DNSSEC Debugger - spain.info

Domain Name:

Time: 2025-10-22 15:15:24 UTC

Analyzing DNSSEC problems for spain.info

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1139 octets ;; HEADER SECTION ;; id = 61608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251111000000 20251021000000 20326 . qu+HIDWi0ILo1qOR9j+Z8KZsBjm3N+xbTPm0UrqtVgtDmcuA0BF/m4zEQ/Wf32rCnGxW2tlrw0lq Lqpf/+1UtsfFhNCp6c88XVI19sLyeJwgAK0dYjZtSzObkArDsU9YHmKfB8ai18AN4XHD6Op1G5Io RJsNYsAyWg6GOkuaFspxV9L+ddDhjRhCmDKl3vHcRc9PscgwI47Y5hJgucB0uVbK1XbiQmAg8qqB 0YiVdyWknzL3VYkbdpyMYTlBXuLY9cW2bWrclP6nAnLNJ2BuyXBKOKXYvPCLEeu6hkmBJc6twAJK rGtEZaETWnYUFUgUj3bQHKYLgInclkXIEtF7gQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to g.root-servers.net for spain.info/A
	Received 781 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 781 octets ;; HEADER SECTION ;; id = 54985 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS d0.info.afilias-nst.org. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20251104120000 20251022110000 61809 . WiNPqARo73xJeaRh/p5Kv4rfPHZCmWJkvfDAGwHxxSp7gg4ADDWw1D1NhiZBntCNBZLjLuT/ruTQ sZ+pqQbRb+tVgQ3rgXaqTP3+Jm0HH3aOZli+ipiVStzrFlDYruLHCvG1vw/A7VQtTB4rEpmawM0q FFVEPtdGKdrV80kEE+O6bleFzeQ2aFVHoGvFvpJqZ4pKxfoMMAUR/Jxdu7xtDrcUFBS2w7IbRcC8 nb7KiNDt7GtV7Wskeyk1wYhq6Gqg8+b8wtUlby59l2H6xbBvrhGbhpfzDnUQUD/6RcWTKLQPUfjv 9f6oV+WJshQhg1L6h0xlQgzv9kmZQfnt0LGuRw== ) ;; ADDITIONAL SECTION (13 records) d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for info/DNSKEY
	Received 771 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 771 octets ;; HEADER SECTION ;; id = 40002 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 13 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) info. 172800 IN NS a0.info.afilias-nst.info. info. 172800 IN NS a2.info.afilias-nst.info. info. 172800 IN NS b0.info.afilias-nst.org. info. 172800 IN NS b2.info.afilias-nst.org. info. 172800 IN NS c0.info.afilias-nst.info. info. 172800 IN NS d0.info.afilias-nst.org. info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20251104120000 20251022110000 61809 . WiNPqARo73xJeaRh/p5Kv4rfPHZCmWJkvfDAGwHxxSp7gg4ADDWw1D1NhiZBntCNBZLjLuT/ruTQ sZ+pqQbRb+tVgQ3rgXaqTP3+Jm0HH3aOZli+ipiVStzrFlDYruLHCvG1vw/A7VQtTB4rEpmawM0q FFVEPtdGKdrV80kEE+O6bleFzeQ2aFVHoGvFvpJqZ4pKxfoMMAUR/Jxdu7xtDrcUFBS2w7IbRcC8 nb7KiNDt7GtV7Wskeyk1wYhq6Gqg8+b8wtUlby59l2H6xbBvrhGbhpfzDnUQUD/6RcWTKLQPUfjv 9f6oV+WJshQhg1L6h0xlQgzv9kmZQfnt0LGuRw== ) ;; ADDITIONAL SECTION (13 records) a0.info.afilias-nst.info. 172800 IN A 199.254.31.1 a2.info.afilias-nst.info. 172800 IN A 199.249.113.1 b0.info.afilias-nst.org. 172800 IN A 199.254.48.1 b2.info.afilias-nst.org. 172800 IN A 199.249.121.1 c0.info.afilias-nst.info. 172800 IN A 199.254.49.1 d0.info.afilias-nst.org. 172800 IN A 199.254.50.1 a0.info.afilias-nst.info. 172800 IN AAAA 2001:500:19::1 a2.info.afilias-nst.info. 172800 IN AAAA 2001:500:41::1 b0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1a::1 b2.info.afilias-nst.org. 172800 IN AAAA 2001:500:49::1 c0.info.afilias-nst.info. 172800 IN AAAA 2001:500:1b::1 d0.info.afilias-nst.org. 172800 IN AAAA 2001:500:1c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone info

info

	Checking DS between . and info
	Query to b.root-servers.net for info/DS
	Received 368 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 368 octets ;; HEADER SECTION ;; id = 2843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; info. IN DS ;; ANSWER SECTION (2 records) info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 ) info. 86400 IN RRSIG ( DS 8 1 86400 20251104120000 20251022110000 61809 . WiNPqARo73xJeaRh/p5Kv4rfPHZCmWJkvfDAGwHxxSp7gg4ADDWw1D1NhiZBntCNBZLjLuT/ruTQ sZ+pqQbRb+tVgQ3rgXaqTP3+Jm0HH3aOZli+ipiVStzrFlDYruLHCvG1vw/A7VQtTB4rEpmawM0q FFVEPtdGKdrV80kEE+O6bleFzeQ2aFVHoGvFvpJqZ4pKxfoMMAUR/Jxdu7xtDrcUFBS2w7IbRcC8 nb7KiNDt7GtV7Wskeyk1wYhq6Gqg8+b8wtUlby59l2H6xbBvrhGbhpfzDnUQUD/6RcWTKLQPUfjv 9f6oV+WJshQhg1L6h0xlQgzv9kmZQfnt0LGuRw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for info in the . zone
	DS=5104/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`info. 86400 IN RRSIG ( DS 8 1 86400 20251104120000 20251022110000 61809 . WiNPqARo73xJeaRh/p5Kv4rfPHZCmWJkvfDAGwHxxSp7gg4ADDWw1D1NhiZBntCNBZLjLuT/ruTQ sZ+pqQbRb+tVgQ3rgXaqTP3+Jm0HH3aOZli+ipiVStzrFlDYruLHCvG1vw/A7VQtTB4rEpmawM0q FFVEPtdGKdrV80kEE+O6bleFzeQ2aFVHoGvFvpJqZ4pKxfoMMAUR/Jxdu7xtDrcUFBS2w7IbRcC8 nb7KiNDt7GtV7Wskeyk1wYhq6Gqg8+b8wtUlby59l2H6xbBvrhGbhpfzDnUQUD/6RcWTKLQPUfjv 9f6oV+WJshQhg1L6h0xlQgzv9kmZQfnt0LGuRw== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=5104/SHA-256 is now in the chain-of-trust
	`info. 86400 IN DS ( 5104 8 2 1af7548a8d3e2950c20303757df9390c26cfa39e26c8b6a8f6c8b1e72dd8f744 )`
	Query to b2.info.afilias-nst.org for info/DNSKEY
	Received 897 bytes from 199.249.121.1
	;; Response received from [199.249.121.1] 897 octets ;; HEADER SECTION ;; id = 1475 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; info. IN DNSKEY ;; ANSWER SECTION (4 records) info. 3600 IN DNSKEY ( 256 3 8 AwEAAbMvjUMartqa8yBpCT6vAhJaTGwGyrFGf5Oks3D+xTlxGa4pS1dG9/lQG2pRhV74JUUR1hQn t5jzADXgyIZX7Smb6RSM3S8p6CtRt8GPtpZ0ZA1wLV5f9LHNDa/4rzzGLOT0ocA5N7EMs/nTP10M mT14rxZoRujKWlBFe31yNa+V ) ; keytag 33258 info. 3600 IN DNSKEY ( 256 3 8 AwEAAeqcqua53l3Ju1f7X6d2UXND1d683Kgf8NE36IDRCQA25XH7M6Rx2ZKdewxFJ2heJPzxDh1W IzZU04xtHEpzZZnTt7CtisIjfO6HaHZeMA4zsBMT79XYhqPwUoxhFZFXJu+4GkAqnLkOGxpweB+Q voTr/hTPrEdNEcqeaWX/C1fJ ) ; keytag 108 info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; keytag 5104 info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251107154021 20251017144021 5104 info. c+uJ0XpPD8ejxuBhMowmT0KKnQf8Rq89eU835I3nvL7qGr1i8qJ2LV94ya4Bdn71ryo2W6L1qTr1 XVzivTQHuwa4bzs0H0WIh5y3ANDGUqxccBwwYVCTbMjaF7lZAFZ6Wjt/DijEBLFogoCt9vkdN09x dhZ7prHa/uJx1vBUc7ZGwpUW5fcGKa1rNJn4cHoSS+Sw3s+iIARzweR6RMmSPLJVomDyhDRBI+T3 G7hB87jQnzHqUfe2ILSZabywpJ/cWt8r8+CZ6GBKOeY6nTelT/u6F3PKQBFcE1Xmoftv2PJLCuDo SUK33Am3NFF15uZLjAvWY/7HXw9PPQxnMum/dQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for info
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAbMvjUMartqa8yBpCT6vAhJaTGwGyrFGf5Oks3D+xTlxGa4pS1dG9/lQG2pRhV74JUUR1hQn t5jzADXgyIZX7Smb6RSM3S8p6CtRt8GPtpZ0ZA1wLV5f9LHNDa/4rzzGLOT0ocA5N7EMs/nTP10M mT14rxZoRujKWlBFe31yNa+V ) ; keytag 33258`
	`info. 3600 IN DNSKEY ( 256 3 8 AwEAAeqcqua53l3Ju1f7X6d2UXND1d683Kgf8NE36IDRCQA25XH7M6Rx2ZKdewxFJ2heJPzxDh1W IzZU04xtHEpzZZnTt7CtisIjfO6HaHZeMA4zsBMT79XYhqPwUoxhFZFXJu+4GkAqnLkOGxpweB+Q voTr/hTPrEdNEcqeaWX/C1fJ ) ; keytag 108`
	`info. 3600 IN DNSKEY ( 257 3 8 AwEAAcIehVsobEPI8p8hMt9q+pYk2Ba6jynDojqiJ+6tfEcg9jOCAKB/uHwSqgae2+9KV29CmuQc Hv0UwU0V9IQFEy1lI98RozFfbsD7qWR+F4OWbxgMWEHmJtJExKbqviw2AGjMbGuwNbIayLzXWPNK z6WlVrm6XxTrznGn9baVG5PDi8hgKSUmTiTJoSCgu8S9CRE6+rjdRWs/E3YzOo7MuaaJ24qJCOMb CtC/UKNTgS5UaJ3Oz3UE3LYosMU7XI1O+yFElCHB8DQkcsGpeJcv+J6wJwErwN2c7c4K9n5pwgrs n3fZX2nTxzzcsoDMPZEtTr137tBzwubxxtRUYuD33kE= ) ; keytag 5104`
	DNSKEY=5104/SEP is now in the chain-of-trust
	DS=5104/SHA-256 verifies DNSKEY=5104/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`info. 3600 IN RRSIG ( DNSKEY 8 1 3600 20251107154021 20251017144021 5104 info. c+uJ0XpPD8ejxuBhMowmT0KKnQf8Rq89eU835I3nvL7qGr1i8qJ2LV94ya4Bdn71ryo2W6L1qTr1 XVzivTQHuwa4bzs0H0WIh5y3ANDGUqxccBwwYVCTbMjaF7lZAFZ6Wjt/DijEBLFogoCt9vkdN09x dhZ7prHa/uJx1vBUc7ZGwpUW5fcGKa1rNJn4cHoSS+Sw3s+iIARzweR6RMmSPLJVomDyhDRBI+T3 G7hB87jQnzHqUfe2ILSZabywpJ/cWt8r8+CZ6GBKOeY6nTelT/u6F3PKQBFcE1Xmoftv2PJLCuDo SUK33Am3NFF15uZLjAvWY/7HXw9PPQxnMum/dQ== )`
	RRSIG=5104 and DNSKEY=5104/SEP verifies the DNSKEY RRset
	DNSKEY=33258 is now in the chain-of-trust
	DNSKEY=108 is now in the chain-of-trust
	Query to a2.info.afilias-nst.info for spain.info/A
	Received 598 bytes from 199.249.113.1
	;; Response received from [199.249.113.1] 598 octets ;; HEADER SECTION ;; id = 20906 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) spain.info. 3600 IN NS ns.transparentedge.eu. spain.info. 3600 IN NS ns.transparentedge.es. nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN NSEC3 ( 1 1 0 73 ntsf360ql7i2p37slijl06k7837th1pj NS SOA RRSIG DNSKEY NSEC3PARAM ) nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251112151224 20251022141224 108 info. a+HAbvnQydbKkc7X/jr+X58BMnbc4Y0JRoy7oQOdLpqQQg+Now1U1PLBbIsKhSZg5MAinYqJHOWq HFi+mIjhteDHTdpC/noPJu5RWYn94nHlGMNoylNQIWiCv5N8AH5tsufNbnaVmjcpXFVXjQ8Q8Ywu 2HwU3kn7HZKWSJjBexw= ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN NSEC3 ( 1 1 0 73 erin2egs48t00paodl8avqq8lqiagejs NS DS RRSIG ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251107154021 20251017144021 108 info. HbFMtfA7bHubyVoZaf4XsX0fCFcDBh88DbLFhjDjrrvwl7JMmkLHrszk+IJEDxvaArx8cNSoebIp 0aZ8I2u/sD4CKXm45oxUfhoferM5Hn8+Aj0MFl3S2jZOXLy//4biCfG4WWA73Kg/xwKDZdP5B8Ed oGrneMSq0vRs7M2X+t0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2.info.afilias-nst.info for spain.info/DNSKEY
	Received 598 bytes from 199.249.113.1
	;; Response received from [199.249.113.1] 598 octets ;; HEADER SECTION ;; id = 2513 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) spain.info. 3600 IN NS ns.transparentedge.es. spain.info. 3600 IN NS ns.transparentedge.eu. nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN NSEC3 ( 1 1 0 73 ntsf360ql7i2p37slijl06k7837th1pj NS SOA RRSIG DNSKEY NSEC3PARAM ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN NSEC3 ( 1 1 0 73 erin2egs48t00paodl8avqq8lqiagejs NS DS RRSIG ) nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251112151224 20251022141224 108 info. a+HAbvnQydbKkc7X/jr+X58BMnbc4Y0JRoy7oQOdLpqQQg+Now1U1PLBbIsKhSZg5MAinYqJHOWq HFi+mIjhteDHTdpC/noPJu5RWYn94nHlGMNoylNQIWiCv5N8AH5tsufNbnaVmjcpXFVXjQ8Q8Ywu 2HwU3kn7HZKWSJjBexw= ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251107154021 20251017144021 108 info. HbFMtfA7bHubyVoZaf4XsX0fCFcDBh88DbLFhjDjrrvwl7JMmkLHrszk+IJEDxvaArx8cNSoebIp 0aZ8I2u/sD4CKXm45oxUfhoferM5Hn8+Aj0MFl3S2jZOXLy//4biCfG4WWA73Kg/xwKDZdP5B8Ed oGrneMSq0vRs7M2X+t0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone spain.info

spain.info

	Checking DS between info and spain.info
	Query to b0.info.afilias-nst.org for spain.info/DS
	Received 771 bytes from 199.254.48.1
	;; Response received from [199.254.48.1] 771 octets ;; HEADER SECTION ;; id = 44582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN NSEC3 ( 1 1 0 73 ntsf360ql7i2p37slijl06k7837th1pj NS SOA RRSIG DNSKEY NSEC3PARAM ) nts9719ejeced08jegq9ombmafneqsd7.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251112151224 20251022141224 108 info. a+HAbvnQydbKkc7X/jr+X58BMnbc4Y0JRoy7oQOdLpqQQg+Now1U1PLBbIsKhSZg5MAinYqJHOWq HFi+mIjhteDHTdpC/noPJu5RWYn94nHlGMNoylNQIWiCv5N8AH5tsufNbnaVmjcpXFVXjQ8Q8Ywu 2HwU3kn7HZKWSJjBexw= ) info. 3600 IN SOA ( a0.info.afilias-nst.info. hostmaster.donuts.email. 1761145671 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) info. 3600 IN RRSIG ( SOA 8 1 3600 20251112151224 20251022141224 108 info. SpiwRD9jRVo2UsW0S9yGUaXLDCp/97EHkUqske9KdJYgxvw0ipW3OtbIF6uI8g3mPa0G8dq2zam3 JjCBRmDGJt1Yc8cU7sQzirfGhoEuUfYKgTGxUbldkQF+6ua0oGQV/zikEnykXOxv7EOOuF5H7Ufg MciLD2oNaEN84XSWbs8= ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN NSEC3 ( 1 1 0 73 erin2egs48t00paodl8avqq8lqiagejs NS DS RRSIG ) erijt7gkfjeijlbgv6e1uldo268hv1gn.info. 3600 IN RRSIG ( NSEC3 8 2 3600 20251107154021 20251017144021 108 info. HbFMtfA7bHubyVoZaf4XsX0fCFcDBh88DbLFhjDjrrvwl7JMmkLHrszk+IJEDxvaArx8cNSoebIp 0aZ8I2u/sD4CKXm45oxUfhoferM5Hn8+Aj0MFl3S2jZOXLy//4biCfG4WWA73Kg/xwKDZdP5B8Ed oGrneMSq0vRs7M2X+t0= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for spain.info in the info zone
	Query to ns.transparentedge.eu for spain.info/DNSKEY
	Received 105 bytes from 146.255.16.196
	;; Response received from [146.255.16.196] 105 octets ;; HEADER SECTION ;; id = 5203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) spain.info. 60 IN SOA ( ns.transparentedge.eu. sistemas.transparentedge.eu. 3 ;serial 60 ;refresh 60 ;retry 1209600 ;expire 60 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns.transparentedge.eu for spain.info/A
	Received 55 bytes from 146.255.16.196
	;; Response received from [146.255.16.196] 55 octets ;; HEADER SECTION ;; id = 51004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (1 record) spain.info. 300 IN A 185.104.134.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.transparentedge.eu is authoritative for spain.info
	Query to ns.transparentedge.es for spain.info/SOA
	Received 105 bytes from 146.255.16.197
	;; Response received from [146.255.16.197] 105 octets ;; HEADER SECTION ;; id = 43207 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN SOA ;; ANSWER SECTION (1 record) spain.info. 3600 IN SOA ( ns.transparentedge.eu. sistemas.transparentedge.eu. 3 ;serial 60 ;refresh 60 ;retry 1209600 ;expire 60 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.transparentedge.eu for spain.info/A
	Received 55 bytes from 146.255.16.196
	;; Response received from [146.255.16.196] 55 octets ;; HEADER SECTION ;; id = 49438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (1 record) spain.info. 300 IN A 185.104.134.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	spain.info A RR has value 185.104.134.129
	No RRSIGs found

spain.info

	Query to ns.transparentedge.es for spain.info/A
	Received 55 bytes from 146.255.16.197
	;; Response received from [146.255.16.197] 55 octets ;; HEADER SECTION ;; id = 53187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (1 record) spain.info. 300 IN A 185.104.134.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.transparentedge.es is authoritative for spain.info
	Query to ns.transparentedge.es for spain.info/A
	Received 55 bytes from 146.255.16.197
	;; Response received from [146.255.16.197] 55 octets ;; HEADER SECTION ;; id = 2580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spain.info. IN A ;; ANSWER SECTION (1 record) spain.info. 300 IN A 185.104.134.129 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	spain.info A RR has value 185.104.134.129
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test spain.info at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: