DNSSEC Analyzer - signotincepted.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2020-10-24 09:07:58 UTC, NTP stratum 4

Analyzing DNSSEC problems for signotincepted.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 19176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAfC/6HLClwss6h7rPfoG2cliv4/SPJRd2HPEglRsvKZRbPP2RLfiobeAkczcdqaD5q8loEt1 4lcTgDqwzOISZ3YvSVkM4JRMFwKzcjukKo5CsDVbMmhTD0C0yxWICRQ1M+Y5/XkZAT7mt4cb3fWc N9xgyq1wEXQX+zdLQHrNEVQSiL5SoA5cOtCSoQ45n8bKDXdw/0jjP9Rw1FVKsdzLVkQSrVMm8k30 WUkHm/SK/n/954KENkdQOA6Li2vO9nicQdegyAkDeNJCdPN/p3jEhCTQLyO4AlAmyaPcDHeeo7OX r/VsYu4NTDde9hBuS0zx/rewD+BvSnmnNHNmH2FjUE8= ) ; Key ID = 26116`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20201111000000 20201021000000 20326 . UfytpVL3Ka5rmqF/Lm/9frJl/ygXTjW0MEaGgecsmHbmLfTrJF3XAgPS5Tp/xc9TkaDf9HCEzk48 R4cfHOI22Ul9AnyBGZX7FiVfVo0NaseADRwt6G3K9jsMwHMIuVmAMTnvFfR32/+CwMMgmXGhBXdZ JVXR71aARAMKZlSgJK7DlOia8h2yC+RaWK0DvHMLwqyA+uwAeLxixmrtu3Olj2Rzmx2MSNDZZUP9 I+vghq7K0rzK7CYrXiAgY2q5WvwtKjJPw6T/qB8Ojqru/XN1LxSa2zYeITAq58IyijgLr6EupAdA 6HB3iPPfhHGKiwafsmcfcRcds90WfxG7UQFAMg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26116 is now in the chain-of-trust
	Query to h.root-servers.net for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 594 bytes from 198.97.190.53
	;; Answer received from 198.97.190.53 (594 bytes) ;; HEADER SECTION ;; id = 50178 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . Sx+Kmdj5l+OM4306UD5sm/pCOjn0Ps6FBWfkznyp7JjSWsMs5DVYf0vPGau9UYevtlCXDaK32aeP NHZpYgGW4PjEG/wyaIg6o/Zsi63DekNxZ2uL3V5GSRW26okxjiQ6pjlbivhbYTbv/noQBYjdwW/x ZVbRt4bmGWEUCFxVlW+iIfKHNkzMxo3KN147UiWK8sk0Xb75MWNeOYTIkzWjjh+GJoC168/Kz+TR qF8/h+Rid8aPlZMXiYihGfpUVTQFkjOBJFQMrcli5oZAx/nv2B7okWskS3bagTrnC+lM55ZBJZ0N u2wbn6zMISW2LO0JGnPIBR8bdyy82gO1QPDYAg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (556 bytes) ;; HEADER SECTION ;; id = 56707 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . Sx+Kmdj5l+OM4306UD5sm/pCOjn0Ps6FBWfkznyp7JjSWsMs5DVYf0vPGau9UYevtlCXDaK32aeP NHZpYgGW4PjEG/wyaIg6o/Zsi63DekNxZ2uL3V5GSRW26okxjiQ6pjlbivhbYTbv/noQBYjdwW/x ZVbRt4bmGWEUCFxVlW+iIfKHNkzMxo3KN147UiWK8sk0Xb75MWNeOYTIkzWjjh+GJoC168/Kz+TR qF8/h+Rid8aPlZMXiYihGfpUVTQFkjOBJFQMrcli5oZAx/nv2B7okWskS3bagTrnC+lM55ZBJZ0N u2wbn6zMISW2LO0JGnPIBR8bdyy82gO1QPDYAg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to e.root-servers.net for nl/DS
	Received 366 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (366 bytes) ;; HEADER SECTION ;; id = 41554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . Sx+Kmdj5l+OM4306UD5sm/pCOjn0Ps6FBWfkznyp7JjSWsMs5DVYf0vPGau9UYevtlCXDaK32aeP NHZpYgGW4PjEG/wyaIg6o/Zsi63DekNxZ2uL3V5GSRW26okxjiQ6pjlbivhbYTbv/noQBYjdwW/x ZVbRt4bmGWEUCFxVlW+iIfKHNkzMxo3KN147UiWK8sk0Xb75MWNeOYTIkzWjjh+GJoC168/Kz+TR qF8/h+Rid8aPlZMXiYihGfpUVTQFkjOBJFQMrcli5oZAx/nv2B7okWskS3bagTrnC+lM55ZBJZ0N u2wbn6zMISW2LO0JGnPIBR8bdyy82gO1QPDYAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20201106050000 20201024040000 26116 . Sx+Kmdj5l+OM4306UD5sm/pCOjn0Ps6FBWfkznyp7JjSWsMs5DVYf0vPGau9UYevtlCXDaK32aeP NHZpYgGW4PjEG/wyaIg6o/Zsi63DekNxZ2uL3V5GSRW26okxjiQ6pjlbivhbYTbv/noQBYjdwW/x ZVbRt4bmGWEUCFxVlW+iIfKHNkzMxo3KN147UiWK8sk0Xb75MWNeOYTIkzWjjh+GJoC168/Kz+TR qF8/h+Rid8aPlZMXiYihGfpUVTQFkjOBJFQMrcli5oZAx/nv2B7okWskS3bagTrnC+lM55ZBJZ0N u2wbn6zMISW2LO0JGnPIBR8bdyy82gO1QPDYAg== )`
	RRSIG=26116 and DNSKEY=26116 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns2.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.146.106.42
	;; Answer received from 194.146.106.42 (745 bytes) ;; HEADER SECTION ;; id = 28790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaZC3m/AjzGzzE2IF++CndlL4VTrCyULNcBD6aAISkze6uUnhIMH6ny02YvEhKytIUdykE8/ 9Dnt/8Q6zQCDv1QDiEfSqFDF84WRk6gjDO9+fsAdakRgy27gfkBVa0ewTdJqJzVKAz137+a2MTgO JzncmlvQ9DPeKKSxsGo5jiC5 ) ; Key ID = 25290 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20201106181842 20201024041009 34112 nl. P63J7bPsJxJ20cZpD41LnpkGV9Av6y8cZDGnNjXekf1TnsVeV2m41Ffzcn//hF2WXw/qopBVMd3w MBm5Fp6VFLcVGvG6kUV9UYYoqXDL8tjn3qjROvJaR7EOgh1IElpo5EFnhI9YY8Q1U6FhF45xWGxI 7fpbNH3ACiMLOVx8WmykalJwzAjoR6riQixs6Z4Y9AT8TcDtFxedvjHXl/QH9mRU9hRU40mqspQD wPgV7vg5ridp1Sxc2Ypguwa5luHLvg0QJR5EnFElAuEaazACIKITOe54gaj8pWLaPjdGXOAED3Rt wphk6TincOkqPR/MDmstZmXsgLdY+bus3Gkdwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAaZC3m/AjzGzzE2IF++CndlL4VTrCyULNcBD6aAISkze6uUnhIMH6ny02YvEhKytIUdykE8/ 9Dnt/8Q6zQCDv1QDiEfSqFDF84WRk6gjDO9+fsAdakRgy27gfkBVa0ewTdJqJzVKAz137+a2MTgO JzncmlvQ9DPeKKSxsGo5jiC5 ) ; Key ID = 25290`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20201106181842 20201024041009 34112 nl. P63J7bPsJxJ20cZpD41LnpkGV9Av6y8cZDGnNjXekf1TnsVeV2m41Ffzcn//hF2WXw/qopBVMd3w MBm5Fp6VFLcVGvG6kUV9UYYoqXDL8tjn3qjROvJaR7EOgh1IElpo5EFnhI9YY8Q1U6FhF45xWGxI 7fpbNH3ACiMLOVx8WmykalJwzAjoR6riQixs6Z4Y9AT8TcDtFxedvjHXl/QH9mRU9hRU40mqspQD wPgV7vg5ridp1Sxc2Ypguwa5luHLvg0QJR5EnFElAuEaazACIKITOe54gaj8pWLaPjdGXOAED3Rt wphk6TincOkqPR/MDmstZmXsgLdY+bus3Gkdwg== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=25290 is now in the chain-of-trust
	Query to ns1.dns.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 408 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (408 bytes) ;; HEADER SECTION ;; id = 3404 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20201031085806 20201017014331 25290 nl. U/T67GQ1OTrVCjWwvSD7CHBHX6sjPnU36wVM/LBWdj6fjhrzfT5ABxnrXOjmFSdFXxxHFoy/jTG7 A0v1Pnj83mjoNsscoFYXulhNoR5f2bTcRIwAxh+U/Yd1VSQ4W4+csmaSnvBi1OT5Hy8R0oNkopqE oLC0xig32kOvs2XJwcc= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidn.nl. 3600 IN A 194.171.17.5 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.dns.nl for sidnlabs.nl/DNSKEY
	Received 379 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (379 bytes) ;; HEADER SECTION ;; id = 24121 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns2.sidn.nl. sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20201031085806 20201017014331 25290 nl. U/T67GQ1OTrVCjWwvSD7CHBHX6sjPnU36wVM/LBWdj6fjhrzfT5ABxnrXOjmFSdFXxxHFoy/jTG7 A0v1Pnj83mjoNsscoFYXulhNoR5f2bTcRIwAxh+U/Yd1VSQ4W4+csmaSnvBi1OT5Hy8R0oNkopqE oLC0xig32kOvs2XJwcc= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns2.sidn.nl. 3600 IN A 194.171.17.5 ns2.sidn.nl. 3600 IN AAAA 2001:610:0:800d::5 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns1.dns.nl for sidnlabs.nl/DS
	Received 250 bytes from 194.0.28.53
	;; Answer received from 194.0.28.53 (250 bytes) ;; HEADER SECTION ;; id = 38158 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df ) sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20201031085806 20201017014331 25290 nl. U/T67GQ1OTrVCjWwvSD7CHBHX6sjPnU36wVM/LBWdj6fjhrzfT5ABxnrXOjmFSdFXxxHFoy/jTG7 A0v1Pnj83mjoNsscoFYXulhNoR5f2bTcRIwAxh+U/Yd1VSQ4W4+csmaSnvBi1OT5Hy8R0oNkopqE oLC0xig32kOvs2XJwcc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=52720/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 8 2 3600 20201031085806 20201017014331 25290 nl. U/T67GQ1OTrVCjWwvSD7CHBHX6sjPnU36wVM/LBWdj6fjhrzfT5ABxnrXOjmFSdFXxxHFoy/jTG7 A0v1Pnj83mjoNsscoFYXulhNoR5f2bTcRIwAxh+U/Yd1VSQ4W4+csmaSnvBi1OT5Hy8R0oNkopqE oLC0xig32kOvs2XJwcc= )`
	RRSIG=25290 and DNSKEY=25290 verifies the DS RRset
	DS=52720/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 52720 8 2 ada4b036e9bc9f5854a201329dfb04d376153a616c22dd9e3b12cb4566ccc5df )`
	Query to ns1.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 934 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (934 bytes) ;; HEADER SECTION ;; id = 52983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (4 records) sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853 sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201111125020 20201012115925 20853 sidnlabs.nl. zN1PMCqTMc8vjJKSMrggDpApM9Sirt0A9hJeqWoLGpv/odXYZveatzOUiNLeUlng2RQPwGuTRR5K lB9uiPvZYxNDfXa8dEn5Afohjij8Z9GjE9nDPQBn61eXI4jnrCT8kEeMDVJ1+S6KL2JWI3mGyfoH Fqo2Gw5rHebNUe8LeHQ= ) sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201111125020 20201012115925 52720 sidnlabs.nl. Z1wTejgiK1mfZ0z12puidq81anNdpnHqQwnz5GyTuUSFwW2NhCvXaPdpjxj5f3FF4XrTsbuureBC 2nb2kmEnwSVzqshWWdcrpGuHMpwWxE60ux2qiTOsZw6MEHb6s+yPOOaqdOAIppIcgaBLmAsynEdV dv27wXzv7qOT06RoBkBK8ZnOmyO2afNhE7lc7voM9oah4PVg4eFY3OMo2X+vpXXHnsdZbj9oTGF9 2ZlPteiROI7E/SEgd1orkkwXqttBfDj0jreQ0EdH06mJzRB8DzeN4qBevqiEHenUHLHAx60NfL3c al0/71l4pCSSvonrRtHGBOe/bsU6eIRsTyJfnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 256 3 8 AwEAAdN5P6Ktkl4l3yxC/maZ2xza0Dq5oCBGYCif6ORPNX2ZnYyIfCMZW4KvaOjFYeuNvpySJFli Ic1UjM+OlWvjLjK6xhX7HMXlWg/b2Rpgw3rwVDCEnK1PsCVg68S9KkT4k93g/qlTvjqKcbH8bVZL 6WOY+W6eKlCMdJFPeBpqnrmn ) ; Key ID = 20853`
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAaHexfzeKtEA3eEVxiJQUURcnqmN+kEJT0Zpr/qb0Wzc3QnBvswopwP/Z+NIQFp0v30CK9FN T8cZTy4Qj7xVeGLMAZqKO1yWSh0YXDhXhgLsbx1bToMkFyoYPvEk2qx1CU0AWfVxSvs7eGaxaVJI v9K4yJwiyIf7wPFptWqLHf9MlvUWDWpI2YwwjL0tULDZJ/OXnc2wmv9ZAztYZa2k7jqyoBb1G/M0 Y1ATRCcvZvc+QdEv8Qls8P3nMsREg3Ko5JAitxFaibOvaz6ROQSe20SmrrddaMs4Dm5brXmWhfq2 5tRNUIHaczUMJPxtLNEUqmgqewdDNAIPv4Y207zCWh0= ) ; Key ID = 52720`
	DNSKEY=52720/SEP is now in the chain-of-trust
	DS=52720/SHA-256 verifies DNSKEY=52720/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201111125020 20201012115925 20853 sidnlabs.nl. zN1PMCqTMc8vjJKSMrggDpApM9Sirt0A9hJeqWoLGpv/odXYZveatzOUiNLeUlng2RQPwGuTRR5K lB9uiPvZYxNDfXa8dEn5Afohjij8Z9GjE9nDPQBn61eXI4jnrCT8kEeMDVJ1+S6KL2JWI3mGyfoH Fqo2Gw5rHebNUe8LeHQ= )`
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 2 3600 20201111125020 20201012115925 52720 sidnlabs.nl. Z1wTejgiK1mfZ0z12puidq81anNdpnHqQwnz5GyTuUSFwW2NhCvXaPdpjxj5f3FF4XrTsbuureBC 2nb2kmEnwSVzqshWWdcrpGuHMpwWxE60ux2qiTOsZw6MEHb6s+yPOOaqdOAIppIcgaBLmAsynEdV dv27wXzv7qOT06RoBkBK8ZnOmyO2afNhE7lc7voM9oah4PVg4eFY3OMo2X+vpXXHnsdZbj9oTGF9 2ZlPteiROI7E/SEgd1orkkwXqttBfDj0jreQ0EdH06mJzRB8DzeN4qBevqiEHenUHLHAx60NfL3c al0/71l4pCSSvonrRtHGBOe/bsU6eIRsTyJfnQ== )`
	RRSIG=20853 and DNSKEY=20853 verifies the DNSKEY RRset
	RRSIG=52720 and DNSKEY=52720/SEP verifies the DNSKEY RRset
	DNSKEY=20853 is now in the chain-of-trust
	Query to ns1.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 404 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (404 bytes) ;; HEADER SECTION ;; id = 21761 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20201117223403 20201018215354 20853 sidnlabs.nl. E//p86iuNJt5qEKSjSzt97dE/NHitUMnJBeVaWTJyC65DvcKLWqC6u+e2cP4Sx/Iip0lKghJpwt0 IRbsBTZuhm11TxpllNdgd5raNL/q6v5TR0ZQ3ul6FSPFSRUnv5R+2eOw49Yw+0NRphpMwvaUiOs2 AD79nqwkdzrHfJk4zPg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 364 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (364 bytes) ;; HEADER SECTION ;; id = 42807 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20201117223403 20201018215354 20853 sidnlabs.nl. E//p86iuNJt5qEKSjSzt97dE/NHitUMnJBeVaWTJyC65DvcKLWqC6u+e2cP4Sx/Iip0lKghJpwt0 IRbsBTZuhm11TxpllNdgd5raNL/q6v5TR0ZQ3ul6FSPFSRUnv5R+2eOw49Yw+0NRphpMwvaUiOs2 AD79nqwkdzrHfJk4zPg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns1.sidnlabs.nl for wb.sidnlabs.nl/DS
	Received 262 bytes from 94.198.159.8
	;; Answer received from 94.198.159.8 (262 bytes) ;; HEADER SECTION ;; id = 1923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20201117223403 20201018215354 20853 sidnlabs.nl. E//p86iuNJt5qEKSjSzt97dE/NHitUMnJBeVaWTJyC65DvcKLWqC6u+e2cP4Sx/Iip0lKghJpwt0 IRbsBTZuhm11TxpllNdgd5raNL/q6v5TR0ZQ3ul6FSPFSRUnv5R+2eOw49Yw+0NRphpMwvaUiOs2 AD79nqwkdzrHfJk4zPg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 3 3600 20201117223403 20201018215354 20853 sidnlabs.nl. E//p86iuNJt5qEKSjSzt97dE/NHitUMnJBeVaWTJyC65DvcKLWqC6u+e2cP4Sx/Iip0lKghJpwt0 IRbsBTZuhm11TxpllNdgd5raNL/q6v5TR0ZQ3ul6FSPFSRUnv5R+2eOw49Yw+0NRphpMwvaUiOs2 AD79nqwkdzrHfJk4zPg= )`
	RRSIG=20853 and DNSKEY=20853 verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to knot.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (897 bytes) ;; HEADER SECTION ;; id = 6924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20190314080033 44704 wb.sidnlabs.nl. AI/omO4ijjlwhfWMfOO7gThbpHqvnzAMNGkFtPyLl1S79AwN0D8us2B3n9D8xIwKoccd3i2rITrx 2VQ/Hz0j8gE18b77quJgkOCM7oJ652tt4MazAT4rEI2EhawkEuFbEPllPllBPnCKhS1YMhyGFptc D1vRHPJAR9ABBcEr/sdT8KwfXb1zY6qd33Meh6No8aOZnFrHyU8PKtRKS7SCNG1p3hA47cv3awE1 tJ/G5ue46428AQ9ljCN7I4sKN9/KryE3Gh5ayXGXJYQrgCmJwkAsz76oFPT0ZKyI4hAW0ak1mqmO KR5hV4TYpkjAt4F3gKRpp8rtaUJCpW8r6VqanA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 62780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. Ufe/4myXk5YmrnH8vURKx0m4cISoUDoDqbVsMakPH1ktQ1hVzKgu+FmuLtvq9DKwzrKjFAvroJp+ p3W9vjVenZLPgXZRyjPmqzH8MHDdTN1odflfl8+55uUi736JtlDTNKbDazawqtlseyiBs1tGf6x+ SCZnVyzrLlOLVIvoaM0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	wb.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (387 bytes) ;; HEADER SECTION ;; id = 37214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (341 bytes) ;; HEADER SECTION ;; id = 57338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. qZvrTLwxBffZQaRl0y5ikwO3EUcIrukILlObpNTpFgfCvWxw59ntqlCuYqt79hKaOwI3Qje6IfYf buCdgtBtHMuOg3Mz3aa8frxQA2xvP3MgZ3TglLvDgVSfW64JSSfFy4psQNRUDrMgtBs4Und5WIoF bzxx11I/h4jltLPsY2Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (404 bytes) ;; HEADER SECTION ;; id = 17217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 56725 8 2 b4eeaf8d87672e12e332fa13bc0628db69676a9853ccd54455341d87b5ddea9c ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. R9rLIuYVY6YrOAF0rkXLPOszcamHC2U5FoOXtBRlReprzl4rPSjKR0P8fD/g+lN+QNjf48ytCjcD bq/d8IHDoTd67v/UGOhdcmBHH8LL1pUBnnhLFcYyh9iK0ti6DQN24jheCIwqtib1lrFob6dukzR0 r0qD7vW0UpKWsym5EoUgOMSqW9TMX8G/oyh0VwZ5x7H0ej6sd+ongq3dCy41ULgmXm7Zq4wskvns omAxez38rybJeJy9RKFM+DLQMrD0htgXEkuz7uTHLc5kW08ZdxN11SxwbDk7xNMfnlOa+Dcc707X ixAGjr+9pKQmZLHRiIpeMbIPDsZ5IexRbsDTrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=56725/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20190314080033 48378 wb.sidnlabs.nl. R9rLIuYVY6YrOAF0rkXLPOszcamHC2U5FoOXtBRlReprzl4rPSjKR0P8fD/g+lN+QNjf48ytCjcD bq/d8IHDoTd67v/UGOhdcmBHH8LL1pUBnnhLFcYyh9iK0ti6DQN24jheCIwqtib1lrFob6dukzR0 r0qD7vW0UpKWsym5EoUgOMSqW9TMX8G/oyh0VwZ5x7H0ej6sd+ongq3dCy41ULgmXm7Zq4wskvns omAxez38rybJeJy9RKFM+DLQMrD0htgXEkuz7uTHLc5kW08ZdxN11SxwbDk7xNMfnlOa+Dcc707X ixAGjr+9pKQmZLHRiIpeMbIPDsZ5IexRbsDTrQ== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=56725/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 56725 8 2 b4eeaf8d87672e12e332fa13bc0628db69676a9853ccd54455341d87b5ddea9c )`
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (387 bytes) ;; HEADER SECTION ;; id = 55906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAfVJUH6leWTOMbvpaVWcScJtY8MT3ke06vX6tR9fNmFc3tk8QvmMPty/EhBy/xEKsxp78D9L l3p7SjwQhlYMnTwF59KylVn7ehcYC2IhjebSTD0FaRGoiedqZMxKdrV7W9j6my8gfB6a0Hxxn7/K gAFEq9kDnR8q5xlIUcdFbttb ) ; Key ID = 56725`
	DNSKEY=56725/SEP is now in the chain-of-trust
	DS=56725/SHA-256 verifies DNSKEY=56725/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20190314080032 56725 bad-dnssec.wb.sidnlabs.nl. GeHTMEt01cXoBT2k5VzElNER2bVvMueyEEmfLSBdA/qRW83hvwx+7kaMC2McKZqgepGmA16TYuFv uaqG9EizMFrV34ApTPo3i5AEZXY8cOR2yV0sKEOrQDQmoO5Wm4+PLKTFk60aV+WkLjLnFma1OHd+ Z8JuvycLwrZTO+gr418= )`
	RRSIG=56725 and DNSKEY=56725/SEP verifies the DNSKEY RRset
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 587 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (587 bytes) ;; HEADER SECTION ;; id = 36551 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. Ufe/4myXk5YmrnH8vURKx0m4cISoUDoDqbVsMakPH1ktQ1hVzKgu+FmuLtvq9DKwzrKjFAvroJp+ p3W9vjVenZLPgXZRyjPmqzH8MHDdTN1odflfl8+55uUi736JtlDTNKbDazawqtlseyiBs1tGf6x+ SCZnVyzrLlOLVIvoaM0= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. P3lsHluGt62M/owFh/K9RkYAgmtLkNOGu6LM8Jsk894+j9IlP6tcILadQNmYgTQUj3yw1f9vCWc/ Hxa5escIuBN07FgOmOydfRcpzN6s+imP6wXT869YWqxmhv8hP/lf48rLJilI0XXxp+X3WQxc7rCg zUUFW3uQ/qNuohbCGCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	bad-dnssec.wb.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (417 bytes) ;; HEADER SECTION ;; id = 52915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAasBtF8TzKjKNhypd3dkahB7/9xg+tZzS3U4iOrKKIujhnX6YXi2oTCMA7wrT2gUQ/hBC4YY +Ox4wI/yBz29ctTee+gwI/jsaaZq03jYcr3PZqIpK8Wfg06UoF+rEuX6a0XUCyHgihldxGKPSexO 7TyzI4/k/AQG5agkNMhBkXw1 ) ; Key ID = 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. gK9kKgx0PcgBhenH16b8F/2rz6fkFrSXc1n2047NzojiOylE040ABV71WIS++SbJZuZVexp/BaCG 4TVn17F0QbUXn/GUkW72OHVGK5FHBTWlTQDCI+M05cC4kI3prSyqw0mQOpEt3CixMkzOhLTbW191 tIwbwvWNFyPIwadtoD0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone signotincepted.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/NS
	Received 371 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (371 bytes) ;; HEADER SECTION ;; id = 29166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. P3lsHluGt62M/owFh/K9RkYAgmtLkNOGu6LM8Jsk894+j9IlP6tcILadQNmYgTQUj3yw1f9vCWc/ Hxa5escIuBN07FgOmOydfRcpzN6s+imP6wXT869YWqxmhv8hP/lf48rLJilI0XXxp+X3WQxc7rCg zUUFW3uQ/qNuohbCGCg= ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found signotincepted.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, powerdns.sidnlabs.nl, bind9.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl

signotincepted.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and signotincepted.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DS
	Received 302 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (302 bytes) ;; HEADER SECTION ;; id = 53910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 52162 8 2 e33dce547e4afba391213b4e962d53a497c9b3fa041a184c5dc5ce3126088458 ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300311080032 20290311080032 56725 bad-dnssec.wb.sidnlabs.nl. 08cRlGgtBI1Cn70EG9+FjcKv3Oqoe/wocLIzLFJfdI7TbB1TjhKPjFURQ6SGIyAZM3A9vaqJV2rz hrednX9pEPLiEsIPRuNCSdsH0Yvm1pkPQGukG7YB0KNJVY9Lbz/mIrNZZp/3XgEo4cHywXuVb+UU JjOi9jUsnoaozTnkh4U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for signotincepted.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=52162/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300311080032 20290311080032 56725 bad-dnssec.wb.sidnlabs.nl. 08cRlGgtBI1Cn70EG9+FjcKv3Oqoe/wocLIzLFJfdI7TbB1TjhKPjFURQ6SGIyAZM3A9vaqJV2rz hrednX9pEPLiEsIPRuNCSdsH0Yvm1pkPQGukG7YB0KNJVY9Lbz/mIrNZZp/3XgEo4cHywXuVb+UU JjOi9jUsnoaozTnkh4U= )`
	RRSIG=56725 inception time is in the future
	The DS RRset was not signed by any keys in the chain-of-trust
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 52162 8 2 e33dce547e4afba391213b4e962d53a497c9b3fa041a184c5dc5ce3126088458 )`
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 417 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (417 bytes) ;; HEADER SECTION ;; id = 11417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAasBtF8TzKjKNhypd3dkahB7/9xg+tZzS3U4iOrKKIujhnX6YXi2oTCMA7wrT2gUQ/hBC4YY +Ox4wI/yBz29ctTee+gwI/jsaaZq03jYcr3PZqIpK8Wfg06UoF+rEuX6a0XUCyHgihldxGKPSexO 7TyzI4/k/AQG5agkNMhBkXw1 ) ; Key ID = 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. gK9kKgx0PcgBhenH16b8F/2rz6fkFrSXc1n2047NzojiOylE040ABV71WIS++SbJZuZVexp/BaCG 4TVn17F0QbUXn/GUkW72OHVGK5FHBTWlTQDCI+M05cC4kI3prSyqw0mQOpEt3CixMkzOhLTbW191 tIwbwvWNFyPIwadtoD0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for signotincepted.bad-dnssec.wb.sidnlabs.nl
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAasBtF8TzKjKNhypd3dkahB7/9xg+tZzS3U4iOrKKIujhnX6YXi2oTCMA7wrT2gUQ/hBC4YY +Ox4wI/yBz29ctTee+gwI/jsaaZq03jYcr3PZqIpK8Wfg06UoF+rEuX6a0XUCyHgihldxGKPSexO 7TyzI4/k/AQG5agkNMhBkXw1 ) ; Key ID = 52162`
	DS=52162/SHA-256 verifies DNSKEY=52162/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. gK9kKgx0PcgBhenH16b8F/2rz6fkFrSXc1n2047NzojiOylE040ABV71WIS++SbJZuZVexp/BaCG 4TVn17F0QbUXn/GUkW72OHVGK5FHBTWlTQDCI+M05cC4kI3prSyqw0mQOpEt3CixMkzOhLTbW191 tIwbwvWNFyPIwadtoD0= )`
	RRSIG=52162 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the DNSKEY RRset
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 57995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. Ufe/4myXk5YmrnH8vURKx0m4cISoUDoDqbVsMakPH1ktQ1hVzKgu+FmuLtvq9DKwzrKjFAvroJp+ p3W9vjVenZLPgXZRyjPmqzH8MHDdTN1odflfl8+55uUi736JtlDTNKbDazawqtlseyiBs1tGf6x+ SCZnVyzrLlOLVIvoaM0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl is authoritative for signotincepted.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by signotincepted.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 618 bytes from 94.198.159.33
	;; Answer received from 94.198.159.33 (618 bytes) ;; HEADER SECTION ;; id = 58537 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. heIo5fVvfrSTMtsWJv0x5sNUBm3epyql/WQzpqNl+RBIH/zhNiFJ5jVFLo1pa0SsUeIqDy9U43Bv L3p5bHhmabLiKZZZr7zmFLMM0ug2iNtcoZAzNILy4jQ+oxO+x+kJ6lWsx8rL60h0OvkIxeI7wqrB xG754iWD244J6AdRQnI= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. P3lsHluGt62M/owFh/K9RkYAgmtLkNOGu6LM8Jsk894+j9IlP6tcILadQNmYgTQUj3yw1f9vCWc/ Hxa5escIuBN07FgOmOydfRcpzN6s+imP6wXT869YWqxmhv8hP/lf48rLJilI0XXxp+X3WQxc7rCg zUUFW3uQ/qNuohbCGCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to powerdns.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.26
	;; Answer received from 94.198.159.26 (322 bytes) ;; HEADER SECTION ;; id = 1193 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. heIo5fVvfrSTMtsWJv0x5sNUBm3epyql/WQzpqNl+RBIH/zhNiFJ5jVFLo1pa0SsUeIqDy9U43Bv L3p5bHhmabLiKZZZr7zmFLMM0ug2iNtcoZAzNILy4jQ+oxO+x+kJ6lWsx8rL60h0OvkIxeI7wqrB xG754iWD244J6AdRQnI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to yadifa.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 618 bytes from 94.198.159.28
	;; Answer received from 94.198.159.28 (618 bytes) ;; HEADER SECTION ;; id = 35394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. heIo5fVvfrSTMtsWJv0x5sNUBm3epyql/WQzpqNl+RBIH/zhNiFJ5jVFLo1pa0SsUeIqDy9U43Bv L3p5bHhmabLiKZZZr7zmFLMM0ug2iNtcoZAzNILy4jQ+oxO+x+kJ6lWsx8rL60h0OvkIxeI7wqrB xG754iWD244J6AdRQnI= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. P3lsHluGt62M/owFh/K9RkYAgmtLkNOGu6LM8Jsk894+j9IlP6tcILadQNmYgTQUj3yw1f9vCWc/ Hxa5escIuBN07FgOmOydfRcpzN6s+imP6wXT869YWqxmhv8hP/lf48rLJilI0XXxp+X3WQxc7rCg zUUFW3uQ/qNuohbCGCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to bind9.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 629 bytes from 94.198.159.39
	;; Answer received from 94.198.159.39 (629 bytes) ;; HEADER SECTION ;; id = 13824 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. heIo5fVvfrSTMtsWJv0x5sNUBm3epyql/WQzpqNl+RBIH/zhNiFJ5jVFLo1pa0SsUeIqDy9U43Bv L3p5bHhmabLiKZZZr7zmFLMM0ug2iNtcoZAzNILy4jQ+oxO+x+kJ6lWsx8rL60h0OvkIxeI7wqrB xG754iWD244J6AdRQnI= ) ;; AUTHORITY SECTION (6 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. P3lsHluGt62M/owFh/K9RkYAgmtLkNOGu6LM8Jsk894+j9IlP6tcILadQNmYgTQUj3yw1f9vCWc/ Hxa5escIuBN07FgOmOydfRcpzN6s+imP6wXT869YWqxmhv8hP/lf48rLJilI0XXxp+X3WQxc7rCg zUUFW3uQ/qNuohbCGCg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 322 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (322 bytes) ;; HEADER SECTION ;; id = 42834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1552550430 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. heIo5fVvfrSTMtsWJv0x5sNUBm3epyql/WQzpqNl+RBIH/zhNiFJ5jVFLo1pa0SsUeIqDy9U43Bv L3p5bHhmabLiKZZZr7zmFLMM0ug2iNtcoZAzNILy4jQ+oxO+x+kJ6lWsx8rL60h0OvkIxeI7wqrB xG754iWD244J6AdRQnI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to knot.sidnlabs.nl for signotincepted.bad-dnssec.wb.sidnlabs.nl/A
	Received 285 bytes from 94.198.159.27
	;; Answer received from 94.198.159.27 (285 bytes) ;; HEADER SECTION ;; id = 11754 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; signotincepted.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. Ufe/4myXk5YmrnH8vURKx0m4cISoUDoDqbVsMakPH1ktQ1hVzKgu+FmuLtvq9DKwzrKjFAvroJp+ p3W9vjVenZLPgXZRyjPmqzH8MHDdTN1odflfl8+55uUi736JtlDTNKbDazawqtlseyiBs1tGf6x+ SCZnVyzrLlOLVIvoaM0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	signotincepted.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`signotincepted.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 8 5 3600 20300311080033 20290311080033 52162 signotincepted.bad-dnssec.wb.sidnlabs.nl. Ufe/4myXk5YmrnH8vURKx0m4cISoUDoDqbVsMakPH1ktQ1hVzKgu+FmuLtvq9DKwzrKjFAvroJp+ p3W9vjVenZLPgXZRyjPmqzH8MHDdTN1odflfl8+55uUi736JtlDTNKbDazawqtlseyiBs1tGf6x+ SCZnVyzrLlOLVIvoaM0= )`
	RRSIG=52162 inception time is in the future
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test signotincepted.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: