DNSSEC Analyzer - schweter.eu

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-12-13 22:50:09 UTC, NTP stratum 4

Analyzing DNSSEC problems for schweter.eu

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Error querying k.root-servers.net/2001:7fd:0:0:0:0:0:1 for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (1139 bytes) ;; HEADER SECTION ;; id = 5947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134 . 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdp440E6Mz7c+Vl4sPd0lTv2Qnc85dTW64j0RDD7sS/zwxWDJ3QRES2VKDO0OXLMqVJSs2YC CSDKuZXpDPuf++YfAu0j7lzYYdWTGwyNZhEaXtMQJIKYB96pW6cRkiG2Dn8S2vvo/PxW9PKQsyLb td8PcwWglHgReBVp7kEv/Dd+3b3YMukt4jnWgDUddAySg558Zld+c9eGWkgWoOiuhg4rQRkFstMX 1pRyOSHcZuH38o1WcsT4y3eT0U/SR6TOSLIB/8Ftirux/h297oS7tCcwSPt0wwry5OFNTlfMo8v7 WGurogfk8hPipf7TTKHIi20LWen5RCsvYsQBkYGpF78= ) ; Key ID = 2134`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20181231000000 20181210000000 20326 . oZ1v3JnBSPHWf2HXeAyoqW/lTUP0FAs1tcEQOM47KD3Rb1qHySTbGhh0rTclRlm86GKUlPSiPaF3 zkJ5h46Nazo3r5iAqorjQ1FQD69AgLXpdEIrnzkC3tTTZv+h+Qi2/UosrzoPQnWj3pIdvZvcP5W2 T6nlP7PN5EP2LSeQzLxT8sOUGsBt0iDiGtqm+bN0mKxKdV4599g0+83FtubMG5oYWUBpMJ/os956 uvW/Vg2cwv3/m9X/cX38svYEcAbniXnyqT88+wqPBMA782tUu1AU1tb9QyMt0LcmsDgjrBWl38SG r/LvaNxHMrfU7ymNuEj6NeLBhNfuDEaz0zBRtQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=2134 is now in the chain-of-trust
	Query to e.root-servers.net for schweter.eu/A
	Received 719 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (719 bytes) ;; HEADER SECTION ;; id = 61186 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS z.dns.eu. eu. 172800 IN NS cz.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS uk.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . thKg103nAJabIj0d/oF2kpQAMXzropjTgHZiSPLa1B4R6Ahqn8Uqhgra9q51UOuuCxSS/mhR9oFH gIRgTAFiiFW4XCLUZmrRFaoDqPC22Q8J6pcEfIrBuEA+/AoHcBRC9Bs2hyh3rQ5O4ws6nFA6G4pB +kmcwYpr1CfmqF+ESAouRomqotNPZ20+kfxwGvHJj0z8g3fEksV/Ixul1lSyDL2fSxrVQhccj3Ip YDX+wezVbWbmpdhnMZej28Kvw9FWChpz9JVwZSs1HFYDZL10awU7GW7+YIos793yqUPWteWxSyR5 BqJkJrppXDvNW1MhvqJxSTBw7dpr4pEg+iR6Sw== ) ;; ADDITIONAL SECTION (12 records) x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 z.dns.eu. 172800 IN A 162.88.56.1 cz.dns.eu. 172800 IN A 93.190.128.138 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 uk.dns.eu. 172800 IN A 195.66.241.178 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 z.dns.eu. 172800 IN AAAA 2600:2000:3004::1 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.root-servers.net for eu/DNSKEY
	Received 710 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (710 bytes) ;; HEADER SECTION ;; id = 50378 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS z.dns.eu. eu. 172800 IN NS cz.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS uk.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . thKg103nAJabIj0d/oF2kpQAMXzropjTgHZiSPLa1B4R6Ahqn8Uqhgra9q51UOuuCxSS/mhR9oFH gIRgTAFiiFW4XCLUZmrRFaoDqPC22Q8J6pcEfIrBuEA+/AoHcBRC9Bs2hyh3rQ5O4ws6nFA6G4pB +kmcwYpr1CfmqF+ESAouRomqotNPZ20+kfxwGvHJj0z8g3fEksV/Ixul1lSyDL2fSxrVQhccj3Ip YDX+wezVbWbmpdhnMZej28Kvw9FWChpz9JVwZSs1HFYDZL10awU7GW7+YIos793yqUPWteWxSyR5 BqJkJrppXDvNW1MhvqJxSTBw7dpr4pEg+iR6Sw== ) ;; ADDITIONAL SECTION (12 records) x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 z.dns.eu. 172800 IN A 162.88.56.1 cz.dns.eu. 172800 IN A 93.190.128.138 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 uk.dns.eu. 172800 IN A 195.66.241.178 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 z.dns.eu. 172800 IN AAAA 2600:2000:3004::1 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to f.root-servers.net for eu/DS
	Received 366 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (366 bytes) ;; HEADER SECTION ;; id = 11243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . thKg103nAJabIj0d/oF2kpQAMXzropjTgHZiSPLa1B4R6Ahqn8Uqhgra9q51UOuuCxSS/mhR9oFH gIRgTAFiiFW4XCLUZmrRFaoDqPC22Q8J6pcEfIrBuEA+/AoHcBRC9Bs2hyh3rQ5O4ws6nFA6G4pB +kmcwYpr1CfmqF+ESAouRomqotNPZ20+kfxwGvHJj0z8g3fEksV/Ixul1lSyDL2fSxrVQhccj3Ip YDX+wezVbWbmpdhnMZej28Kvw9FWChpz9JVwZSs1HFYDZL10awU7GW7+YIos793yqUPWteWxSyR5 BqJkJrppXDvNW1MhvqJxSTBw7dpr4pEg+iR6Sw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20181226170000 20181213160000 2134 . thKg103nAJabIj0d/oF2kpQAMXzropjTgHZiSPLa1B4R6Ahqn8Uqhgra9q51UOuuCxSS/mhR9oFH gIRgTAFiiFW4XCLUZmrRFaoDqPC22Q8J6pcEfIrBuEA+/AoHcBRC9Bs2hyh3rQ5O4ws6nFA6G4pB +kmcwYpr1CfmqF+ESAouRomqotNPZ20+kfxwGvHJj0z8g3fEksV/Ixul1lSyDL2fSxrVQhccj3Ip YDX+wezVbWbmpdhnMZej28Kvw9FWChpz9JVwZSs1HFYDZL10awU7GW7+YIos793yqUPWteWxSyR5 BqJkJrppXDvNW1MhvqJxSTBw7dpr4pEg+iR6Sw== )`
	RRSIG=2134 and DNSKEY=2134 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to x.dns.eu for eu/DNSKEY
	Error querying x.dns.eu/2a02:568:fe00:0:0:0:0:6575 for eu/DNSKEY: 'IPv6 transport disabled'
	Received 907 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (907 bytes) ;; HEADER SECTION ;; id = 40369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbEfRT8nPpF7QCEBAo9RjktHpf3etgVQeDxJkr3kmuKQ4mXiymcKKUFwYcb7GBDI62AG2256 AE8MPpBFkxOSoK6hcfKF1CemZuCJi7/pQXGZjmRNektgMFespjHwEML179CCYkmjw0cnQG1UvvQO vlaymb7ipqV/t44vM8AcUjZd ) ; Key ID = 50718 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181216200631 20181209195322 50718 eu. TM/wfO6EgzMQEMMI+kZKYmmtFvga7n49hd5PVhYllryrFDDlmD39HHJggDLR6ESdfAWw7f28AtDO W48kW7EnPBnag7cvWnBD9KQqY/VQd75TgKCd8+JlmjFd0B1Y/7FD/TWyATPlFpSAm5uDAQs3QOfh IfTQACyZsVBXJHovH8g= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181216200631 20181209195322 59479 eu. ucq3QxHSrE5a4WDx3Fztfa9GdzzztliYG84TAoExc1ETfeyUmVOpFd2mkk3PGLGn6qRCpMpA9LkQ GnePEQgZZHr5M/avqAFx5XEhc85Mv4jKcUZzdgctnMbYpDvYa3cb6Kssg8/swCCO5JyDPCLW1fKf 4SsHzzwGr2VEDCa6zb4Htz/CPsgYVahmnhwxtvyBHOBAzb5w8ZfyBqIvueu0lAf+MteoK+1KHMhB rVyqoSUmLyCf0Xmh4UOPllU9wcIFGRO/drViJ8tfU3duVGB7h0A1j4tnCHBLMiHOWuwj3OadbJo/ v6xOv4wbzh/ejzbINGqWOCJskS6AOWC7PjhEIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbEfRT8nPpF7QCEBAo9RjktHpf3etgVQeDxJkr3kmuKQ4mXiymcKKUFwYcb7GBDI62AG2256 AE8MPpBFkxOSoK6hcfKF1CemZuCJi7/pQXGZjmRNektgMFespjHwEML179CCYkmjw0cnQG1UvvQO vlaymb7ipqV/t44vM8AcUjZd ) ; Key ID = 50718`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181216200631 20181209195322 50718 eu. TM/wfO6EgzMQEMMI+kZKYmmtFvga7n49hd5PVhYllryrFDDlmD39HHJggDLR6ESdfAWw7f28AtDO W48kW7EnPBnag7cvWnBD9KQqY/VQd75TgKCd8+JlmjFd0B1Y/7FD/TWyATPlFpSAm5uDAQs3QOfh IfTQACyZsVBXJHovH8g= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20181216200631 20181209195322 59479 eu. ucq3QxHSrE5a4WDx3Fztfa9GdzzztliYG84TAoExc1ETfeyUmVOpFd2mkk3PGLGn6qRCpMpA9LkQ GnePEQgZZHr5M/avqAFx5XEhc85Mv4jKcUZzdgctnMbYpDvYa3cb6Kssg8/swCCO5JyDPCLW1fKf 4SsHzzwGr2VEDCa6zb4Htz/CPsgYVahmnhwxtvyBHOBAzb5w8ZfyBqIvueu0lAf+MteoK+1KHMhB rVyqoSUmLyCf0Xmh4UOPllU9wcIFGRO/drViJ8tfU3duVGB7h0A1j4tnCHBLMiHOWuwj3OadbJo/ v6xOv4wbzh/ejzbINGqWOCJskS6AOWC7PjhEIw== )`
	RRSIG=50718 and DNSKEY=50718 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=50718 is now in the chain-of-trust
	Query to z.dns.eu for schweter.eu/A
	Error querying z.dns.eu/2600:2000:3004:0:0:0:0:1 for schweter.eu/A: 'IPv6 transport disabled'
	Received 297 bytes from 162.88.56.1
	;; Answer received from 162.88.56.1 (297 bytes) ;; HEADER SECTION ;; id = 31791 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20181215183529 20181208175855 50718 eu. n1mqNyXykAr/a0KuKRbCus5yAEpbgxFXC7QsKtpGNcck7iHu2MbLKYLluN4I1d0PTc7rVuAXC++z 4XJdWNDN/INvFIsLNWIucCDn9zfV10ebstl3z7P5o2GsPe1sH22ZG3/KwUxNFMJONrcylWAe6TEa ukhYSHluWOHpLBYif2Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nl.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (297 bytes) ;; HEADER SECTION ;; id = 20161 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20181215183529 20181208175855 50718 eu. n1mqNyXykAr/a0KuKRbCus5yAEpbgxFXC7QsKtpGNcck7iHu2MbLKYLluN4I1d0PTc7rVuAXC++z 4XJdWNDN/INvFIsLNWIucCDn9zfV10ebstl3z7P5o2GsPe1sH22ZG3/KwUxNFMJONrcylWAe6TEa ukhYSHluWOHpLBYif2Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to cz.dns.eu for schweter.eu/DS
	Received 250 bytes from 93.190.128.138
	;; Answer received from 93.190.128.138 (250 bytes) ;; HEADER SECTION ;; id = 51659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20181215183529 20181208175855 50718 eu. n1mqNyXykAr/a0KuKRbCus5yAEpbgxFXC7QsKtpGNcck7iHu2MbLKYLluN4I1d0PTc7rVuAXC++z 4XJdWNDN/INvFIsLNWIucCDn9zfV10ebstl3z7P5o2GsPe1sH22ZG3/KwUxNFMJONrcylWAe6TEa ukhYSHluWOHpLBYif2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20181215183529 20181208175855 50718 eu. n1mqNyXykAr/a0KuKRbCus5yAEpbgxFXC7QsKtpGNcck7iHu2MbLKYLluN4I1d0PTc7rVuAXC++z 4XJdWNDN/INvFIsLNWIucCDn9zfV10ebstl3z7P5o2GsPe1sH22ZG3/KwUxNFMJONrcylWAe6TEa ukhYSHluWOHpLBYif2Q= )`
	RRSIG=50718 and DNSKEY=50718 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns4.powerdns.de for schweter.eu/DNSKEY
	Received 763 bytes from 193.28.153.139
	;; Answer received from 193.28.153.139 (763 bytes) ;; HEADER SECTION ;; id = 27958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20181227000000 20181206000000 27844 schweter.eu. RAREYUe9FIazT2F0oahuEJrK6WRY2184bk+o9MrQ/ghwxNHrHYGmWWT/ATCupJTyfse+wG+5nIm9 VsNoJYI/o5MNiKFQ/QQM9OIcntMYI3vlw+p923oiQ49iGySxeZATXl/ulbrN6kg6jCZMK/q767fA zLPjA51S1EHCUMXwRO4ObllolA2Ykr+Z8X0KMs8p9ijLAM4q1NTLHFUPeif/em4tHX5VsoXxoSAp glWwscRqorEp9i1nnms/2IU8+8G0pX9RncjJsdelqd/aJ3QT0XbKGT27fQ8oesPIngE5OPmwaO7j +tn597/6ptvAvj1C1i7XJY08yRuaVTVQ/6r1nA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20181227000000 20181206000000 27844 schweter.eu. RAREYUe9FIazT2F0oahuEJrK6WRY2184bk+o9MrQ/ghwxNHrHYGmWWT/ATCupJTyfse+wG+5nIm9 VsNoJYI/o5MNiKFQ/QQM9OIcntMYI3vlw+p923oiQ49iGySxeZATXl/ulbrN6kg6jCZMK/q767fA zLPjA51S1EHCUMXwRO4ObllolA2Ykr+Z8X0KMs8p9ijLAM4q1NTLHFUPeif/em4tHX5VsoXxoSAp glWwscRqorEp9i1nnms/2IU8+8G0pX9RncjJsdelqd/aJ3QT0XbKGT27fQ8oesPIngE5OPmwaO7j +tn597/6ptvAvj1C1i7XJY08yRuaVTVQ/6r1nA== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 5017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20181227000000 20181206000000 63294 schweter.eu. qnyexZk9tW7Hbas77oIk/xMiUX3v509O9mlWkb1svVYNTCgTpIKeqw4C9ZMH/RqvDgP/bLTKsy+j ocPsms2d+ctzWMRoHHq6kR9OwHcIm8wQafhco1ydgNpGwWRAz3yz21F0kevsjf7zaXT+CL7ULPqk YkJcUAgc2W/MyOjVkqE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Error querying ns3.powerdns.de/2a05:d580:0:1337:0:0:0:1c for schweter.eu/SOA: 'IPv6 transport disabled'
	Received 278 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (278 bytes) ;; HEADER SECTION ;; id = 35160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032547 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20181227000000 20181206000000 63294 schweter.eu. A/XakQomc+/zxrX8o09ezjyLsWNGFEEVPYwIlC68xZhzQtN6ggaHSuMfzbVl72KKmjHIinzaRf52 FUJTEDK1x7fNFcqMWQxJT7el9QWB6ZvfItvqO8Ls1Mbtwr8PwrgYrTuo4GfnEYuR81QAC0crGPdt E1X+qbqwd+8yLnNvaF8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.powerdns.de for schweter.eu/SOA
	Error querying ns4.powerdns.de/2a02:ff80:1001:0:0:0:0:2 for schweter.eu/SOA: 'IPv6 transport disabled'
	Received 278 bytes from 193.28.153.139
	;; Answer received from 193.28.153.139 (278 bytes) ;; HEADER SECTION ;; id = 53397 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20181227000000 20181206000000 63294 schweter.eu. A/XakQomc+/zxrX8o09ezjyLsWNGFEEVPYwIlC68xZhzQtN6ggaHSuMfzbVl72KKmjHIinzaRf52 FUJTEDK1x7fNFcqMWQxJT7el9QWB6ZvfItvqO8Ls1Mbtwr8PwrgYrTuo4GfnEYuR81QAC0crGPdt E1X+qbqwd+8yLnNvaF8= ) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032547 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 9925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20181227000000 20181206000000 63294 schweter.eu. qnyexZk9tW7Hbas77oIk/xMiUX3v509O9mlWkb1svVYNTCgTpIKeqw4C9ZMH/RqvDgP/bLTKsy+j ocPsms2d+ctzWMRoHHq6kR9OwHcIm8wQafhco1ydgNpGwWRAz3yz21F0kevsjf7zaXT+CL7ULPqk YkJcUAgc2W/MyOjVkqE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20181227000000 20181206000000 63294 schweter.eu. qnyexZk9tW7Hbas77oIk/xMiUX3v509O9mlWkb1svVYNTCgTpIKeqw4C9ZMH/RqvDgP/bLTKsy+j ocPsms2d+ctzWMRoHHq6kR9OwHcIm8wQafhco1ydgNpGwWRAz3yz21F0kevsjf7zaXT+CL7ULPqk YkJcUAgc2W/MyOjVkqE= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: