DNSSEC Analyzer - schweter.eu

Domain Name:

Time: 2019-07-16 00:27:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for schweter.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Error querying b.root-servers.net/2001:500:200:0:0:0:0:b for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 14272 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcTQyaIe6nt3xSPOG2L/YfwBkOVTJN6mlnZ249O5Rtt3ZSRQHxQSW61AODYw6bvgxrrGq8ee OuenFjcSYgNAMcBYoEYYmKDW6e9EryW4ZaT/MCq+8Am06oR40xAA3fClOM6QjRcT85tP41Go946A icBGP8XOP/Aj1aI/oPRGzRnboUPUok/AzTNnW5npBU69+BuiIwYE7mQOiNBFePyvjQBdoiuYbmuD 3Py0IyjlBxzZUXbqLsRL9gYFkCqeTY29Ik7usuzMTa+JRSLz6KGS5RSJ7CTSMjZg8aNaUbN2dvGh akJPh92HnLvMA3TefFgbKJphFNPA3BWSKLZ02cRWXqM= ) ; Key ID = 59944`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190801000000 20190711000000 20326 . ObbqvQHw4LDKM7cf6evXeKyg5mBF0AjevpEmKeFps91EclUrTx6THb0WC6jAZVdL3XK8EHC3oRAI X3p4S3jVKm/ShYJT93FASZmmA5EIXbxuuJ10UE6XM+OVzBP6i4GTwy8TmA4xF5oV29JteUtvGjvJ WkrohydpNWCjCdFwwp2FZd8iU8QCNW/YLihzERDRYtwUPjFW956+P8SgDxyecgijQTtZJno2/N87 LePEY7F/T7bWVwgjJvUz9qK+xD4OzNjs5EGNe1BDUFlRP8HcOVY8L2QFsZOOGepf/lUv4sZnE5IY JV0Xq1CDIHuS5ph6R68gvMIB2LuWCxXg/h9DOQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=59944 is now in the chain-of-trust
	Query to d.root-servers.net for schweter.eu/A
	Error querying d.root-servers.net/2001:500:2d:0:0:0:0:d for schweter.eu/A: 'IPv6 transport disabled'
	Received 626 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (626 bytes) ;; HEADER SECTION ;; id = 5992 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS uk.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . lY1bT5cz14CQKdA1Yzzlw1O4/OOHGtRAwaUfW6H/8Mc8UVdGdtsDtMhsPBLFSIcEvqfu2yFag1bv ESpeUbVFLf+AxluIPAhQWII/46fNkdaMiwy3IM+cazFCidVXsbVL7yc2Pz1ZNgtsvILbc8Rb3I/j 4OiFTLDgFEDpZVaLzmDYJBYhiChT1fck/4WHF6k8Pw5tL23YaGsldotY42vnKOiPIvvpOEjBt7HO ShFrS2PZJho6rPwuvhZrcesRei8RjVOddN5P9Bzs6hfVVIr1askNwEDzLewxcmTMfKM4oVDBtTtR NKGRzuQiIsVN4IvMNjQah1eMnuP3vTGYleNKAQ== ) ;; ADDITIONAL SECTION (9 records) x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 uk.dns.eu. 172800 IN A 195.66.241.178 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to k.root-servers.net for eu/DNSKEY
	Received 617 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (617 bytes) ;; HEADER SECTION ;; id = 28219 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS uk.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . lY1bT5cz14CQKdA1Yzzlw1O4/OOHGtRAwaUfW6H/8Mc8UVdGdtsDtMhsPBLFSIcEvqfu2yFag1bv ESpeUbVFLf+AxluIPAhQWII/46fNkdaMiwy3IM+cazFCidVXsbVL7yc2Pz1ZNgtsvILbc8Rb3I/j 4OiFTLDgFEDpZVaLzmDYJBYhiChT1fck/4WHF6k8Pw5tL23YaGsldotY42vnKOiPIvvpOEjBt7HO ShFrS2PZJho6rPwuvhZrcesRei8RjVOddN5P9Bzs6hfVVIr1askNwEDzLewxcmTMfKM4oVDBtTtR NKGRzuQiIsVN4IvMNjQah1eMnuP3vTGYleNKAQ== ) ;; ADDITIONAL SECTION (9 records) y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 uk.dns.eu. 172800 IN A 195.66.241.178 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to b.root-servers.net for eu/DS
	Received 366 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (366 bytes) ;; HEADER SECTION ;; id = 52122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . lY1bT5cz14CQKdA1Yzzlw1O4/OOHGtRAwaUfW6H/8Mc8UVdGdtsDtMhsPBLFSIcEvqfu2yFag1bv ESpeUbVFLf+AxluIPAhQWII/46fNkdaMiwy3IM+cazFCidVXsbVL7yc2Pz1ZNgtsvILbc8Rb3I/j 4OiFTLDgFEDpZVaLzmDYJBYhiChT1fck/4WHF6k8Pw5tL23YaGsldotY42vnKOiPIvvpOEjBt7HO ShFrS2PZJho6rPwuvhZrcesRei8RjVOddN5P9Bzs6hfVVIr1askNwEDzLewxcmTMfKM4oVDBtTtR NKGRzuQiIsVN4IvMNjQah1eMnuP3vTGYleNKAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20190728170000 20190715160000 59944 . lY1bT5cz14CQKdA1Yzzlw1O4/OOHGtRAwaUfW6H/8Mc8UVdGdtsDtMhsPBLFSIcEvqfu2yFag1bv ESpeUbVFLf+AxluIPAhQWII/46fNkdaMiwy3IM+cazFCidVXsbVL7yc2Pz1ZNgtsvILbc8Rb3I/j 4OiFTLDgFEDpZVaLzmDYJBYhiChT1fck/4WHF6k8Pw5tL23YaGsldotY42vnKOiPIvvpOEjBt7HO ShFrS2PZJho6rPwuvhZrcesRei8RjVOddN5P9Bzs6hfVVIr1askNwEDzLewxcmTMfKM4oVDBtTtR NKGRzuQiIsVN4IvMNjQah1eMnuP3vTGYleNKAQ== )`
	RRSIG=59944 and DNSKEY=59944 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to si.dns.eu for eu/DNSKEY
	Error querying si.dns.eu/2001:1470:8000:100:0:0:0:1 for eu/DNSKEY: 'IPv6 transport disabled'
	Received 1055 bytes from 193.2.221.60
	;; Answer received from 193.2.221.60 (1055 bytes) ;; HEADER SECTION ;; id = 14176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (5 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAZpSA0UYYWr8aFbG2r2G5yFjTAAjRdULHssSLWkazU9XFHgr0NNr03aRZvFOP32cYl0jAiF9 mvmzDGv4A57a+GCY7kKiHNJ1zkZKhY0AxJqYDNdsm91Ln3RTOGJTB49c+SgxMf0hZq3/Ve8x92yx nPlGRj+k4WTPjVemAZ72K1bb ) ; Key ID = 18645 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcRsdrDieJR9z22QtJK7SF/whV+I2KjokbazcOtjV1PXwiFrVqfNoM/j7XMFMbkr6MQ/pW/7 OvLHNyJPyYvrU8woCt7VlIkZxqyl1xdqFM62LivAwla/zQH4rsXMWr7HkzHcsi8L/L3RuBVjf3e5 WosgJ6A5MBzQsteD6aM8eZc3 ) ; Key ID = 9315 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190722090000 20190715080000 9315 eu. gvdMq8KutDP7ONIHaKB5AdZTl/3sRyerpWWYzshejg5B9Z1qqbNT3hotHywME3OZrfPFUxm8kggD skVq5uJoaTC7id2H9aoHnbVahzKFg6fbKlks85uFid5mErhtm0PI2p3zGYMJml6S5DsVqY8KEmlZ Y0Ck7EjENiakGLENrh4= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190722090000 20190715080000 59479 eu. ElADzSA8Yt3eeaPzOMVdbEzuDCl0JbNW0G1ZYbj9+iUo/BTZGIIr+qifpT43LauLyYOOp117pwQu HD1tb49goPQB1bRkzUXEcbW6Jr4NG9KpCChJSAExlaoergb3gypABNDipJ3uDmeme4WV0m7uQrGN vkaiGatyXpU2sZpYte2Ot7HvjXyx8FM56l0B5laR8y2ov8cpaNUJ9acYNyiXMwO10Wzu+hi32hC/ sQ9SlzJbf0xwR8ArZuUo9eDSmne7YACooRjHbRqi5MR8oOkVfh29VWwhCjFx67l/J46Ju4f6x+d3 Szu3yrDfKnCVd9z5lGDaqPuu4J6qDTtrJeOmaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAZpSA0UYYWr8aFbG2r2G5yFjTAAjRdULHssSLWkazU9XFHgr0NNr03aRZvFOP32cYl0jAiF9 mvmzDGv4A57a+GCY7kKiHNJ1zkZKhY0AxJqYDNdsm91Ln3RTOGJTB49c+SgxMf0hZq3/Ve8x92yx nPlGRj+k4WTPjVemAZ72K1bb ) ; Key ID = 18645`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcRsdrDieJR9z22QtJK7SF/whV+I2KjokbazcOtjV1PXwiFrVqfNoM/j7XMFMbkr6MQ/pW/7 OvLHNyJPyYvrU8woCt7VlIkZxqyl1xdqFM62LivAwla/zQH4rsXMWr7HkzHcsi8L/L3RuBVjf3e5 WosgJ6A5MBzQsteD6aM8eZc3 ) ; Key ID = 9315`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190722090000 20190715080000 9315 eu. gvdMq8KutDP7ONIHaKB5AdZTl/3sRyerpWWYzshejg5B9Z1qqbNT3hotHywME3OZrfPFUxm8kggD skVq5uJoaTC7id2H9aoHnbVahzKFg6fbKlks85uFid5mErhtm0PI2p3zGYMJml6S5DsVqY8KEmlZ Y0Ck7EjENiakGLENrh4= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20190722090000 20190715080000 59479 eu. ElADzSA8Yt3eeaPzOMVdbEzuDCl0JbNW0G1ZYbj9+iUo/BTZGIIr+qifpT43LauLyYOOp117pwQu HD1tb49goPQB1bRkzUXEcbW6Jr4NG9KpCChJSAExlaoergb3gypABNDipJ3uDmeme4WV0m7uQrGN vkaiGatyXpU2sZpYte2Ot7HvjXyx8FM56l0B5laR8y2ov8cpaNUJ9acYNyiXMwO10Wzu+hi32hC/ sQ9SlzJbf0xwR8ArZuUo9eDSmne7YACooRjHbRqi5MR8oOkVfh29VWwhCjFx67l/J46Ju4f6x+d3 Szu3yrDfKnCVd9z5lGDaqPuu4J6qDTtrJeOmaA== )`
	RRSIG=9315 and DNSKEY=9315 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=18645 is now in the chain-of-trust
	DNSKEY=9315 is now in the chain-of-trust
	Query to nl.dns.eu for schweter.eu/A
	Received 297 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (297 bytes) ;; HEADER SECTION ;; id = 14069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190718063603 20190711060352 9315 eu. CSrp/Vl7n3yKzrwnsPYZIUyVZXJ9kdbmFLQVHB5msrQvAQannyRk+7iTzAXrzxBiKZJIJngBSFRp TkNWB+YtFcT0fc43qXr6EpNhXuo9NKuKr+tD9b5zNTPAET159lyEtcQZawZo/83zf8IOl2bgY9i5 Np8GXv2bgtZFXCUPiV4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to y.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (297 bytes) ;; HEADER SECTION ;; id = 42745 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190718063603 20190711060352 9315 eu. CSrp/Vl7n3yKzrwnsPYZIUyVZXJ9kdbmFLQVHB5msrQvAQannyRk+7iTzAXrzxBiKZJIJngBSFRp TkNWB+YtFcT0fc43qXr6EpNhXuo9NKuKr+tD9b5zNTPAET159lyEtcQZawZo/83zf8IOl2bgY9i5 Np8GXv2bgtZFXCUPiV4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to si.dns.eu for schweter.eu/DS
	Received 250 bytes from 193.2.221.60
	;; Answer received from 193.2.221.60 (250 bytes) ;; HEADER SECTION ;; id = 25825 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190718063603 20190711060352 9315 eu. CSrp/Vl7n3yKzrwnsPYZIUyVZXJ9kdbmFLQVHB5msrQvAQannyRk+7iTzAXrzxBiKZJIJngBSFRp TkNWB+YtFcT0fc43qXr6EpNhXuo9NKuKr+tD9b5zNTPAET159lyEtcQZawZo/83zf8IOl2bgY9i5 Np8GXv2bgtZFXCUPiV4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20190718063603 20190711060352 9315 eu. CSrp/Vl7n3yKzrwnsPYZIUyVZXJ9kdbmFLQVHB5msrQvAQannyRk+7iTzAXrzxBiKZJIJngBSFRp TkNWB+YtFcT0fc43qXr6EpNhXuo9NKuKr+tD9b5zNTPAET159lyEtcQZawZo/83zf8IOl2bgY9i5 Np8GXv2bgtZFXCUPiV4= )`
	RRSIG=9315 and DNSKEY=9315 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns3.powerdns.de for schweter.eu/DNSKEY
	Error querying ns3.powerdns.de/2a05:d580:0:1337:0:0:0:1c for schweter.eu/DNSKEY: 'IPv6 transport disabled'
	Received 763 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (763 bytes) ;; HEADER SECTION ;; id = 63569 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190725000000 20190704000000 27844 schweter.eu. su1xejfHrI6uubRunri0CpB0LgiXb6RQ2mKK0V2DRmsdoqnH4yZq3YM9K6xHEhRxultxlyjwQ4Ei qr2tdYOJAs4eYNAPSwrSTr1yegtJaOMDfxeyowqEbhVE+owf1guBPFP4eoaXiqUS3/qcMrWvIA6L 73kOf77cnLhAe4Ni+mwNJTrQQDMtFAUflPy9fnVY0KTR6uMEghis5M3CjfLKGqSB1eBrv5iwlsV5 GKKmwo2s07cWcBYfNKvnfC7hFMcc3Ivhr4Ht8YdsyylcV/RgVmlw6qU1SPOR3MYEXoH9u9CQXn3E Tv+ar4t8jxHtSwyBnRDinrCbdnBlMcjqADkdtg== ) schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20190725000000 20190704000000 27844 schweter.eu. su1xejfHrI6uubRunri0CpB0LgiXb6RQ2mKK0V2DRmsdoqnH4yZq3YM9K6xHEhRxultxlyjwQ4Ei qr2tdYOJAs4eYNAPSwrSTr1yegtJaOMDfxeyowqEbhVE+owf1guBPFP4eoaXiqUS3/qcMrWvIA6L 73kOf77cnLhAe4Ni+mwNJTrQQDMtFAUflPy9fnVY0KTR6uMEghis5M3CjfLKGqSB1eBrv5iwlsV5 GKKmwo2s07cWcBYfNKvnfC7hFMcc3Ivhr4Ht8YdsyylcV/RgVmlw6qU1SPOR3MYEXoH9u9CQXn3E Tv+ar4t8jxHtSwyBnRDinrCbdnBlMcjqADkdtg== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 32452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20190725000000 20190704000000 63294 schweter.eu. mo32BI9Kirgl2/hH7n8OtQ9gVdW1q40+scnDuChh+wnLb4Ogog8NsXxnqoTI+Bc1o3fZdXzMRfVa sUG7AgEv3890ngKuhqN9VuQLKfg6lybJaWrQxqiQGyCwrs8aLVHJcbXH8j/sfVtEewDzItzkUA4A CNVFvJDXbpqtFcOgIZg= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Error querying ns3.powerdns.de/2a05:d580:0:1337:0:0:0:1c for schweter.eu/SOA: 'IPv6 transport disabled'
	Received 278 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (278 bytes) ;; HEADER SECTION ;; id = 32911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20190725000000 20190704000000 63294 schweter.eu. dVOeHcPrk2iNqSXd7EeCxZxAM2EGYW+uJSMHes19WnLAYbT9F1Ae6wwDwdHZfMSVrXbswNE1zbMg 4tXnKC1GRCemckI908rKMLX/UV4XDF+OB18yciES+VTyTu1DVpXTLV0antNO28tQI4THvtRKdgxT USON4/ALdpZ17vmoHa8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns4.powerdns.de for schweter.eu/SOA
	Error querying ns4.powerdns.de/2a02:ff80:1001:0:0:0:0:2 for schweter.eu/SOA: 'IPv6 transport disabled'
	Received 278 bytes from 193.28.153.139
	;; Answer received from 193.28.153.139 (278 bytes) ;; HEADER SECTION ;; id = 25505 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20190725000000 20190704000000 63294 schweter.eu. dVOeHcPrk2iNqSXd7EeCxZxAM2EGYW+uJSMHes19WnLAYbT9F1Ae6wwDwdHZfMSVrXbswNE1zbMg 4tXnKC1GRCemckI908rKMLX/UV4XDF+OB18yciES+VTyTu1DVpXTLV0antNO28tQI4THvtRKdgxT USON4/ALdpZ17vmoHa8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 22540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20190725000000 20190704000000 63294 schweter.eu. mo32BI9Kirgl2/hH7n8OtQ9gVdW1q40+scnDuChh+wnLb4Ogog8NsXxnqoTI+Bc1o3fZdXzMRfVa sUG7AgEv3890ngKuhqN9VuQLKfg6lybJaWrQxqiQGyCwrs8aLVHJcbXH8j/sfVtEewDzItzkUA4A CNVFvJDXbpqtFcOgIZg= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20190725000000 20190704000000 63294 schweter.eu. mo32BI9Kirgl2/hH7n8OtQ9gVdW1q40+scnDuChh+wnLb4Ogog8NsXxnqoTI+Bc1o3fZdXzMRfVa sUG7AgEv3890ngKuhqN9VuQLKfg6lybJaWrQxqiQGyCwrs8aLVHJcbXH8j/sfVtEewDzItzkUA4A CNVFvJDXbpqtFcOgIZg= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: