DNSSEC Analyzer

Domain Name:

Time: 2022-05-20 09:44:26 UTC, NTP stratum 16

Analyzing DNSSEC problems for um.es

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 55698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAak/ZU9wDNQD7XTAGTDkn32UR8I6auRDekbGky+yyWKdUHmwAJv90YHCUTib8aVBgNgbxkee ZGRx3W4+XhMZbfUr5fMwmD3u9P2yzJpbRtjGNM/XZvzGs9HHNymz3Bp851anHZfNy6pJud265/XM KzFlAY8sMJjum0hvx/DuCDELLyhsvdfOD9rHM93UXO0bcAjvI8tjZsGI+Pfp9KdxF9vS/sAzpFXK sldix+e6xv8rRS6WPg2LAooxF+eO5DgFSilYmnyCK4VPJ7ntjD/8m0bs128ZT1eY3oXCbojDv59l LAgrdGSbcVxQF2KHoUHDmkOC5BzG/1xRtW4v/3y4/H8= ) ; Key ID = 47671`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220601000000 20220511000000 20326 . PkWuz6E+VDmH80HQbpO7cChnMFj9YYs8wS5FP/HOcNBodxhvzpR/9mC58GJIpX+w8gZ/O6GyzgeR FCXWm1+LSBOAmRih7B9xBLiyfieHnz3Knwe8hMW8kDjnJmMjO7SV2rX4kus4dGqRFwkdUgjuraGe RIqhXLUpXb7AVaMOoM08XvykBcuyB7pTrVb9MeFVPLhXjYHghf1NKXaKcUzLkWG3LCA6crWiePRV pPG4xbYAvjWEt6SV6PwpWWctYORuErx6R5IQ0XSNSP4jK2XmR0J9mUYMCxa0YOa1Rk2oaFWsU0FQ 7fHhdndW8y2+Ol+tF6xWAsgEGXCYWqjLsXAPIg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=47671 is now in the chain-of-trust
	Query to c.root-servers.net for um.es/A
	Received 613 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (613 octets) ;; HEADER SECTION ;; id = 20750 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS a.nic.es. es. 172800 IN NS g.nic.es. es. 172800 IN NS c.nic.es. es. 172800 IN NS h.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; ADDITIONAL SECTION (9 records) a.nic.es. 172800 IN A 194.69.254.1 c.nic.es. 172800 IN A 194.0.34.53 g.nic.es. 172800 IN A 204.61.217.1 h.nic.es. 172800 IN A 194.0.33.53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 c.nic.es. 172800 IN AAAA 2001:678:44::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 h.nic.es. 172800 IN AAAA 2001:678:40::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for es/DNSKEY
	Received 612 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (612 octets) ;; HEADER SECTION ;; id = 24976 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) es. 172800 IN NS c.nic.es. es. 172800 IN NS a.nic.es. es. 172800 IN NS h.nic.es. es. 172800 IN NS g.nic.es. es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; ADDITIONAL SECTION (9 records) h.nic.es. 172800 IN A 194.0.33.53 g.nic.es. 172800 IN A 204.61.217.1 c.nic.es. 172800 IN A 194.0.34.53 a.nic.es. 172800 IN A 194.69.254.1 h.nic.es. 172800 IN AAAA 2001:678:40::53 g.nic.es. 172800 IN AAAA 2001:500:14:7001:ad::1 c.nic.es. 172800 IN AAAA 2001:678:44::53 a.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone es

	Checking DS between . and es
	Query to c.root-servers.net for es/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (366 octets) ;; HEADER SECTION ;; id = 18512 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DS ;; ANSWER SECTION (2 records) es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 ) es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for es in the . zone
	DS=49852/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`es. 86400 IN RRSIG ( DS 8 1 86400 20220602050000 20220520040000 47671 . MKmcHYrKID0IEo5119pMhVyIsHMXsYLNoXmWW1pmgTNRzY0maqM0WBgbc6mzXWvWZ1Unit7D5gnP lw4zzl+7ptWDkNKgqahZRhXKaR6v2heSO2zNHA342N+S4iQlOvG64mG3x83O2GnYvtiavW6Pnzez b1kH580HNQ96NMVMRV+g74xP1V8ed2HaMdy4sgoIuZqGZK6iulC1S/owMB7M7fsSGrzmrynT5eIW gjCjUw+Uhgo9dYcYWJgPgnKetgNWOuuCxYnj8bURJAfjFJD9BHqVA9GhBdhuuJiUCIWIOHZv4Uue sD/J8j59VWzsRqTcVOXemSLJ0xaBeYWACdB7cg== )`
	RRSIG=47671 and DNSKEY=47671 verifies the DS RRset
	DS=49852/SHA-256 is now in the chain-of-trust
	`es. 86400 IN DS ( 49852 8 2 d620d9b2db89deac2719014558be3818d962a8128f0880eb4bd7c7ae387d5c17 )`
	Query to g.nic.es for es/DNSKEY
	Received 893 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (893 octets) ;; HEADER SECTION ;; id = 49739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; es. IN DNSKEY ;; ANSWER SECTION (4 records) es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119 es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610 es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852 es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220602021230 20220518190502 49852 es. YCSDTA84d6UYLP8UGfsyodMyopB9xWGWt9kevX4Db2K/YWT9tWruUCxFTJLaySa921renq/DBsFp Sl9/z6D8ykVsrn/2oWmxugbbEruJZDo0gWyAm5IPfqjyBHR+CTLZAjw0KIrtHI87ckmBXE723XYQ MrJkERx5y6tRJZ69vJW4aqm5XsOXSpgORufwVxZMnkFA6m0k2M4mXUGalqRuJ53rbnwKF3N4aIab CkFt20seUUX2GALTKdmnVIH8FVcbYiQG+KWhMiACDe25Jr7g9dKPmMS4RLX97rllSwEypX18bs9j VrsDDolNTtvZxNEhHlJPlsNELTV8XN/kr4GFOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for es
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAczANOcf1QeD+Cqmn9jSzn5rAljWB8107meLobD5fFbHhX+PrUG6gTjuGKRiWn7+/v/q/nVP qwCuvmElJIkzRM1Y/a4nb39CtP34Afr89QDO/qVgvpmralzORp1yQrIhPGvwOoQD6by5FsSa0Wxx 5vpdxDimFTnpbM/Vc++FYZLF ) ; Key ID = 7119`
	`es. 86400 IN DNSKEY ( 256 3 8 AwEAAcibZzduvZ26hrvakVLxrgIWUubkjv3gzE2z4wmihnDTZB9V5fwGNNXuZEZIWv1fF/KBAT80 mjPZVDJHkgdaQ81B6SDSJJKqDFNUwUqEPKRJ/rpsZTPm8baD+LCfmXnugvLV6rLvAt2XKv54Y9sf yNWKMjes/xxO5XH2WOuMpuOx ) ; Key ID = 27610`
	`es. 86400 IN DNSKEY ( 257 3 8 AwEAAbkCrc6NyZhJenNI2e4Um4h7DrhkfKT5HocPrfBbC6qkeuMbaMC7SKfiJ7W+r7HBBMujotOp UUX4ZTvQhPqWgGfocNRKCspi9qR1u/O3EQ2x51f4dEfpSvz+6+c2JpvDsaXnqKIJMQ6/PkofzHPe 0tYR1918gnz+lB5D6Bo+u/V9PDfBTjpCOzGLWk3U+hlWVigqFOLyb2hcUQi68VIHFXi4YG8JLC78 SB5YY5xKC3w7Te7FiJo4TOV+4BXTuM5dDFP1Gk3csYEClu96SAmIOqjqdxUTxlL9rfgf15Y2g3OM 8a7Qy+WTTflKSupgL0fP7HiQY20wnC+x7hny7IrV6Dc= ) ; Key ID = 49852`
	DNSKEY=49852/SEP is now in the chain-of-trust
	DS=49852/SHA-256 verifies DNSKEY=49852/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`es. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220602021230 20220518190502 49852 es. YCSDTA84d6UYLP8UGfsyodMyopB9xWGWt9kevX4Db2K/YWT9tWruUCxFTJLaySa921renq/DBsFp Sl9/z6D8ykVsrn/2oWmxugbbEruJZDo0gWyAm5IPfqjyBHR+CTLZAjw0KIrtHI87ckmBXE723XYQ MrJkERx5y6tRJZ69vJW4aqm5XsOXSpgORufwVxZMnkFA6m0k2M4mXUGalqRuJ53rbnwKF3N4aIab CkFt20seUUX2GALTKdmnVIH8FVcbYiQG+KWhMiACDe25Jr7g9dKPmMS4RLX97rllSwEypX18bs9j VrsDDolNTtvZxNEhHlJPlsNELTV8XN/kr4GFOw== )`
	RRSIG=49852 and DNSKEY=49852/SEP verifies the DNSKEY RRset
	DNSKEY=7119 is now in the chain-of-trust
	DNSKEY=27610 is now in the chain-of-trust
	Query to h.nic.es for um.es/A
	Received 795 bytes from 194.0.33.53
	;; Response received from 194.0.33.53 (795 octets) ;; HEADER SECTION ;; id = 1100 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) um.es. 86400 IN NS dns2.um.es. um.es. 86400 IN NS chico.rediris.es. um.es. 86400 IN NS sun.rediris.es. um.es. 86400 IN NS dns1.um.es. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec eq51ql8ngd34sc06m3sgn0sibgu88iit NS DS RRSIG ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601082735 20220518141209 7119 es. x523tUHMhBytbmgt1C2bjYUHCMncGJZxvbZgZnjusYOqB2Ckw7Ni1Nebhd4UlQrnSXXqOS2Hwbix TO7+Qg1CWA2rJwFYSZzWwnwhf0r4gDULGpHP4Y8KWH5+HDvR2wbn1M1LoNYNrsuVMmYlGNOlhsak aWStBnJ3gmwx3ulEigQ= ) ;; ADDITIONAL SECTION (9 records) chico.rediris.es. 86400 IN A 162.219.54.2 dns2.um.es. 86400 IN A 155.54.1.2 dns1.um.es. 86400 IN A 155.54.1.1 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 dns2.um.es. 86400 IN AAAA 2001:720:1710:1::2 dns1.um.es. 86400 IN AAAA 2001:720:1710:1::1 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Query to a.nic.es for um.es/DNSKEY
	Received 795 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (795 octets) ;; HEADER SECTION ;; id = 55876 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) um.es. 86400 IN NS sun.rediris.es. um.es. 86400 IN NS dns1.um.es. um.es. 86400 IN NS dns2.um.es. um.es. 86400 IN NS chico.rediris.es. brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec eq51ql8ngd34sc06m3sgn0sibgu88iit NS DS RRSIG ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601082735 20220518141209 7119 es. x523tUHMhBytbmgt1C2bjYUHCMncGJZxvbZgZnjusYOqB2Ckw7Ni1Nebhd4UlQrnSXXqOS2Hwbix TO7+Qg1CWA2rJwFYSZzWwnwhf0r4gDULGpHP4Y8KWH5+HDvR2wbn1M1LoNYNrsuVMmYlGNOlhsak aWStBnJ3gmwx3ulEigQ= ) ;; ADDITIONAL SECTION (9 records) chico.rediris.es. 86400 IN A 162.219.54.2 dns2.um.es. 86400 IN A 155.54.1.2 dns1.um.es. 86400 IN A 155.54.1.1 sun.rediris.es. 86400 IN A 199.184.182.1 chico.rediris.es. 86400 IN AAAA 2620:10a:80eb::2 dns2.um.es. 86400 IN AAAA 2001:720:1710:1::2 dns1.um.es. 86400 IN AAAA 2001:720:1710:1::1 sun.rediris.es. 86400 IN AAAA 2620:171:808::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone um.es

um.es

	Checking DS between es and um.es
	Query to g.nic.es for um.es/DS
	Received 752 bytes from 204.61.217.1
	;; Response received from 204.61.217.1 (752 octets) ;; HEADER SECTION ;; id = 42459 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec brjdq11oqs499kgci9vkf1isb7o4j23t NS SOA RRSIG DNSKEY NSEC3PARAM ) brjctgicmdfp1k5vu4qcvsrj2mracr84.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601123041 20220518141209 7119 es. MntHZeih8E7Dhl1PIXh0uYB+DkYFpJp56XKtjoP2JjSPoWLHfAe65/zndLmRzc7Jtu9EF21dUv1q YKlcv5XOqNicZA5XqrFJnhp5dCPUg6Glv3ywlzamkEYdZlEM3P3Si57bx5PY0qHuUCsQOgtzTmHV uaR8KQx28n2Zid7qxts= ) es. 86400 IN SOA ( ns1.nic.es. hostmaster.nic.es. 2022052003 ;serial 7200 ;refresh 7200 ;retry 2592000 ;expire 86400 ;minimum ) es. 86400 IN RRSIG ( SOA 8 1 86400 20220603022338 20220520070453 7119 es. GYUj/+CgOfM96Aiixz8javXe/Sdu+fxNQZ+AqWglI+ntVEwdVajFAodHNb3LGeGIY0jmESWkAK1M IJYgI81zxMM/9MePj+wZLLac8bVJ8jCqnsc6//U+OLfldF11cc2hIhqa8EvUlgfu1XB0p/iQL6It pMAMYXdyOvQ1Wr4UJjg= ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN NSEC3 ( 1 1 5 23b9090ddfe218ec eq51ql8ngd34sc06m3sgn0sibgu88iit NS DS RRSIG ) eq4daq19nb9re30pc7pqmmjg0scn3pap.es. 86400 IN RRSIG ( NSEC3 8 2 86400 20220601082735 20220518141209 7119 es. x523tUHMhBytbmgt1C2bjYUHCMncGJZxvbZgZnjusYOqB2Ckw7Ni1Nebhd4UlQrnSXXqOS2Hwbix TO7+Qg1CWA2rJwFYSZzWwnwhf0r4gDULGpHP4Y8KWH5+HDvR2wbn1M1LoNYNrsuVMmYlGNOlhsak aWStBnJ3gmwx3ulEigQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for um.es in the es zone
	Query to sun.rediris.es for um.es/DNSKEY
	Received 86 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (86 octets) ;; HEADER SECTION ;; id = 26396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) um.es. 7200 IN SOA ( dns1.um.es. hostmaster.um.es. 2010123979 ;serial 7200 ;refresh 720 ;retry 2419200 ;expire 7200 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to dns2.um.es for um.es/A
	Received 50 bytes from 155.54.1.2
	;; Response received from 155.54.1.2 (50 octets) ;; HEADER SECTION ;; id = 50408 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option:
	dns2.um.es is authoritative for um.es
	Query to chico.rediris.es for um.es/SOA
	Received 86 bytes from 162.219.54.2
	;; Response received from 162.219.54.2 (86 octets) ;; HEADER SECTION ;; id = 11612 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN SOA ;; ANSWER SECTION (1 record) um.es. 28800 IN SOA ( dns1.um.es. hostmaster.um.es. 2010123979 ;serial 7200 ;refresh 720 ;retry 2419200 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to sun.rediris.es for um.es/SOA
	Received 253 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (253 octets) ;; HEADER SECTION ;; id = 24377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN SOA ;; ANSWER SECTION (1 record) um.es. 28800 IN SOA ( dns1.um.es. hostmaster.um.es. 2010123979 ;serial 7200 ;refresh 720 ;retry 2419200 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (4 records) um.es. 28800 IN NS sun.rediris.es. um.es. 28800 IN NS dns1.um.es. um.es. 28800 IN NS dns2.um.es. um.es. 28800 IN NS chico.rediris.es. ;; ADDITIONAL SECTION (5 records) dns1.um.es. 28800 IN A 155.54.1.1 dns2.um.es. 28800 IN A 155.54.1.2 dns1.um.es. 28800 IN AAAA 2001:720:1710:1::1 dns2.um.es. 28800 IN AAAA 2001:720:1710:1::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to dns1.um.es for um.es/SOA
	Received 86 bytes from 155.54.1.1
	;; Response received from 155.54.1.1 (86 octets) ;; HEADER SECTION ;; id = 5051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN SOA ;; ANSWER SECTION (1 record) um.es. 28800 IN SOA ( dns1.um.es. hostmaster.um.es. 2010123979 ;serial 7200 ;refresh 720 ;retry 2419200 ;expire 7200 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option:
	Query to dns2.um.es for um.es/A
	Received 50 bytes from 155.54.1.2
	;; Response received from 155.54.1.2 (50 octets) ;; HEADER SECTION ;; id = 37503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option:
	um.es A RR has value 155.54.212.103
	No RRSIGs found

um.es

	Query to chico.rediris.es for um.es/A
	Received 50 bytes from 162.219.54.2
	;; Response received from 162.219.54.2 (50 octets) ;; HEADER SECTION ;; id = 24920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	chico.rediris.es is authoritative for um.es
	Query to chico.rediris.es for um.es/A
	Received 50 bytes from 162.219.54.2
	;; Response received from 162.219.54.2 (50 octets) ;; HEADER SECTION ;; id = 10037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	um.es A RR has value 155.54.212.103
	No RRSIGs found

um.es

	Query to sun.rediris.es for um.es/A
	Received 222 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (222 octets) ;; HEADER SECTION ;; id = 39785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (4 records) um.es. 28800 IN NS sun.rediris.es. um.es. 28800 IN NS dns1.um.es. um.es. 28800 IN NS dns2.um.es. um.es. 28800 IN NS chico.rediris.es. ;; ADDITIONAL SECTION (5 records) dns1.um.es. 28800 IN A 155.54.1.1 dns2.um.es. 28800 IN A 155.54.1.2 dns1.um.es. 28800 IN AAAA 2001:720:1710:1::1 dns2.um.es. 28800 IN AAAA 2001:720:1710:1::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	sun.rediris.es is authoritative for um.es
	Query to sun.rediris.es for um.es/A
	Received 222 bytes from 199.184.182.1
	;; Response received from 199.184.182.1 (222 octets) ;; HEADER SECTION ;; id = 33516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (4 records) um.es. 28800 IN NS sun.rediris.es. um.es. 28800 IN NS dns1.um.es. um.es. 28800 IN NS dns2.um.es. um.es. 28800 IN NS chico.rediris.es. ;; ADDITIONAL SECTION (5 records) dns1.um.es. 28800 IN A 155.54.1.1 dns2.um.es. 28800 IN A 155.54.1.2 dns1.um.es. 28800 IN AAAA 2001:720:1710:1::1 dns2.um.es. 28800 IN AAAA 2001:720:1710:1::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	um.es A RR has value 155.54.212.103
	No RRSIGs found

um.es

	Query to dns1.um.es for um.es/A
	Received 50 bytes from 155.54.1.1
	;; Response received from 155.54.1.1 (50 octets) ;; HEADER SECTION ;; id = 26262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option:
	dns1.um.es is authoritative for um.es
	Query to dns1.um.es for um.es/A
	Received 50 bytes from 155.54.1.1
	;; Response received from 155.54.1.1 (50 octets) ;; HEADER SECTION ;; id = 44539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option: ;; QUESTION SECTION (1 record) ;; um.es. IN A ;; ANSWER SECTION (1 record) um.es. 28800 IN A 155.54.212.103 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 512 ;; option:
	um.es A RR has value 155.54.212.103
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test um.es at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: