DNSSEC Analyzer - senado.es

Domain Name:

Time: 2023-01-30 02:10:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for senado.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 51314 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230211000000 20230121000000 20326 . UTKe6Ir/OYc+YxQKtVtll09sl7Iirz0ajr6Wtu6KZjDoXg0hSze1NKIlth7kqvXY0q1lBub5Biyk SeACSmjDUZKJ3JK4tSgMg/UqWi/Se6v8fRfv120nJZKWmUg4Iy8GXJGDLmbghz4hHW62pZ2KKDaN Fm2+u7AcRFPmyCDGCxouTFZUfjQGiO8p3+T1BESqbq+zwMF78Mls/e5qtTqSF9mQBJNGJ99FIbPc p006e5KFaP5DoL9dtbUOvmLZVzmtBiEpQUUxD/FXWQwZckKbebF8/Ja8FdctXYngrJOwaYyxnVkc 8julOAEtzRlmJOzFHVyau1QESCOfT5F1SlYrpg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcVnO2jZFx4756Rb/yAhJnsl72eemsObU43nclmXwqdJlp+kC5WQjGYkqLT5xkaUCPhkr4NK LLrIBZXeSGazc6gx/yrrMtUpXcQvax6kfDJPTu974OmeEbtjyyP7ZG5tUfSwNWt/4EuxDNmZTESG 8jU0ZLjYIB11pK0gSXQbMVPyIyGtFGHMPx6UxWn6zUzpECWRFbqEvkA6Y13zeJ1jG2Rki/zs7a/o 13FTl/kI9013Eh6l6Kc2zxbc14GS8fpM0/xQIrZZyeiXj/2C4RcsPeqWuNj9m0qSQrbrCZtLHb20 U8x1uue4iwSX9y7LpwZd6vjYd1d6dgBa1Xxgc/TC+m8= ) ; Key ID = 951`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230211000000 20230121000000 20326 . UTKe6Ir/OYc+YxQKtVtll09sl7Iirz0ajr6Wtu6KZjDoXg0hSze1NKIlth7kqvXY0q1lBub5Biyk SeACSmjDUZKJ3JK4tSgMg/UqWi/Se6v8fRfv120nJZKWmUg4Iy8GXJGDLmbghz4hHW62pZ2KKDaN Fm2+u7AcRFPmyCDGCxouTFZUfjQGiO8p3+T1BESqbq+zwMF78Mls/e5qtTqSF9mQBJNGJ99FIbPc p006e5KFaP5DoL9dtbUOvmLZVzmtBiEpQUUxD/FXWQwZckKbebF8/Ja8FdctXYngrJOwaYyxnVkc 8julOAEtzRlmJOzFHVyau1QESCOfT5F1SlYrpg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=951 is now in the chain-of-trust
	Query to b.root-servers.net for senado.es/A
	Received 617 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (617 octets) ;; HEADER SECTION ;; id = 60102 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to h.root-servers.net for es/DNSKEY
	Received 610 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (610 octets) ;; HEADER SECTION ;; id = 50744 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to d.root-servers.net for es/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (366 octets) ;; HEADER SECTION ;; id = 60295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 ) es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 1 DS records for es in the . zone
	DS=44375/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20230211170000 20230129160000 951 . G4nN7MhpbBLbQR0tRdBcjJ1Sn1cQghfWvvyoPxuZoGeGtKPlf1w7sWd2ODiz7r/LauNb1Fv1syoF Zias9vLptzrDQOj5xLsXur5RKcNBiBgLas8DlyMRC/5F3kyZHgh1rLFmQz+AF3Y/xZb4MzCzioBK fzueUsXFV3t+WwICHyEm3EQj5kvSAeUTPGM5ovIXy2uU+2afIjlNWjJbS5CWNNioPB+xF7OZqoRF n8j7Aq/LbzHCGF4l3SICVGo0gUr7xezxeVeBFhX5jLpS3HpY8+YmaKaqCoLpuPPv5Y/MXaUbj4eZ tyqb3AAKsJOfcwpEeRaFxfwvyPWvZvdOxbtXSQ== )`
	RRSIG=951 and DNSKEY=951 verifies the DS RRset
	DS=44375/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 44375 8 2 9d9858ae981aa53dd1143d93844e3d69b0fb73a9b4fe5759da39e036e754d402 )`
	Query to h.nic.es for es/DNSKEY
	Received 873 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (873 octets) ;; HEADER SECTION ;; id = 40942 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (3 records) es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375 es. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/TD9L+Q6heYdEVbRokA8ffNIovn8RBJfi4NkLPrO+TyNeOuHkx92/RnTViO4auqrBuDptW h9jkWxsKL/vIWntDVI9AbZA3I9mc03uhneJQArWP1oaIGpETlFEnJG7bo0ekFnJ/SPbnDxr/ZP+9 VwTdHyKAQoM+CH/c9LR0ZcC3KZPgY+iWt90VFrQ27dSytau12dkTThvAqi1c72h6PZtWkAlO3ooK UtGq/oh5X7GcgM5NZoHjJ8lei+lU95KyMHQKutXF8vCbV46zTkEpOFzA81dybgzREInK1KjbwkLU oaQHoz73sT91c/bkEGOc+YEGjTolbV19HE8eSR5qTvc= ) ; Key ID = 32974 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230208135103 20230125160500 44375 es. TWQljxT8utgvariuCqCt+FW3XYj5HZzIQKDLt/lVoSxWtBvKXrNZGYG1hE5EM4s7h+0m0+KUNyLe xis3In5/MWNkIqdtHPVrBndNxdDi4Klukmu8DSdGeb21YRMg0+NhxXM+gQ3o/6eUbP4pskZSpQWb qK2EuBLRrDYGTLb0X9wIQqzmWPcKok59wO6OJUrmqIvrzviE28xxeKJ0m+yXSHZVjNl5SM8VLUJS LkoRm6+SGcXEskxTMho4+danM/reRsnT92mStOZzukfqgnvAxJ/k1CpVkf9VXy3U6m7KdE/XAksu 3DtkUdF4CKfVlO/SlTBEnpUkqRAQXFbhJ8cCbw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAcUE5CH2LfcP6T51zvhtJRDn0mztYoHkxVCow1D8c2oDOFIYRpFypZohnl+J+Zn9HjtiJN4y ZysLcNIc1kNx5ei1tfsaeaCctlwRmFf4VDx/QAnmRW8z0cseBYFOJAzyZiA1wVUvqrJu2s3dHIV/ C3GOXBv4vxKhyy5MmpAaKAoY9301a32VpxJ03pDhvbcR6xnLpS2+VO9r+FG6c07eUGAgIw2/gVxG AQLgsz/mS3d09hqzqQu3bt2KVZQzkxO2/8jE5G+gzyjRQaONjtbP+a1vwjYnkCXUwjTRYX0+TC71 nAvZpu+UHUl+12jP6U91T9w1cpe8ifeSIq87HaJIids= ) ; Key ID = 44375`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAZ/TD9L+Q6heYdEVbRokA8ffNIovn8RBJfi4NkLPrO+TyNeOuHkx92/RnTViO4auqrBuDptW h9jkWxsKL/vIWntDVI9AbZA3I9mc03uhneJQArWP1oaIGpETlFEnJG7bo0ekFnJ/SPbnDxr/ZP+9 VwTdHyKAQoM+CH/c9LR0ZcC3KZPgY+iWt90VFrQ27dSytau12dkTThvAqi1c72h6PZtWkAlO3ooK UtGq/oh5X7GcgM5NZoHjJ8lei+lU95KyMHQKutXF8vCbV46zTkEpOFzA81dybgzREInK1KjbwkLU oaQHoz73sT91c/bkEGOc+YEGjTolbV19HE8eSR5qTvc= ) ; Key ID = 32974`
	DNSKEY=44375/SEP is now in the chain-of-trust
	DS=44375/SHA-256 verifies DNSKEY=44375/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20230208135103 20230125160500 44375 es. TWQljxT8utgvariuCqCt+FW3XYj5HZzIQKDLt/lVoSxWtBvKXrNZGYG1hE5EM4s7h+0m0+KUNyLe xis3In5/MWNkIqdtHPVrBndNxdDi4Klukmu8DSdGeb21YRMg0+NhxXM+gQ3o/6eUbP4pskZSpQWb qK2EuBLRrDYGTLb0X9wIQqzmWPcKok59wO6OJUrmqIvrzviE28xxeKJ0m+yXSHZVjNl5SM8VLUJS LkoRm6+SGcXEskxTMho4+danM/reRsnT92mStOZzukfqgnvAxJ/k1CpVkf9VXy3U6m7KdE/XAksu 3DtkUdF4CKfVlO/SlTBEnpUkqRAQXFbhJ8cCbw== )`
	RRSIG=44375 and DNSKEY=44375/SEP verifies the DNSKEY RRset
	DNSKEY=32974 is now in the chain-of-trust
	Query to g.nic.es for senado.es/A
	Received 842 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (842 octets) ;; HEADER SECTION ;; id = 33408 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) senado.es. 86400 IN NS a4-65.akam.net. senado.es. 86400 IN NS a10-65.akam.net. 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a f0cuif56ar5j0fcf7rdb4j2i4rt3ua2m NS DS RRSIG ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230211063100 20230128120455 32974 es. eDouUOV1zF6EQ9wkepQ/3Rme6VjsXfwUHHOmgJv5nfsMxdk4xoU06GkS9bMo7Zvb8Xv0NecnClIW 1LZIeQqBfG4WI5yyNtZYTqcNjHtQFNKN+XTTfzTbj5UfCZEHpuW40JxoaFPJEXoLbBIpNQet9/e1 UBSz+toZVPaaKW2jwDqe94ZuegMON+wRLEFR/44M1pG9SC1gmZSi3Z7ky4Sx8uBVAlBAXVLs5wxB zqILH6CNthRzXmOJJhiJY1u7clUHRNiei/JEnty8hBxeMQq+hupG+mQrnOKUzndEOiJJmck1e0uL s8cf/bQf8x8Fjz1O0pxxbRUqbfgpuqlPtTnfow== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.es for senado.es/DNSKEY
	Received 842 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (842 octets) ;; HEADER SECTION ;; id = 49465 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) senado.es. 86400 IN NS a4-65.akam.net. senado.es. 86400 IN NS a10-65.akam.net. 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a f0cuif56ar5j0fcf7rdb4j2i4rt3ua2m NS DS RRSIG ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230211063100 20230128120455 32974 es. eDouUOV1zF6EQ9wkepQ/3Rme6VjsXfwUHHOmgJv5nfsMxdk4xoU06GkS9bMo7Zvb8Xv0NecnClIW 1LZIeQqBfG4WI5yyNtZYTqcNjHtQFNKN+XTTfzTbj5UfCZEHpuW40JxoaFPJEXoLbBIpNQet9/e1 UBSz+toZVPaaKW2jwDqe94ZuegMON+wRLEFR/44M1pG9SC1gmZSi3Z7ky4Sx8uBVAlBAXVLs5wxB zqILH6CNthRzXmOJJhiJY1u7clUHRNiei/JEnty8hBxeMQq+hupG+mQrnOKUzndEOiJJmck1e0uL s8cf/bQf8x8Fjz1O0pxxbRUqbfgpuqlPtTnfow== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone senado.es

senado.es

	Checking DS between es and senado.es
	Query to h.nic.es for senado.es/DS
	Received 1140 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (1140 octets) ;; HEADER SECTION ;; id = 33299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a 2qnvqgme2uqgj0phcpa2040f2pildmh8 NS SOA RRSIG DNSKEY NSEC3PARAM ) 2qntmqsk4a1ng3q8pasoklmdcegving5.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230212035315 20230129000459 32974 es. fO2jv/Ee8pcrYyi9VGWN21/MNdGvnMQC3dkOuHk0NyrfjYauSHXtHnIwUHshN64WMRdk2n9th5yD 7C8aWiUarQPN04s/A1UnbsZUl64dQJaazY+cHzt1DPZcgpdRMIq/TIoq3qM9WbaT2mnGm3xb7F10 IoZPKShGI7MAucsDwj9J8Cg59FtAbriOvLgCvyUQYd6FlRYcv39y7O7yb5xYCv6Uw8RI+xpm1ler PRlByImrisiA7gH3aXDmQUod2bJkmSUY86bzAwpVRcupH/iH6vMxyWcJWP/301KCoPOpgR9tcNWe MrUtTiTPns3T5Lmt5QDACmXNOeGQTewztSm9Rw== ) es. 3600 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2023013001 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 3600 IN RRSIG ( SOA 8 1 3600 20230212224646 20230130000456 32974 es. MhKxjvRBbGTTM7tOkAeIIR5oTge0GD4ik05Jrj2ITZVLiuSEK0V2yjxXdDQeuwshpHrKF1pqO7mJ 5MgniD8NfKtWEXAoMio9RnktOXpuB5HMoeg8GZtSCPihZWo/gOexNGWRkxyy6ltwNF75Gk3sCJGv HBaCMKz6ZNn4dstigyKHswcMiBMmjaJvvKtdAPUUcjO3Dnv8fJBM9j6oVTRW9sFSvb+XeEcODTL7 pbnyxq8vkcQA23LTTutVnIzOHdyEBqisvCPa4yJOmVTGB7p3SFe/S/SoUj4PURTbEb/lEXhtZ7zM cgFfiWNKQ9zF2ZsojBKKeRzKG+TB3EeEbQqpHQ== ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN NSEC3 ( 1 1 5 e719da283843680a f0cuif56ar5j0fcf7rdb4j2i4rt3ua2m NS DS RRSIG ) f0c45efdgehrv2cm1d72o8d21aid2h22.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20230211063100 20230128120455 32974 es. eDouUOV1zF6EQ9wkepQ/3Rme6VjsXfwUHHOmgJv5nfsMxdk4xoU06GkS9bMo7Zvb8Xv0NecnClIW 1LZIeQqBfG4WI5yyNtZYTqcNjHtQFNKN+XTTfzTbj5UfCZEHpuW40JxoaFPJEXoLbBIpNQet9/e1 UBSz+toZVPaaKW2jwDqe94ZuegMON+wRLEFR/44M1pG9SC1gmZSi3Z7ky4Sx8uBVAlBAXVLs5wxB zqILH6CNthRzXmOJJhiJY1u7clUHRNiei/JEnty8hBxeMQq+hupG+mQrnOKUzndEOiJJmck1e0uL s8cf/bQf8x8Fjz1O0pxxbRUqbfgpuqlPtTnfow== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	No DS records found for senado.es in the es zone
	Query to a10-65.akam.net for senado.es/DNSKEY
	Received 93 bytes from 96.7.50.65
	;; Response received from 96.7.50.65 (93 octets) ;; HEADER SECTION ;; id = 62214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) senado.es. 86400 IN SOA ( a4-65.akam.net. root.senado.es. 2019070362 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to a4-65.akam.net for senado.es/A
	Received 70 bytes from 72.246.46.65
	;; Response received from 72.246.46.65 (70 octets) ;; HEADER SECTION ;; id = 27048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (2 records) senado.es. 20 IN A 104.126.116.98 senado.es. 20 IN A 104.126.116.91 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a4-65.akam.net is authoritative for senado.es
	Query to a10-65.akam.net for senado.es/SOA
	Received 210 bytes from 96.7.50.65
	;; Response received from 96.7.50.65 (210 octets) ;; HEADER SECTION ;; id = 15046 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN SOA ;; ANSWER SECTION (1 record) senado.es. 86400 IN SOA ( a4-65.akam.net. root.senado.es. 2019070362 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (6 records) senado.es. 172800 IN NS a10-65.akam.net. senado.es. 172800 IN NS a8-66.akam.net. senado.es. 172800 IN NS a7-65.akam.net. senado.es. 172800 IN NS a4-65.akam.net. senado.es. 172800 IN NS a11-67.akam.net. senado.es. 172800 IN NS a1-103.akam.net. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a4-65.akam.net for senado.es/A
	Received 86 bytes from 72.246.46.65
	;; Response received from 72.246.46.65 (86 octets) ;; HEADER SECTION ;; id = 17306 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (3 records) senado.es. 20 IN A 104.126.116.91 senado.es. 20 IN A 104.126.116.96 senado.es. 20 IN A 104.126.116.98 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	senado.es A RR has value 104.126.116.91
	senado.es A RR has value 104.126.116.96
	senado.es A RR has value 104.126.116.98
	No RRSIGs found

senado.es

	Query to a10-65.akam.net for senado.es/A
	Received 70 bytes from 96.7.50.65
	;; Response received from 96.7.50.65 (70 octets) ;; HEADER SECTION ;; id = 57351 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (2 records) senado.es. 20 IN A 104.126.116.98 senado.es. 20 IN A 104.126.116.91 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	a10-65.akam.net is authoritative for senado.es
	Query to a10-65.akam.net for senado.es/A
	Received 86 bytes from 96.7.50.65
	;; Response received from 96.7.50.65 (86 octets) ;; HEADER SECTION ;; id = 32238 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; senado.es. IN A ;; ANSWER SECTION (3 records) senado.es. 20 IN A 104.126.116.96 senado.es. 20 IN A 104.126.116.98 senado.es. 20 IN A 104.126.116.91 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	senado.es A RR has value 104.126.116.96
	senado.es A RR has value 104.126.116.98
	senado.es A RR has value 104.126.116.91
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test senado.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: