DNSSEC Analyzer - schweter.eu

Domain Name:

Time: 2021-06-12 20:54:38 UTC, NTP stratum 4

Analyzing DNSSEC problems for schweter.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 12148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for schweter.eu/A
	Received 653 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (653 bytes) ;; HEADER SECTION ;; id = 10587 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for eu/DNSKEY
	Received 644 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (644 bytes) ;; HEADER SECTION ;; id = 37230 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to g.root-servers.net for eu/DS
	Received 366 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (366 bytes) ;; HEADER SECTION ;; id = 33500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to nl.dns.eu for eu/DNSKEY
	Received 907 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (907 bytes) ;; HEADER SECTION ;; id = 32144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAaoknOeo4ZBIhuJ14mSDJV/Xowio+OXgoVPVfGbcUccioZT/FYbqlIwgpHNsyhX0AAYyNHvv Y4WjVfVdAEwb5UQdjyBuUzXKtOWwCp8M1BPyLd1uMUZrTMHrzrnEIjIACdBsTPshh7M3++ixW6Ky +sA8J27ClxZ1zNH5jc8yWdcb ) ; Key ID = 40881 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 40881 eu. VonS6ZDi96d+x/9iBSFp30nD7I2bFyYcEdYoqW/5WutojANaQP6AgL5VGa5h07S7oTomtr9vxOtQ Ya8KnTeSGYH3DgRKf6PW+wkzjgtslFrRW7M9x0akQeTKUVLxFzaw1l3fuE60jKmK/Kfy0kKJlONP WpTU4Xx6/YT8VpiRcUY= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 59479 eu. ZGYKQkmq/LnLx4/ViA+dycQ3ikUpzzH/NS1f4uMbjfs3IhqpxAO1MTXKQmjNnx5mp56x0Iy983fO oLiHUe4hWJa1BVwxJcBm9Vpi9I0Q+YiIG7JaLsOYKSueskjmIDIYJ5CNOqOb31xFt+RAabEFRXjM 1NwkgpjPkoWR/+KMQdhstdkbfGaWC0yJabAY9mfrQuJcUVgWF8EqfKovO2rnLR/qzoyoKSafW4qt 3BzjhCxRi2aBdhJ2wFTcIi0Q/wqGAxofADqTgeCtN0/KuvurDJvz5A0yYMTU0VBvvfosnf63sBec roAHJabe5lD8/WdYNQ+lebM0FPN3QORW1sjZOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAaoknOeo4ZBIhuJ14mSDJV/Xowio+OXgoVPVfGbcUccioZT/FYbqlIwgpHNsyhX0AAYyNHvv Y4WjVfVdAEwb5UQdjyBuUzXKtOWwCp8M1BPyLd1uMUZrTMHrzrnEIjIACdBsTPshh7M3++ixW6Ky +sA8J27ClxZ1zNH5jc8yWdcb ) ; Key ID = 40881`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 40881 eu. VonS6ZDi96d+x/9iBSFp30nD7I2bFyYcEdYoqW/5WutojANaQP6AgL5VGa5h07S7oTomtr9vxOtQ Ya8KnTeSGYH3DgRKf6PW+wkzjgtslFrRW7M9x0akQeTKUVLxFzaw1l3fuE60jKmK/Kfy0kKJlONP WpTU4Xx6/YT8VpiRcUY= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 59479 eu. ZGYKQkmq/LnLx4/ViA+dycQ3ikUpzzH/NS1f4uMbjfs3IhqpxAO1MTXKQmjNnx5mp56x0Iy983fO oLiHUe4hWJa1BVwxJcBm9Vpi9I0Q+YiIG7JaLsOYKSueskjmIDIYJ5CNOqOb31xFt+RAabEFRXjM 1NwkgpjPkoWR/+KMQdhstdkbfGaWC0yJabAY9mfrQuJcUVgWF8EqfKovO2rnLR/qzoyoKSafW4qt 3BzjhCxRi2aBdhJ2wFTcIi0Q/wqGAxofADqTgeCtN0/KuvurDJvz5A0yYMTU0VBvvfosnf63sBec roAHJabe5lD8/WdYNQ+lebM0FPN3QORW1sjZOA== )`
	RRSIG=40881 and DNSKEY=40881 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=40881 is now in the chain-of-trust
	Query to y.dns.eu for schweter.eu/A
	Received 297 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (297 bytes) ;; HEADER SECTION ;; id = 9746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210617213510 20210610212716 40881 eu. AzGCj3JkApxc526KRIWQptFByuoR8TyfH4QXPinWP/5qPMwLiZ0p8PFuKSb8L1dqyyFRQkgWtXO4 pQ0aOgp7FsTTc0KPWPbI3ZG19t02nIZlXRKl2JAmFcXIJashrYoardgN6syiR6kc7PqV8deykGAc mJhz5+vLb7rITs0Gl24= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to x.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (297 bytes) ;; HEADER SECTION ;; id = 49134 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210617213510 20210610212716 40881 eu. AzGCj3JkApxc526KRIWQptFByuoR8TyfH4QXPinWP/5qPMwLiZ0p8PFuKSb8L1dqyyFRQkgWtXO4 pQ0aOgp7FsTTc0KPWPbI3ZG19t02nIZlXRKl2JAmFcXIJashrYoardgN6syiR6kc7PqV8deykGAc mJhz5+vLb7rITs0Gl24= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to si.dns.eu for schweter.eu/DS
	Received 250 bytes from 193.2.221.60
	;; Answer received from 193.2.221.60 (250 bytes) ;; HEADER SECTION ;; id = 6319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210617213510 20210610212716 40881 eu. AzGCj3JkApxc526KRIWQptFByuoR8TyfH4QXPinWP/5qPMwLiZ0p8PFuKSb8L1dqyyFRQkgWtXO4 pQ0aOgp7FsTTc0KPWPbI3ZG19t02nIZlXRKl2JAmFcXIJashrYoardgN6syiR6kc7PqV8deykGAc mJhz5+vLb7rITs0Gl24= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210617213510 20210610212716 40881 eu. AzGCj3JkApxc526KRIWQptFByuoR8TyfH4QXPinWP/5qPMwLiZ0p8PFuKSb8L1dqyyFRQkgWtXO4 pQ0aOgp7FsTTc0KPWPbI3ZG19t02nIZlXRKl2JAmFcXIJashrYoardgN6syiR6kc7PqV8deykGAc mJhz5+vLb7rITs0Gl24= )`
	RRSIG=40881 and DNSKEY=40881 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns3.powerdns.de for schweter.eu/DNSKEY
	Received 763 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (763 bytes) ;; HEADER SECTION ;; id = 7660 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210624000000 20210603000000 27844 schweter.eu. XBWz1FsmygUcxoujuWtC85cwvTj4qIkDMU+nGL/nZrhRsp8AnOTbq6+IvcsmRB+njeEyo2uhnLjL R/zdAk0BdmWkchqA9uyT/khLZcLuBguhSCNUBO4UV3l5HfbcOQByuY8tWEgu4mvRDBU1EEDb0dEl Tpih2TI/h4N8pvzNoUySpEuQdRHO8zPTOTREjr6kR/kH9Ip9Sr0DgyEO+Zx+DMAOP8CdFGnMhvOR 3gg1ibEN7gbbB7fEL1OEBV6cvdwayAo9IPnXfBgrhGVuPbZhuWGFt6W2ZHoHWOlqXbIgXpyP310M iCswBTzIbzOCc4Hdm6KZL9X+ePTXI/q7UxHmDg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210624000000 20210603000000 27844 schweter.eu. XBWz1FsmygUcxoujuWtC85cwvTj4qIkDMU+nGL/nZrhRsp8AnOTbq6+IvcsmRB+njeEyo2uhnLjL R/zdAk0BdmWkchqA9uyT/khLZcLuBguhSCNUBO4UV3l5HfbcOQByuY8tWEgu4mvRDBU1EEDb0dEl Tpih2TI/h4N8pvzNoUySpEuQdRHO8zPTOTREjr6kR/kH9Ip9Sr0DgyEO+Zx+DMAOP8CdFGnMhvOR 3gg1ibEN7gbbB7fEL1OEBV6cvdwayAo9IPnXfBgrhGVuPbZhuWGFt6W2ZHoHWOlqXbIgXpyP310M iCswBTzIbzOCc4Hdm6KZL9X+ePTXI/q7UxHmDg== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Answer received from 116.203.122.234 (227 bytes) ;; HEADER SECTION ;; id = 11529 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Received 278 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (278 bytes) ;; HEADER SECTION ;; id = 27225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20210624000000 20210603000000 63294 schweter.eu. ypPl733s0w0Sy4bJzf1ASQlgrNk746j27e+lT+rhYVPjFmLZTVDfezQxKDm9vvvcAFVJWsWjidsY dSUOkX2TxHvMonFlhn/Cf6bUoXfoR/93CrkiyTe1RxHrFdekLV+5WC2ZH6RtjYs746AOJJbGddQ7 Awqr0wjn1GGwXBBVRLc= ) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Answer received from 116.203.122.234 (227 bytes) ;; HEADER SECTION ;; id = 24990 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

schweter.eu

	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 58686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 51216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20210624000000 20210603000000 63294 schweter.eu. urRhCgZnpAQQ6OvGpjgNS9C3ff89gRmEMB/UC/j9IzmAOkZeEvmcrkuPswneQKsQ5ZVR5DwNjX8o 3lzUMo/Blf+sTwdJ/d3KHMhA/OozY1Sj0PQ9crlw83kbMv/6Y2v7JhIZW5oL1KbsenjY2vwsqj6O IPXFGYdNaBHnvYpPjb4= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: