DNSSEC Debugger - web.girona.cat

Domain Name:

Time: 2024-09-21 01:09:35 UTC

Analyzing DNSSEC problems for web.girona.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1139 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 1139 octets ;; HEADER SECTION ;; id = 46454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	DNSKEY=20038 is now in the chain-of-trust
	Query to i.root-servers.net for web.girona.cat/A
	Received 733 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 733 octets ;; HEADER SECTION ;; id = 6008 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.girona.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . hO14hUVC9G/xG0PNKL6eEX6NHrBD+41pErUyVOGygGXrZfvw/p2QMzri3jObYF63yMAAI419GQCF 4IEGeyQDLGyHq68UFYuGA4N2bxZGYLQ7RshFBHZTizBehWEJQuYcYE5e15PMIIuUpiAqsFaO8WXz eYJ07bTST9MtAcxZ8KzaO2/pyVo9X/j3pP9C7+D0ZHkCa5TyjcwKEa9SeHlJ1uTUojwp7d7wBNFM WSQKmHrBJCMqyQrMEgLdiiVUyRumaZnRsbQHF+RUb4ARIJA5lhU2IiT/kENm7GV3KS8K5KAdR3w3 S8XMjTHQ4dJh+Sxoxom004O9kHDWuQ79KBteVA== ) ;; ADDITIONAL SECTION (11 records) switch.nic.cat. 172800 IN A 130.59.31.29 anyc1.irondns.net. 172800 IN A 195.253.64.4 nsc.nic.de. 172800 IN A 194.0.11.110 ns1.nic.es. 172800 IN A 194.69.254.1 cat.pch.net. 172800 IN A 204.61.216.20 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for cat/DNSKEY
	Received 719 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 719 octets ;; HEADER SECTION ;; id = 60144 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . hO14hUVC9G/xG0PNKL6eEX6NHrBD+41pErUyVOGygGXrZfvw/p2QMzri3jObYF63yMAAI419GQCF 4IEGeyQDLGyHq68UFYuGA4N2bxZGYLQ7RshFBHZTizBehWEJQuYcYE5e15PMIIuUpiAqsFaO8WXz eYJ07bTST9MtAcxZ8KzaO2/pyVo9X/j3pP9C7+D0ZHkCa5TyjcwKEa9SeHlJ1uTUojwp7d7wBNFM WSQKmHrBJCMqyQrMEgLdiiVUyRumaZnRsbQHF+RUb4ARIJA5lhU2IiT/kENm7GV3KS8K5KAdR3w3 S8XMjTHQ4dJh+Sxoxom004O9kHDWuQ79KBteVA== ) ;; ADDITIONAL SECTION (11 records) switch.nic.cat. 172800 IN A 130.59.31.29 anyc1.irondns.net. 172800 IN A 195.253.64.4 nsc.nic.de. 172800 IN A 194.0.11.110 ns1.nic.es. 172800 IN A 194.69.254.1 cat.pch.net. 172800 IN A 204.61.216.20 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ;; { "EDNS-VERSION": 0 }
	Found child zone cat

cat

	Checking DS between . and cat
	Query to m.root-servers.net for cat/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 60558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . hO14hUVC9G/xG0PNKL6eEX6NHrBD+41pErUyVOGygGXrZfvw/p2QMzri3jObYF63yMAAI419GQCF 4IEGeyQDLGyHq68UFYuGA4N2bxZGYLQ7RshFBHZTizBehWEJQuYcYE5e15PMIIuUpiAqsFaO8WXz eYJ07bTST9MtAcxZ8KzaO2/pyVo9X/j3pP9C7+D0ZHkCa5TyjcwKEa9SeHlJ1uTUojwp7d7wBNFM WSQKmHrBJCMqyQrMEgLdiiVUyRumaZnRsbQHF+RUb4ARIJA5lhU2IiT/kENm7GV3KS8K5KAdR3w3 S8XMjTHQ4dJh+Sxoxom004O9kHDWuQ79KBteVA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . hO14hUVC9G/xG0PNKL6eEX6NHrBD+41pErUyVOGygGXrZfvw/p2QMzri3jObYF63yMAAI419GQCF 4IEGeyQDLGyHq68UFYuGA4N2bxZGYLQ7RshFBHZTizBehWEJQuYcYE5e15PMIIuUpiAqsFaO8WXz eYJ07bTST9MtAcxZ8KzaO2/pyVo9X/j3pP9C7+D0ZHkCa5TyjcwKEa9SeHlJ1uTUojwp7d7wBNFM WSQKmHrBJCMqyQrMEgLdiiVUyRumaZnRsbQHF+RUb4ARIJA5lhU2IiT/kENm7GV3KS8K5KAdR3w3 S8XMjTHQ4dJh+Sxoxom004O9kHDWuQ79KBteVA== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to ns1.nic.es for cat/DNSKEY
	Received 779 bytes from 194.69.254.1
	;; Response received from [194.69.254.1] 779 octets ;; HEADER SECTION ;; id = 53870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAZDAUGgrvnP0XVjrc9qDX3qYebA2BdbqfkP95k2d1GKq3Y+xeiV3+5rbA87zNT4ElsXgYK/Q ZhCGiowBWgiomxwn8eiQMR8KDK3WwEImdbyoj0TP2Nlr45LrvI+b43ycSbY3m2FV7s6rcqWXjX8t 6sMaNxxtT0CwxX2kY5g+AIxj9jy/W3j5Q9dxlAlh26uS/4bYpya/ryXBzKmihDHUiOs= ) ; Key ID = 21437 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20240930215844 20240916215844 58737 cat. RK7Aqd7z7yJJbx0nRjkH5r2VMEho2yNRmGcZj7GoqWeEhRuJuJJMmkts+Z6In2B6pw/GRXnNx8to PBK55FH9nkMvszTPHBH1udvzyhUiVO6Jf8MuQZiNe0gQkKIkfRd3TJ6p+1wRUt/z+Fh8t26n4kvC 6bJb5Iv/4B6raj+vt1G46WxZOqc58fTYRJuUbNfAGRKBoms3KTLFAFeNY83/tR1XvaxJZkCnzLEx M9xxuVFHhmgRb+kousig5Nc1HumvXdmnfFqt49orbyh4V4lEQyni2gMtKIeDh230cCK5sDDQ1SDC Ps1t2EiOFaELdx8JVQBEzpDhTxtFm2hYUK2R8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAZDAUGgrvnP0XVjrc9qDX3qYebA2BdbqfkP95k2d1GKq3Y+xeiV3+5rbA87zNT4ElsXgYK/Q ZhCGiowBWgiomxwn8eiQMR8KDK3WwEImdbyoj0TP2Nlr45LrvI+b43ycSbY3m2FV7s6rcqWXjX8t 6sMaNxxtT0CwxX2kY5g+AIxj9jy/W3j5Q9dxlAlh26uS/4bYpya/ryXBzKmihDHUiOs= ) ; Key ID = 21437`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20240930215844 20240916215844 58737 cat. RK7Aqd7z7yJJbx0nRjkH5r2VMEho2yNRmGcZj7GoqWeEhRuJuJJMmkts+Z6In2B6pw/GRXnNx8to PBK55FH9nkMvszTPHBH1udvzyhUiVO6Jf8MuQZiNe0gQkKIkfRd3TJ6p+1wRUt/z+Fh8t26n4kvC 6bJb5Iv/4B6raj+vt1G46WxZOqc58fTYRJuUbNfAGRKBoms3KTLFAFeNY83/tR1XvaxJZkCnzLEx M9xxuVFHhmgRb+kousig5Nc1HumvXdmnfFqt49orbyh4V4lEQyni2gMtKIeDh230cCK5sDDQ1SDC Ps1t2EiOFaELdx8JVQBEzpDhTxtFm2hYUK2R8w== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=21437 is now in the chain-of-trust
	Query to anyc1.irondns.net for web.girona.cat/A
	Received 362 bytes from 195.253.64.4
	;; Response received from [195.253.64.4] 362 octets ;; HEADER SECTION ;; id = 41791 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.girona.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) girona.cat. 86400 IN NS ns1.dondominio.com. girona.cat. 86400 IN NS ns2.dondominio.com. a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20240929215120 20240915215120 21437 cat. bAU5PJHF2Sm2ax4uc35DnBvBo3PGSA2n8MR9xGWxPeQbfgGzSBu0u2lX0/6Bl3Xu+VG/1cpmYiTd 29ryjYfizOofcstlGbRWvOi06D3x2AhqkS4ducqLKTCrcJq64nMhLEszm58QhxAFfhPZ04+J+0IL jc2rrgAAomEWvS5KfpfXO7ISRsp5aqLNaUK+3w8oMdZCZrZyQUinxhbqOXYGIw== ) a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN NSEC3 ( 1 0 0 - a08bhpluo25ub4a2qb9vkbuhmrslnjgl NS ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to switch.nic.cat for girona.cat/DNSKEY
	Received 358 bytes from 130.59.31.29
	;; Response received from [130.59.31.29] 358 octets ;; HEADER SECTION ;; id = 8523 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; girona.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) girona.cat. 86400 IN NS ns2.dondominio.com. girona.cat. 86400 IN NS ns1.dondominio.com. a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN NSEC3 ( 1 0 0 - a08bhpluo25ub4a2qb9vkbuhmrslnjgl NS ) a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20240929215120 20240915215120 21437 cat. bAU5PJHF2Sm2ax4uc35DnBvBo3PGSA2n8MR9xGWxPeQbfgGzSBu0u2lX0/6Bl3Xu+VG/1cpmYiTd 29ryjYfizOofcstlGbRWvOi06D3x2AhqkS4ducqLKTCrcJq64nMhLEszm58QhxAFfhPZ04+J+0IL jc2rrgAAomEWvS5KfpfXO7ISRsp5aqLNaUK+3w8oMdZCZrZyQUinxhbqOXYGIw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone girona.cat

girona.cat

	Checking DS between cat and girona.cat
	Query to switch.nic.cat for girona.cat/DS
	Received 577 bytes from 130.59.31.29
	;; Response received from [130.59.31.29] 577 octets ;; HEADER SECTION ;; id = 33872 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; girona.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( anyc1.irondns.net. dnsmaster.corenic.org. 2409210026 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20241004222652 20240920222652 21437 cat. AzqkVjmcGoShu4L3MU3Iemu5uR/RzAyqOVeSIdUYNyjZXPI1sn66+gkip4iXyFu0qwr35FqsxvZY 1iTvYsym1W79Ci4i82apjwgR4rZeGaPv35Bq+tdqNaxJNfbW0/igTHbQvoWSmcSHYWLLWQL+6uNV 6RYvBLS3QPvCohKzSUHi5bLmtIgt8Dsr8FWbnMCrlWYTUOEVaeBCfNExJiuFsg== ) a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN NSEC3 ( 1 0 0 - a08bhpluo25ub4a2qb9vkbuhmrslnjgl NS ) a07oj0bfmm532898vcogop7mi5tlk6vr.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20240929215120 20240915215120 21437 cat. bAU5PJHF2Sm2ax4uc35DnBvBo3PGSA2n8MR9xGWxPeQbfgGzSBu0u2lX0/6Bl3Xu+VG/1cpmYiTd 29ryjYfizOofcstlGbRWvOi06D3x2AhqkS4ducqLKTCrcJq64nMhLEszm58QhxAFfhPZ04+J+0IL jc2rrgAAomEWvS5KfpfXO7ISRsp5aqLNaUK+3w8oMdZCZrZyQUinxhbqOXYGIw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for girona.cat in the cat zone
	Query to ns2.dondominio.com for girona.cat/DNSKEY
	Received 102 bytes from 87.117.96.3
	;; Response received from [87.117.96.3] 102 octets ;; HEADER SECTION ;; id = 19729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; girona.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) girona.cat. 60 IN SOA ( ns1.dondominio.com. dnsadmin.dondominio.com. 2024092001 ;serial 10800 ;refresh 1800 ;retry 691200 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.dondominio.com for web.girona.cat/A
	Received 81 bytes from 87.117.96.3
	;; Response received from [87.117.96.3] 81 octets ;; HEADER SECTION ;; id = 47087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.girona.cat. IN A ;; ANSWER SECTION (1 record) web.girona.cat. 60 IN CNAME web-girona-cat.b-cdn.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.dondominio.com is authoritative for web.girona.cat
	Query to ns2.dondominio.com for web.girona.cat/DNSKEY
	Received 81 bytes from 87.117.96.3
	;; Response received from [87.117.96.3] 81 octets ;; HEADER SECTION ;; id = 37983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web.girona.cat. IN DNSKEY ;; ANSWER SECTION (1 record) web.girona.cat. 60 IN CNAME web-girona-cat.b-cdn.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	web.girona.cat is a CNAME to web-girona-cat.b-cdn.net
	No RRSIGs found

	Query to f.root-servers.net for web-girona-cat.b-cdn.net/A
	Received 1181 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1181 octets ;; HEADER SECTION ;; id = 6406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . RQstI1nPwyBikuaSFxD+WdA/2LfuWFVKQTqA4Si+jBZndasV4Uw+V9F0RarlzB1U/2dwZXNMJyTb eQdIND2ND4C+xItypo/l/uT3M/CRvIs75dRZIgMN9QsXdrYT1xpNaB62rCS5qc8ObWdA3stO3LDL I789AIMpkvcV0i5nZA+SG4GKJld1vS0fNLdcHq1hpLgdyJpzi+HiZGS0QTz/0ezP+RgZOZQN2Tn5 Dhx/c5lHDndt+eydohZr4Ojce/GC6pkn5bAylL4F9i5oAed99WbY/o6XKJDVlsLptaOe8cqjM1Gh hVh72HLeSgPYxtPRThicOMpQggehhwKBsu97vw== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1163 octets ;; HEADER SECTION ;; id = 51935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . RQstI1nPwyBikuaSFxD+WdA/2LfuWFVKQTqA4Si+jBZndasV4Uw+V9F0RarlzB1U/2dwZXNMJyTb eQdIND2ND4C+xItypo/l/uT3M/CRvIs75dRZIgMN9QsXdrYT1xpNaB62rCS5qc8ObWdA3stO3LDL I789AIMpkvcV0i5nZA+SG4GKJld1vS0fNLdcHq1hpLgdyJpzi+HiZGS0QTz/0ezP+RgZOZQN2Tn5 Dhx/c5lHDndt+eydohZr4Ojce/GC6pkn5bAylL4F9i5oAed99WbY/o6XKJDVlsLptaOe8cqjM1Gh hVh72HLeSgPYxtPRThicOMpQggehhwKBsu97vw== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to i.root-servers.net for net/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 52911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . RQstI1nPwyBikuaSFxD+WdA/2LfuWFVKQTqA4Si+jBZndasV4Uw+V9F0RarlzB1U/2dwZXNMJyTb eQdIND2ND4C+xItypo/l/uT3M/CRvIs75dRZIgMN9QsXdrYT1xpNaB62rCS5qc8ObWdA3stO3LDL I789AIMpkvcV0i5nZA+SG4GKJld1vS0fNLdcHq1hpLgdyJpzi+HiZGS0QTz/0ezP+RgZOZQN2Tn5 Dhx/c5lHDndt+eydohZr4Ojce/GC6pkn5bAylL4F9i5oAed99WbY/o6XKJDVlsLptaOe8cqjM1Gh hVh72HLeSgPYxtPRThicOMpQggehhwKBsu97vw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20241003170000 20240920160000 20038 . RQstI1nPwyBikuaSFxD+WdA/2LfuWFVKQTqA4Si+jBZndasV4Uw+V9F0RarlzB1U/2dwZXNMJyTb eQdIND2ND4C+xItypo/l/uT3M/CRvIs75dRZIgMN9QsXdrYT1xpNaB62rCS5qc8ObWdA3stO3LDL I789AIMpkvcV0i5nZA+SG4GKJld1vS0fNLdcHq1hpLgdyJpzi+HiZGS0QTz/0ezP+RgZOZQN2Tn5 Dhx/c5lHDndt+eydohZr4Ojce/GC6pkn5bAylL4F9i5oAed99WbY/o6XKJDVlsLptaOe8cqjM1Gh hVh72HLeSgPYxtPRThicOMpQggehhwKBsu97vw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 20558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN DNSKEY ( 256 3 13 GUEoqWueUrWorK7wnPbhVlFIz52mbdrzleuCl3s2oPbWNj/Ych940L9vwUPFRnjzK3Q0J894RxfV kT4cgCYskg== ) ; Key ID = 42924 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240929141035 20240914140535 37331 net. nfLlE/Ql02TL8oYR6KhAVMA38109he8Jc/6mghO9N+VOPH3HCs/WOL/MBkcuhzfIGLVDyoFsl6mY OA2JfsNo6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	`net. 86400 IN DNSKEY ( 256 3 13 GUEoqWueUrWorK7wnPbhVlFIz52mbdrzleuCl3s2oPbWNj/Ych940L9vwUPFRnjzK3Q0J894RxfV kT4cgCYskg== ) ; Key ID = 42924`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240929141035 20240914140535 37331 net. nfLlE/Ql02TL8oYR6KhAVMA38109he8Jc/6mghO9N+VOPH3HCs/WOL/MBkcuhzfIGLVDyoFsl6mY OA2JfsNo6Q== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=42924 is now in the chain-of-trust
	Query to a.gtld-servers.net for web-girona-cat.b-cdn.net/A
	Received 476 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 476 octets ;; HEADER SECTION ;; id = 20934 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) b-cdn.net. 172800 IN NS ns1.bunnydns.com. b-cdn.net. 172800 IN NS ns2.bunnydns.com. b-cdn.net. 172800 IN NS ns3.bunnydns.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025911 20240918014911 42924 net. sGg1WxqxuF1W+0HoEDm7Lq6o/BzdpfBOhzUsuXp92nTxlRC83Xxp/ALFAEmKsjbLAl8eDLvY6SMc MGDiuv63CQ== ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN NSEC3 ( 1 1 0 - r7mbmcorst37d546vsoavgsk3vsun8g0 NS DS RRSIG ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025341 20240918014341 42924 net. Np5Zd+EtEis94OdufRRGzrAmgsjg1KXD/gX1m5j8Yx5uxjxecyJ508gXfsZhFiL1rL1WI8J5A6zH dx24QwGlIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.gtld-servers.net for b-cdn.net/DNSKEY
	Received 461 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 461 octets ;; HEADER SECTION ;; id = 32312 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; b-cdn.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) b-cdn.net. 172800 IN NS ns1.bunnydns.com. b-cdn.net. 172800 IN NS ns2.bunnydns.com. b-cdn.net. 172800 IN NS ns3.bunnydns.com. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025911 20240918014911 42924 net. sGg1WxqxuF1W+0HoEDm7Lq6o/BzdpfBOhzUsuXp92nTxlRC83Xxp/ALFAEmKsjbLAl8eDLvY6SMc MGDiuv63CQ== ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN NSEC3 ( 1 1 0 - r7mbmcorst37d546vsoavgsk3vsun8g0 NS DS RRSIG ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025341 20240918014341 42924 net. Np5Zd+EtEis94OdufRRGzrAmgsjg1KXD/gX1m5j8Yx5uxjxecyJ508gXfsZhFiL1rL1WI8J5A6zH dx24QwGlIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone b-cdn.net

b-cdn.net

	Checking DS between net and b-cdn.net
	Query to h.gtld-servers.net for b-cdn.net/DS
	Received 567 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 567 octets ;; HEADER SECTION ;; id = 22084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; b-cdn.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025911 20240918014911 42924 net. sGg1WxqxuF1W+0HoEDm7Lq6o/BzdpfBOhzUsuXp92nTxlRC83Xxp/ALFAEmKsjbLAl8eDLvY6SMc MGDiuv63CQ== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1726880949 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240928010909 20240920235909 42924 net. IrJFkKYfvljYFmVrQ+ztzsJLtbbQPM7CEzhFU1SVz1RPY+5ukBk191pwxrqFrVUgVxH2QQIQzlZG Yn0s+TWC2w== ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN NSEC3 ( 1 1 0 - r7mbmcorst37d546vsoavgsk3vsun8g0 NS DS RRSIG ) R7M944HNQDV0J9KKCHHHD22HKE6BK7A4.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240925025341 20240918014341 42924 net. Np5Zd+EtEis94OdufRRGzrAmgsjg1KXD/gX1m5j8Yx5uxjxecyJ508gXfsZhFiL1rL1WI8J5A6zH dx24QwGlIA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for b-cdn.net in the net zone
	Query to ns3.bunnydns.com for b-cdn.net/DNSKEY
	Received 113 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 113 octets ;; HEADER SECTION ;; id = 22796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; b-cdn.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) b-cdn.net. 900 IN SOA ( ns1.bunnydns.com. hostmaster.bunnydns.com. 2020938030 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.bunnydns.com for web-girona-cat.b-cdn.net/A
	Received 69 bytes from 157.53.226.1
	;; Response received from [157.53.226.1] 69 octets ;; HEADER SECTION ;; id = 43127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN A ;; ANSWER SECTION (1 record) web-girona-cat.b-cdn.net. 35 IN A 169.150.247.37 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.bunnydns.com is authoritative for web-girona-cat.b-cdn.net
	Query to ns2.bunnydns.com for web-girona-cat.b-cdn.net/DNSKEY
	Received 128 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 128 octets ;; HEADER SECTION ;; id = 64707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) web-girona-cat.b-cdn.net. 900 IN SOA ( ns1.bunnydns.com. hostmaster.bunnydns.com. 2020938030 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone web-girona-cat.b-cdn.net
	Attempting to learn nameservers for web-girona-cat.b-cdn.net
	Query to ns2.bunnydns.com for web-girona-cat.b-cdn.net/NS
	Received 128 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 128 octets ;; HEADER SECTION ;; id = 44991 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) web-girona-cat.b-cdn.net. 900 IN SOA ( ns1.bunnydns.com. hostmaster.bunnydns.com. 2020938030 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found web-girona-cat.b-cdn.net nameservers:

web-girona-cat.b-cdn.net

	Checking DS between b-cdn.net and web-girona-cat.b-cdn.net
	Query to ns1.bunnydns.com for web-girona-cat.b-cdn.net/DS
	Received 128 bytes from 157.53.226.1
	;; Response received from [157.53.226.1] 128 octets ;; HEADER SECTION ;; id = 26559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; web-girona-cat.b-cdn.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) web-girona-cat.b-cdn.net. 900 IN SOA ( ns1.bunnydns.com. hostmaster.bunnydns.com. 2020938030 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for web-girona-cat.b-cdn.net in the b-cdn.net zone
	No DNSKEY records found
	No known nameservers for web-girona-cat.b-cdn.net

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test web.girona.cat at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: