DNSSEC Analyzer - waarneming.nl

Domain Name:

Time: 2023-12-07 14:17:12 UTC, NTP stratum 16

Analyzing DNSSEC problems for waarneming.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 1162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to l.root-servers.net for waarneming.nl/A
	Received 567 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (567 octets) ;; HEADER SECTION ;; id = 16350 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220050000 20231207040000 46780 . j6QYl3K49U+nI+OEJfFgOmnH5VPNL8S+OwMaQvRtiBCfiqk3X9gsQVWRA0gTm8Q/dQqBrwXeoch0 fRDK4GX5m6lVXeiKdJbBCEEr6tjYEY2bko8FBmFMkcPVPQJj0rB9vsecQiWoxliEHf1OTflYKep8 HPmRH+UYzY1rm3RXGg5Fd6Sg+iHCh8AeZrnkoYK0wRnmm3Dni7VcTOSNBIzL95WmNXNCevRGCEH+ w0/bfQUTJBZmqDSLCeFnqFhiAqU/jryodlJN36cAEgfIKmpB5C1V8W+jC1zeG9BIrAt4SJC4YK/P tD5hdqpwhl2fdH6UBBYH32FdzzhG/xMwRNMHxg== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns4.dns.nl. 172800 IN A 185.159.199.200 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for nl/DNSKEY
	Received 558 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (558 octets) ;; HEADER SECTION ;; id = 22769 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns4.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220050000 20231207040000 46780 . j6QYl3K49U+nI+OEJfFgOmnH5VPNL8S+OwMaQvRtiBCfiqk3X9gsQVWRA0gTm8Q/dQqBrwXeoch0 fRDK4GX5m6lVXeiKdJbBCEEr6tjYEY2bko8FBmFMkcPVPQJj0rB9vsecQiWoxliEHf1OTflYKep8 HPmRH+UYzY1rm3RXGg5Fd6Sg+iHCh8AeZrnkoYK0wRnmm3Dni7VcTOSNBIzL95WmNXNCevRGCEH+ w0/bfQUTJBZmqDSLCeFnqFhiAqU/jryodlJN36cAEgfIKmpB5C1V8W+jC1zeG9BIrAt4SJC4YK/P tD5hdqpwhl2fdH6UBBYH32FdzzhG/xMwRNMHxg== ) ;; ADDITIONAL SECTION (7 records) ns4.dns.nl. 172800 IN A 185.159.199.200 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns4.dns.nl. 172800 IN AAAA 2620:10a:80ac::200 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to j.root-servers.net for nl/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (366 octets) ;; HEADER SECTION ;; id = 24503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20231220050000 20231207040000 46780 . j6QYl3K49U+nI+OEJfFgOmnH5VPNL8S+OwMaQvRtiBCfiqk3X9gsQVWRA0gTm8Q/dQqBrwXeoch0 fRDK4GX5m6lVXeiKdJbBCEEr6tjYEY2bko8FBmFMkcPVPQJj0rB9vsecQiWoxliEHf1OTflYKep8 HPmRH+UYzY1rm3RXGg5Fd6Sg+iHCh8AeZrnkoYK0wRnmm3Dni7VcTOSNBIzL95WmNXNCevRGCEH+ w0/bfQUTJBZmqDSLCeFnqFhiAqU/jryodlJN36cAEgfIKmpB5C1V8W+jC1zeG9BIrAt4SJC4YK/P tD5hdqpwhl2fdH6UBBYH32FdzzhG/xMwRNMHxg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for nl in the . zone
	DS=17153/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20231220050000 20231207040000 46780 . j6QYl3K49U+nI+OEJfFgOmnH5VPNL8S+OwMaQvRtiBCfiqk3X9gsQVWRA0gTm8Q/dQqBrwXeoch0 fRDK4GX5m6lVXeiKdJbBCEEr6tjYEY2bko8FBmFMkcPVPQJj0rB9vsecQiWoxliEHf1OTflYKep8 HPmRH+UYzY1rm3RXGg5Fd6Sg+iHCh8AeZrnkoYK0wRnmm3Dni7VcTOSNBIzL95WmNXNCevRGCEH+ w0/bfQUTJBZmqDSLCeFnqFhiAqU/jryodlJN36cAEgfIKmpB5C1V8W+jC1zeG9BIrAt4SJC4YK/P tD5hdqpwhl2fdH6UBBYH32FdzzhG/xMwRNMHxg== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=17153/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 17153 13 2 c5dfddc91e7532562a35f3c2cd30823894be08f20101f1abf45c8ab9739f3f49 )`
	Query to ns4.dns.nl for nl/DNSKEY
	Received 289 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (289 octets) ;; HEADER SECTION ;; id = 29891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153 nl. 3600 IN DNSKEY ( 256 3 13 p5PJ4tnaGMiU/IoC8TvY1v4P7F4QENHetjr3az49n3FW5ipK7deJDpy0zNG64oKfqT0n31s7WWbx UX6WN5hYmQ== ) ; Key ID = 52707 nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231218232042 20231204183725 17153 nl. OzQ9ieGpNvD3HQDFSmLttKe5lCi+8K3DqOYI/AABJq2q0WBDJFHEsXld1V8r2IWP1yG7B5VN0rP0 7ylx41B6JA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 13 aeDdFmc/JLPyva7Y4bS2SFbfWmxaiSrnqwgs+D1PKSPSruxIRH+6gHLhJ4XYIzrSaT3uk6rsx3c5 jV8U4B8O+g== ) ; Key ID = 17153`
	`nl. 3600 IN DNSKEY ( 256 3 13 p5PJ4tnaGMiU/IoC8TvY1v4P7F4QENHetjr3az49n3FW5ipK7deJDpy0zNG64oKfqT0n31s7WWbx UX6WN5hYmQ== ) ; Key ID = 52707`
	DNSKEY=17153/SEP is now in the chain-of-trust
	DS=17153/SHA-256 verifies DNSKEY=17153/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 13 1 3600 20231218232042 20231204183725 17153 nl. OzQ9ieGpNvD3HQDFSmLttKe5lCi+8K3DqOYI/AABJq2q0WBDJFHEsXld1V8r2IWP1yG7B5VN0rP0 7ylx41B6JA== )`
	RRSIG=17153 and DNSKEY=17153/SEP verifies the DNSKEY RRset
	DNSKEY=52707 is now in the chain-of-trust
	Query to ns1.dns.nl for waarneming.nl/A
	Received 328 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (328 octets) ;; HEADER SECTION ;; id = 35014 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) waarneming.nl. 3600 IN NS ns-138.awsdns-17.com. waarneming.nl. 3600 IN NS ns-995.awsdns-60.net. waarneming.nl. 3600 IN NS ns-1436.awsdns-51.org. waarneming.nl. 3600 IN NS ns-2016.awsdns-60.co.uk. waarneming.nl. 3600 IN DS ( 33685 13 2 5109c2abf3116ed4e76c2f7c0f7178b7a970810bd27169465a6f822bf5f59a21 ) waarneming.nl. 3600 IN RRSIG ( DS 13 2 3600 20231219144252 20231205143728 52707 nl. u1L59cKvM4anJ1E7eZJjS65mrIW7LwD/MqC2lJioopra+cdw3ou+Xbg5WHYHJlrvnipOWz18GHlQ lw8noVnekA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.dns.nl for waarneming.nl/DNSKEY
	Received 328 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (328 octets) ;; HEADER SECTION ;; id = 2189 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) waarneming.nl. 3600 IN NS ns-138.awsdns-17.com. waarneming.nl. 3600 IN NS ns-995.awsdns-60.net. waarneming.nl. 3600 IN NS ns-1436.awsdns-51.org. waarneming.nl. 3600 IN NS ns-2016.awsdns-60.co.uk. waarneming.nl. 3600 IN DS ( 33685 13 2 5109c2abf3116ed4e76c2f7c0f7178b7a970810bd27169465a6f822bf5f59a21 ) waarneming.nl. 3600 IN RRSIG ( DS 13 2 3600 20231219144252 20231205143728 52707 nl. u1L59cKvM4anJ1E7eZJjS65mrIW7LwD/MqC2lJioopra+cdw3ou+Xbg5WHYHJlrvnipOWz18GHlQ lw8noVnekA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone waarneming.nl

waarneming.nl

	Checking DS between nl and waarneming.nl
	Query to ns4.dns.nl for waarneming.nl/DS
	Received 188 bytes from 185.159.199.200
	;; Response received from 185.159.199.200 (188 octets) ;; HEADER SECTION ;; id = 8182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN DS ;; ANSWER SECTION (2 records) waarneming.nl. 3600 IN DS ( 33685 13 2 5109c2abf3116ed4e76c2f7c0f7178b7a970810bd27169465a6f822bf5f59a21 ) waarneming.nl. 3600 IN RRSIG ( DS 13 2 3600 20231219144252 20231205143728 52707 nl. u1L59cKvM4anJ1E7eZJjS65mrIW7LwD/MqC2lJioopra+cdw3ou+Xbg5WHYHJlrvnipOWz18GHlQ lw8noVnekA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for waarneming.nl in the nl zone
	DS=33685/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`waarneming.nl. 3600 IN RRSIG ( DS 13 2 3600 20231219144252 20231205143728 52707 nl. u1L59cKvM4anJ1E7eZJjS65mrIW7LwD/MqC2lJioopra+cdw3ou+Xbg5WHYHJlrvnipOWz18GHlQ lw8noVnekA== )`
	RRSIG=52707 and DNSKEY=52707 verifies the DS RRset
	DS=33685/SHA-256 is now in the chain-of-trust
	`waarneming.nl. 3600 IN DS ( 33685 13 2 5109c2abf3116ed4e76c2f7c0f7178b7a970810bd27169465a6f822bf5f59a21 )`
	Query to ns-1436.awsdns-51.org for waarneming.nl/DNSKEY
	Received 391 bytes from 205.251.197.156
	;; Response received from 205.251.197.156 (391 octets) ;; HEADER SECTION ;; id = 19714 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN DNSKEY ;; ANSWER SECTION (4 records) waarneming.nl. 3600 IN DNSKEY ( 256 3 13 Ar6PwzdyRR4995mppBfiuSKQDs35fpFwsvFfBF/csJqpOooBfGzoq3a6lll7rOU3VMek4DjjgWp3 OCzTPRrFfA== ) ; Key ID = 45360 waarneming.nl. 3600 IN DNSKEY ( 256 3 13 puMwd7mSkkbi0WvSq0FAB6aB9moBcS1qduN19bAKCtkY5xubirF3wKuwGV0NaBbyO1/0sKdt0mGa QfnHRdN3SA== ) ; Key ID = 61459 waarneming.nl. 3600 IN DNSKEY ( 257 3 13 VPzqBmlp3ncUNX9MT7shi2R/kvd2dNLRAe5Lt1yrd0WDH33kF5ywMtfXBX0SxQ1KYhlhMQJ+4VHa TZ8pGQ2RsQ== ) ; Key ID = 33685 waarneming.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231207180000 20231207070000 33685 waarneming.nl. 55W16Yx6bXYWqA/oLX6KuG5rCN9CQSY4uJhl8TUVYcVvkMJDgS6bBuoPNcO8NQaF/z8q7Si6/pIW mlPKivnjEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for waarneming.nl
	`waarneming.nl. 3600 IN DNSKEY ( 256 3 13 Ar6PwzdyRR4995mppBfiuSKQDs35fpFwsvFfBF/csJqpOooBfGzoq3a6lll7rOU3VMek4DjjgWp3 OCzTPRrFfA== ) ; Key ID = 45360`
	`waarneming.nl. 3600 IN DNSKEY ( 256 3 13 puMwd7mSkkbi0WvSq0FAB6aB9moBcS1qduN19bAKCtkY5xubirF3wKuwGV0NaBbyO1/0sKdt0mGa QfnHRdN3SA== ) ; Key ID = 61459`
	`waarneming.nl. 3600 IN DNSKEY ( 257 3 13 VPzqBmlp3ncUNX9MT7shi2R/kvd2dNLRAe5Lt1yrd0WDH33kF5ywMtfXBX0SxQ1KYhlhMQJ+4VHa TZ8pGQ2RsQ== ) ; Key ID = 33685`
	DNSKEY=33685/SEP is now in the chain-of-trust
	DS=33685/SHA-256 verifies DNSKEY=33685/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`waarneming.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231207180000 20231207070000 33685 waarneming.nl. 55W16Yx6bXYWqA/oLX6KuG5rCN9CQSY4uJhl8TUVYcVvkMJDgS6bBuoPNcO8NQaF/z8q7Si6/pIW mlPKivnjEg== )`
	RRSIG=33685 and DNSKEY=33685/SEP verifies the DNSKEY RRset
	DNSKEY=45360 is now in the chain-of-trust
	DNSKEY=61459 is now in the chain-of-trust
	Query to ns-995.awsdns-60.net for waarneming.nl/A
	Received 167 bytes from 205.251.195.227
	;; Response received from 205.251.195.227 (167 octets) ;; HEADER SECTION ;; id = 44222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152212 20231207131712 61459 waarneming.nl. 7vcR/h1KSLAHlxyFoS0FKSf78NfdsVhEXa236qea5em6aC7e5HZvYpqex8MnpqRtu9QXm/39yHFJ ElFx16WgHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-995.awsdns-60.net is authoritative for waarneming.nl
	Found RRSIG signed by waarneming.nl zone
	Query to ns-2016.awsdns-60.co.uk for waarneming.nl/SOA
	Received 235 bytes from 205.251.199.224
	;; Response received from 205.251.199.224 (235 octets) ;; HEADER SECTION ;; id = 45479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN SOA ;; ANSWER SECTION (2 records) waarneming.nl. 900 IN SOA ( ns-995.awsdns-60.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) waarneming.nl. 900 IN RRSIG ( SOA 13 2 900 20231207153212 20231207131712 61459 waarneming.nl. 9eYD2ol6mzY6ru/9cbnf7GPdgmvsXGt/gjmGdO4nJCrg2o+LpiKRyS802dKctWt4eefjEl2KaWJS LSGoqQ9LPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-1436.awsdns-51.org for waarneming.nl/SOA
	Received 235 bytes from 205.251.197.156
	;; Response received from 205.251.197.156 (235 octets) ;; HEADER SECTION ;; id = 27696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN SOA ;; ANSWER SECTION (2 records) waarneming.nl. 900 IN SOA ( ns-995.awsdns-60.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) waarneming.nl. 900 IN RRSIG ( SOA 13 2 900 20231207153212 20231207131712 61459 waarneming.nl. iekkP3ANR7wG1oZ0hdoyvz/agjVwJ7Jsg42nAhghUmC4a24MxIYdg2H9YlYOYAhwG6nKhP7V+mFX xO9SZvUGEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-138.awsdns-17.com for waarneming.nl/SOA
	Received 235 bytes from 205.251.192.138
	;; Response received from 205.251.192.138 (235 octets) ;; HEADER SECTION ;; id = 19404 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN SOA ;; ANSWER SECTION (2 records) waarneming.nl. 900 IN SOA ( ns-995.awsdns-60.net. awsdns-hostmaster.amazon.com. 1 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) waarneming.nl. 900 IN RRSIG ( SOA 13 2 900 20231207153212 20231207131712 61459 waarneming.nl. QuQJEzGSYi78ydxm9vHTACH22EFnUa3c/cjV/s9eDe5pVEtvmFYDsmJXScBr31QueiHzSEoBPA9V CdeKSTlVGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-995.awsdns-60.net for waarneming.nl/A
	Received 167 bytes from 205.251.195.227
	;; Response received from 205.251.195.227 (167 octets) ;; HEADER SECTION ;; id = 58598 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152212 20231207131712 61459 waarneming.nl. 3aWCYVLwgaYQIk6wtENOZmHRidiySOoQXcpX8KWjBzxmMupUWIbALDNU2VvUvWN8iLT5VRjdG+Lc e8xOg6GEBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	waarneming.nl A RR has value 145.136.253.21
	Found 1 RRSIGs over A RRset
	`waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152212 20231207131712 61459 waarneming.nl. 3aWCYVLwgaYQIk6wtENOZmHRidiySOoQXcpX8KWjBzxmMupUWIbALDNU2VvUvWN8iLT5VRjdG+Lc e8xOg6GEBg== )`
	RRSIG=61459 and DNSKEY=61459 verifies the A RRset

waarneming.nl

	Query to ns-138.awsdns-17.com for waarneming.nl/A
	Received 167 bytes from 205.251.192.138
	;; Response received from 205.251.192.138 (167 octets) ;; HEADER SECTION ;; id = 46147 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. he2LCOWeV4uk6boyioLuMLWJcLph45OePKTvQQuHzdjeK0hbhKgDgnwJRM4d324TXQp29qwoHW6n wjIQ3oomzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-138.awsdns-17.com is authoritative for waarneming.nl
	Found RRSIG signed by waarneming.nl zone
	Query to ns-138.awsdns-17.com for waarneming.nl/A
	Received 167 bytes from 205.251.192.138
	;; Response received from 205.251.192.138 (167 octets) ;; HEADER SECTION ;; id = 45837 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. MWHe4+2sbhjSjCjlWhmufvOpuvl0iaiaY7lIM3eaA/8e+hD6acXMAeB9KV6LL/OvDtLWe+SV6bph dLJE9UvCFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	waarneming.nl A RR has value 145.136.253.21
	Found 1 RRSIGs over A RRset
	`waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. MWHe4+2sbhjSjCjlWhmufvOpuvl0iaiaY7lIM3eaA/8e+hD6acXMAeB9KV6LL/OvDtLWe+SV6bph dLJE9UvCFA== )`
	RRSIG=61459 and DNSKEY=61459 verifies the A RRset

waarneming.nl

	Query to ns-1436.awsdns-51.org for waarneming.nl/A
	Received 167 bytes from 205.251.197.156
	;; Response received from 205.251.197.156 (167 octets) ;; HEADER SECTION ;; id = 41451 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. UY98zsqdjm8eP1WBscKCnbSMIvU4QvatrRTMcOHUCYSkQXQ1/mOgAjVeCtrIG5p2tAXf9eTC8iSm awlmVNKv7w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-1436.awsdns-51.org is authoritative for waarneming.nl
	Found RRSIG signed by waarneming.nl zone
	Query to ns-1436.awsdns-51.org for waarneming.nl/A
	Received 167 bytes from 205.251.197.156
	;; Response received from 205.251.197.156 (167 octets) ;; HEADER SECTION ;; id = 9407 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. AJjuAffzQk+tPeqwcbSrYq8jfrCQErkzHzqmH5it5ybqMIum0b9Q4nX+s4WfUrTjYMTLdpdOl1SC 7aei3N0m1g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	waarneming.nl A RR has value 145.136.253.21
	Found 1 RRSIGs over A RRset
	`waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. AJjuAffzQk+tPeqwcbSrYq8jfrCQErkzHzqmH5it5ybqMIum0b9Q4nX+s4WfUrTjYMTLdpdOl1SC 7aei3N0m1g== )`
	RRSIG=61459 and DNSKEY=61459 verifies the A RRset

waarneming.nl

	Query to ns-2016.awsdns-60.co.uk for waarneming.nl/A
	Received 167 bytes from 205.251.199.224
	;; Response received from 205.251.199.224 (167 octets) ;; HEADER SECTION ;; id = 33178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. zzUSO842G9QZqTQKXJvreVAcZ74MbYOEetHPD0+g2NA6UxJezyRyWbo3C5xB5WS2lORcEjwYbYaK QMRIA5G8Bw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-2016.awsdns-60.co.uk is authoritative for waarneming.nl
	Found RRSIG signed by waarneming.nl zone
	Query to ns-2016.awsdns-60.co.uk for waarneming.nl/A
	Received 167 bytes from 205.251.199.224
	;; Response received from 205.251.199.224 (167 octets) ;; HEADER SECTION ;; id = 15214 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; waarneming.nl. IN A ;; ANSWER SECTION (2 records) waarneming.nl. 300 IN A 145.136.253.21 waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. ccjida/9SlyFcjjDoBap2QoLmP4/ddFU3Y135ghCO126hPUjs4w5viSXse+tibuJybHx7eDN1mZY vOmlH3olGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	waarneming.nl A RR has value 145.136.253.21
	Found 1 RRSIGs over A RRset
	`waarneming.nl. 300 IN RRSIG ( A 13 2 300 20231207152213 20231207131713 61459 waarneming.nl. ccjida/9SlyFcjjDoBap2QoLmP4/ddFU3Y135ghCO126hPUjs4w5viSXse+tibuJybHx7eDN1mZY vOmlH3olGw== )`
	RRSIG=61459 and DNSKEY=61459 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test waarneming.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: