DNSSEC Debugger - unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

Domain Name:

Time: 2024-09-15 09:55:42 UTC

Analyzing DNSSEC problems for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 61635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to b.root-servers.net for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 602 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 602 octets ;; HEADER SECTION ;; id = 54770 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240928050000 20240915040000 20038 . fBieQ8fEBTTs8AjqKIcQLfwLqRqyptqenOiGXap6x2C0AmQ/WGBaPTR8WKbtaa8AtnuR1YQ5WUgy q7dba+5/HG/gK33DuImXZLJPxMe5PDHgRyVWT9eiaf7EO1jWCE7xZKcPdmIts8bOlMVpmwUQCs16 73g+KXkQSwE5NqWD8E9nSrnW4lBMjaGdoHGZRT8fqgBFKJeu1KO4XqBjeCw4vXYD2MrynszsMqGj 4pgZQAOJSc6C1AZ/Arwl0y//vX6h+7eNMK3sM3pThJUFNedbElZ3XnFVvaLtBaq+SAj50G58bvGs RAKPEU7R/0ExEkphhLXAF6GQIaRBJro+nVE/cQ== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for nl/DNSKEY
	Received 556 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 556 octets ;; HEADER SECTION ;; id = 56441 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240928050000 20240915040000 20038 . fBieQ8fEBTTs8AjqKIcQLfwLqRqyptqenOiGXap6x2C0AmQ/WGBaPTR8WKbtaa8AtnuR1YQ5WUgy q7dba+5/HG/gK33DuImXZLJPxMe5PDHgRyVWT9eiaf7EO1jWCE7xZKcPdmIts8bOlMVpmwUQCs16 73g+KXkQSwE5NqWD8E9nSrnW4lBMjaGdoHGZRT8fqgBFKJeu1KO4XqBjeCw4vXYD2MrynszsMqGj 4pgZQAOJSc6C1AZ/Arwl0y//vX6h+7eNMK3sM3pThJUFNedbElZ3XnFVvaLtBaq+SAj50G58bvGs RAKPEU7R/0ExEkphhLXAF6GQIaRBJro+nVE/cQ== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; { "EDNS-VERSION": 0 }
	Found child zone nl

	Checking DS between . and nl
	Query to h.root-servers.net for nl/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 50129 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20240928050000 20240915040000 20038 . fBieQ8fEBTTs8AjqKIcQLfwLqRqyptqenOiGXap6x2C0AmQ/WGBaPTR8WKbtaa8AtnuR1YQ5WUgy q7dba+5/HG/gK33DuImXZLJPxMe5PDHgRyVWT9eiaf7EO1jWCE7xZKcPdmIts8bOlMVpmwUQCs16 73g+KXkQSwE5NqWD8E9nSrnW4lBMjaGdoHGZRT8fqgBFKJeu1KO4XqBjeCw4vXYD2MrynszsMqGj 4pgZQAOJSc6C1AZ/Arwl0y//vX6h+7eNMK3sM3pThJUFNedbElZ3XnFVvaLtBaq+SAj50G58bvGs RAKPEU7R/0ExEkphhLXAF6GQIaRBJro+nVE/cQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20240928050000 20240915040000 20038 . fBieQ8fEBTTs8AjqKIcQLfwLqRqyptqenOiGXap6x2C0AmQ/WGBaPTR8WKbtaa8AtnuR1YQ5WUgy q7dba+5/HG/gK33DuImXZLJPxMe5PDHgRyVWT9eiaf7EO1jWCE7xZKcPdmIts8bOlMVpmwUQCs16 73g+KXkQSwE5NqWD8E9nSrnW4lBMjaGdoHGZRT8fqgBFKJeu1KO4XqBjeCw4vXYD2MrynszsMqGj 4pgZQAOJSc6C1AZ/Arwl0y//vX6h+7eNMK3sM3pThJUFNedbElZ3XnFVvaLtBaq+SAj50G58bvGs RAKPEU7R/0ExEkphhLXAF6GQIaRBJro+nVE/cQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 289 bytes from 194.0.28.53
	;; Response received from [194.0.28.53] 289 octets ;; HEADER SECTION ;; id = 50766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 13 PIVqsuxJaNMDg0je4gT3F1fTacH3SyNiex2ru9Q0napOFObSkBhzrVysOqAv012b2rS5enIzZT8+ g0pQEHOaDQ== ) ; Key ID = 38714 nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240924233516 20240910100825 17153 nl. 3eeENWlfonKD54R+AVKyK6OjEoa9xEIJ0/mT3RyoXVBnJPbZtT6X/ohQGjOD3ROJzHn9DIBUslX7 kJQflhLSEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 13 PIVqsuxJaNMDg0je4gT3F1fTacH3SyNiex2ru9Q0napOFObSkBhzrVysOqAv012b2rS5enIzZT8+ g0pQEHOaDQ== ) ; Key ID = 38714`
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240924233516 20240910100825 17153 nl. 3eeENWlfonKD54R+AVKyK6OjEoa9xEIJ0/mT3RyoXVBnJPbZtT6X/ohQGjOD3ROJzHn9DIBUslX7 kJQflhLSEA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=38714 is now in the chain-of-trust
	Query to ns3.dns.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 414 bytes from 194.0.25.24
	;; Response received from [194.0.25.24] 414 octets ;; HEADER SECTION ;; id = 18290 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20240925024059 20240910220822 38714 nl. 8NpZ99Kr+LlOQ9kcvQ85UCfRiYNoEXwXgP5/UDd5Qx6xeR884zJ0XixWWJ+15vQrPJcAr4f6tePv lyxr9XbW1Q== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; { "EDNS-VERSION": 0 }
	Query to ns4.dns.nl for sidnlabs.nl/DNSKEY
	Received 377 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 377 octets ;; HEADER SECTION ;; id = 16385 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) sidnlabs.nl. 3600 IN NS ns1.sidnlabs.nl. sidnlabs.nl. 3600 IN NS ns3.sidn.nl. sidnlabs.nl. 3600 IN NS ns5.sidn.nl. sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20240925024059 20240910220822 38714 nl. 8NpZ99Kr+LlOQ9kcvQ85UCfRiYNoEXwXgP5/UDd5Qx6xeR884zJ0XixWWJ+15vQrPJcAr4f6tePv lyxr9XbW1Q== ) ;; ADDITIONAL SECTION (7 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ns5.sidn.nl. 3600 IN A 145.40.68.55 ns5.sidn.nl. 3600 IN AAAA 2604:1380:4601:6300::1 ;; { "EDNS-VERSION": 0 }
	Found child zone sidnlabs.nl

sidnlabs.nl

	Checking DS between nl and sidnlabs.nl
	Query to ns4.dns.nl for sidnlabs.nl/DS
	Received 186 bytes from 185.159.199.200
	;; Response received from [185.159.199.200] 186 octets ;; HEADER SECTION ;; id = 31066 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f ) sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20240925024059 20240910220822 38714 nl. 8NpZ99Kr+LlOQ9kcvQ85UCfRiYNoEXwXgP5/UDd5Qx6xeR884zJ0XixWWJ+15vQrPJcAr4f6tePv lyxr9XbW1Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for sidnlabs.nl in the nl zone
	DS=11261/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DS 13 2 3600 20240925024059 20240910220822 38714 nl. 8NpZ99Kr+LlOQ9kcvQ85UCfRiYNoEXwXgP5/UDd5Qx6xeR884zJ0XixWWJ+15vQrPJcAr4f6tePv lyxr9XbW1Q== )`
	RRSIG=38714 and DNSKEY=38714 verifies the DS RRset
	DS=11261/SHA-256 is now in the chain-of-trust
	`sidnlabs.nl. 3600 IN DS ( 11261 13 2 cc791ba77b860ed3a08f3e4cd0810c78420af2c9c8471e27757603dd1939665f )`
	Query to ns1.sidnlabs.nl for sidnlabs.nl/DNSKEY
	Received 227 bytes from 94.198.159.8
	;; Response received from [94.198.159.8] 227 octets ;; HEADER SECTION ;; id = 19729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; Key ID = 11261 sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240924030240 20240910024510 11261 sidnlabs.nl. 28lF/minin6Lykpg4eaZzNSD3WCfsUvDIpY1qqfH2WfRNCy9ZNp2/VU9/hqNbk+MDl9f5Wl89C6e 8xj6BZJcAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for sidnlabs.nl
	`sidnlabs.nl. 3600 IN DNSKEY ( 257 3 13 Pv+xZDOZj/d3mGLPppY5Z/fATmA7FMjTIxiqHUeHAzzJh4LqCZX35BT4UdnqtupebkHToavzaXyB 5zjV0s7o3w== ) ; Key ID = 11261`
	DNSKEY=11261/SEP is now in the chain-of-trust
	DS=11261/SHA-256 verifies DNSKEY=11261/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240924030240 20240910024510 11261 sidnlabs.nl. 28lF/minin6Lykpg4eaZzNSD3WCfsUvDIpY1qqfH2WfRNCy9ZNp2/VU9/hqNbk+MDl9f5Wl89C6e 8xj6BZJcAg== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DNSKEY RRset
	Query to ns3.sidn.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 1196 bytes from 194.0.30.2
	;; Response received from [194.0.30.2] 1196 octets ;; HEADER SECTION ;; id = 50625 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20240926080345 20240912073009 11261 sidnlabs.nl. jLyh4faoTRVVKmsu+Bcy5bgHbasXNwewN7aijA7pAXPbvf5ldZ3rcRRe6oFL2kD461+u4jzX1sC/ tzocC0xduw== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240929084040 20240915083804 11261 sidnlabs.nl. vjRe7BpeBfraArypP2tkbcyrJcXiLBI2KFoa30FC7+c9fQZMx3gJTRfydtvJ+9OM2G++MdxR+J3s GUzgPmW8cQ== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240929084040 20240915083804 11261 sidnlabs.nl. t/Yt68R3+MJ/9/wwXYaqRmYnV/k0EwoQ4pHb86wsfRBrHBHpGaEKSstDNAPw0nVY5zkR+fYLzkko WV3nAQJjpw== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240928091404 20240914083518 11261 sidnlabs.nl. CSguFZhYXFmhnBki/7mBHifXrE70LuGLK/M485rjm/ok2H/AP1eCaimW3IszkuiXDDC/6YT9QT8O 8lPOfJ960g== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240928091404 20240914083518 11261 sidnlabs.nl. Rw0ZYTBi/YqR+6/nfrhuV/aiKDO3LugSU+m19EGR6crIfMzK9i/HkQAFIy5bPjIb1yZldKvdjP1T jFEDvNlL4A== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240920204320 20240906194628 11261 sidnlabs.nl. 1I5gRE1ARvRA8nt4T0SnOeiFcBpGx8wQvogZAhZyn11LBtkJAMq35X/BDnnpOxZNbIhyIWpx0SML SjIiMOkVEQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240920204320 20240906194628 11261 sidnlabs.nl. ZQJ+7VOi65/gd/bA0zRApwclrWgNecE+/tB1RfMHgCnFtjh7jUYps+hZFmJej87p4u1OwEmjq9+u IQPMNglOug== ) ;; { "EDNS-VERSION": 0 }
	Query to ns5.sidn.nl for wb.sidnlabs.nl/DNSKEY
	Received 1162 bytes from 145.40.68.55
	;; Response received from [145.40.68.55] 1162 octets ;; HEADER SECTION ;; id = 37846 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20240926080345 20240912073009 11261 sidnlabs.nl. jLyh4faoTRVVKmsu+Bcy5bgHbasXNwewN7aijA7pAXPbvf5ldZ3rcRRe6oFL2kD461+u4jzX1sC/ tzocC0xduw== ) ;; ADDITIONAL SECTION (17 records) knot.sidnlabs.nl. 3600 IN A 94.198.159.27 knot.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:27 nsd4.sidnlabs.nl. 3600 IN A 94.198.159.33 nsd4.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:33 bind9.sidnlabs.nl. 3600 IN A 94.198.159.39 bind9.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:39 yadifa.sidnlabs.nl. 3600 IN A 94.198.159.28 yadifa.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:28 powerdns.sidnlabs.nl. 3600 IN A 94.198.159.26 powerdns.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:26 knot.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240929084040 20240915083804 11261 sidnlabs.nl. vjRe7BpeBfraArypP2tkbcyrJcXiLBI2KFoa30FC7+c9fQZMx3gJTRfydtvJ+9OM2G++MdxR+J3s GUzgPmW8cQ== ) knot.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240929084040 20240915083804 11261 sidnlabs.nl. t/Yt68R3+MJ/9/wwXYaqRmYnV/k0EwoQ4pHb86wsfRBrHBHpGaEKSstDNAPw0nVY5zkR+fYLzkko WV3nAQJjpw== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240928091404 20240914083518 11261 sidnlabs.nl. CSguFZhYXFmhnBki/7mBHifXrE70LuGLK/M485rjm/ok2H/AP1eCaimW3IszkuiXDDC/6YT9QT8O 8lPOfJ960g== ) nsd4.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240928091404 20240914083518 11261 sidnlabs.nl. Rw0ZYTBi/YqR+6/nfrhuV/aiKDO3LugSU+m19EGR6crIfMzK9i/HkQAFIy5bPjIb1yZldKvdjP1T jFEDvNlL4A== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( A 13 3 3600 20240920204320 20240906194628 11261 sidnlabs.nl. 1I5gRE1ARvRA8nt4T0SnOeiFcBpGx8wQvogZAhZyn11LBtkJAMq35X/BDnnpOxZNbIhyIWpx0SML SjIiMOkVEQ== ) bind9.sidnlabs.nl. 3600 IN RRSIG ( AAAA 13 3 3600 20240920204320 20240906194628 11261 sidnlabs.nl. ZQJ+7VOi65/gd/bA0zRApwclrWgNecE+/tB1RfMHgCnFtjh7jUYps+hZFmJej87p4u1OwEmjq9+u IQPMNglOug== ) ;; { "EDNS-VERSION": 0 }
	Found child zone wb.sidnlabs.nl

wb.sidnlabs.nl

	Checking DS between sidnlabs.nl and wb.sidnlabs.nl
	Query to ns3.sidn.nl for wb.sidnlabs.nl/DS
	Received 198 bytes from 194.0.30.2
	;; Response received from [194.0.30.2] 198 octets ;; HEADER SECTION ;; id = 35300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 ) wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20240926080345 20240912073009 11261 sidnlabs.nl. jLyh4faoTRVVKmsu+Bcy5bgHbasXNwewN7aijA7pAXPbvf5ldZ3rcRRe6oFL2kD461+u4jzX1sC/ tzocC0xduw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for wb.sidnlabs.nl in the sidnlabs.nl zone
	DS=44704/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`wb.sidnlabs.nl. 3600 IN RRSIG ( DS 13 3 3600 20240926080345 20240912073009 11261 sidnlabs.nl. jLyh4faoTRVVKmsu+Bcy5bgHbasXNwewN7aijA7pAXPbvf5ldZ3rcRRe6oFL2kD461+u4jzX1sC/ tzocC0xduw== )`
	RRSIG=11261 and DNSKEY=11261/SEP verifies the DS RRset
	DS=44704/SHA-256 is now in the chain-of-trust
	`wb.sidnlabs.nl. 3600 IN DS ( 44704 8 2 93406c21117f65fd24e7a689541a210e5bd093f3e9c6f7ce43cdb4867c7f6736 )`
	Query to powerdns.sidnlabs.nl for wb.sidnlabs.nl/DNSKEY
	Received 897 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 897 octets ;; HEADER SECTION ;; id = 59014 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (3 records) wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704 wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== ) wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for wb.sidnlabs.nl
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 257 3 8 AwEAAc1cmNHVLDEzIQNLgskgkzY0MYUKCq3h+2NBOToCLHiXIe1I91r/8H0RwUr/5mma4C13BnsY 5c3U8eL2Z2CqwFH/B3D7/R4UqhUepU7nafcr0zfGTuUmx5Egcvht39zcqM8jHxdeyatBCUq8c7k3 aOnXfANEgAJLCbSCDoy6ZUzWE4Y81bWHo6seCa+ciZ/hu7kuwDrNtdCJU+itFvMHx9xplHet/Olx yJB4K1cevXb2OXuRy+wsqX58u/KiGrY/ylQTYyzGQ1JINkj3eekyX4wOPiTRBmiiK9830YcZjQph RYTz7yhv3gzkp26SOgeo40xJuSGwn0eGZkM2nBRT2Bk= ) ; Key ID = 44704`
	`wb.sidnlabs.nl. 60 IN DNSKEY ( 256 3 8 AwEAAegq4GK6fqxM8o78keKd+WvXhTNwrAMB26ifngEpJpdaBYkFDlOFxVr3ei7QaifPgObqc1wB hIzWPCe+c0ucP+pOGeR/NiUHGc7fAamjv5T0FtFlg0c9d9qjwq9mPI7H5zavTg2obaM4pyaAQFFE yhUuK1B85LiHdGozYCPAnrlSOGGN1dW664yaT9gebS6z69rFJSA16S9tndR+CXedC7XN+luKIm1c obn0S26OqRbeifxooHb7uU0NHnO/L5Dg28duevlTVDv6/fcv4igwBdCJcUYI8e5r7MtmSceWA6OL Qqp35v0uoN6jTI9kLJBWVOMN+WZxafeIse29mWlavaM= ) ; Key ID = 48378`
	DNSKEY=44704/SEP is now in the chain-of-trust
	DS=44704/SHA-256 verifies DNSKEY=44704/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`wb.sidnlabs.nl. 60 IN RRSIG ( DNSKEY 8 3 60 20300101000000 20201218103317 44704 wb.sidnlabs.nl. eUDVQoKy431ShKUPphjKC7mZWXriipgvfcDKZm81luyk+0Xf4QmKNiTAf97100rwVWMl4MWg573V dS7AmVvj5DGgWB2/Z6KPpZ+3kMVHaK70l2ZaQa1QlJ7yp/Ai4eQWusgoVt50B2IeDDrh0K3Nset5 2HOhmlc5kA/2DBjIWS0GN6bBzN9RrseLRT3xgKvRJSjLb+IF6exf4LYPQ29X/vC8Oek+TeKZFqe8 CKLohJxpQN8idZl3GGhmsh843kIQcnVL2Pz2lVrfhL5R4us0rbf0x+k8iKdQlV775rSqL05qgG9u qyT+Qoc83I0vO9zn5EBT27Xu3XUf4O5boMj4wA== )`
	RRSIG=44704 and DNSKEY=44704/SEP verifies the DNSKEY RRset
	DNSKEY=48378 is now in the chain-of-trust
	Query to yadifa.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	All Queries to yadifa.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A timed out or failed
	Query to nsd4.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 611 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 611 octets ;; HEADER SECTION ;; id = 19582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	All Queries to yadifa.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY timed out or failed
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 387 octets ;; HEADER SECTION ;; id = 49440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/NS
	Received 341 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 341 octets ;; HEADER SECTION ;; id = 51114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. i0kgrR1tgaalzyNZq7rza72lr84rLyLeioiUXs9EIKhUQEba8a/nFkFHo9N8mKRjFoHlh/bLIfSB fHlKotKr2TaRlgOBw9OwQyzVbXgWyIK9r1OY5m+rX90XZnMdp2Fxi+JFjdnWGFUXql4ya1YbxbcV xzwYfv+JSEnY3VJ8vCM= ) bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, nsd4.sidnlabs.nl, powerdns.sidnlabs.nl

bad-dnssec.wb.sidnlabs.nl

	Checking DS between wb.sidnlabs.nl and bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DS
	Received 404 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 404 octets ;; HEADER SECTION ;; id = 42854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc ) bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bad-dnssec.wb.sidnlabs.nl in the wb.sidnlabs.nl zone
	DS=27185/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 4 3600 20300101000000 20201218103317 48378 wb.sidnlabs.nl. 1sEnS8wqKEL3KpJAY+CkWsesGRJ4E0rCcCmALKj4z6Z9IvN9CMmpXsGvU37wDFOzwevOLwz40sVs f9U5rS/AH1P+b+i91jVuGApFNArahsjZJnfONJMvOUHT9OITdvEmok3yP3VDfmqU2jbApJg0BoWU G4/BGFTzRzm8xdRHF2co8G82PrTLJ78P7jWK/qDX27rVcXDCbgNokdVe3UZ7S/HCMKEWx6F9ljoe f2h7X2nl5kzd97Utb56fnfkmhG+4M+DbcJduZK60mGK/wMb0935qCjAYz8hUQ75NlPK/a9zJpHIA vEfef+wK3sGcv0s5Git8QkewcDs+sFhslCHUJw== )`
	RRSIG=48378 and DNSKEY=48378 verifies the DS RRset
	DS=27185/SHA-256 is now in the chain-of-trust
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 27185 8 2 076c4b5de832ba6f1cb79f6ffb4fd737e58b8300f0c0038995cddd48d69849bc )`
	Query to bind9.sidnlabs.nl for bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 387 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 387 octets ;; HEADER SECTION ;; id = 55703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185 bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for bad-dnssec.wb.sidnlabs.nl
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbfQELQlAATOLTYitQiK3MQQtmXh5DxiX4gHwfiioEgjfGn2UDi/MqszcmMWdQcAPPEqNVgO 9Fyu/UT0hw6FtuSzs2odbVn4Gms37sYUUyY0ETNQfsmjAdRggouV6JroPUBzkqrV+cvXTdLWtMnK /yi4GYFjvccrkzOWnD2wYQ73 ) ; Key ID = 27185`
	DNSKEY=27185/SEP is now in the chain-of-trust
	DS=27185/SHA-256 verifies DNSKEY=27185/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 4 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. O0TZYzY55FYvJkJYZjSm9ZfM5Szs+OoQBmNG7z8bblVsHcVyipgMV9H872bAcYVCj7aCIfPBxFGL d36ZSUBctrF+WqMNiBNANrJ08G6zk/CRlheEIdUKXZnLKFeq1zSLAw3/SLowi8mVCQJ9Zf0uqaUt YaIsMyPUERA17Ov13R8= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 622 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 622 octets ;; HEADER SECTION ;; id = 31934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 393 octets ;; HEADER SECTION ;; id = 32282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; Key ID = 31694 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 358 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 358 octets ;; HEADER SECTION ;; id = 31978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. iXv7hXJy+xAt6y6pJkl/pjcvP2Z6b6tlr911JPeNzX8Ez2+OEXLySaR0nG1Vt6Ob9AwbnqcZxiux kdErB+kyLUOu9roA8gNYh0w5nA5tkrlvcUbDTsZDlDuSKdCMgLzsI6AvYyTUH9P1UKKhtvAh7b54 ir3B7uGHfVxsR2PZX+8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.bad-dnssec.wb.sidnlabs.nl nameservers: bind9.sidnlabs.nl, powerdns.sidnlabs.nl, knot.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl

ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between bad-dnssec.wb.sidnlabs.nl and ok.bad-dnssec.wb.sidnlabs.nl
	Query to nsd4.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 290 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 290 octets ;; HEADER SECTION ;; id = 52130 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f ) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.bad-dnssec.wb.sidnlabs.nl in the bad-dnssec.wb.sidnlabs.nl zone
	DS=31694/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 5 3600 20300101000000 20201218103315 27185 bad-dnssec.wb.sidnlabs.nl. Yh9eS8Tz2QjxpcuIHV2GZ05KJy7im8/KrZeXyT0m3CC6gYTzjOoN+kn4dfEXEHWYdykDV6RyE3HT kUQB2REyxIngXFsHD3IDgjmCaoRR/WlZJk5x/D3oJpN8qnQomMu/2JjFku5EsVHWNMHOBU9faeIU 5X9oRilvAx+5skDKXTM= )`
	RRSIG=27185 and DNSKEY=27185/SEP verifies the DS RRset
	DS=31694/SHA-256 is now in the chain-of-trust
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 31694 8 2 47781311f1183123c91b0fe481341403c999b4e21cd5ec3bb237cf4041a01a7f )`
	Query to nsd4.sidnlabs.nl for ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 393 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 393 octets ;; HEADER SECTION ;; id = 63395 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; Key ID = 31694 ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.bad-dnssec.wb.sidnlabs.nl
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAc183fEMhqPov7rRYfBWkp8IvbX4ZKevyMuUhAxkO2a/xH/e7sjYtMgFVBHP3SqV5Fr0Yi7O qo1eF5eX6qAyfjmSX8dqTyPlk4OHoKC6Ld6VvkpGFnL6T2uGCNgN5OmyEn1i3t60enxhiI+TgnYF 5xnWDS7kFuyZeQJoBD13kEOR ) ; Key ID = 31694`
	DNSKEY=31694/SEP is now in the chain-of-trust
	DS=31694/SHA-256 verifies DNSKEY=31694/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 5 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. fA6qe35dLCeSukPje7c3XU4W5HQ4zPHV8BrBJT0bw44yoWJfKwaAWOMEP5TpOfvjMKslELVrO9ub WjzZabHjihTqZrmG2+i1w39t0Yd3RSFox8leAEVXu48OOowicFQhQKwDBesaCOFZ9SvwpxryRnYd POq0rgU+hmsGLray1ro= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DNSKEY RRset
	Query to nsd4.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 611 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 611 octets ;; HEADER SECTION ;; id = 15706 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to yadifa.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Timeout querying yadifa.sidnlabs.nl/94.198.159.28 for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	All Queries to yadifa.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY timed out or failed
	Query to bind9.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 399 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 399 octets ;; HEADER SECTION ;; id = 20166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; Key ID = 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ok.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 353 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 353 octets ;; HEADER SECTION ;; id = 48457 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS knot.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS nsd4.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS bind9.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS yadifa.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS powerdns.sidnlabs.nl. ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. ctyXSLheu+Jnc20lbuebFDiaFNL9FfD5+oTcDt5z9JMg4XO0z8HGC4BODmzOqgDh4dOsWkObHeVs 6Ry47QpMlrezQMHoyuSOx6CoPB5yHDUhUTByL7B0XDZAVYXEJiu5mANSqovaTLd+t8IdBR0WGssU bif+zOcRaQH7nMPsixI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers: knot.sidnlabs.nl, nsd4.sidnlabs.nl, bind9.sidnlabs.nl, yadifa.sidnlabs.nl, powerdns.sidnlabs.nl

ok.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.bad-dnssec.wb.sidnlabs.nl and ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 296 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 296 octets ;; HEADER SECTION ;; id = 54982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 57125 8 2 647b9360e8db4111a78db90c1a66f2468a2a90e2f26654b0983eac51f9e6fbed ) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. hzFOQnhjt1JSCHTs/vmYNPjuPvvHOPG6zXh3XPrnB1+MMuqawZ7VxczsYqbINZxMii0ONesuDcJW qKql7MKqp7SZELVaNTjNdQXYlhtD6ZgHgLH8wfj66SiXzW8xC5Fyz4ZasqfmxwY9Iy+XVrbPeWkR Tq/LDmPCvvjOx4SRG5o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ok.ok.bad-dnssec.wb.sidnlabs.nl in the ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=57125/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 6 3600 20300101000000 20201218103315 31694 ok.bad-dnssec.wb.sidnlabs.nl. hzFOQnhjt1JSCHTs/vmYNPjuPvvHOPG6zXh3XPrnB1+MMuqawZ7VxczsYqbINZxMii0ONesuDcJW qKql7MKqp7SZELVaNTjNdQXYlhtD6ZgHgLH8wfj66SiXzW8xC5Fyz4ZasqfmxwY9Iy+XVrbPeWkR Tq/LDmPCvvjOx4SRG5o= )`
	RRSIG=31694 and DNSKEY=31694/SEP verifies the DS RRset
	DS=57125/SHA-256 is now in the chain-of-trust
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 57125 8 2 647b9360e8db4111a78db90c1a66f2468a2a90e2f26654b0983eac51f9e6fbed )`
	Query to powerdns.sidnlabs.nl for ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 399 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 399 octets ;; HEADER SECTION ;; id = 19369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; Key ID = 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ok.ok.bad-dnssec.wb.sidnlabs.nl
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcVXRw7VbUH9wYMQpCoMjeJoJT7xCr1XsETTJFIoXeXhAabe9qbtzERsLtsnjsHUIccmwCJh 3XnBACR8XSN5UK9zQU+7wnpwqkMUjTMpPl8EYrMktebkjPyQs4XugkhsO+yjzri9hE52FSMqemy6 tz7fgAg11gWgUvoCWMvFNmeR ) ; Key ID = 57125`
	DNSKEY=57125/SEP is now in the chain-of-trust
	DS=57125/SHA-256 verifies DNSKEY=57125/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 8 6 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. Dr+9VIRy94X1THQ6l+ayUPNMJneHQJiZeWRbmyQvsvkE+U7Vzv8wTAsjBmmHHks3Gb6NDPoiPn/1 c5YFqn2Rpp4AU/G9srwPPXKh8u3ys5bPalz6YkLRlkgYhOt49uf4+oEE6xpUYvmZR+V7AKIFt2kc hNnWJ++Vue9gzjqGfWY= )`
	RRSIG=57125 and DNSKEY=57125/SEP verifies the DNSKEY RRset
	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 622 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 622 octets ;; HEADER SECTION ;; id = 9330 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to knot.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 433 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 433 octets ;; HEADER SECTION ;; id = 63362 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 200 AwEAAd5CrjY5eMX3tKOOdemC4fR4b8Thb01jFWGbzMTVH36Ymgor46UFavArbSdbRQgpKMmLMVli 6picWy99e0IP/59HevFwx1s58u43uOMsq6mxvfKuiFRSdR0EW3LrrJRQtrJMrc1WgDu1zNdiYSLx OvWaRi3z8ACO137yRT/4nUw1 ) ; Key ID = 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. K4AVWm4HVjQD0UOR3L4ZqlM6NfLDZYrWJhqQ+3/HpqvVfeqhjC5hngbwoGqOqB0bPzF83NTw+VEI Ur23xV/+Ys/3GMSWi1CAfDwLtG+chhQ3HmoLoGCY/QJ5yon0TEb0a4a857basmfm4ne6t5WOefK7 yYD/8H37ixwNsTada6U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Attempting to learn nameservers for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/NS
	Received 398 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 398 octets ;; HEADER SECTION ;; id = 18915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN NS ;; ANSWER SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers: powerdns.sidnlabs.nl, bind9.sidnlabs.nl, knot.sidnlabs.nl, nsd4.sidnlabs.nl, yadifa.sidnlabs.nl

unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Checking DS between ok.ok.bad-dnssec.wb.sidnlabs.nl and unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Query to powerdns.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/DS
	Received 316 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 316 octets ;; HEADER SECTION ;; id = 45775 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DS ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 3434 200 2 456b4553bd58528bd5243988770e5a2ae309dd408f71d41a921ac9f870eafe54 ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. d3nuJpzS+4gQ8ycKld6zXmYdpbiNovGX5g8gAfoj+HKWHxxVRFgVQzfRcHxQGOXzm9LZPrKA8x/O w6zi2/VoP+UZOu5perzgXBgH+KldYX3dVCN7Lz37wUm8bfc2wbe+skBjPExMpXWyVW7lKCw0OX4R UsVFtq6QqyMEGbL5cY0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl in the ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	DS=3434/SHA-256 has algorithm 200
	Found 1 RRSIGs over DS RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DS 8 7 3600 20300101000000 20201218103315 57125 ok.ok.bad-dnssec.wb.sidnlabs.nl. d3nuJpzS+4gQ8ycKld6zXmYdpbiNovGX5g8gAfoj+HKWHxxVRFgVQzfRcHxQGOXzm9LZPrKA8x/O w6zi2/VoP+UZOu5perzgXBgH+KldYX3dVCN7Lz37wUm8bfc2wbe+skBjPExMpXWyVW7lKCw0OX4R UsVFtq6QqyMEGbL5cY0= )`
	RRSIG=57125 and DNSKEY=57125/SEP verifies the DS RRset
	DS=3434/SHA-256 is now in the chain-of-trust
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DS ( 3434 200 2 456b4553bd58528bd5243988770e5a2ae309dd408f71d41a921ac9f870eafe54 )`
	Query to knot.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/DNSKEY
	Received 433 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 433 octets ;; HEADER SECTION ;; id = 6033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN DNSKEY ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN DNSKEY ( 257 3 200 AwEAAd5CrjY5eMX3tKOOdemC4fR4b8Thb01jFWGbzMTVH36Ymgor46UFavArbSdbRQgpKMmLMVli 6picWy99e0IP/59HevFwx1s58u43uOMsq6mxvfKuiFRSdR0EW3LrrJRQtrJMrc1WgDu1zNdiYSLx OvWaRi3z8ACO137yRT/4nUw1 ) ; Key ID = 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. K4AVWm4HVjQD0UOR3L4ZqlM6NfLDZYrWJhqQ+3/HpqvVfeqhjC5hngbwoGqOqB0bPzF83NTw+VEI Ur23xV/+Ys/3GMSWi1CAfDwLtG+chhQ3HmoLoGCY/QJ5yon0TEb0a4a857basmfm4ne6t5WOefK7 yYD/8H37ixwNsTada6U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	DNSKEY=3434/SEP algorithm type 200 is not supported by this tool
	No DNSKEY records found
	DS=3434/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( DNSKEY 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. K4AVWm4HVjQD0UOR3L4ZqlM6NfLDZYrWJhqQ+3/HpqvVfeqhjC5hngbwoGqOqB0bPzF83NTw+VEI Ur23xV/+Ys/3GMSWi1CAfDwLtG+chhQ3HmoLoGCY/QJ5yon0TEb0a4a857basmfm4ne6t5WOefK7 yYD/8H37ixwNsTada6U= )`
	RRSIG=3434 algorithm type 200 is not supported by this tool
	The DNSKEY RRset was not signed by any trusted keys
	Query to knot.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 301 octets ;; HEADER SECTION ;; id = 26312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	knot.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 338 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 338 octets ;; HEADER SECTION ;; id = 34672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 0u12E6mYnWs7vtyY/Kuynr4M6RlkyP5zsi5SMvFTn7IjwD5JpOiEn3Hh0mHqWw79Hf7Ac1Y1ANQ7 nLOfUny1P4o6+RuNBoueEM3HY3ZD8RUUH0cMQIyZCAgoN+gOd73WLQwTdhOCybpSNuDki+QxvsKJ Le5Ax2B8bzLJaQVHtwI= ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 653 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 653 octets ;; HEADER SECTION ;; id = 1764 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 0u12E6mYnWs7vtyY/Kuynr4M6RlkyP5zsi5SMvFTn7IjwD5JpOiEn3Hh0mHqWw79Hf7Ac1Y1ANQ7 nLOfUny1P4o6+RuNBoueEM3HY3ZD8RUUH0cMQIyZCAgoN+gOd73WLQwTdhOCybpSNuDki+QxvsKJ Le5Ax2B8bzLJaQVHtwI= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsd4.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/SOA
	Received 642 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 642 octets ;; HEADER SECTION ;; id = 64783 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN SOA ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN SOA ( bind9.sidnlabs.nl. hostmaster.sidnlabs.nl. 1608287593 ;serial 3600 ;refresh 600 ;retry 1814400 ;expire 3600 ;minimum ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( SOA 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 0u12E6mYnWs7vtyY/Kuynr4M6RlkyP5zsi5SMvFTn7IjwD5JpOiEn3Hh0mHqWw79Hf7Ac1Y1ANQ7 nLOfUny1P4o6+RuNBoueEM3HY3ZD8RUUH0cMQIyZCAgoN+gOd73WLQwTdhOCybpSNuDki+QxvsKJ Le5Ax2B8bzLJaQVHtwI= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to knot.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.27
	;; Response received from [94.198.159.27] 301 octets ;; HEADER SECTION ;; id = 13955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= )`
	RRSIG=3434 algorithm type 200 is not supported by this tool

unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to powerdns.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 301 octets ;; HEADER SECTION ;; id = 41687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	powerdns.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to powerdns.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 301 bytes from 94.198.159.26
	;; Response received from [94.198.159.26] 301 octets ;; HEADER SECTION ;; id = 6586 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= )`
	RRSIG=3434 algorithm type 200 is not supported by this tool

unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to nsd4.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 611 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 611 octets ;; HEADER SECTION ;; id = 49721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nsd4.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to nsd4.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 611 bytes from 94.198.159.33
	;; Response received from [94.198.159.33] 611 octets ;; HEADER SECTION ;; id = 30563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= )`
	RRSIG=3434 algorithm type 200 is not supported by this tool

unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 622 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 622 octets ;; HEADER SECTION ;; id = 55006 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	bind9.sidnlabs.nl is authoritative for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl
	Found RRSIG signed by unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl zone
	Query to bind9.sidnlabs.nl for unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl/A
	Received 622 bytes from 94.198.159.39
	;; Response received from [94.198.159.39] 622 octets ;; HEADER SECTION ;; id = 64034 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. IN A ;; ANSWER SECTION (2 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN A 94.198.159.39 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= ) ;; AUTHORITY SECTION (6 records) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( bind9.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( knot.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( nsd4.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( powerdns.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN NS ( yadifa.sidnlabs.nl. ) unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( NS 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. iwl+5d5iaztOEMk8GV9tKQVNCyqQ5KyDnMSgBtEuJ4RSiKVkZAgimS7mDDSpzgiMe0J02s1ceDMW oJANZyyuZIPUlW4jqiEgn7GRCix8XLKt6n83Xk32lmpmHeDJSUSWXu9dZY+PtXxR2LSe1ruj0T6l lD83T3mLtsvBeK0GdBI= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl A RR has value 94.198.159.39
	Found 1 RRSIGs over A RRset
	`unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. 3600 IN RRSIG ( A 200 7 3600 20300101000000 20201218103315 3434 unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl. ejL20rLFlqUsJcLUJu/Vp2mWpGmMV16ZggtKoHOo9u/RdY0WO7rFJNVX7L95SPw80KBYXMpyZLnk Gjfm8MnR74f5xpRCY/xY4PHq8aQcrSRyk/7DlP0VE8E5LUxNrGCkwG7z+Whp0c34ZTXRRoKbWc1f tk7Vu+e+vQMOUnajxHY= )`
	RRSIG=3434 algorithm type 200 is not supported by this tool

unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl

No response from unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unknownalgorithm.ok.ok.bad-dnssec.wb.sidnlabs.nl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: