DNSSEC Debugger - trentpower.fr

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-05-31 19:54:46 UTC

Analyzing DNSSEC problems for trentpower.fr

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 1139 octets ;; HEADER SECTION ;; id = 7057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260621000000 20260531000000 20326 . OWezD4y5HWy51nYFWgFkziq2yogZ1vcMf27MEGECQB1YKMoeOuNn9f61X66sWBDQr2jjOzWxUFfz ms70WjqNBAJXt+TZGyKgtI11KtmvY5E+p59hxgymu1pEPPJkiQQyCdh5w483SoWyiJZdRlUTWn7T 8EJJyPbCDvS8qHPtIXSJFIpiX8UzWp9IceunFu9x/OZpWFCzMeFiWJJqazp0rSO3KOX/4xJXb4Zo GQB9e5lyjpaX5CSgWpQekmu9o+OQzuimPCkR9lGzsrADLQ+a2pUpYykLmm0jiTbRwlmB7JQeMD3u zTKL3rYGX8mXEVVSja0FbyViXTE+xtav+RICMA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to h.root-servers.net for trentpower.fr/A
	Received 565 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 565 octets ;; HEADER SECTION ;; id = 36139 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260613170000 20260531160000 54393 . EzYrnUe+kY1CZ8aE2wy/qAM03Oh43iXbDp8xWhVZidlN4dBHpRK6oywenFc3oVBfMhnoc0HK0rYH +ExPUL3QPw8QtHwI18GhiF9at+rws+KnqUvrvvPE7zVqaBbM6R3y5w9tjfg11n1LrsVaYf3TOs2w NaSD2UGC+6OO+GyuiHE4EDOT0YgQ5m2ThSTlT32HfOuRiueYN26AQ97Xa2yH7hX8P1xczr9es2nO ++GRfV58/V4rlsMn/CmYz7ZI+Jeaoz5FV4pp5uhYAmVuOZ+KZupsqFfuvqFqk+QQ/GASwFJ+NWzd D88GA8oR1tgoKtvjMRWyiohYsbUOv8hQOpeL8g== ) ;; ADDITIONAL SECTION (7 records) d.nic.fr. 172800 IN A 194.0.9.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for fr/DNSKEY
	Received 554 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 554 octets ;; HEADER SECTION ;; id = 16286 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 7 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260613170000 20260531160000 54393 . EzYrnUe+kY1CZ8aE2wy/qAM03Oh43iXbDp8xWhVZidlN4dBHpRK6oywenFc3oVBfMhnoc0HK0rYH +ExPUL3QPw8QtHwI18GhiF9at+rws+KnqUvrvvPE7zVqaBbM6R3y5w9tjfg11n1LrsVaYf3TOs2w NaSD2UGC+6OO+GyuiHE4EDOT0YgQ5m2ThSTlT32HfOuRiueYN26AQ97Xa2yH7hX8P1xczr9es2nO ++GRfV58/V4rlsMn/CmYz7ZI+Jeaoz5FV4pp5uhYAmVuOZ+KZupsqFfuvqFqk+QQ/GASwFJ+NWzd D88GA8oR1tgoKtvjMRWyiohYsbUOv8hQOpeL8g== ) ;; ADDITIONAL SECTION (7 records) d.nic.fr. 172800 IN A 194.0.9.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 g.ext.nic.fr. 172800 IN A 194.0.36.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone fr

	Checking DS between . and fr
	Query to j.root-servers.net for fr/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 61429 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (2 records) fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20260613170000 20260531160000 54393 . EzYrnUe+kY1CZ8aE2wy/qAM03Oh43iXbDp8xWhVZidlN4dBHpRK6oywenFc3oVBfMhnoc0HK0rYH +ExPUL3QPw8QtHwI18GhiF9at+rws+KnqUvrvvPE7zVqaBbM6R3y5w9tjfg11n1LrsVaYf3TOs2w NaSD2UGC+6OO+GyuiHE4EDOT0YgQ5m2ThSTlT32HfOuRiueYN26AQ97Xa2yH7hX8P1xczr9es2nO ++GRfV58/V4rlsMn/CmYz7ZI+Jeaoz5FV4pp5uhYAmVuOZ+KZupsqFfuvqFqk+QQ/GASwFJ+NWzd D88GA8oR1tgoKtvjMRWyiohYsbUOv8hQOpeL8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fr in the . zone
	DS=65381/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20260613170000 20260531160000 54393 . EzYrnUe+kY1CZ8aE2wy/qAM03Oh43iXbDp8xWhVZidlN4dBHpRK6oywenFc3oVBfMhnoc0HK0rYH +ExPUL3QPw8QtHwI18GhiF9at+rws+KnqUvrvvPE7zVqaBbM6R3y5w9tjfg11n1LrsVaYf3TOs2w NaSD2UGC+6OO+GyuiHE4EDOT0YgQ5m2ThSTlT32HfOuRiueYN26AQ97Xa2yH7hX8P1xczr9es2nO ++GRfV58/V4rlsMn/CmYz7ZI+Jeaoz5FV4pp5uhYAmVuOZ+KZupsqFfuvqFqk+QQ/GASwFJ+NWzd D88GA8oR1tgoKtvjMRWyiohYsbUOv8hQOpeL8g== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=65381/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 65381 13 2 8163abf45792942cf4ee38cca31f6a6832fcdc6d402338fc687827690c4132f6 )`
	Query to g.ext.nic.fr for fr/DNSKEY
	Received 369 bytes from 194.0.36.1
	;; Response received from [194.0.36.1] 369 octets ;; HEADER SECTION ;; id = 2515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (4 records) fr. 3600 IN DNSKEY ( 256 3 13 5uYHwQUfYL14+vVTqAU07gLd5gGSy3ToJBUPszsgOufYYEGfzkDBLCom2yIFwkj1oS4gyEYfC0L6 tFReLEiyMg== ) ; keytag 31882 fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381 fr. 3600 IN DNSKEY ( 256 3 13 mgKDr55LCOpfvpEynPNngSIbG8dgVN4uhFFmRs9wGOv5Wo8YqciTOVsH2dSIhO4tDTYgtt/V0YPe qbBlwV1tVg== ) ; keytag 7106 fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260629150743 20260530074230 65381 fr. c/3HuSdPk+pSsCUOLpivZAhi/7YGErlkbdT1Y7y2gKO8sjZgzQYK4iAym3ouRP2xR1huChAXb9Nw JYdEgsBVfQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for fr
	`fr. 3600 IN DNSKEY ( 256 3 13 5uYHwQUfYL14+vVTqAU07gLd5gGSy3ToJBUPszsgOufYYEGfzkDBLCom2yIFwkj1oS4gyEYfC0L6 tFReLEiyMg== ) ; keytag 31882`
	`fr. 3600 IN DNSKEY ( 257 3 13 C8Q2nWGQPY99Cmln1/zSz7+peZNyxbCHDgisQqSnLXJ6rrfAGXYQdKMJ3SRY3zmBSqtW5+F0Esu3 6NTNXRaxIQ== ) ; keytag 65381`
	`fr. 3600 IN DNSKEY ( 256 3 13 mgKDr55LCOpfvpEynPNngSIbG8dgVN4uhFFmRs9wGOv5Wo8YqciTOVsH2dSIhO4tDTYgtt/V0YPe qbBlwV1tVg== ) ; keytag 7106`
	DNSKEY=65381/SEP is now in the chain-of-trust
	DS=65381/SHA-256 verifies DNSKEY=65381/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20260629150743 20260530074230 65381 fr. c/3HuSdPk+pSsCUOLpivZAhi/7YGErlkbdT1Y7y2gKO8sjZgzQYK4iAym3ouRP2xR1huChAXb9Nw JYdEgsBVfQ== )`
	RRSIG=65381 and DNSKEY=65381/SEP verifies the DNSKEY RRset
	DNSKEY=31882 is now in the chain-of-trust
	DNSKEY=7106 is now in the chain-of-trust
	Query to f.ext.nic.fr for trentpower.fr/A
	Received 265 bytes from 194.146.106.46
	;; Response received from [194.146.106.46] 265 octets ;; HEADER SECTION ;; id = 62466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) trentpower.fr. 3600 IN NS ns-27-b.gandi.net. trentpower.fr. 3600 IN NS ns-165-c.gandi.net. trentpower.fr. 3600 IN NS ns-152-a.gandi.net. trentpower.fr. 3600 IN DS ( 29034 13 2 0dc16ebef8ab9d1939103c335dde57118f462d5553f144bd6b8f9598af9bb1c0 ) trentpower.fr. 3600 IN RRSIG ( DS 13 2 3600 20260610234627 20260511225300 7106 fr. ZSVLhnj+oerawrgN9e1pprPLrj8dJy5pzu9azFmBceet7XG/HbrtgeA0vJpJVmOUcicgFM3TZM+a iUTCGZly6w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.nic.fr for trentpower.fr/DNSKEY
	Received 265 bytes from 194.0.9.1
	;; Response received from [194.0.9.1] 265 octets ;; HEADER SECTION ;; id = 2450 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 5 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) trentpower.fr. 3600 IN NS ns-165-c.gandi.net. trentpower.fr. 3600 IN NS ns-27-b.gandi.net. trentpower.fr. 3600 IN NS ns-152-a.gandi.net. trentpower.fr. 3600 IN DS ( 29034 13 2 0dc16ebef8ab9d1939103c335dde57118f462d5553f144bd6b8f9598af9bb1c0 ) trentpower.fr. 3600 IN RRSIG ( DS 13 2 3600 20260610234627 20260511225300 7106 fr. ZSVLhnj+oerawrgN9e1pprPLrj8dJy5pzu9azFmBceet7XG/HbrtgeA0vJpJVmOUcicgFM3TZM+a iUTCGZly6w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone trentpower.fr

trentpower.fr

	Checking DS between fr and trentpower.fr
	Query to f.ext.nic.fr for trentpower.fr/DS
	Received 188 bytes from 194.146.106.46
	;; Response received from [194.146.106.46] 188 octets ;; HEADER SECTION ;; id = 7596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN DS ;; ANSWER SECTION (2 records) trentpower.fr. 3600 IN DS ( 29034 13 2 0dc16ebef8ab9d1939103c335dde57118f462d5553f144bd6b8f9598af9bb1c0 ) trentpower.fr. 3600 IN RRSIG ( DS 13 2 3600 20260610234627 20260511225300 7106 fr. ZSVLhnj+oerawrgN9e1pprPLrj8dJy5pzu9azFmBceet7XG/HbrtgeA0vJpJVmOUcicgFM3TZM+a iUTCGZly6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for trentpower.fr in the fr zone
	DS=29034/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`trentpower.fr. 3600 IN RRSIG ( DS 13 2 3600 20260610234627 20260511225300 7106 fr. ZSVLhnj+oerawrgN9e1pprPLrj8dJy5pzu9azFmBceet7XG/HbrtgeA0vJpJVmOUcicgFM3TZM+a iUTCGZly6w== )`
	RRSIG=7106 and DNSKEY=7106 verifies the DS RRset
	DS=29034/SHA-256 is now in the chain-of-trust
	`trentpower.fr. 3600 IN DS ( 29034 13 2 0dc16ebef8ab9d1939103c335dde57118f462d5553f144bd6b8f9598af9bb1c0 )`
	Query to ns-165-c.gandi.net for trentpower.fr/DNSKEY
	Received 231 bytes from 217.70.187.166
	;; Response received from [217.70.187.166] 231 octets ;; HEADER SECTION ;; id = 43011 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN DNSKEY ;; ANSWER SECTION (2 records) trentpower.fr. 10800 IN RRSIG ( DNSKEY 13 2 10800 20260611000000 20260521000000 29034 trentpower.fr. ibBoVM0gtS8cpzjbfxhFqg0/0W/mMKYv5z7JrlhhLd3VfBNCJ9BH8XMzqc4Gct+r/jNUhObuuJDX HIsMaMVb1A== ) trentpower.fr. 10800 IN DNSKEY ( 256 3 13 2sokTAY9yl0o1yen/urbcbdV4cj5x0rjuwjHr63sio5IctQB5dIas7ApMaAUIrsNFhhRqvLgW10+ 9TXuBTrbwA== ) ; keytag 29034 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for trentpower.fr
	`trentpower.fr. 10800 IN DNSKEY ( 256 3 13 2sokTAY9yl0o1yen/urbcbdV4cj5x0rjuwjHr63sio5IctQB5dIas7ApMaAUIrsNFhhRqvLgW10+ 9TXuBTrbwA== ) ; keytag 29034`
	DNSKEY=29034 is now in the chain-of-trust
	DS=29034/SHA-256 verifies DNSKEY=29034
	Found 1 RRSIGs over DNSKEY RRset
	`trentpower.fr. 10800 IN RRSIG ( DNSKEY 13 2 10800 20260611000000 20260521000000 29034 trentpower.fr. ibBoVM0gtS8cpzjbfxhFqg0/0W/mMKYv5z7JrlhhLd3VfBNCJ9BH8XMzqc4Gct+r/jNUhObuuJDX HIsMaMVb1A== )`
	RRSIG=29034 and DNSKEY=29034 verifies the DNSKEY RRset
	Query to ns-27-b.gandi.net for trentpower.fr/A
	Received 167 bytes from 213.167.230.28
	;; Response received from [213.167.230.28] 167 octets ;; HEADER SECTION ;; id = 24156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN A ;; ANSWER SECTION (2 records) trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. RwfJpTL4K2nK4nh/9GJyR9/iSlWC+r4tSi+/eBceLY+TdR8E6yCKBnBTpCjeJRxPZOp0KP64eXlF yVTxGj616A== ) trentpower.fr. 3600 IN A 155.133.132.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-27-b.gandi.net is authoritative for trentpower.fr
	Found RRSIG signed by trentpower.fr zone
	Query to ns-152-a.gandi.net for trentpower.fr/SOA
	Received 211 bytes from 173.246.100.153
	;; Response received from [173.246.100.153] 211 octets ;; HEADER SECTION ;; id = 60669 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN SOA ;; ANSWER SECTION (2 records) trentpower.fr. 86400 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1779926400 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) trentpower.fr. 86400 IN RRSIG ( SOA 13 2 86400 20260611000000 20260521000000 29034 trentpower.fr. xZI95mRruyVNltk0eLKj3x4ADYqPO5rObf4xJck9YJdd7sCgtZgrSEsl6dX5IkPn/Xmar0koR7Jw ZnLKqOawAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-165-c.gandi.net for trentpower.fr/SOA
	Received 211 bytes from 217.70.187.166
	;; Response received from [217.70.187.166] 211 octets ;; HEADER SECTION ;; id = 28183 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN SOA ;; ANSWER SECTION (2 records) trentpower.fr. 86400 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1779926400 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) trentpower.fr. 86400 IN RRSIG ( SOA 13 2 86400 20260611000000 20260521000000 29034 trentpower.fr. vp89HNLx1crI5VCXhrDYn0aM1udnFis3kH/DEc3hmpQjdu85bXX1l6YST511nGQBT5+HkN9aNsHP bGDMPEXMLg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-27-b.gandi.net for trentpower.fr/A
	trentpower.fr A RR has value 155.133.132.3
	Found 1 RRSIGs over A RRset
	`trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. RwfJpTL4K2nK4nh/9GJyR9/iSlWC+r4tSi+/eBceLY+TdR8E6yCKBnBTpCjeJRxPZOp0KP64eXlF yVTxGj616A== )`
	RRSIG=29034 and DNSKEY=29034 verifies the A RRset

trentpower.fr

	Query to ns-152-a.gandi.net for trentpower.fr/A
	Received 167 bytes from 173.246.100.153
	;; Response received from [173.246.100.153] 167 octets ;; HEADER SECTION ;; id = 4237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN A ;; ANSWER SECTION (2 records) trentpower.fr. 3600 IN A 155.133.132.3 trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. DhFJUe7NirevTgYbA2rrhwEGH+iqoWS7jizLpEluMs2VUfmmaKZ9CisF0i9WDCYx6px5ZdEdhHyX 7BMSlX6dyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-152-a.gandi.net is authoritative for trentpower.fr
	Found RRSIG signed by trentpower.fr zone
	Query to ns-152-a.gandi.net for trentpower.fr/A
	trentpower.fr A RR has value 155.133.132.3
	Found 1 RRSIGs over A RRset
	`trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. DhFJUe7NirevTgYbA2rrhwEGH+iqoWS7jizLpEluMs2VUfmmaKZ9CisF0i9WDCYx6px5ZdEdhHyX 7BMSlX6dyQ== )`
	RRSIG=29034 and DNSKEY=29034 verifies the A RRset

trentpower.fr

	Query to ns-165-c.gandi.net for trentpower.fr/A
	Received 167 bytes from 217.70.187.166
	;; Response received from [217.70.187.166] 167 octets ;; HEADER SECTION ;; id = 8090 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; trentpower.fr. IN A ;; ANSWER SECTION (2 records) trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. LbOgJS6zsaVr530GiDmgqTBjB2ImGNrmPw3EJsAGBqNT11GWkBWF71ipUxXDtvpWZdOJv1EX0DwE Fj+b5gDpyA== ) trentpower.fr. 3600 IN A 155.133.132.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-165-c.gandi.net is authoritative for trentpower.fr
	Found RRSIG signed by trentpower.fr zone
	Query to ns-165-c.gandi.net for trentpower.fr/A
	trentpower.fr A RR has value 155.133.132.3
	Found 1 RRSIGs over A RRset
	`trentpower.fr. 3600 IN RRSIG ( A 13 2 3600 20260611000000 20260521000000 29034 trentpower.fr. LbOgJS6zsaVr530GiDmgqTBjB2ImGNrmPw3EJsAGBqNT11GWkBWF71ipUxXDtvpWZdOJv1EX0DwE Fj+b5gDpyA== )`
	RRSIG=29034 and DNSKEY=29034 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test trentpower.fr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: