DNSSEC Analyzer - thingelstad.xyz

Domain Name:

Time: 2021-05-14 21:53:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for thingelstad.xyz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (864 bytes) ;; HEADER SECTION ;; id = 40518 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to d.root-servers.net for thingelstad.xyz/A
	Received 671 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (671 bytes) ;; HEADER SECTION ;; id = 1600 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . U2QvMYlMluJAhKP9IqxmIipp/4XbbEJ65uO6+eyYzrZXzcCNFEryn9g1IPHA0iPPQN8WgX3q6QJa 5Twudfrpd5rtzcz/wa/dNKPFBmNMm44K0DgwpLMLcUBKwYHXaC1nfg3/NhN3jV/uNrrLu9gM322K kBi4DejSRl4kL2k7ta32TcrBiXM/XcN6P2iv3XTBHc9/kO0e2QoiNdpDI3j5XCktfZPFarJClIQA uY18VYDv03Lh22PVOpwhCGnF5FEym3zNfKEA9zU7pzqH1UIiPKcklYXUJnrUy0edQqRjwCjuobIY rfoK2/dbvQW140HjLW2Rq2hAZZ6U7ac2ZeKfyA== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 y.nic.xyz. 172800 IN A 185.24.64.42 z.nic.xyz. 172800 IN A 212.18.248.42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to d.root-servers.net for xyz/DNSKEY
	Received 659 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (659 bytes) ;; HEADER SECTION ;; id = 13419 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) xyz. 172800 IN NS x.nic.xyz. xyz. 172800 IN NS y.nic.xyz. xyz. 172800 IN NS z.nic.xyz. xyz. 172800 IN NS generationxyz.nic.xyz. xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . U2QvMYlMluJAhKP9IqxmIipp/4XbbEJ65uO6+eyYzrZXzcCNFEryn9g1IPHA0iPPQN8WgX3q6QJa 5Twudfrpd5rtzcz/wa/dNKPFBmNMm44K0DgwpLMLcUBKwYHXaC1nfg3/NhN3jV/uNrrLu9gM322K kBi4DejSRl4kL2k7ta32TcrBiXM/XcN6P2iv3XTBHc9/kO0e2QoiNdpDI3j5XCktfZPFarJClIQA uY18VYDv03Lh22PVOpwhCGnF5FEym3zNfKEA9zU7pzqH1UIiPKcklYXUJnrUy0edQqRjwCjuobIY rfoK2/dbvQW140HjLW2Rq2hAZZ6U7ac2ZeKfyA== ) ;; ADDITIONAL SECTION (9 records) x.nic.xyz. 172800 IN A 194.169.218.42 y.nic.xyz. 172800 IN A 185.24.64.42 z.nic.xyz. 172800 IN A 212.18.248.42 generationxyz.nic.xyz. 172800 IN A 212.18.249.42 x.nic.xyz. 172800 IN AAAA 2001:67c:13cc::1:42 y.nic.xyz. 172800 IN AAAA 2a04:2b00:13cc::1:42 z.nic.xyz. 172800 IN AAAA 2a04:2b00:13ee::42 generationxyz.nic.xyz. 172800 IN AAAA 2a04:2b00:13ff::42 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone xyz

xyz

	Checking DS between . and xyz
	Query to m.root-servers.net for xyz/DS
	Received 403 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (403 bytes) ;; HEADER SECTION ;; id = 45220 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DS ;; ANSWER SECTION (3 records) xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 ) xyz. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . U2QvMYlMluJAhKP9IqxmIipp/4XbbEJ65uO6+eyYzrZXzcCNFEryn9g1IPHA0iPPQN8WgX3q6QJa 5Twudfrpd5rtzcz/wa/dNKPFBmNMm44K0DgwpLMLcUBKwYHXaC1nfg3/NhN3jV/uNrrLu9gM322K kBi4DejSRl4kL2k7ta32TcrBiXM/XcN6P2iv3XTBHc9/kO0e2QoiNdpDI3j5XCktfZPFarJClIQA uY18VYDv03Lh22PVOpwhCGnF5FEym3zNfKEA9zU7pzqH1UIiPKcklYXUJnrUy0edQqRjwCjuobIY rfoK2/dbvQW140HjLW2Rq2hAZZ6U7ac2ZeKfyA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for xyz in the . zone
	DS=3599/SHA-1 has algorithm RSASHA256
	DS=3599/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`xyz. 86400 IN RRSIG ( DS 8 1 86400 20210527190000 20210514180000 14631 . U2QvMYlMluJAhKP9IqxmIipp/4XbbEJ65uO6+eyYzrZXzcCNFEryn9g1IPHA0iPPQN8WgX3q6QJa 5Twudfrpd5rtzcz/wa/dNKPFBmNMm44K0DgwpLMLcUBKwYHXaC1nfg3/NhN3jV/uNrrLu9gM322K kBi4DejSRl4kL2k7ta32TcrBiXM/XcN6P2iv3XTBHc9/kO0e2QoiNdpDI3j5XCktfZPFarJClIQA uY18VYDv03Lh22PVOpwhCGnF5FEym3zNfKEA9zU7pzqH1UIiPKcklYXUJnrUy0edQqRjwCjuobIY rfoK2/dbvQW140HjLW2Rq2hAZZ6U7ac2ZeKfyA== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=3599/SHA-1 is now in the chain-of-trust
	`xyz. 86400 IN DS 3599 8 1 3fa3b264f45db5f38bedeaf1a88b76aa318c2c7f`
	`xyz. 86400 IN DS ( 3599 8 2 b9733869bc84c86bb59d102ba5da6b27b2088552332a39dcd54bc4e8d66b0499 )`
	Query to x.nic.xyz for xyz/DNSKEY
	Received 895 bytes from 194.169.218.42
	;; Answer received from 194.169.218.42 (895 bytes) ;; HEADER SECTION ;; id = 48553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; xyz. IN DNSKEY ;; ANSWER SECTION (4 records) xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAbap4DnxAjCv7xmSs+sutlIWGKniqRcEUazqcDDFUjCDDHwl43Crg5VVtn+twpjFHsZK+tW5 wkl042QJ2sEuUTA1oYaYNDclrgmWkr4crw4q2CCga2eVBta8K277N4MkK+HtxBAXDyzErX8J0VXL J2K/oRdsF7M0M0R7ZBgvcGln ) ; Key ID = 30910 xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAZt8+22nz9lKirxD0yqYrDlR7E6dxJaQL4XRZbrbafV5HvTsS0l/kGhVdalqfWuJPoBHmPv2 GCvrSYW1qDJQM3JGn8T2Fnjyxuu1slEeE/4rH3FOzvzKFQeVi/WW+YBdNqvPnHcgmNQY3jxQOKkL U0b1i2jWq5yVzr0naSxf1pe1 ) ; Key ID = 22414 xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599 xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210528215740 20210429012027 3599 xyz. caNNHid+udPzNAuGQLBM04lh6HwpvS7+LWOp4fSLGoD4ibyIaCa9Qi43fn4EulzbMk6SDNcVX5nv 9gyiamOmRvclKZK3Fa8WBbJZcucjFNQIb2mVgY/CW6Y1vtGJOD+6ZbnwzGn1NOHmoxS36Y3+yVuU 38g73TYnJjphz50S6ZKx93gRqmsN+80wk6HPAtlssCRfn13O1IHgWvTI2BBkY2rQue73X5gfTPB0 rdLpHQceNf/R7cT+pgVg9bHkAdl+dy/7zCsolh+C4QpU4u450S91vVMWLQKcULphOLazlkbZcJuo d58f6thCrFiL3wzevBtNuK1sylDb8ChX6R5dLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for xyz
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAbap4DnxAjCv7xmSs+sutlIWGKniqRcEUazqcDDFUjCDDHwl43Crg5VVtn+twpjFHsZK+tW5 wkl042QJ2sEuUTA1oYaYNDclrgmWkr4crw4q2CCga2eVBta8K277N4MkK+HtxBAXDyzErX8J0VXL J2K/oRdsF7M0M0R7ZBgvcGln ) ; Key ID = 30910`
	`xyz. 3600 IN DNSKEY ( 256 3 8 AwEAAZt8+22nz9lKirxD0yqYrDlR7E6dxJaQL4XRZbrbafV5HvTsS0l/kGhVdalqfWuJPoBHmPv2 GCvrSYW1qDJQM3JGn8T2Fnjyxuu1slEeE/4rH3FOzvzKFQeVi/WW+YBdNqvPnHcgmNQY3jxQOKkL U0b1i2jWq5yVzr0naSxf1pe1 ) ; Key ID = 22414`
	`xyz. 3600 IN DNSKEY ( 257 3 8 AwEAAbYRTzkgLg4oxcFb/+oFQMvluEut45siTtLiNL7t5Fim/ZnYhkxal6TiCUywnfgiycJyneNm tC/3eoTcz5dlrlRB5dwDehcqiZoFiqjaXGHcykHGFBDynD0/sRcEAQL+bLMv2qA+o2L7pDPHbCGJ VXlUq57oTWfS4esbGDIa+1Bs8gDVMGUZcbRmeeKkc/MH2Oq1ApE5EKjH0ZRvYWS6afsWyvlXD2NX DthS5LltVKqqjhi6dy2O02stOt41z1qwfRlU89b3HXfDghlJ/L33DE+OcTyK0yRJ+ay4WpBgQJL8 GDFKz1hnR2lOjYXLttJD7aHfcYyVO6zYsx2aeHI0OYM= ) ; Key ID = 3599`
	DNSKEY=3599/SEP is now in the chain-of-trust
	DS=3599/SHA-1 verifies DNSKEY=3599/SEP
	DS=3599/SHA-256 verifies DNSKEY=3599/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`xyz. 3600 IN RRSIG ( DNSKEY 8 1 3600 20210528215740 20210429012027 3599 xyz. caNNHid+udPzNAuGQLBM04lh6HwpvS7+LWOp4fSLGoD4ibyIaCa9Qi43fn4EulzbMk6SDNcVX5nv 9gyiamOmRvclKZK3Fa8WBbJZcucjFNQIb2mVgY/CW6Y1vtGJOD+6ZbnwzGn1NOHmoxS36Y3+yVuU 38g73TYnJjphz50S6ZKx93gRqmsN+80wk6HPAtlssCRfn13O1IHgWvTI2BBkY2rQue73X5gfTPB0 rdLpHQceNf/R7cT+pgVg9bHkAdl+dy/7zCsolh+C4QpU4u450S91vVMWLQKcULphOLazlkbZcJuo d58f6thCrFiL3wzevBtNuK1sylDb8ChX6R5dLQ== )`
	RRSIG=3599 and DNSKEY=3599/SEP verifies the DNSKEY RRset
	DNSKEY=30910 is now in the chain-of-trust
	DNSKEY=22414 is now in the chain-of-trust
	Query to generationxyz.nic.xyz for thingelstad.xyz/A
	Received 376 bytes from 212.18.249.42
	;; Answer received from 212.18.249.42 (376 bytes) ;; HEADER SECTION ;; id = 25485 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) thingelstad.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20210529003312 20210428200452 30910 xyz. hCLXYZcuM+T6srX5KXrOhpnw9YqsjTAWp4ShrEcUSH4lNyVL56OBdem/35N2dG9U579SBpWO+7jH 7T1W3pfrC7gJONx52NjLR0toEFBnPfLJEBTDjkY9ijVYS3OI1aNGSzm6zSJUdfXyO6yIqn1v1O3v ML4kuTsu/eU11sH5qz0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to x.nic.xyz for thingelstad.xyz/DNSKEY
	Received 376 bytes from 194.169.218.42
	;; Answer received from 194.169.218.42 (376 bytes) ;; HEADER SECTION ;; id = 38711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) thingelstad.xyz. 3600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 3600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20210529003312 20210428200452 30910 xyz. hCLXYZcuM+T6srX5KXrOhpnw9YqsjTAWp4ShrEcUSH4lNyVL56OBdem/35N2dG9U579SBpWO+7jH 7T1W3pfrC7gJONx52NjLR0toEFBnPfLJEBTDjkY9ijVYS3OI1aNGSzm6zSJUdfXyO6yIqn1v1O3v ML4kuTsu/eU11sH5qz0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone thingelstad.xyz

thingelstad.xyz

	Checking DS between xyz and thingelstad.xyz
	Query to generationxyz.nic.xyz for thingelstad.xyz/DS
	Received 255 bytes from 212.18.249.42
	;; Answer received from 212.18.249.42 (255 bytes) ;; HEADER SECTION ;; id = 9352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DS ;; ANSWER SECTION (2 records) thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c ) thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20210529003312 20210428200452 30910 xyz. hCLXYZcuM+T6srX5KXrOhpnw9YqsjTAWp4ShrEcUSH4lNyVL56OBdem/35N2dG9U579SBpWO+7jH 7T1W3pfrC7gJONx52NjLR0toEFBnPfLJEBTDjkY9ijVYS3OI1aNGSzm6zSJUdfXyO6yIqn1v1O3v ML4kuTsu/eU11sH5qz0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for thingelstad.xyz in the xyz zone
	DS=16595/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`thingelstad.xyz. 3600 IN RRSIG ( DS 8 2 3600 20210529003312 20210428200452 30910 xyz. hCLXYZcuM+T6srX5KXrOhpnw9YqsjTAWp4ShrEcUSH4lNyVL56OBdem/35N2dG9U579SBpWO+7jH 7T1W3pfrC7gJONx52NjLR0toEFBnPfLJEBTDjkY9ijVYS3OI1aNGSzm6zSJUdfXyO6yIqn1v1O3v ML4kuTsu/eU11sH5qz0= )`
	RRSIG=30910 and DNSKEY=30910 verifies the DS RRset
	DS=16595/SHA-256 is now in the chain-of-trust
	`thingelstad.xyz. 3600 IN DS ( 16595 8 2 c9f97a1175a343a86c14f2cc877ae2e30ff943d03a5d9487b8715c973542fd2c )`
	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/DNSKEY
	Received 771 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (771 bytes) ;; HEADER SECTION ;; id = 25490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN DNSKEY ;; ANSWER SECTION (3 records) thingelstad.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAZubilcR/7BYX6A3taYp5/u2tqALMJhM/EpE6s/yW6FzTzVCSoo3F91LknOkP2EifgSPfAlA ZzR78Kd4Yy7LrRis9jBgzKT7Nsy6GpaiqN3J3zfzUHN0YqLIbRD7z8wlgqsDhogHGCcjO9Y7g9FS C+CBjc9D8fcNJKu1Xr869Z2b ) ; Key ID = 44211 thingelstad.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaioan2x2ZdibSbKWmldFVo6qEX8c5GxKal5fo+wsm06dAFPC7fPiaZj4sS50n6jy3axjhBJ U5D0KjfcOtiz1nUgs7bRb1OmY+FiKtBtImKJG0tv1xvjRWmjtkZOrasosBIL2HpHKl9Nyk9LNKhm dLE8iDp8kdb90+YLA1mj/Pldo0OM5FV54itHNuXWcTEObjhw//yTLxBmQSvggzG3PVF91xs2Mm7z tTPCJzoXJkg99ubSDa7ikQb6LtcLrHUyM6EQgbG7IUFzQw7oO1D5NijMhMA3CtWXLlg9iq2No2Sl ObXH8EkvPvkBXslIm9NFbIK31Q/BHTQh0lCnmPsFu+s= ) ; Key ID = 16595 thingelstad.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20210604105248 20210513105248 16595 thingelstad.xyz. m+Vtpnm65aWG8EoSeK2XopFoRAy4jOqbkk8UVVOHuqWzzcf/a6O/zdv4DZRQ1+IyxFl9FWzCHwLV HKJxrO3Oyo6FWc7HuD4RmM8Tmxi2IAEaRj3nThcD1IZgdGa/tXzdsygMFjl1ZteDmvIJfRn/AYng o5kZytISCWpFNBszogA7qj/X3oVdI6QV6kJ2x77eLgXcOxPByfyQYSNwmgXtjPfCZh8jigjb1Vyo WUzjCYsr5u6WyJ4J+QlC0V6RYo3buOewPs6PQ4zuQ8lwsUWPkX2NIqAvO9Q4Od2VFsXUTcb84DDC jCWuolkwXx4RXJsajXYgMQiRLhUCXJQRikegEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Found 2 DNSKEY records for thingelstad.xyz
	`thingelstad.xyz. 300 IN DNSKEY ( 256 3 8 AwEAAZubilcR/7BYX6A3taYp5/u2tqALMJhM/EpE6s/yW6FzTzVCSoo3F91LknOkP2EifgSPfAlA ZzR78Kd4Yy7LrRis9jBgzKT7Nsy6GpaiqN3J3zfzUHN0YqLIbRD7z8wlgqsDhogHGCcjO9Y7g9FS C+CBjc9D8fcNJKu1Xr869Z2b ) ; Key ID = 44211`
	`thingelstad.xyz. 300 IN DNSKEY ( 257 3 8 AwEAAaioan2x2ZdibSbKWmldFVo6qEX8c5GxKal5fo+wsm06dAFPC7fPiaZj4sS50n6jy3axjhBJ U5D0KjfcOtiz1nUgs7bRb1OmY+FiKtBtImKJG0tv1xvjRWmjtkZOrasosBIL2HpHKl9Nyk9LNKhm dLE8iDp8kdb90+YLA1mj/Pldo0OM5FV54itHNuXWcTEObjhw//yTLxBmQSvggzG3PVF91xs2Mm7z tTPCJzoXJkg99ubSDa7ikQb6LtcLrHUyM6EQgbG7IUFzQw7oO1D5NijMhMA3CtWXLlg9iq2No2Sl ObXH8EkvPvkBXslIm9NFbIK31Q/BHTQh0lCnmPsFu+s= ) ; Key ID = 16595`
	DNSKEY=16595/SEP is now in the chain-of-trust
	DS=16595/SHA-256 verifies DNSKEY=16595/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`thingelstad.xyz. 300 IN RRSIG ( DNSKEY 8 2 300 20210604105248 20210513105248 16595 thingelstad.xyz. m+Vtpnm65aWG8EoSeK2XopFoRAy4jOqbkk8UVVOHuqWzzcf/a6O/zdv4DZRQ1+IyxFl9FWzCHwLV HKJxrO3Oyo6FWc7HuD4RmM8Tmxi2IAEaRj3nThcD1IZgdGa/tXzdsygMFjl1ZteDmvIJfRn/AYng o5kZytISCWpFNBszogA7qj/X3oVdI6QV6kJ2x77eLgXcOxPByfyQYSNwmgXtjPfCZh8jigjb1Vyo WUzjCYsr5u6WyJ4J+QlC0V6RYo3buOewPs6PQ4zuQ8lwsUWPkX2NIqAvO9Q4Od2VFsXUTcb84DDC jCWuolkwXx4RXJsajXYgMQiRLhUCXJQRikegEA== )`
	RRSIG=16595 and DNSKEY=16595/SEP verifies the DNSKEY RRset
	DNSKEY=44211 is now in the chain-of-trust
	Query to ns-cloud-d1.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (576 bytes) ;; HEADER SECTION ;; id = 56570 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-d1.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (579 bytes) ;; HEADER SECTION ;; id = 45605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. domsEQDgwAOMj7jzTNfoeWX0sA+h0zLnk2/OP5pzGP6cS+mC9X8a+eAMNiB2aRlvIlaXvfren1/T GWbL3uzjHytKsnikdJDD4z/DYw7BMl7eDrpQCZdPiv5PXzGaKbwKLe6qCQV2W3QSAT7OmOc8eqMf Vyht5mvxYwhcQH/Rh/o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (579 bytes) ;; HEADER SECTION ;; id = 8507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. domsEQDgwAOMj7jzTNfoeWX0sA+h0zLnk2/OP5pzGP6cS+mC9X8a+eAMNiB2aRlvIlaXvfren1/T GWbL3uzjHytKsnikdJDD4z/DYw7BMl7eDrpQCZdPiv5PXzGaKbwKLe6qCQV2W3QSAT7OmOc8eqMf Vyht5mvxYwhcQH/Rh/o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/SOA
	Received 579 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (579 bytes) ;; HEADER SECTION ;; id = 43103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN SOA ;; ANSWER SECTION (2 records) thingelstad.xyz. 21600 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 21600 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) ;; AUTHORITY SECTION (5 records) thingelstad.xyz. 21600 IN NS ns-cloud-d1.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d2.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d3.googledomains.com. thingelstad.xyz. 21600 IN NS ns-cloud-d4.googledomains.com. thingelstad.xyz. 21600 IN RRSIG ( NS 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. domsEQDgwAOMj7jzTNfoeWX0sA+h0zLnk2/OP5pzGP6cS+mC9X8a+eAMNiB2aRlvIlaXvfren1/T GWbL3uzjHytKsnikdJDD4z/DYw7BMl7eDrpQCZdPiv5PXzGaKbwKLe6qCQV2W3QSAT7OmOc8eqMf Vyht5mvxYwhcQH/Rh/o= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to ns-cloud-d1.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.32.109
	;; Answer received from 216.239.32.109 (576 bytes) ;; HEADER SECTION ;; id = 27843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= )`
	RRSIG=44211 and DNSKEY=44211 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (576 bytes) ;; HEADER SECTION ;; id = 17625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-d3.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d3.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.36.109
	;; Answer received from 216.239.36.109 (576 bytes) ;; HEADER SECTION ;; id = 27902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= )`
	RRSIG=44211 and DNSKEY=44211 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (576 bytes) ;; HEADER SECTION ;; id = 35694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-d4.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d4.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.38.109
	;; Answer received from 216.239.38.109 (576 bytes) ;; HEADER SECTION ;; id = 21771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= )`
	RRSIG=44211 and DNSKEY=44211 verifies the SOA RRset

thingelstad.xyz

	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (576 bytes) ;; HEADER SECTION ;; id = 30280 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	ns-cloud-d2.googledomains.com is authoritative for thingelstad.xyz
	Found RRSIG signed by thingelstad.xyz zone
	Query to ns-cloud-d2.googledomains.com for thingelstad.xyz/A
	Received 576 bytes from 216.239.34.109
	;; Answer received from 216.239.34.109 (576 bytes) ;; HEADER SECTION ;; id = 15150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; thingelstad.xyz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) thingelstad.xyz. 300 IN SOA ( ns-cloud-d1.googledomains.com. cloud-dns-hostmaster.google.com. 1 ;serial 21600 ;refresh 3600 ;retry 259200 ;expire 300 ;minimum ) thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN NSEC3 ( 1 0 1 5c2fd3b48652084f 7s7d340ab703g9k9b52s3r127rdccntn NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS ) 8lsjlcmhljts2lor7im7hg2aija1ksba.thingelstad.xyz. 300 IN RRSIG ( NSEC3 8 3 300 20210604105248 20210513105248 44211 thingelstad.xyz. ZALUOTgmg/V++r8sZq15DkqhssKsQJz69TUPN6+uBrQcGyZODsSnlJ0A7WqI9CszBfgIV7zBxF+/ 6MokVqZ6Voz3iU0838rNYEUuIhQRrM0SI3Ppn7EHfmy4pFHsu+UWs77uQnypnk5KSazq7Fn2fDG0 5krGCsYrJz8N1zpbSFI= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 512 ;; option:
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`thingelstad.xyz. 300 IN RRSIG ( SOA 8 2 21600 20210604105248 20210513105248 44211 thingelstad.xyz. c1uYPgMd+0oGqNCeGWGocoyhM5j/pG+knlH4ojpCsXeUimXxHdxhpV3DltLQmTfzHs+Pg1r+TNp5 H7g3/KQvtXyQ0HURKJNKdyscVH6ygEWXbcRv9JSHjc/BAIt38hgN+S6Am3ehaZvbSKfykoCVRYa0 3AwEpN9h+yaGE5LHkI4= )`
	RRSIG=44211 and DNSKEY=44211 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test thingelstad.xyz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: