DNSSEC Analyzer - schweter.eu

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-03-25 05:55:15 UTC, NTP stratum 4

Analyzing DNSSEC problems for schweter.eu

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (1139 bytes) ;; HEADER SECTION ;; id = 3190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=25266 is now in the chain-of-trust
	DNSKEY=16749 is now in the chain-of-trust
	Query to g.root-servers.net for schweter.eu/A
	Received 719 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (719 bytes) ;; HEADER SECTION ;; id = 3606 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) eu. 172800 IN NS uk.dns.eu. eu. 172800 IN NS cz.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS z.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . UBtBIsqAGntNQ99YwBiffnx3NmvReAnMNv3JR+HqrKxRS3b5D/qpiuSiVVcTj5+8fkwRN7z89uqo oGBacVX45Q5ofy/eRu7o8bx0YN8t5eSUosq7AD1ZCHExH27A/JFt83EpWtLOcRBflSYfLXwNIQe2 WVLAa8UMfDCm9vje+M3s4S8TfVeUueIhQOeENiOe7i/swYFGK1QFhf15rE9YHG98jryB22lxSbDu iJhRql+KKos3l5eypGcqYlWuzRwTNI542r4kllEEf3nHulH3RnS0M2em2MCjmyfeTeGudVWurARI YKTNhzpKpZI+OARP8tMVc9JW/mqh3GErnt8G3Q== ) ;; ADDITIONAL SECTION (12 records) x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 z.dns.eu. 172800 IN A 162.88.56.1 cz.dns.eu. 172800 IN A 93.190.128.138 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 uk.dns.eu. 172800 IN A 195.66.241.178 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 z.dns.eu. 172800 IN AAAA 2600:2000:3004::1 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for eu/DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for eu/DNSKEY: 'IPv6 transport disabled'
	Received 710 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (710 bytes) ;; HEADER SECTION ;; id = 48616 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 12 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS z.dns.eu. eu. 172800 IN NS cz.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS uk.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . UBtBIsqAGntNQ99YwBiffnx3NmvReAnMNv3JR+HqrKxRS3b5D/qpiuSiVVcTj5+8fkwRN7z89uqo oGBacVX45Q5ofy/eRu7o8bx0YN8t5eSUosq7AD1ZCHExH27A/JFt83EpWtLOcRBflSYfLXwNIQe2 WVLAa8UMfDCm9vje+M3s4S8TfVeUueIhQOeENiOe7i/swYFGK1QFhf15rE9YHG98jryB22lxSbDu iJhRql+KKos3l5eypGcqYlWuzRwTNI542r4kllEEf3nHulH3RnS0M2em2MCjmyfeTeGudVWurARI YKTNhzpKpZI+OARP8tMVc9JW/mqh3GErnt8G3Q== ) ;; ADDITIONAL SECTION (12 records) x.dns.eu. 172800 IN A 185.151.141.1 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN A 194.146.106.90 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 z.dns.eu. 172800 IN A 162.88.56.1 z.dns.eu. 172800 IN AAAA 2600:2000:3004::1 cz.dns.eu. 172800 IN A 93.190.128.138 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 uk.dns.eu. 172800 IN A 195.66.241.178 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to m.root-servers.net for eu/DS
	Error querying m.root-servers.net/2001:dc3:0:0:0:0:0:35 for eu/DS: 'IPv6 transport disabled'
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 7577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . UBtBIsqAGntNQ99YwBiffnx3NmvReAnMNv3JR+HqrKxRS3b5D/qpiuSiVVcTj5+8fkwRN7z89uqo oGBacVX45Q5ofy/eRu7o8bx0YN8t5eSUosq7AD1ZCHExH27A/JFt83EpWtLOcRBflSYfLXwNIQe2 WVLAa8UMfDCm9vje+M3s4S8TfVeUueIhQOeENiOe7i/swYFGK1QFhf15rE9YHG98jryB22lxSbDu iJhRql+KKos3l5eypGcqYlWuzRwTNI542r4kllEEf3nHulH3RnS0M2em2MCjmyfeTeGudVWurARI YKTNhzpKpZI+OARP8tMVc9JW/mqh3GErnt8G3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . UBtBIsqAGntNQ99YwBiffnx3NmvReAnMNv3JR+HqrKxRS3b5D/qpiuSiVVcTj5+8fkwRN7z89uqo oGBacVX45Q5ofy/eRu7o8bx0YN8t5eSUosq7AD1ZCHExH27A/JFt83EpWtLOcRBflSYfLXwNIQe2 WVLAa8UMfDCm9vje+M3s4S8TfVeUueIhQOeENiOe7i/swYFGK1QFhf15rE9YHG98jryB22lxSbDu iJhRql+KKos3l5eypGcqYlWuzRwTNI542r4kllEEf3nHulH3RnS0M2em2MCjmyfeTeGudVWurARI YKTNhzpKpZI+OARP8tMVc9JW/mqh3GErnt8G3Q== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to si.dns.eu for eu/DNSKEY
	Error querying si.dns.eu/2001:1470:8000:100:0:0:0:1 for eu/DNSKEY: 'IPv6 transport disabled'
	Received 1055 bytes from 193.2.221.60
	;; Answer received from 193.2.221.60 (1055 bytes) ;; HEADER SECTION ;; id = 39866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (5 records) eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAfLvo9r0Ltxn6krIUp6afFN0I2wRO1iGagG/okExEDDFzXppI7VQWsKxEMxscuFlrWnAOUHu JL/hcla8LRvNuwB1jaD3vfYqX4sVF6KKdeO3aoRAsmr+lDbGeSHoCaMB6WtHSfzzA+AiSuagJg77 mEe03GuJ1uw1cLAjQkEHeaSR ) ; Key ID = 27363 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcBKRqnb2X/4Jgx4Gs4Gq+MYp09+zl1BSpzq2IAShX8GYDGtvEdRe7WR/P6GsL11y2X8sh7d CVBHshuIOiiAskrK47q1WRovsrDFPdMh7cVv8R0X0m9ZaVwgPkED5AjYSDE2Pty5P9DKbowVUgab ZAVeNh+xO0sBNJPPW2G+/37V ) ; Key ID = 38610 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190327090001 20190320080001 38610 eu. d4nNcQG3ThfOdNVwxOEy31lBUS3zn9rv2n8VF/kUXYBod9dCsvHn3O9UcFC80vDbXuMf/bjWtZrH VeL+uKvayHqbytTKy9AQZtmc4pOP1gCAmLRUWRUZqUp3LrCQCRHjqyI3Inq5EisqJ4n4etghRkMe fWRN5xDJujuYcwjjs8c= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190327090001 20190320080001 59479 eu. fN4jxb7uuRGZyH8XeOw83wZdp8Dq7oVHzo9SkhTJoFaiyrfMm2NyzT78AlrALbTvQTTz7Ov5tV1z b0Bl0AKwpMQHn9amlfkoMnvxYBrJ8lqelVR5LARUr3Y3Epz9P5mz5MIUwYCnBoJIvX7Zoea/aGy0 8oNnClQmH17Clv8CKUuIob4mlxvhUI17miNoamZnMQtDixX9HqshOLfKfia/1ugTJnfdI6jtqOZ8 xgzgS7OXQXVvlV8HClezdcQBtNFI6rufCxXoS4kLeMPeRJ8WTHfvdn0zELM4vg30wG7CAghBSC3f Qma2DNAj4ErPp94y89jh7WCAYB6AU4bqDc1ceQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAfLvo9r0Ltxn6krIUp6afFN0I2wRO1iGagG/okExEDDFzXppI7VQWsKxEMxscuFlrWnAOUHu JL/hcla8LRvNuwB1jaD3vfYqX4sVF6KKdeO3aoRAsmr+lDbGeSHoCaMB6WtHSfzzA+AiSuagJg77 mEe03GuJ1uw1cLAjQkEHeaSR ) ; Key ID = 27363`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcBKRqnb2X/4Jgx4Gs4Gq+MYp09+zl1BSpzq2IAShX8GYDGtvEdRe7WR/P6GsL11y2X8sh7d CVBHshuIOiiAskrK47q1WRovsrDFPdMh7cVv8R0X0m9ZaVwgPkED5AjYSDE2Pty5P9DKbowVUgab ZAVeNh+xO0sBNJPPW2G+/37V ) ; Key ID = 38610`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190327090001 20190320080001 38610 eu. d4nNcQG3ThfOdNVwxOEy31lBUS3zn9rv2n8VF/kUXYBod9dCsvHn3O9UcFC80vDbXuMf/bjWtZrH VeL+uKvayHqbytTKy9AQZtmc4pOP1gCAmLRUWRUZqUp3LrCQCRHjqyI3Inq5EisqJ4n4etghRkMe fWRN5xDJujuYcwjjs8c= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190327090001 20190320080001 59479 eu. fN4jxb7uuRGZyH8XeOw83wZdp8Dq7oVHzo9SkhTJoFaiyrfMm2NyzT78AlrALbTvQTTz7Ov5tV1z b0Bl0AKwpMQHn9amlfkoMnvxYBrJ8lqelVR5LARUr3Y3Epz9P5mz5MIUwYCnBoJIvX7Zoea/aGy0 8oNnClQmH17Clv8CKUuIob4mlxvhUI17miNoamZnMQtDixX9HqshOLfKfia/1ugTJnfdI6jtqOZ8 xgzgS7OXQXVvlV8HClezdcQBtNFI6rufCxXoS4kLeMPeRJ8WTHfvdn0zELM4vg30wG7CAghBSC3f Qma2DNAj4ErPp94y89jh7WCAYB6AU4bqDc1ceQ== )`
	RRSIG=38610 and DNSKEY=38610 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=27363 is now in the chain-of-trust
	DNSKEY=38610 is now in the chain-of-trust
	Query to z.dns.eu for schweter.eu/A
	Received 297 bytes from 162.88.56.1
	;; Answer received from 162.88.56.1 (297 bytes) ;; HEADER SECTION ;; id = 32571 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190330100927 20190323100417 38610 eu. VmuWawRv2V1SZ98cRaMVhtiYmRhAj+jhOc7EM7eVZjrsy2KMFbKFV/OWY61mKeX6JHe/CFdOsUqH WRbGh2ZEakRRty5nDmAuFDC6qvjlsWruos2ttc4TMnSlvZmhL9Yrk1MZ0P9pKrsjIE7aNPWueYml lcoFnBAD+XOrOlrsXhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nl.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (297 bytes) ;; HEADER SECTION ;; id = 42533 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190330100927 20190323100417 38610 eu. VmuWawRv2V1SZ98cRaMVhtiYmRhAj+jhOc7EM7eVZjrsy2KMFbKFV/OWY61mKeX6JHe/CFdOsUqH WRbGh2ZEakRRty5nDmAuFDC6qvjlsWruos2ttc4TMnSlvZmhL9Yrk1MZ0P9pKrsjIE7aNPWueYml lcoFnBAD+XOrOlrsXhU= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to x.dns.eu for schweter.eu/DS
	Received 250 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (250 bytes) ;; HEADER SECTION ;; id = 62426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190330100927 20190323100417 38610 eu. VmuWawRv2V1SZ98cRaMVhtiYmRhAj+jhOc7EM7eVZjrsy2KMFbKFV/OWY61mKeX6JHe/CFdOsUqH WRbGh2ZEakRRty5nDmAuFDC6qvjlsWruos2ttc4TMnSlvZmhL9Yrk1MZ0P9pKrsjIE7aNPWueYml lcoFnBAD+XOrOlrsXhU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190330100927 20190323100417 38610 eu. VmuWawRv2V1SZ98cRaMVhtiYmRhAj+jhOc7EM7eVZjrsy2KMFbKFV/OWY61mKeX6JHe/CFdOsUqH WRbGh2ZEakRRty5nDmAuFDC6qvjlsWruos2ttc4TMnSlvZmhL9Yrk1MZ0P9pKrsjIE7aNPWueYml lcoFnBAD+XOrOlrsXhU= )`
	RRSIG=38610 and DNSKEY=38610 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns4.powerdns.de for schweter.eu/DNSKEY
	Error querying ns4.powerdns.de/2a02:ff80:1001:0:0:0:0:2 for schweter.eu/DNSKEY: 'IPv6 transport disabled'
	Received 763 bytes from 193.28.153.139
	;; Answer received from 193.28.153.139 (763 bytes) ;; HEADER SECTION ;; id = 62215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190404000000 20190314000000 27844 schweter.eu. kJRfOCw5sfekhZEIlN60nJkQruWsXLn3l8t80PrMOALFtSYVtdf2iJmEIFJXaE13vKs8i9vj/R1t jjzHvVP3gLiYeXJXEpCI4/38uhySZqUGPxnwarnEE+G6juAs/Cm6CYQccsKCT/D4oSWfOjOLfu91 57M3dcJcNx1DS1eQ8TZahEQr2L+LyC54cJ6w1T5DAxvQUGdxZwy5KFolmgxh7/Uf3MM3FTrrckJJ hLQ5RZjbxOAQXVYoQOaH+M8OKSfmpN32sIGvnNgrrxGGoaw8aL7p3ulxpeNRpRslKO4UWj2jjpX4 5BDS1uonCPKo9S9GI5CLMah/prGP3Gj+IS7PBA== ) schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190404000000 20190314000000 27844 schweter.eu. kJRfOCw5sfekhZEIlN60nJkQruWsXLn3l8t80PrMOALFtSYVtdf2iJmEIFJXaE13vKs8i9vj/R1t jjzHvVP3gLiYeXJXEpCI4/38uhySZqUGPxnwarnEE+G6juAs/Cm6CYQccsKCT/D4oSWfOjOLfu91 57M3dcJcNx1DS1eQ8TZahEQr2L+LyC54cJ6w1T5DAxvQUGdxZwy5KFolmgxh7/Uf3MM3FTrrckJJ hLQ5RZjbxOAQXVYoQOaH+M8OKSfmpN32sIGvnNgrrxGGoaw8aL7p3ulxpeNRpRslKO4UWj2jjpX4 5BDS1uonCPKo9S9GI5CLMah/prGP3Gj+IS7PBA== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns3.powerdns.de for schweter.eu/A
	Error querying ns3.powerdns.de/2a05:d580:0:1337:0:0:0:1c for schweter.eu/A: 'IPv6 transport disabled'
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 3147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20190404000000 20190314000000 63294 schweter.eu. mQ7pjUwwppC7WiRxa5ALSwvwHVGc6br11VqxVcIczBsHVuMd0lfMR4vjNtdcSyOT/ghPrs5va+0N /Tj4U0ZpILwfjwIBk78A0eVYp8ygYgtoB14+kYmqJFfoLcMrsKBb6ZypQsZtTgalLkbPm4Iy0i50 c/nEFmmMayAWzPde6fc= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Received 278 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (278 bytes) ;; HEADER SECTION ;; id = 47058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032547 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20190404000000 20190314000000 63294 schweter.eu. trXMnJVUVX+/fV8RlkpKX5j69Xw1IKUanvR4+H6Od489D4LLX4myUzsXSvYOtO+g7Ik6U/WhWhMm nJvSYvSKsvKWskSakiHJuW/BhFIlw+tMtV7mpjstJZkxLicxeJvI4bzEHaR3SY4XOZpJBrGqnXEK Ndj4jLgDMSRX/kRe0cU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.powerdns.de for schweter.eu/SOA
	Error querying ns4.powerdns.de/2a02:ff80:1001:0:0:0:0:2 for schweter.eu/SOA: 'IPv6 transport disabled'
	Received 278 bytes from 193.28.153.139
	;; Answer received from 193.28.153.139 (278 bytes) ;; HEADER SECTION ;; id = 2706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032547 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20190404000000 20190314000000 63294 schweter.eu. trXMnJVUVX+/fV8RlkpKX5j69Xw1IKUanvR4+H6Od489D4LLX4myUzsXSvYOtO+g7Ik6U/WhWhMm nJvSYvSKsvKWskSakiHJuW/BhFIlw+tMtV7mpjstJZkxLicxeJvI4bzEHaR3SY4XOZpJBrGqnXEK Ndj4jLgDMSRX/kRe0cU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 18934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20190404000000 20190314000000 63294 schweter.eu. mQ7pjUwwppC7WiRxa5ALSwvwHVGc6br11VqxVcIczBsHVuMd0lfMR4vjNtdcSyOT/ghPrs5va+0N /Tj4U0ZpILwfjwIBk78A0eVYp8ygYgtoB14+kYmqJFfoLcMrsKBb6ZypQsZtTgalLkbPm4Iy0i50 c/nEFmmMayAWzPde6fc= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20190404000000 20190314000000 63294 schweter.eu. mQ7pjUwwppC7WiRxa5ALSwvwHVGc6br11VqxVcIczBsHVuMd0lfMR4vjNtdcSyOT/ghPrs5va+0N /Tj4U0ZpILwfjwIBk78A0eVYp8ygYgtoB14+kYmqJFfoLcMrsKBb6ZypQsZtTgalLkbPm4Iy0i50 c/nEFmmMayAWzPde6fc= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: