 2 12a43482924c1985e5d51109ca6aa7bc4c6d227cf1812356123a9085fb241000 ) salvoandrea.eu. 86400 IN RRSIG ( DS 8 2 86400 20250514212108 20250507204854 43428 eu. bfXr1F5SOKjauSs3c8sPs8980xCBH65226dgYT7I0bu8nRMa6gnC+jqfV6rdKLzlne1sQtNIN6UG YbyNqvW7RPPqIF/lC+oozHlD2AJPCM/zCfH3DsGLS0rkUhr751VNTV3nUPvXg4jYIsJMw4EwfJXE 9Km3/EC85ZfQVhFHhXs= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for salvoandrea.eu in the eu zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`salvoandrea.eu. 86400 IN RRSIG ( DS 8 2 86400 20250514212108 20250507204854 43428 eu. bfXr1F5SOKjauSs3c8sPs8980xCBH65226dgYT7I0bu8nRMa6gnC+jqfV6rdKLzlne1sQtNIN6UG YbyNqvW7RPPqIF/lC+oozHlD2AJPCM/zCfH3DsGLS0rkUhr751VNTV3nUPvXg4jYIsJMw4EwfJXE 9Km3/EC85ZfQVhFHhXs= )`
	RRSIG=43428 and DNSKEY=43428 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`salvoandrea.eu. 86400 IN DS ( 2371 13 2 12a43482924c1985e5d51109ca6aa7bc4c6d227cf1812356123a9085fb241000 )`
	Query to steven.ns.cloudflare.com for salvoandrea.eu/DNSKEY
	Received 313 bytes from 108.162.195.17
	;; Response received from [108.162.195.17] 313 octets ;; HEADER SECTION ;; id = 51693 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN DNSKEY ;; ANSWER SECTION (3 records) salvoandrea.eu. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 salvoandrea.eu. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 salvoandrea.eu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250702131226 20250502131226 2371 salvoandrea.eu. fneE4ysl1dJAetEo860TW2e8J2Br0yABfNRd6ZQYEc7ErvrcHFso/BeVX4HnKjKCL7J/LP0tpDXD TOi6Gl8Stg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for salvoandrea.eu
	`salvoandrea.eu. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`salvoandrea.eu. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`salvoandrea.eu. 3600 IN RRSIG ( DNSKEY 13 2 3600 20250702131226 20250502131226 2371 salvoandrea.eu. fneE4ysl1dJAetEo860TW2e8J2Br0yABfNRd6ZQYEc7ErvrcHFso/BeVX4HnKjKCL7J/LP0tpDXD TOi6Gl8Stg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to eloise.ns.cloudflare.com for salvoandrea.eu/A
	Received 185 bytes from 162.159.38.208
	;; Response received from [162.159.38.208] 185 octets ;; HEADER SECTION ;; id = 65082 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (3 records) salvoandrea.eu. 300 IN A 104.21.23.129 salvoandrea.eu. 300 IN A 172.67.211.72 salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. yX4p0800xPm0fwXtQNm1wCzJycEYmUbuZUgrAtRjekcyq5bVyVb7EsiRXzggYQAWgSUJxxcKtxA8 4VfpeVkbdQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eloise.ns.cloudflare.com is authoritative for salvoandrea.eu
	Found RRSIG signed by salvoandrea.eu zone
	Query to steven.ns.cloudflare.com for salvoandrea.eu/SOA
	Received 217 bytes from 172.64.35.17
	;; Response received from [172.64.35.17] 217 octets ;; HEADER SECTION ;; id = 19038 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN SOA ;; ANSWER SECTION (2 records) salvoandrea.eu. 1800 IN SOA ( eloise.ns.cloudflare.com. dns.cloudflare.com. 2371763652 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) salvoandrea.eu. 1800 IN RRSIG ( SOA 13 2 1800 20250510070714 20250508050714 34505 salvoandrea.eu. Fpqj21dQPDkOC1EGzH77KWlLcOKjIvtlvPiftvgr+rDLQuFH4oVKxhsUO/jGl7z3iVwv+ucNEblO XXzUV+kIWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to eloise.ns.cloudflare.com for salvoandrea.eu/A
	Received 185 bytes from 172.64.34.208
	;; Response received from [172.64.34.208] 185 octets ;; HEADER SECTION ;; id = 29020 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (3 records) salvoandrea.eu. 300 IN A 104.21.23.129 salvoandrea.eu. 300 IN A 172.67.211.72 salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. Z2gi01OCx2qTYyTQZgC+yYmzGtfEMoD749jJq9iBMbgyl+y9gRWnNbLG/0b5I8vBrcCB/EJHuIIy 7L/vfnWGMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	salvoandrea.eu A RR has value 104.21.23.129
	salvoandrea.eu A RR has value 172.67.211.72
	Found 1 RRSIGs over A RRset
	`salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. Z2gi01OCx2qTYyTQZgC+yYmzGtfEMoD749jJq9iBMbgyl+y9gRWnNbLG/0b5I8vBrcCB/EJHuIIy 7L/vfnWGMw== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

salvoandrea.eu

	Query to steven.ns.cloudflare.com for salvoandrea.eu/A
	Received 185 bytes from 172.64.35.17
	;; Response received from [172.64.35.17] 185 octets ;; HEADER SECTION ;; id = 28209 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (3 records) salvoandrea.eu. 300 IN A 104.21.23.129 salvoandrea.eu. 300 IN A 172.67.211.72 salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. qsz0FlHweOpibzbQTPHtjqjRxbjXVaO1Ts5L+gK4YAzyAtzSmJQ/d6IYxYU18zyGFn6LT9D6MhKW NUiHxshWHA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	steven.ns.cloudflare.com is authoritative for salvoandrea.eu
	Found RRSIG signed by salvoandrea.eu zone
	Query to steven.ns.cloudflare.com for salvoandrea.eu/A
	Received 185 bytes from 108.162.195.17
	;; Response received from [108.162.195.17] 185 octets ;; HEADER SECTION ;; id = 2201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; salvoandrea.eu. IN A ;; ANSWER SECTION (3 records) salvoandrea.eu. 300 IN A 172.67.211.72 salvoandrea.eu. 300 IN A 104.21.23.129 salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. nzDucVKOlLHoRhlQ/UI5BCsGHBouRrtxqjxLvz6TBPP3U0K7HmeFbUjuy9XLh2PGcOznkAiauQ+e 0qNxFSmj7A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	salvoandrea.eu A RR has value 172.67.211.72
	salvoandrea.eu A RR has value 104.21.23.129
	Found 1 RRSIGs over A RRset
	`salvoandrea.eu. 300 IN RRSIG ( A 13 2 300 20250510070714 20250508050714 34505 salvoandrea.eu. nzDucVKOlLHoRhlQ/UI5BCsGHBouRrtxqjxLvz6TBPP3U0K7HmeFbUjuy9XLh2PGcOznkAiauQ+e 0qNxFSmj7A== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test salvoandrea.eu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: