DNSSEC Analyzer

Domain Name:

Time: 2022-08-08 22:09:41 UTC, NTP stratum 16

Analyzing DNSSEC problems for ua.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 62186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220821000000 20220731000000 20326 . kY6CPgpR+XbMPLBGuZrMggV0UXbOovM0W7VkOgE608ohTf+F/So1KlYtv1EUK2Mq8FximolEcsaN 3znGSw3crU3iYcuqqC/K2tqK7XbHkCHyWJNgMm+zoN2IvFSvcHLBtLInEt0aJVR566ZTSOqtY8xZ CanTcD5dvx6gnVIBHAevlETpdRBXy63E4WicdRonSzmFgZH4bFcJrEIk6+RwB6yEgTCLPOB+Ns84 PAuWEpo02H8P3WYGf16ubDdsL2N8mYkqjb0v6oJ0I4u4L5cx7mwq9oCS1xvVbgGaHxoPpfWeow1e f0sHCSwOyuG3ACdtl67uyMvNfNGvHhp5cxh3fg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to j.root-servers.net for ua.es/A
	Received 613 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (613 octets) ;; HEADER SECTION ;; id = 14127 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . agwglWYFjUcoLdTKAtT8UZzlkMrzqOfvmmPX335zWxDJOzNq/wmmu1FTMW9s8Jpe2Wqtb5UBl4F2 fAmoFfMtQw3TEISkjBwOnY7s5Vgd2qUPkeeViCLAhxss/cMbyFm/nBnbMTOynWW2GA03ypuTVbb9 D642VJ2FokG/SYDIuO0EbESjPwIANYko49SL377Y5lKwXDW2x9Ci1j+cjNeX5Jb4faIaMutg4qqX 0XIZW8u0w4ZPgKHGc7275asjCOQ7U6WWDAmID7RZhRgDV8wNOadJf4ENwHLC1efKZruC2l1Y32gK EygwseDrnsVMnHw4+3RGs8InJW1OdgoivH1VNg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to b.root-servers.net for es/DNSKEY
	Received 610 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (610 octets) ;; HEADER SECTION ;; id = 20401 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . agwglWYFjUcoLdTKAtT8UZzlkMrzqOfvmmPX335zWxDJOzNq/wmmu1FTMW9s8Jpe2Wqtb5UBl4F2 fAmoFfMtQw3TEISkjBwOnY7s5Vgd2qUPkeeViCLAhxss/cMbyFm/nBnbMTOynWW2GA03ypuTVbb9 D642VJ2FokG/SYDIuO0EbESjPwIANYko49SL377Y5lKwXDW2x9Ci1j+cjNeX5Jb4faIaMutg4qqX 0XIZW8u0w4ZPgKHGc7275asjCOQ7U6WWDAmID7RZhRgDV8wNOadJf4ENwHLC1efKZruC2l1Y32gK EygwseDrnsVMnHw4+3RGs8InJW1OdgoivH1VNg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN A 194.0.34.53 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN A 204.61.217.1 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN A 194.0.33.53 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to b.root-servers.net for es/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 39739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . agwglWYFjUcoLdTKAtT8UZzlkMrzqOfvmmPX335zWxDJOzNq/wmmu1FTMW9s8Jpe2Wqtb5UBl4F2 fAmoFfMtQw3TEISkjBwOnY7s5Vgd2qUPkeeViCLAhxss/cMbyFm/nBnbMTOynWW2GA03ypuTVbb9 D642VJ2FokG/SYDIuO0EbESjPwIANYko49SL377Y5lKwXDW2x9Ci1j+cjNeX5Jb4faIaMutg4qqX 0XIZW8u0w4ZPgKHGc7275asjCOQ7U6WWDAmID7RZhRgDV8wNOadJf4ENwHLC1efKZruC2l1Y32gK EygwseDrnsVMnHw4+3RGs8InJW1OdgoivH1VNg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for es in the . zone
	DS=49852/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20220821200000 20220808190000 20826 . agwglWYFjUcoLdTKAtT8UZzlkMrzqOfvmmPX335zWxDJOzNq/wmmu1FTMW9s8Jpe2Wqtb5UBl4F2 fAmoFfMtQw3TEISkjBwOnY7s5Vgd2qUPkeeViCLAhxss/cMbyFm/nBnbMTOynWW2GA03ypuTVbb9 D642VJ2FokG/SYDIuO0EbESjPwIANYko49SL377Y5lKwXDW2x9Ci1j+cjNeX5Jb4faIaMutg4qqX 0XIZW8u0w4ZPgKHGc7275asjCOQ7U6WWDAmID7RZhRgDV8wNOadJf4ENwHLC1efKZruC2l1Y32gK EygwseDrnsVMnHw4+3RGs8InJW1OdgoivH1VNg== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=49852/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 )`
	Query to c.nic.es for es/DNSKEY
	Received 893 bytes from 194.0.34.53
	;; Response received from 194.0.34.53 (893 octets) ;; HEADER SECTION ;; id = 38728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (4 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119 es. 86400 IN DNSKEY ( 256 3 8 AwEAAd29m8SV08GZ+K5LRBicxc5dfhzFlerqfdHUrNgQ5HGasNbXsSsimugnvxGkkUZWeaoXo1uU YspeyYZHSLRpF1xDzFJNuiTrzGhYnbu7AJ1iVK8FnqxipBRAKJSLfxR99l8tVNohM9UYsK10Zrae HORVPAut9joCjOaaZydNSyEj ) ; Key ID = 48769 es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822040311 20220807230540 49852 es. YEjBmiJjojifABpkm+sPMotqTfP5oeggifS5ZvXdGQWkYaXHvK0McGx/XJS11iHfq/vrDycLFgxx HWdmtyna2LnyffPS5BuNGUBOQ4KcLyoGgbxuVmQ06duYll8/ekntRNAOKbCDjglWYyFXBMihF4o+ zU3RcPnW8sdMWQIuUoN1p1A9BUMnU1+EdxtJCUqA5+wl2IrVRBErInh3VRhB5AEDa8p2BCLjpBXB jbdrIBR9rVYc4vDZtWAsHZzN7D0k6PcXDn6EFE8mB9CpDjKF6fR/7reHwMOcydV7jL3PixVaUptI GCEOTEchMfQpe8LpL5Sbs6ZMGf7l3c2uXSfZAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAd29m8SV08GZ+K5LRBicxc5dfhzFlerqfdHUrNgQ5HGasNbXsSsimugnvxGkkUZWeaoXo1uU YspeyYZHSLRpF1xDzFJNuiTrzGhYnbu7AJ1iVK8FnqxipBRAKJSLfxR99l8tVNohM9UYsK10Zrae HORVPAut9joCjOaaZydNSyEj ) ; Key ID = 48769`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852`
	DNSKEY=49852/SEP is now in the chain-of-trust
	DS=49852/SHA-256 verifies DNSKEY=49852/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822040311 20220807230540 49852 es. YEjBmiJjojifABpkm+sPMotqTfP5oeggifS5ZvXdGQWkYaXHvK0McGx/XJS11iHfq/vrDycLFgxx HWdmtyna2LnyffPS5BuNGUBOQ4KcLyoGgbxuVmQ06duYll8/ekntRNAOKbCDjglWYyFXBMihF4o+ zU3RcPnW8sdMWQIuUoN1p1A9BUMnU1+EdxtJCUqA5+wl2IrVRBErInh3VRhB5AEDa8p2BCLjpBXB jbdrIBR9rVYc4vDZtWAsHZzN7D0k6PcXDn6EFE8mB9CpDjKF6fR/7reHwMOcydV7jL3PixVaUptI GCEOTEchMfQpe8LpL5Sbs6ZMGf7l3c2uXSfZAA== )`
	RRSIG=49852 and DNSKEY=49852/SEP verifies the DNSKEY RRset
	DNSKEY=7119 is now in the chain-of-trust
	DNSKEY=48769 is now in the chain-of-trust
	Query to g.nic.es for ua.es/A
	Received 753 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (753 octets) ;; HEADER SECTION ;; id = 42830 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ua.es. 86400 IN NS tabarca.cpd.ua.es. ua.es. 86400 IN NS aitana.cpd.ua.es. ua.es. 86400 IN NS sun.rediris.es. ua.es. 86400 IN NS chico.rediris.es. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813204322 20220730190447 48769 es. Vs8Pvh02Iac8K+irOyaet23vJUOnIk2ufSrAcst/yVBx4jKQq/eW9bgOU+AelWKOjcB9fTb595Db M60UPMcIv3VEYo4LiWbrVW4Afh4nYkRJnn0qCvoMCtixBs0uzfxwcdFv8nLeK9+jS0LJAV9PW0LB met4dJodyt+S6y1fp68= ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 0iom9h2rtdp1fliig2sqtqpa4tv6ivdv NS DS RRSIG ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813115855 20220730150508 48769 es. JJtgBriCW30qaFqZIJxbXETspXeuGcW7tSsszU4pLCZQgtT6XCWO6+HUw3h/YSoIXzzizAOYTf53 Po5XXB1GCsktY69Ch/lG6aftNza4fnlS584a1wVIv5XfP9NSryvbuv771Hs8oyFbjDm3tTs2IFaJ K1WmWJrEjdgwhZYDcQk= ) ;; ADDITIONAL SECTION (7 records) tabarca.cpd.ua.es. 86400 IN A 193.145.233.6 aitana.cpd.ua.es. 86400 IN A 193.145.233.5 chico.rediris.es. 86400 IN A 162.219.54.2 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.nic.es for ua.es/DNSKEY
	Received 753 bytes from 194.0.34.53
	;; Response received from 194.0.34.53 (753 octets) ;; HEADER SECTION ;; id = 40593 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ua.es. 86400 IN NS sun.rediris.es. ua.es. 86400 IN NS tabarca.cpd.ua.es. ua.es. 86400 IN NS aitana.cpd.ua.es. ua.es. 86400 IN NS chico.rediris.es. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813204322 20220730190447 48769 es. Vs8Pvh02Iac8K+irOyaet23vJUOnIk2ufSrAcst/yVBx4jKQq/eW9bgOU+AelWKOjcB9fTb595Db M60UPMcIv3VEYo4LiWbrVW4Afh4nYkRJnn0qCvoMCtixBs0uzfxwcdFv8nLeK9+jS0LJAV9PW0LB met4dJodyt+S6y1fp68= ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 0iom9h2rtdp1fliig2sqtqpa4tv6ivdv NS DS RRSIG ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813115855 20220730150508 48769 es. JJtgBriCW30qaFqZIJxbXETspXeuGcW7tSsszU4pLCZQgtT6XCWO6+HUw3h/YSoIXzzizAOYTf53 Po5XXB1GCsktY69Ch/lG6aftNza4fnlS584a1wVIv5XfP9NSryvbuv771Hs8oyFbjDm3tTs2IFaJ K1WmWJrEjdgwhZYDcQk= ) ;; ADDITIONAL SECTION (7 records) tabarca.cpd.ua.es. 86400 IN A 193.145.233.6 aitana.cpd.ua.es. 86400 IN A 193.145.233.5 chico.rediris.es. 86400 IN A 162.219.54.2 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ua.es

ua.es

	Checking DS between es and ua.es
	Query to h.nic.es for ua.es/DS
	Received 752 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (752 octets) ;; HEADER SECTION ;; id = 11960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813204322 20220730190447 48769 es. Vs8Pvh02Iac8K+irOyaet23vJUOnIk2ufSrAcst/yVBx4jKQq/eW9bgOU+AelWKOjcB9fTb595Db M60UPMcIv3VEYo4LiWbrVW4Afh4nYkRJnn0qCvoMCtixBs0uzfxwcdFv8nLeK9+jS0LJAV9PW0LB met4dJodyt+S6y1fp68= ) es. 86400 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2022080806 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 86400 IN RRSIG ( SOA 8 1 86400 20220822232735 20220808190503 48769 es. BKCbGgb/NJCn2vix1fj3pL3gWxAWZJ0wZ+vYiPUNSu760kQ+5DIrd0+KgnHlPV2C+vlAMiuyPvSp /ti9r2ZclY5N69zwEI4CAVV02Qm6Ey1iJa2wv7RBYIl+pRwoBsKo3OqGlUhdfyOnAbqD+GtgdwWY 7azB8lsec2SMGNHM528= ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec 0iom9h2rtdp1fliig2sqtqpa4tv6ivdv NS DS RRSIG ) 0io78af193n13bqlsv4u7a19g4k2fr1f.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220813115855 20220730150508 48769 es. JJtgBriCW30qaFqZIJxbXETspXeuGcW7tSsszU4pLCZQgtT6XCWO6+HUw3h/YSoIXzzizAOYTf53 Po5XXB1GCsktY69Ch/lG6aftNza4fnlS584a1wVIv5XfP9NSryvbuv771Hs8oyFbjDm3tTs2IFaJ K1WmWJrEjdgwhZYDcQk= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	No DS records found for ua.es in the es zone
	Query to tabarca.cpd.ua.es for ua.es/DNSKEY
	Received 86 bytes from 193.145.233.6
	;; Response received from 193.145.233.6 (86 octets) ;; HEADER SECTION ;; id = 18848 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to chico.rediris.es for ua.es/A
	Received 86 bytes from 162.219.54.2
	;; Response received from 162.219.54.2 (86 octets) ;; HEADER SECTION ;; id = 51758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	chico.rediris.es is authoritative for ua.es
	Query to tabarca.cpd.ua.es for ua.es/SOA
	Received 200 bytes from 193.145.233.6
	;; Response received from 193.145.233.6 (200 octets) ;; HEADER SECTION ;; id = 30677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS chico.rediris.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ua.es. 7200 IN NS aitana.cpd.ua.es. ua.es. 7200 IN NS sun.rediris.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to aitana.cpd.ua.es for ua.es/SOA
	Received 200 bytes from 193.145.233.5
	;; Response received from 193.145.233.5 (200 octets) ;; HEADER SECTION ;; id = 29143 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 3 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS sun.rediris.es. ua.es. 7200 IN NS chico.rediris.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ua.es. 7200 IN NS aitana.cpd.ua.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to sun.rediris.es for ua.es/SOA
	Received 200 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (200 octets) ;; HEADER SECTION ;; id = 11983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN SOA ;; ANSWER SECTION (1 record) ua.es. 7200 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (4 records) ua.es. 7200 IN NS aitana.cpd.ua.es. ua.es. 7200 IN NS tabarca.cpd.ua.es. ua.es. 7200 IN NS sun.rediris.es. ua.es. 7200 IN NS chico.rediris.es. ;; ADDITIONAL SECTION (3 records) aitana.cpd.ua.es. 7200 IN A 193.145.233.5 tabarca.cpd.ua.es. 7200 IN A 193.145.233.6 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to chico.rediris.es for ua.es/A
	Received 86 bytes from 162.219.54.2
	;; Response received from 162.219.54.2 (86 octets) ;; HEADER SECTION ;; id = 51337 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to tabarca.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.6
	;; Response received from 193.145.233.6 (86 octets) ;; HEADER SECTION ;; id = 18763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	tabarca.cpd.ua.es is authoritative for ua.es
	Query to tabarca.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.6
	;; Response received from 193.145.233.6 (86 octets) ;; HEADER SECTION ;; id = 37629 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to sun.rediris.es for ua.es/A
	Received 86 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (86 octets) ;; HEADER SECTION ;; id = 20512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sun.rediris.es is authoritative for ua.es
	Query to sun.rediris.es for ua.es/A
	Received 86 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (86 octets) ;; HEADER SECTION ;; id = 61072 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

ua.es

	Query to aitana.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.5
	;; Response received from 193.145.233.5 (86 octets) ;; HEADER SECTION ;; id = 49492 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	aitana.cpd.ua.es is authoritative for ua.es
	Query to aitana.cpd.ua.es for ua.es/A
	Received 86 bytes from 193.145.233.5
	;; Response received from 193.145.233.5 (86 octets) ;; HEADER SECTION ;; id = 34623 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ua.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) ua.es. 600 IN SOA ( aitana.cpd.ua.es. root.aitana.cpd.ua.es. 2022063002 ;serial 14400 ;refresh 7200 ;retry 2592000 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ua.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: