DNSSEC Analyzer - signed.fjfi.cvut.cz

Domain Name:

Time: 2020-02-21 00:44:26 UTC, NTP stratum 4

Analyzing DNSSEC problems for signed.fjfi.cvut.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Error querying h.root-servers.net/2001:500:1:0:0:0:0:53 for ./DNSKEY: 'IPv6 transport disabled'
	Received 864 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (864 bytes) ;; HEADER SECTION ;; id = 5532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to e.root-servers.net for signed.fjfi.cvut.cz/A
	Received 630 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (630 bytes) ;; HEADER SECTION ;; id = 47484 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200304170000 20200220160000 33853 . RHmD3pVl81Gr+8pu5e8BmQ+vW4iwgklM1cIMQBXY+sG/qo603FJspNRGZ6tTpFoEB88wvTInnfXV PnCR21iWWpoPNgYSxxloHLoZN60RaDQyxePN/30T8geuocQqv3/o/fvToLe9U4JYOmh226XtFS/8 SgZkFNP+5S/nNRuevtWGrgi9T5i5dNwpLvlI5Q1DPsKPLEvMRyWu3E56acwmqDDA7PO5p+er+vBr ffEeu3cto3E9RijRyJDwh5jWs2tB8y61Nbmng/1IrrcibEuaPUmmNel7QqrZ4qs0zoBj3hwY5QhA Ir9M3gc+5GfnNmbOl3q9Z5BsbT3rjtmaqIxwSw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to e.root-servers.net for cz/DNSKEY
	Error querying e.root-servers.net/2001:500:a8:0:0:0:0:e for cz/DNSKEY: 'IPv6 transport disabled'
	Received 613 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (613 bytes) ;; HEADER SECTION ;; id = 30542 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200304170000 20200220160000 33853 . RHmD3pVl81Gr+8pu5e8BmQ+vW4iwgklM1cIMQBXY+sG/qo603FJspNRGZ6tTpFoEB88wvTInnfXV PnCR21iWWpoPNgYSxxloHLoZN60RaDQyxePN/30T8geuocQqv3/o/fvToLe9U4JYOmh226XtFS/8 SgZkFNP+5S/nNRuevtWGrgi9T5i5dNwpLvlI5Q1DPsKPLEvMRyWu3E56acwmqDDA7PO5p+er+vBr ffEeu3cto3E9RijRyJDwh5jWs2tB8y61Nbmng/1IrrcibEuaPUmmNel7QqrZ4qs0zoBj3hwY5QhA Ir9M3gc+5GfnNmbOl3q9Z5BsbT3rjtmaqIxwSw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to g.root-servers.net for cz/DS
	Received 366 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (366 bytes) ;; HEADER SECTION ;; id = 40751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20200304170000 20200220160000 33853 . RHmD3pVl81Gr+8pu5e8BmQ+vW4iwgklM1cIMQBXY+sG/qo603FJspNRGZ6tTpFoEB88wvTInnfXV PnCR21iWWpoPNgYSxxloHLoZN60RaDQyxePN/30T8geuocQqv3/o/fvToLe9U4JYOmh226XtFS/8 SgZkFNP+5S/nNRuevtWGrgi9T5i5dNwpLvlI5Q1DPsKPLEvMRyWu3E56acwmqDDA7PO5p+er+vBr ffEeu3cto3E9RijRyJDwh5jWs2tB8y61Nbmng/1IrrcibEuaPUmmNel7QqrZ4qs0zoBj3hwY5QhA Ir9M3gc+5GfnNmbOl3q9Z5BsbT3rjtmaqIxwSw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20200304170000 20200220160000 33853 . RHmD3pVl81Gr+8pu5e8BmQ+vW4iwgklM1cIMQBXY+sG/qo603FJspNRGZ6tTpFoEB88wvTInnfXV PnCR21iWWpoPNgYSxxloHLoZN60RaDQyxePN/30T8geuocQqv3/o/fvToLe9U4JYOmh226XtFS/8 SgZkFNP+5S/nNRuevtWGrgi9T5i5dNwpLvlI5Q1DPsKPLEvMRyWu3E56acwmqDDA7PO5p+er+vBr ffEeu3cto3E9RijRyJDwh5jWs2tB8y61Nbmng/1IrrcibEuaPUmmNel7QqrZ4qs0zoBj3hwY5QhA Ir9M3gc+5GfnNmbOl3q9Z5BsbT3rjtmaqIxwSw== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to d.ns.nic.cz for cz/DNSKEY
	Received 387 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (387 bytes) ;; HEADER SECTION ;; id = 6447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (4 records) cz. 18000 IN DNSKEY ( 256 3 13 OGMLIMzOV+3PqWgELNmDUu3MUDSDVyVy+oM/gLYWitNreeVMZbPDW2xlfCzn/jVTAG5xKNZpX5uo D0uWqNPG0g== ) ; Key ID = 16513 cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200305000000 20200220000000 20237 cz. Hiz8NAtn9KZrJCfpDxDgVkFF4Odb83tWlcvHj5HKwR+mviPfeIAdFNdpY5K8vWU7muL8ve5pl9Ds Eb9O41r26w== ) cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200305201322 20200220230533 16513 cz. GUvQ5F+YQZVrVRiKQF5K+LiZXSQEBaxR765ZB2BKFzq9ZLE7aB0qOk/8F/a+n1BqsKnjdY7chJdC d5Zzlh/Rdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 18000 IN DNSKEY ( 256 3 13 OGMLIMzOV+3PqWgELNmDUu3MUDSDVyVy+oM/gLYWitNreeVMZbPDW2xlfCzn/jVTAG5xKNZpX5uo D0uWqNPG0g== ) ; Key ID = 16513`
	`cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200305000000 20200220000000 20237 cz. Hiz8NAtn9KZrJCfpDxDgVkFF4Odb83tWlcvHj5HKwR+mviPfeIAdFNdpY5K8vWU7muL8ve5pl9Ds Eb9O41r26w== )`
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20200305201322 20200220230533 16513 cz. GUvQ5F+YQZVrVRiKQF5K+LiZXSQEBaxR765ZB2BKFzq9ZLE7aB0qOk/8F/a+n1BqsKnjdY7chJdC d5Zzlh/Rdg== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	RRSIG=16513 and DNSKEY=16513 verifies the DNSKEY RRset
	DNSKEY=16513 is now in the chain-of-trust
	Query to b.ns.nic.cz for signed.fjfi.cvut.cz/A
	Error querying b.ns.nic.cz/2001:678:10:0:0:0:0:1 for signed.fjfi.cvut.cz/A: 'IPv6 transport disabled'
	Received 317 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (317 bytes) ;; HEADER SECTION ;; id = 44047 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cvut.cz. 3600 IN NS ns.cvut.cz. cvut.cz. 3600 IN NS nss.cvut.cz. cvut.cz. 3600 IN DS ( 41860 13 2 2311d5df154638befa68b593c52e6b6c72060e33ff020392fa527b1f4c3bf3b3 ) cvut.cz. 3600 IN RRSIG ( DS 13 2 3600 20200228033657 20200215083551 16513 cz. dJPL+wL0vQLnXXvQkl4Ly/da8t3nGReAZAOh66Ys024o8GPjvw3MGahyKfxUfZ9LTrmyJu5VOAHA voogfdUNGg== ) ;; ADDITIONAL SECTION (5 records) ns.cvut.cz. 3600 IN A 147.32.1.20 ns.cvut.cz. 3600 IN AAAA 2001:718:2:2200::100 nss.cvut.cz. 3600 IN A 147.32.1.9 nss.cvut.cz. 3600 IN AAAA 2001:718:2:2200::101 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b.ns.nic.cz for cvut.cz/DNSKEY
	Error querying b.ns.nic.cz/2001:678:10:0:0:0:0:1 for cvut.cz/DNSKEY: 'IPv6 transport disabled'
	Received 305 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (305 bytes) ;; HEADER SECTION ;; id = 43332 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cvut.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cvut.cz. 3600 IN NS ns.cvut.cz. cvut.cz. 3600 IN NS nss.cvut.cz. cvut.cz. 3600 IN DS ( 41860 13 2 2311d5df154638befa68b593c52e6b6c72060e33ff020392fa527b1f4c3bf3b3 ) cvut.cz. 3600 IN RRSIG ( DS 13 2 3600 20200228033657 20200215083551 16513 cz. dJPL+wL0vQLnXXvQkl4Ly/da8t3nGReAZAOh66Ys024o8GPjvw3MGahyKfxUfZ9LTrmyJu5VOAHA voogfdUNGg== ) ;; ADDITIONAL SECTION (5 records) ns.cvut.cz. 3600 IN A 147.32.1.20 ns.cvut.cz. 3600 IN AAAA 2001:718:2:2200::100 nss.cvut.cz. 3600 IN A 147.32.1.9 nss.cvut.cz. 3600 IN AAAA 2001:718:2:2200::101 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cvut.cz

cvut.cz

	Checking DS between cz and cvut.cz
	Query to a.ns.nic.cz for cvut.cz/DS
	Received 182 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (182 bytes) ;; HEADER SECTION ;; id = 49309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cvut.cz. IN DS ;; ANSWER SECTION (2 records) cvut.cz. 3600 IN DS ( 41860 13 2 2311d5df154638befa68b593c52e6b6c72060e33ff020392fa527b1f4c3bf3b3 ) cvut.cz. 3600 IN RRSIG ( DS 13 2 3600 20200228033657 20200215083551 16513 cz. dJPL+wL0vQLnXXvQkl4Ly/da8t3nGReAZAOh66Ys024o8GPjvw3MGahyKfxUfZ9LTrmyJu5VOAHA voogfdUNGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cvut.cz in the cz zone
	DS=41860/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cvut.cz. 3600 IN RRSIG ( DS 13 2 3600 20200228033657 20200215083551 16513 cz. dJPL+wL0vQLnXXvQkl4Ly/da8t3nGReAZAOh66Ys024o8GPjvw3MGahyKfxUfZ9LTrmyJu5VOAHA voogfdUNGg== )`
	RRSIG=16513 and DNSKEY=16513 verifies the DS RRset
	DS=41860/SHA-256 is now in the chain-of-trust
	`cvut.cz. 3600 IN DS ( 41860 13 2 2311d5df154638befa68b593c52e6b6c72060e33ff020392fa527b1f4c3bf3b3 )`
	Query to nss.cvut.cz for cvut.cz/DNSKEY
	Received 219 bytes from 147.32.1.9
	;; Answer received from 147.32.1.9 (219 bytes) ;; HEADER SECTION ;; id = 44160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cvut.cz. IN DNSKEY ;; ANSWER SECTION (2 records) cvut.cz. 6400 IN DNSKEY ( 257 3 13 +XkJfh9Fh5wGJVpntLyKQRXkrRQhP+kL3lnJ1SQfG3XTjW9WBBknfO37yynPQtat8S+kIuOJZaSg kLmMfS8drQ== ) ; Key ID = 41860 cvut.cz. 6400 IN RRSIG ( DNSKEY 13 2 6400 20200318010351 20200217002425 41860 cvut.cz. 0r8sXbPmbiO6mQaA6MTUQkDpa/SDl2mlQB0qNaF0bQWZgC5CidRIcCUlSszi7OfSDbROIou1W4MM jzMmKk9y4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for cvut.cz
	`cvut.cz. 6400 IN DNSKEY ( 257 3 13 +XkJfh9Fh5wGJVpntLyKQRXkrRQhP+kL3lnJ1SQfG3XTjW9WBBknfO37yynPQtat8S+kIuOJZaSg kLmMfS8drQ== ) ; Key ID = 41860`
	DNSKEY=41860/SEP is now in the chain-of-trust
	DS=41860/SHA-256 verifies DNSKEY=41860/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cvut.cz. 6400 IN RRSIG ( DNSKEY 13 2 6400 20200318010351 20200217002425 41860 cvut.cz. 0r8sXbPmbiO6mQaA6MTUQkDpa/SDl2mlQB0qNaF0bQWZgC5CidRIcCUlSszi7OfSDbROIou1W4MM jzMmKk9y4Q== )`
	RRSIG=41860 and DNSKEY=41860/SEP verifies the DNSKEY RRset
	Query to ns.cvut.cz for signed.fjfi.cvut.cz/A
	Received 517 bytes from 147.32.1.20
	;; Answer received from 147.32.1.20 (517 bytes) ;; HEADER SECTION ;; id = 54130 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) signed.fjfi.cvut.cz. 60 IN NS ns.fjfi.cvut.cz. signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 1 185389438d6c6adbcbc1b2ceeb0444b6fbf60e53 ) signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 2 016cbd8ed06fd5610802385f8a35244d3ad676a303ace868ac11bd2327996fa7 ) signed.fjfi.cvut.cz. 3600 IN RRSIG ( DS 13 4 3600 20200331164311 20200220161002 38165 fjfi.cvut.cz. 17GUSl1kX0FbyOK3HmSVYaN6bs7ZTUZrbkwWKS/OrVR4rGRuolSljqloP1dkOiiQxg2wMSbEyKPY 7WYy6fNlYQ== ) ;; ADDITIONAL SECTION (5 records) ns.fjfi.cvut.cz. 3600 IN A 147.32.9.4 ns.fjfi.cvut.cz. 3600 IN AAAA 2001:718:2:1900::4 ns.fjfi.cvut.cz. 3600 IN RRSIG ( A 13 4 3600 20200331130854 20200220121907 38165 fjfi.cvut.cz. b4usdUxtl3P1Rgh+wBNJO2x7jwAvFebGsfO/ydwwWd0bYKy1/0w/xlihOUK9rNrJCvsF6BeCaZYO njEKg334yQ== ) ns.fjfi.cvut.cz. 3600 IN RRSIG ( AAAA 13 4 3600 20200331110923 20200220105857 38165 fjfi.cvut.cz. 7jX561Q5Kayyd07ZnkHjERnpsXWVlhT1my/p1pKyRswWa1wnkdzAp2ZoI1vU44a9X42wcSEct/0J kSC4OxgxSg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.cvut.cz for fjfi.cvut.cz/DNSKEY
	Error querying ns.cvut.cz/2001:718:2:2200:0:0:0:100 for fjfi.cvut.cz/DNSKEY: 'IPv6 transport disabled'
	Received 229 bytes from 147.32.1.20
	;; Answer received from 147.32.1.20 (229 bytes) ;; HEADER SECTION ;; id = 43705 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fjfi.cvut.cz. IN DNSKEY ;; ANSWER SECTION (2 records) fjfi.cvut.cz. 3600 IN DNSKEY ( 257 3 13 l7MxV52nt39t7MOm671j3UYMUbqGJ2MO6yUFuvdRijXt4wUDnGyY7BesZmxRDt/weAshPRsQOsqr 98S1espMUA== ) ; Key ID = 38165 fjfi.cvut.cz. 3600 IN RRSIG ( DNSKEY 13 3 3600 20200331124553 20200220123919 38165 fjfi.cvut.cz. pgS+xSnx1lJ6/M6UEwulnesUiRVPLHdf185WltqlF62HzswnIQUA3I9+tYVw2gfxDewLPLV0JX+7 PxOrB1dymw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fjfi.cvut.cz
	Attempting to learn nameservers for fjfi.cvut.cz
	Query to nss.cvut.cz for fjfi.cvut.cz/NS
	Received 556 bytes from 147.32.1.9
	;; Answer received from 147.32.1.9 (556 bytes) ;; HEADER SECTION ;; id = 45542 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fjfi.cvut.cz. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fjfi.cvut.cz. 6400 IN NS ns.cvut.cz. fjfi.cvut.cz. 6400 IN NS ns.fjfi.cvut.cz. fjfi.cvut.cz. 6400 IN DS ( 38165 13 2 7ab800d2cdc2473310082280d01997421f7a2e2ba6665eed566c9185cad86b34 ) fjfi.cvut.cz. 6400 IN DS ( 38165 13 1 e828e7f19a7727f9abc9f21e06829d8a4b3b278b ) fjfi.cvut.cz. 6400 IN RRSIG ( DS 13 3 6400 20200309042625 20200208040741 41860 cvut.cz. gzt+7KWknwV2zz3QCH60pV8tUbPJTSBhv3JM69N0GsbgaI/Mdim+W65SYrFD5rU49QeOYO5/exDQ JZQy0b6pFg== ) ;; ADDITIONAL SECTION (7 records) ns.cvut.cz. 6400 IN A 147.32.1.20 ns.fjfi.cvut.cz. 6400 IN A 147.32.9.4 ns.cvut.cz. 6400 IN AAAA 2001:718:2:2200::100 ns.fjfi.cvut.cz. 6400 IN AAAA 2001:718:2:1900::4 ns.cvut.cz. 6400 IN RRSIG ( A 13 3 6400 20200311042803 20200210040114 41860 cvut.cz. VNQJqRtJ8CB9Jwr9hfyxB487bRKna32LSsUvRGQFVhmnNVZ+NOhYkrBvTQ5AnvbhZjL0Z/SehmZo 0GSGpwpXtA== ) ns.cvut.cz. 6400 IN RRSIG ( AAAA 13 3 6400 20200311042803 20200210040114 41860 cvut.cz. oEOyTC/X4uQakv0PbOiqB9HTuqxcfuBZzT9HMA9k+tYR2ogqOKaDnJGXLaxCqTSnxyvUTLE1JqMb FCsvPcXf7w== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found fjfi.cvut.cz nameservers: ns.cvut.cz, ns.fjfi.cvut.cz

fjfi.cvut.cz

	Checking DS between cvut.cz and fjfi.cvut.cz
	Query to ns.cvut.cz for fjfi.cvut.cz/DS
	Received 228 bytes from 147.32.1.20
	;; Answer received from 147.32.1.20 (228 bytes) ;; HEADER SECTION ;; id = 25095 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fjfi.cvut.cz. IN DS ;; ANSWER SECTION (3 records) fjfi.cvut.cz. 6400 IN DS ( 38165 13 2 7ab800d2cdc2473310082280d01997421f7a2e2ba6665eed566c9185cad86b34 ) fjfi.cvut.cz. 6400 IN DS ( 38165 13 1 e828e7f19a7727f9abc9f21e06829d8a4b3b278b ) fjfi.cvut.cz. 6400 IN RRSIG ( DS 13 3 6400 20200309042625 20200208040741 41860 cvut.cz. gzt+7KWknwV2zz3QCH60pV8tUbPJTSBhv3JM69N0GsbgaI/Mdim+W65SYrFD5rU49QeOYO5/exDQ JZQy0b6pFg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for fjfi.cvut.cz in the cvut.cz zone
	DS=38165/SHA-256 has algorithm ECDSAP256SHA256
	DS=38165/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fjfi.cvut.cz. 6400 IN RRSIG ( DS 13 3 6400 20200309042625 20200208040741 41860 cvut.cz. gzt+7KWknwV2zz3QCH60pV8tUbPJTSBhv3JM69N0GsbgaI/Mdim+W65SYrFD5rU49QeOYO5/exDQ JZQy0b6pFg== )`
	RRSIG=41860 and DNSKEY=41860/SEP verifies the DS RRset
	DS=38165/SHA-256 is now in the chain-of-trust
	`fjfi.cvut.cz. 6400 IN DS ( 38165 13 2 7ab800d2cdc2473310082280d01997421f7a2e2ba6665eed566c9185cad86b34 )`
	`fjfi.cvut.cz. 6400 IN DS ( 38165 13 1 e828e7f19a7727f9abc9f21e06829d8a4b3b278b )`
	Query to ns.fjfi.cvut.cz for fjfi.cvut.cz/DNSKEY
	Received 229 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (229 bytes) ;; HEADER SECTION ;; id = 29056 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fjfi.cvut.cz. IN DNSKEY ;; ANSWER SECTION (2 records) fjfi.cvut.cz. 3600 IN DNSKEY ( 257 3 13 l7MxV52nt39t7MOm671j3UYMUbqGJ2MO6yUFuvdRijXt4wUDnGyY7BesZmxRDt/weAshPRsQOsqr 98S1espMUA== ) ; Key ID = 38165 fjfi.cvut.cz. 3600 IN RRSIG ( DNSKEY 13 3 3600 20200331124553 20200220123919 38165 fjfi.cvut.cz. pgS+xSnx1lJ6/M6UEwulnesUiRVPLHdf185WltqlF62HzswnIQUA3I9+tYVw2gfxDewLPLV0JX+7 PxOrB1dymw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for fjfi.cvut.cz
	`fjfi.cvut.cz. 3600 IN DNSKEY ( 257 3 13 l7MxV52nt39t7MOm671j3UYMUbqGJ2MO6yUFuvdRijXt4wUDnGyY7BesZmxRDt/weAshPRsQOsqr 98S1espMUA== ) ; Key ID = 38165`
	DNSKEY=38165/SEP is now in the chain-of-trust
	DS=38165/SHA-256 verifies DNSKEY=38165/SEP
	DS=38165/SHA-1 verifies DNSKEY=38165/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fjfi.cvut.cz. 3600 IN RRSIG ( DNSKEY 13 3 3600 20200331124553 20200220123919 38165 fjfi.cvut.cz. pgS+xSnx1lJ6/M6UEwulnesUiRVPLHdf185WltqlF62HzswnIQUA3I9+tYVw2gfxDewLPLV0JX+7 PxOrB1dymw== )`
	RRSIG=38165 and DNSKEY=38165/SEP verifies the DNSKEY RRset
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/A
	Error querying ns.fjfi.cvut.cz/2001:718:2:1900:0:0:0:4 for signed.fjfi.cvut.cz/A: 'IPv6 transport disabled'
	Received 407 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (407 bytes) ;; HEADER SECTION ;; id = 27941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) signed.fjfi.cvut.cz. 1800 IN SOA ( ns.fjfi.cvut.cz. vokac.fjfi.cvut.cz. 2014012355 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) signed.fjfi.cvut.cz. 1800 IN RRSIG ( SOA 13 4 3600 20200223214817 20200219204817 59612 signed.fjfi.cvut.cz. Ncx9StISgKE6fhM4dwnAwupdfxVf9IdLWyO1qpl+wBUA96vW1+5zrY54icn15jP6Mb+FxXwTUUZU 1btI2fJjnQ== ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN NSEC3 ( 1 0 10 5c4548a2 7ldchp83234sfkq4j7lbfmnsarbmq6ao NS SOA MX RRSIG DNSKEY NSEC3PARAM ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN RRSIG ( NSEC3 13 5 1800 20200223211830 20200219204817 59612 signed.fjfi.cvut.cz. 6MMQ87JtWaNC9mccjXTR3xpo/DBr14KzN+6lwOXey9tQabv1rlMcasAUsnQPSPxoo3UA7s1zPRuq kKDnz/jtOA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	fjfi.cvut.cz is authoritative for signed.fjfi.cvut.cz
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/DNSKEY
	Error querying ns.fjfi.cvut.cz/2001:718:2:1900:0:0:0:4 for signed.fjfi.cvut.cz/DNSKEY: 'IPv6 transport disabled'
	Received 243 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (243 bytes) ;; HEADER SECTION ;; id = 35899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN DNSKEY ;; ANSWER SECTION (2 records) signed.fjfi.cvut.cz. 18000 IN DNSKEY ( 257 3 13 qwCfT0cgxU5agfHBUjwu88Htj7S7CAkcFefKAJsrRfPZL7aBYE5yf4zy8QZ5pzEaL3moFGr6ek+m lBd1ElvRVw== ) ; Key ID = 59612 signed.fjfi.cvut.cz. 18000 IN RRSIG ( DNSKEY 13 4 18000 20200223124732 20200219115704 59612 signed.fjfi.cvut.cz. HMtOU2uX5hio0zMooYBnLGI99G7tEZzbY1CUNu5N3qTnCybtrD2Kof56iNHYg3GAtNwHi7yF15Am 2AnxxVnJWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone signed.fjfi.cvut.cz
	Attempting to learn nameservers for signed.fjfi.cvut.cz
	Query to ns.cvut.cz for signed.fjfi.cvut.cz/NS
	Error querying ns.cvut.cz/2001:718:2:2200:0:0:0:100 for signed.fjfi.cvut.cz/NS: 'IPv6 transport disabled'
	Received 517 bytes from 147.32.1.20
	;; Answer received from 147.32.1.20 (517 bytes) ;; HEADER SECTION ;; id = 58337 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) signed.fjfi.cvut.cz. 60 IN NS ns.fjfi.cvut.cz. signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 2 016cbd8ed06fd5610802385f8a35244d3ad676a303ace868ac11bd2327996fa7 ) signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 1 185389438d6c6adbcbc1b2ceeb0444b6fbf60e53 ) signed.fjfi.cvut.cz. 3600 IN RRSIG ( DS 13 4 3600 20200331164311 20200220161002 38165 fjfi.cvut.cz. 17GUSl1kX0FbyOK3HmSVYaN6bs7ZTUZrbkwWKS/OrVR4rGRuolSljqloP1dkOiiQxg2wMSbEyKPY 7WYy6fNlYQ== ) ;; ADDITIONAL SECTION (5 records) ns.fjfi.cvut.cz. 3600 IN A 147.32.9.4 ns.fjfi.cvut.cz. 3600 IN AAAA 2001:718:2:1900::4 ns.fjfi.cvut.cz. 3600 IN RRSIG ( A 13 4 3600 20200331130854 20200220121907 38165 fjfi.cvut.cz. b4usdUxtl3P1Rgh+wBNJO2x7jwAvFebGsfO/ydwwWd0bYKy1/0w/xlihOUK9rNrJCvsF6BeCaZYO njEKg334yQ== ) ns.fjfi.cvut.cz. 3600 IN RRSIG ( AAAA 13 4 3600 20200331110923 20200220105857 38165 fjfi.cvut.cz. 7jX561Q5Kayyd07ZnkHjERnpsXWVlhT1my/p1pKyRswWa1wnkdzAp2ZoI1vU44a9X42wcSEct/0J kSC4OxgxSg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found signed.fjfi.cvut.cz nameservers: ns.fjfi.cvut.cz

signed.fjfi.cvut.cz

	Checking DS between fjfi.cvut.cz and signed.fjfi.cvut.cz
	Query to ns.cvut.cz for signed.fjfi.cvut.cz/DS
	Received 240 bytes from 147.32.1.20
	;; Answer received from 147.32.1.20 (240 bytes) ;; HEADER SECTION ;; id = 64123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN DS ;; ANSWER SECTION (3 records) signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 2 016cbd8ed06fd5610802385f8a35244d3ad676a303ace868ac11bd2327996fa7 ) signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 1 185389438d6c6adbcbc1b2ceeb0444b6fbf60e53 ) signed.fjfi.cvut.cz. 3600 IN RRSIG ( DS 13 4 3600 20200331164311 20200220161002 38165 fjfi.cvut.cz. 17GUSl1kX0FbyOK3HmSVYaN6bs7ZTUZrbkwWKS/OrVR4rGRuolSljqloP1dkOiiQxg2wMSbEyKPY 7WYy6fNlYQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for signed.fjfi.cvut.cz in the fjfi.cvut.cz zone
	DS=59612/SHA-256 has algorithm ECDSAP256SHA256
	DS=59612/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`signed.fjfi.cvut.cz. 3600 IN RRSIG ( DS 13 4 3600 20200331164311 20200220161002 38165 fjfi.cvut.cz. 17GUSl1kX0FbyOK3HmSVYaN6bs7ZTUZrbkwWKS/OrVR4rGRuolSljqloP1dkOiiQxg2wMSbEyKPY 7WYy6fNlYQ== )`
	RRSIG=38165 and DNSKEY=38165/SEP verifies the DS RRset
	DS=59612/SHA-256 is now in the chain-of-trust
	`signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 2 016cbd8ed06fd5610802385f8a35244d3ad676a303ace868ac11bd2327996fa7 )`
	`signed.fjfi.cvut.cz. 3600 IN DS ( 59612 13 1 185389438d6c6adbcbc1b2ceeb0444b6fbf60e53 )`
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/DNSKEY
	Error querying ns.fjfi.cvut.cz/2001:718:2:1900:0:0:0:4 for signed.fjfi.cvut.cz/DNSKEY: 'IPv6 transport disabled'
	Received 243 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (243 bytes) ;; HEADER SECTION ;; id = 36822 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN DNSKEY ;; ANSWER SECTION (2 records) signed.fjfi.cvut.cz. 18000 IN DNSKEY ( 257 3 13 qwCfT0cgxU5agfHBUjwu88Htj7S7CAkcFefKAJsrRfPZL7aBYE5yf4zy8QZ5pzEaL3moFGr6ek+m lBd1ElvRVw== ) ; Key ID = 59612 signed.fjfi.cvut.cz. 18000 IN RRSIG ( DNSKEY 13 4 18000 20200223124732 20200219115704 59612 signed.fjfi.cvut.cz. HMtOU2uX5hio0zMooYBnLGI99G7tEZzbY1CUNu5N3qTnCybtrD2Kof56iNHYg3GAtNwHi7yF15Am 2AnxxVnJWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for signed.fjfi.cvut.cz
	`signed.fjfi.cvut.cz. 18000 IN DNSKEY ( 257 3 13 qwCfT0cgxU5agfHBUjwu88Htj7S7CAkcFefKAJsrRfPZL7aBYE5yf4zy8QZ5pzEaL3moFGr6ek+m lBd1ElvRVw== ) ; Key ID = 59612`
	DNSKEY=59612/SEP is now in the chain-of-trust
	DS=59612/SHA-256 verifies DNSKEY=59612/SEP
	DS=59612/SHA-1 verifies DNSKEY=59612/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`signed.fjfi.cvut.cz. 18000 IN RRSIG ( DNSKEY 13 4 18000 20200223124732 20200219115704 59612 signed.fjfi.cvut.cz. HMtOU2uX5hio0zMooYBnLGI99G7tEZzbY1CUNu5N3qTnCybtrD2Kof56iNHYg3GAtNwHi7yF15Am 2AnxxVnJWg== )`
	RRSIG=59612 and DNSKEY=59612/SEP verifies the DNSKEY RRset
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/A
	Received 407 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (407 bytes) ;; HEADER SECTION ;; id = 37075 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) signed.fjfi.cvut.cz. 1800 IN SOA ( ns.fjfi.cvut.cz. vokac.fjfi.cvut.cz. 2014012355 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) signed.fjfi.cvut.cz. 1800 IN RRSIG ( SOA 13 4 3600 20200223214817 20200219204817 59612 signed.fjfi.cvut.cz. Ncx9StISgKE6fhM4dwnAwupdfxVf9IdLWyO1qpl+wBUA96vW1+5zrY54icn15jP6Mb+FxXwTUUZU 1btI2fJjnQ== ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN NSEC3 ( 1 0 10 5c4548a2 7ldchp83234sfkq4j7lbfmnsarbmq6ao NS SOA MX RRSIG DNSKEY NSEC3PARAM ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN RRSIG ( NSEC3 13 5 1800 20200223211830 20200219204817 59612 signed.fjfi.cvut.cz. 6MMQ87JtWaNC9mccjXTR3xpo/DBr14KzN+6lwOXey9tQabv1rlMcasAUsnQPSPxoo3UA7s1zPRuq kKDnz/jtOA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signed.fjfi.cvut.cz is authoritative for signed.fjfi.cvut.cz
	Found RRSIG signed by signed.fjfi.cvut.cz zone
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/SOA
	Received 597 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (597 bytes) ;; HEADER SECTION ;; id = 33915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 2 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN SOA ;; ANSWER SECTION (2 records) signed.fjfi.cvut.cz. 3600 IN SOA ( ns.fjfi.cvut.cz. vokac.fjfi.cvut.cz. 2014012355 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) signed.fjfi.cvut.cz. 3600 IN RRSIG ( SOA 13 4 3600 20200223214817 20200219204817 59612 signed.fjfi.cvut.cz. Ncx9StISgKE6fhM4dwnAwupdfxVf9IdLWyO1qpl+wBUA96vW1+5zrY54icn15jP6Mb+FxXwTUUZU 1btI2fJjnQ== ) ;; AUTHORITY SECTION (2 records) signed.fjfi.cvut.cz. 3600 IN NS ns.fjfi.cvut.cz. signed.fjfi.cvut.cz. 3600 IN RRSIG ( NS 13 4 3600 20200223155258 20200219153450 59612 signed.fjfi.cvut.cz. MSrUArYuBKmmatdHg1Ib7tjgRT8XHbLnynPepzfMcPgKTR4+fWxmQIaKymaRUnoP8d44G/f+tfud aB/t/GVAyg== ) ;; ADDITIONAL SECTION (5 records) ns.fjfi.cvut.cz. 3600 IN A 147.32.9.4 ns.fjfi.cvut.cz. 3600 IN AAAA 2001:718:2:1900::4 ns.fjfi.cvut.cz. 3600 IN RRSIG ( A 13 4 3600 20200331130854 20200220121907 38165 fjfi.cvut.cz. b4usdUxtl3P1Rgh+wBNJO2x7jwAvFebGsfO/ydwwWd0bYKy1/0w/xlihOUK9rNrJCvsF6BeCaZYO njEKg334yQ== ) ns.fjfi.cvut.cz. 3600 IN RRSIG ( AAAA 13 4 3600 20200331110923 20200220105857 38165 fjfi.cvut.cz. 7jX561Q5Kayyd07ZnkHjERnpsXWVlhT1my/p1pKyRswWa1wnkdzAp2ZoI1vU44a9X42wcSEct/0J kSC4OxgxSg== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.fjfi.cvut.cz for signed.fjfi.cvut.cz/A
	Received 407 bytes from 147.32.9.4
	;; Answer received from 147.32.9.4 (407 bytes) ;; HEADER SECTION ;; id = 26764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signed.fjfi.cvut.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) signed.fjfi.cvut.cz. 1800 IN SOA ( ns.fjfi.cvut.cz. vokac.fjfi.cvut.cz. 2014012355 ;serial 10800 ;refresh 1800 ;retry 1209600 ;expire 1800 ;minimum ) signed.fjfi.cvut.cz. 1800 IN RRSIG ( SOA 13 4 3600 20200223214817 20200219204817 59612 signed.fjfi.cvut.cz. Ncx9StISgKE6fhM4dwnAwupdfxVf9IdLWyO1qpl+wBUA96vW1+5zrY54icn15jP6Mb+FxXwTUUZU 1btI2fJjnQ== ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN NSEC3 ( 1 0 10 5c4548a2 7ldchp83234sfkq4j7lbfmnsarbmq6ao NS SOA MX RRSIG DNSKEY NSEC3PARAM ) 6SJE4OVNC3GS5DV5QJRE6E7JJQK20BMI.signed.fjfi.cvut.cz. 1800 IN RRSIG ( NSEC3 13 5 1800 20200223211830 20200219204817 59612 signed.fjfi.cvut.cz. 6MMQ87JtWaNC9mccjXTR3xpo/DBr14KzN+6lwOXey9tQabv1rlMcasAUsnQPSPxoo3UA7s1zPRuq kKDnz/jtOA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`signed.fjfi.cvut.cz. 1800 IN RRSIG ( SOA 13 4 3600 20200223214817 20200219204817 59612 signed.fjfi.cvut.cz. Ncx9StISgKE6fhM4dwnAwupdfxVf9IdLWyO1qpl+wBUA96vW1+5zrY54icn15jP6Mb+FxXwTUUZU 1btI2fJjnQ== )`
	RRSIG=59612 and DNSKEY=59612/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test signed.fjfi.cvut.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: