DNSSEC Debugger - _acme-challenge.kolaboratu.int.cines.teledetection.fr

Domain Name:

Time: 2024-05-19 22:22:46 UTC

Analyzing DNSSEC problems for _acme-challenge.kolaboratu.int.cines.teledetection.fr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 44033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for _acme-challenge.kolaboratu.int.cines.teledetection.fr/A
	Received 675 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 675 octets ;; HEADER SECTION ;; id = 31657 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.kolaboratu.int.cines.teledetection.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . hOdoWNsE7tucWNNpMPMZDca2EvESW/8SQkAc1VoATFHAaFt51bfMpTK2E3gorPuZc8nT9Iw9NqP8 XHay49MP0/g1z5gr/7Em6VIHN+stM6n29gQHsxn/tDakB4X2VsSUi3+wcXwr51Sx/DKIiLkT7uVZ LYud2zIvzdXJ0iQHnUO8yjjpVIMliuQYfdYMnqW37B/TpFTuD5lY/uN6QEpHXOcOjz4anaYDKG2o OfVa/IssMd+YDzyB3uvcYLmMBdNpoC0UIrfHTKIRLEwAE1EmxvtGHDzAGYWbKQHxTyoekMuFXyVj GRarmIVtW4t/L7KhrabDgPhmBOjQrD7xL6gaBg== ) ;; ADDITIONAL SECTION (9 records) g.ext.nic.fr. 172800 IN A 194.0.36.1 f.ext.nic.fr. 172800 IN A 194.146.106.46 e.ext.nic.fr. 172800 IN A 193.176.144.22 d.nic.fr. 172800 IN A 194.0.9.1 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 d.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for fr/DNSKEY
	Received 614 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 614 octets ;; HEADER SECTION ;; id = 22967 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fr. 172800 IN NS d.nic.fr. fr. 172800 IN NS e.ext.nic.fr. fr. 172800 IN NS f.ext.nic.fr. fr. 172800 IN NS g.ext.nic.fr. fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . hOdoWNsE7tucWNNpMPMZDca2EvESW/8SQkAc1VoATFHAaFt51bfMpTK2E3gorPuZc8nT9Iw9NqP8 XHay49MP0/g1z5gr/7Em6VIHN+stM6n29gQHsxn/tDakB4X2VsSUi3+wcXwr51Sx/DKIiLkT7uVZ LYud2zIvzdXJ0iQHnUO8yjjpVIMliuQYfdYMnqW37B/TpFTuD5lY/uN6QEpHXOcOjz4anaYDKG2o OfVa/IssMd+YDzyB3uvcYLmMBdNpoC0UIrfHTKIRLEwAE1EmxvtGHDzAGYWbKQHxTyoekMuFXyVj GRarmIVtW4t/L7KhrabDgPhmBOjQrD7xL6gaBg== ) ;; ADDITIONAL SECTION (9 records) d.nic.fr. 172800 IN A 194.0.9.1 d.nic.fr. 172800 IN AAAA 2001:678:c::1 e.ext.nic.fr. 172800 IN A 193.176.144.22 e.ext.nic.fr. 172800 IN AAAA 2a00:d78:0:102:193:176:144:22 f.ext.nic.fr. 172800 IN A 194.146.106.46 f.ext.nic.fr. 172800 IN AAAA 2001:67c:1010:11::53 g.ext.nic.fr. 172800 IN A 194.0.36.1 g.ext.nic.fr. 172800 IN AAAA 2001:678:4c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone fr

	Checking DS between . and fr
	Query to e.root-servers.net for fr/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 58167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DS ;; ANSWER SECTION (2 records) fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 ) fr. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . hOdoWNsE7tucWNNpMPMZDca2EvESW/8SQkAc1VoATFHAaFt51bfMpTK2E3gorPuZc8nT9Iw9NqP8 XHay49MP0/g1z5gr/7Em6VIHN+stM6n29gQHsxn/tDakB4X2VsSUi3+wcXwr51Sx/DKIiLkT7uVZ LYud2zIvzdXJ0iQHnUO8yjjpVIMliuQYfdYMnqW37B/TpFTuD5lY/uN6QEpHXOcOjz4anaYDKG2o OfVa/IssMd+YDzyB3uvcYLmMBdNpoC0UIrfHTKIRLEwAE1EmxvtGHDzAGYWbKQHxTyoekMuFXyVj GRarmIVtW4t/L7KhrabDgPhmBOjQrD7xL6gaBg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for fr in the . zone
	DS=29133/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fr. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . hOdoWNsE7tucWNNpMPMZDca2EvESW/8SQkAc1VoATFHAaFt51bfMpTK2E3gorPuZc8nT9Iw9NqP8 XHay49MP0/g1z5gr/7Em6VIHN+stM6n29gQHsxn/tDakB4X2VsSUi3+wcXwr51Sx/DKIiLkT7uVZ LYud2zIvzdXJ0iQHnUO8yjjpVIMliuQYfdYMnqW37B/TpFTuD5lY/uN6QEpHXOcOjz4anaYDKG2o OfVa/IssMd+YDzyB3uvcYLmMBdNpoC0UIrfHTKIRLEwAE1EmxvtGHDzAGYWbKQHxTyoekMuFXyVj GRarmIVtW4t/L7KhrabDgPhmBOjQrD7xL6gaBg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=29133/SHA-256 is now in the chain-of-trust
	`fr. 86400 IN DS ( 29133 13 2 1303e8da8fb60db500d5bea1ee5dc9a2bcc93dfe2fc43d346576658feccf5749 )`
	Query to e.ext.nic.fr for fr/DNSKEY
	Received 289 bytes from 193.176.144.22
	;; Response received from [193.176.144.22] 289 octets ;; HEADER SECTION ;; id = 28933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; fr. IN DNSKEY ;; ANSWER SECTION (3 records) fr. 3600 IN DNSKEY ( 256 3 13 GMdnRGCf3/0lJzPxJLmMhpr+BN80YD8+ei5G619SA6dpmEjiI58ME1h7KNZ8q3z7m5+3khrbfMTa ngcb90x0xA== ) ; Key ID = 40031 fr. 3600 IN DNSKEY ( 257 3 13 qRwN6xREvGGSFLh9cSFollJA3PRjjG7zHkUxc+7GZUi5qwaYZxYlXIBmajzGWjVpwhzlWdnwWYZx PsJ88HfqDA== ) ; Key ID = 29133 fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240615213228 20240417091842 29133 fr. YdOr4YkUr97a/aAh3qTs3gn9K3avKjNsThb1obDmvOqftlhC9A+lwILBqGj2E3WXU85bISQVM9rV vi/nP490Dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for fr
	`fr. 3600 IN DNSKEY ( 256 3 13 GMdnRGCf3/0lJzPxJLmMhpr+BN80YD8+ei5G619SA6dpmEjiI58ME1h7KNZ8q3z7m5+3khrbfMTa ngcb90x0xA== ) ; Key ID = 40031`
	`fr. 3600 IN DNSKEY ( 257 3 13 qRwN6xREvGGSFLh9cSFollJA3PRjjG7zHkUxc+7GZUi5qwaYZxYlXIBmajzGWjVpwhzlWdnwWYZx PsJ88HfqDA== ) ; Key ID = 29133`
	DNSKEY=29133/SEP is now in the chain-of-trust
	DS=29133/SHA-256 verifies DNSKEY=29133/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fr. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240615213228 20240417091842 29133 fr. YdOr4YkUr97a/aAh3qTs3gn9K3avKjNsThb1obDmvOqftlhC9A+lwILBqGj2E3WXU85bISQVM9rV vi/nP490Dg== )`
	RRSIG=29133 and DNSKEY=29133/SEP verifies the DNSKEY RRset
	DNSKEY=40031 is now in the chain-of-trust
	Query to e.ext.nic.fr for _acme-challenge.kolaboratu.int.cines.teledetection.fr/A
	Received 541 bytes from 193.176.144.22
	;; Response received from [193.176.144.22] 541 octets ;; HEADER SECTION ;; id = 36458 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.kolaboratu.int.cines.teledetection.fr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) teledetection.fr. 3600 IN NS lct1.teledetection.fr. teledetection.fr. 3600 IN NS lct2.teledetection.fr. teledetection.fr. 3600 IN NS serv22.cines.irstea.fr. sfblg7nfatq81cqjgt5q91bqs3h9v6nd.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 6qkph1mq1ki5bbleh6b1m8on5mj65qql.fr. 600 IN NSEC3 ( 1 1 0 - 6qkruddgce2vnjs5570p8sc2k4j739sj NS DS RRSIG ) sfblg7nfatq81cqjgt5q91bqs3h9v6nd.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240718160408 20240519152838 40031 fr. 0TNef2wNIrO/W7YZNjUz54NT8PJ6hsNWM0JCWObz1B2mNJbcQnDxAcq7lBlszyNbD0bWJQW3uFrl W8ZLOV2TRw== ) 6qkph1mq1ki5bbleh6b1m8on5mj65qql.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240709200002 20240510190248 40031 fr. Id7RVoxLA6aj7oK6+OBuHGiFhYv0go9fEiO0mrsBPuZ33aegsRU7AByCPcdsHA1DhpEcLIfwe50u XH3cizniwA== ) ;; ADDITIONAL SECTION (3 records) lct1.teledetection.fr. 3600 IN A 193.48.189.1 lct2.teledetection.fr. 3600 IN A 193.48.189.2 ;; { "EDNS-VERSION": 0 }
	Query to f.ext.nic.fr for teledetection.fr/DNSKEY
	Received 506 bytes from 194.146.106.46
	;; Response received from [194.146.106.46] 506 octets ;; HEADER SECTION ;; id = 36387 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) teledetection.fr. 3600 IN NS lct1.teledetection.fr. teledetection.fr. 3600 IN NS serv22.cines.irstea.fr. teledetection.fr. 3600 IN NS lct2.teledetection.fr. SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240718160408 20240519152838 40031 fr. 0TNef2wNIrO/W7YZNjUz54NT8PJ6hsNWM0JCWObz1B2mNJbcQnDxAcq7lBlszyNbD0bWJQW3uFrl W8ZLOV2TRw== ) 6QKPH1MQ1KI5BBLEH6B1M8ON5MJ65QQL.fr. 600 IN NSEC3 ( 1 1 0 - 6qkruddgce2vnjs5570p8sc2k4j739sj NS DS RRSIG ) 6QKPH1MQ1KI5BBLEH6B1M8ON5MJ65QQL.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240709200002 20240510190248 40031 fr. Id7RVoxLA6aj7oK6+OBuHGiFhYv0go9fEiO0mrsBPuZ33aegsRU7AByCPcdsHA1DhpEcLIfwe50u XH3cizniwA== ) ;; ADDITIONAL SECTION (3 records) lct2.teledetection.fr. 3600 IN A 193.48.189.2 lct1.teledetection.fr. 3600 IN A 193.48.189.1 ;; { "EDNS-VERSION": 0 }
	Found child zone teledetection.fr

teledetection.fr

	Checking DS between fr and teledetection.fr
	Query to f.ext.nic.fr for teledetection.fr/DS
	Received 560 bytes from 194.146.106.46
	;; Response received from [194.146.106.46] 560 octets ;; HEADER SECTION ;; id = 6227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; teledetection.fr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN NSEC3 ( 1 1 0 - sfbn9rjnnuevsb0gner878n1gn41d23i NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) SFBLG7NFATQ81CQJGT5Q91BQS3H9V6ND.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240718160408 20240519152838 40031 fr. 0TNef2wNIrO/W7YZNjUz54NT8PJ6hsNWM0JCWObz1B2mNJbcQnDxAcq7lBlszyNbD0bWJQW3uFrl W8ZLOV2TRw== ) fr. 600 IN SOA ( a.nic.fr. dnsmaster.afnic.fr. 2238494875 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 600 ;minimum ) fr. 600 IN RRSIG ( SOA 13 1 3600 20240718222157 20240519212157 40031 fr. qk4pJh1ze+LTYrQMMhchWTbJoIOJw91M9L8awCCv3o1OKMW6TXl0UueQYze1eXGwNr7Sp3Xgm3G3 CykQrOPiFQ== ) 6QKPH1MQ1KI5BBLEH6B1M8ON5MJ65QQL.fr. 600 IN NSEC3 ( 1 1 0 - 6qkruddgce2vnjs5570p8sc2k4j739sj NS DS RRSIG ) 6QKPH1MQ1KI5BBLEH6B1M8ON5MJ65QQL.fr. 600 IN RRSIG ( NSEC3 13 2 600 20240709200002 20240510190248 40031 fr. Id7RVoxLA6aj7oK6+OBuHGiFhYv0go9fEiO0mrsBPuZ33aegsRU7AByCPcdsHA1DhpEcLIfwe50u XH3cizniwA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for teledetection.fr in the fr zone
	Query to serv22.cines.irstea.fr for teledetection.fr/DNSKEY
	Received 92 bytes from 195.221.108.22
	;; Response received from [195.221.108.22] 92 octets ;; HEADER SECTION ;; id = 12236 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024041801 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to lct2.teledetection.fr for _acme-challenge.kolaboratu.int.cines.teledetection.fr/A
	Received 149 bytes from 193.48.189.2
	;; Response received from [193.48.189.2] 149 octets ;; HEADER SECTION ;; id = 19322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.kolaboratu.int.cines.teledetection.fr. IN A ;; ANSWER SECTION (1 record) _acme-challenge.kolaboratu.int.cines.teledetection.fr. 300 IN CNAME ( e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	lct2.teledetection.fr is authoritative for _acme-challenge.kolaboratu.int.cines.teledetection.fr
	Query to serv22.cines.irstea.fr for cines.teledetection.fr/DNSKEY
	Received 98 bytes from 195.221.108.22
	;; Response received from [195.221.108.22] 98 octets ;; HEADER SECTION ;; id = 21473 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cines.teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cines.teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024030802 ;serial 36000 ;refresh 3600 ;retry 3600000 ;expire 241920 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone cines.teledetection.fr
	Attempting to learn nameservers for cines.teledetection.fr
	Query to lct1.teledetection.fr for cines.teledetection.fr/NS
	Received 125 bytes from 193.48.189.1
	;; Response received from [193.48.189.1] 125 octets ;; HEADER SECTION ;; id = 7049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cines.teledetection.fr. IN NS ;; ANSWER SECTION (3 records) cines.teledetection.fr. 300 IN NS lct1.teledetection.fr. cines.teledetection.fr. 300 IN NS lct2.teledetection.fr. cines.teledetection.fr. 300 IN NS serv22.cines.irstea.fr. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found cines.teledetection.fr nameservers: lct1.teledetection.fr, lct2.teledetection.fr, serv22.cines.irstea.fr

cines.teledetection.fr

	Checking DS between teledetection.fr and cines.teledetection.fr
	Query to lct1.teledetection.fr for cines.teledetection.fr/DS
	Received 98 bytes from 193.48.189.1
	;; Response received from [193.48.189.1] 98 octets ;; HEADER SECTION ;; id = 62914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cines.teledetection.fr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024041801 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cines.teledetection.fr in the teledetection.fr zone
	Query to lct1.teledetection.fr for cines.teledetection.fr/DNSKEY
	Received 98 bytes from 193.48.189.1
	;; Response received from [193.48.189.1] 98 octets ;; HEADER SECTION ;; id = 43532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cines.teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cines.teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024030802 ;serial 36000 ;refresh 3600 ;retry 3600000 ;expire 241920 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to serv22.cines.irstea.fr for _acme-challenge.kolaboratu.int.cines.teledetection.fr/A
	Received 149 bytes from 195.221.108.22
	;; Response received from [195.221.108.22] 149 octets ;; HEADER SECTION ;; id = 21269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.kolaboratu.int.cines.teledetection.fr. IN A ;; ANSWER SECTION (1 record) _acme-challenge.kolaboratu.int.cines.teledetection.fr. 300 IN CNAME ( e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	serv22.cines.irstea.fr is authoritative for _acme-challenge.kolaboratu.int.cines.teledetection.fr
	Query to serv22.cines.irstea.fr for int.cines.teledetection.fr/DNSKEY
	Received 118 bytes from 195.221.108.22
	;; Response received from [195.221.108.22] 118 octets ;; HEADER SECTION ;; id = 58968 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int.cines.teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cines.teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024030802 ;serial 36000 ;refresh 3600 ;retry 3600000 ;expire 241920 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to serv22.cines.irstea.fr for kolaboratu.int.cines.teledetection.fr/DNSKEY
	Received 135 bytes from 195.221.108.22
	;; Response received from [195.221.108.22] 135 octets ;; HEADER SECTION ;; id = 23602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kolaboratu.int.cines.teledetection.fr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cines.teledetection.fr. 300 IN SOA ( lct1.teledetection.fr. admin.teledetection.fr. 2024030802 ;serial 36000 ;refresh 3600 ;retry 3600000 ;expire 241920 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to lct2.teledetection.fr for _acme-challenge.kolaboratu.int.cines.teledetection.fr/DNSKEY
	Received 149 bytes from 193.48.189.2
	;; Response received from [193.48.189.2] 149 octets ;; HEADER SECTION ;; id = 24062 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; _acme-challenge.kolaboratu.int.cines.teledetection.fr. IN DNSKEY ;; ANSWER SECTION (1 record) _acme-challenge.kolaboratu.int.cines.teledetection.fr. 300 IN CNAME ( e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	_acme-challenge.kolaboratu.int.cines.teledetection.fr is a CNAME to e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io
	No RRSIGs found

	Query to j.root-servers.net for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io/A
	Received 665 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 665 octets ;; HEADER SECTION ;; id = 50039 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS c0.nic.io. io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . IoUBCVQrMJ49BeGhjdxKO2R31LEzCf0zp5VUYedgdyV8tj+Njv0yex2KqxZu9rNRXbQMQPCcGuCV KOpaiaECXUeb3ZTr+ktVaf/L33PKK5v31pETuYJaomPtCwVjWkB9uNkPcKuoJSM24eE+Wx1KSUM3 5rpZrBzIM6dSiYAT8F4OdkGz0uAlOM0jUfHSmxHKJ5HesSAQMzk5f6aNz1VInLneY1SHQtglfSc8 7Y/XmMg5H67mtQ2dhVOwsiWo0UYbBnb1JMhVtCeeTZNIRwW3MR63i4FNfJMNbeumENMlbdI2bhnH 8gi6Q4DiGc2ZCZ1l8Bsew4vvZ2osraqqh0qC6w== ) ;; ADDITIONAL SECTION (9 records) a0.nic.io. 172800 IN A 65.22.160.17 a2.nic.io. 172800 IN A 65.22.163.17 b0.nic.io. 172800 IN A 65.22.161.17 c0.nic.io. 172800 IN A 65.22.162.17 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for io/DNSKEY
	Received 614 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 614 octets ;; HEADER SECTION ;; id = 20072 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) io. 172800 IN NS a0.nic.io. io. 172800 IN NS a2.nic.io. io. 172800 IN NS b0.nic.io. io. 172800 IN NS c0.nic.io. io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . IoUBCVQrMJ49BeGhjdxKO2R31LEzCf0zp5VUYedgdyV8tj+Njv0yex2KqxZu9rNRXbQMQPCcGuCV KOpaiaECXUeb3ZTr+ktVaf/L33PKK5v31pETuYJaomPtCwVjWkB9uNkPcKuoJSM24eE+Wx1KSUM3 5rpZrBzIM6dSiYAT8F4OdkGz0uAlOM0jUfHSmxHKJ5HesSAQMzk5f6aNz1VInLneY1SHQtglfSc8 7Y/XmMg5H67mtQ2dhVOwsiWo0UYbBnb1JMhVtCeeTZNIRwW3MR63i4FNfJMNbeumENMlbdI2bhnH 8gi6Q4DiGc2ZCZ1l8Bsew4vvZ2osraqqh0qC6w== ) ;; ADDITIONAL SECTION (9 records) a0.nic.io. 172800 IN A 65.22.160.17 a0.nic.io. 172800 IN AAAA 2a01:8840:9e::17 a2.nic.io. 172800 IN A 65.22.163.17 a2.nic.io. 172800 IN AAAA 2a01:8840:a1::17 b0.nic.io. 172800 IN A 65.22.161.17 b0.nic.io. 172800 IN AAAA 2a01:8840:9f::17 c0.nic.io. 172800 IN A 65.22.162.17 c0.nic.io. 172800 IN AAAA 2a01:8840:a0::17 ;; { "EDNS-VERSION": 0 }
	Found child zone io

	Checking DS between . and io
	Query to d.root-servers.net for io/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 58966 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; io. IN DS ;; ANSWER SECTION (2 records) io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 ) io. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . IoUBCVQrMJ49BeGhjdxKO2R31LEzCf0zp5VUYedgdyV8tj+Njv0yex2KqxZu9rNRXbQMQPCcGuCV KOpaiaECXUeb3ZTr+ktVaf/L33PKK5v31pETuYJaomPtCwVjWkB9uNkPcKuoJSM24eE+Wx1KSUM3 5rpZrBzIM6dSiYAT8F4OdkGz0uAlOM0jUfHSmxHKJ5HesSAQMzk5f6aNz1VInLneY1SHQtglfSc8 7Y/XmMg5H67mtQ2dhVOwsiWo0UYbBnb1JMhVtCeeTZNIRwW3MR63i4FNfJMNbeumENMlbdI2bhnH 8gi6Q4DiGc2ZCZ1l8Bsew4vvZ2osraqqh0qC6w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for io in the . zone
	DS=57355/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`io. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . IoUBCVQrMJ49BeGhjdxKO2R31LEzCf0zp5VUYedgdyV8tj+Njv0yex2KqxZu9rNRXbQMQPCcGuCV KOpaiaECXUeb3ZTr+ktVaf/L33PKK5v31pETuYJaomPtCwVjWkB9uNkPcKuoJSM24eE+Wx1KSUM3 5rpZrBzIM6dSiYAT8F4OdkGz0uAlOM0jUfHSmxHKJ5HesSAQMzk5f6aNz1VInLneY1SHQtglfSc8 7Y/XmMg5H67mtQ2dhVOwsiWo0UYbBnb1JMhVtCeeTZNIRwW3MR63i4FNfJMNbeumENMlbdI2bhnH 8gi6Q4DiGc2ZCZ1l8Bsew4vvZ2osraqqh0qC6w== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=57355/SHA-256 is now in the chain-of-trust
	`io. 86400 IN DS ( 57355 8 2 95a57c3bab7849dbcddf7c72ada71a88146b141110318ca5be672057e865c3e2 )`
	Query to c0.nic.io for io/DNSKEY
	Received 893 bytes from 65.22.162.17
	;; Response received from [65.22.162.17] 893 octets ;; HEADER SECTION ;; id = 32357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; io. IN DNSKEY ;; ANSWER SECTION (4 records) io. 3600 IN DNSKEY ( 256 3 8 AwEAAcZbNeV6xbSrTr2YOzOaKT5wsackOutv9g+dnqxhHFY959sbW+Kmvsvmaxpk8dHyu1N/y+DV 7hD0kJqOck8eJArzM33bkVnEbuhpWLVgue0jmW188F9tT+hYya0DkLmLGfOBXaXRDr7dx/5pXaOW ivz+/ibhDkpb1dJT5MHfJQQV ) ; Key ID = 27108 io. 3600 IN DNSKEY ( 256 3 8 AwEAAaLASRPiGmFtDEPgozcCgfQBXnMY76WdF3wSKZztCUNjTuTWT6GgK9DrSOfBr6MvemMczIhw oH1v4gv4sPpzeDCzOilZHGB+PP8Z/z2POL3iXi0OXfxBdxOsceZuIvKK1TsZxvQsjtZ0h4wjY/A1 zlz7KOw+Q5nANbKR7XV7oBWd ) ; Key ID = 12723 io. 3600 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355 io. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240607155151 20240517145151 57355 io. N5YUgw/lxYmsZeI4mCBwEwNysa2fYm6q4iaw04kaPKCCMLFUl9oIGl7B4RO+mD/XWqyk9sFL+YCR xWbhJei6eJw3TItRFaq/FA7B9uCYSVI5MVNJLn1CEu0Kw89bTbil7U14WCuzvf90pOZFKDxZS49V 9q9SWgc0R3ru2R1Bxi529594LU1QQn4Gc5MID/bqsHJjOWQowaovD24sQsNjr/FtbpxXl+UPptiy RSx3NbZltD6joH30meo2ij/A2dgZgMFGlh1cPpX02dMnavcGlU9iD/O8jqo8MUAMB76L/qH+9cN2 RiLr/e8pAfR8NAqqs2JWDCoAVofBr484rmHQEw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for io
	`io. 3600 IN DNSKEY ( 256 3 8 AwEAAcZbNeV6xbSrTr2YOzOaKT5wsackOutv9g+dnqxhHFY959sbW+Kmvsvmaxpk8dHyu1N/y+DV 7hD0kJqOck8eJArzM33bkVnEbuhpWLVgue0jmW188F9tT+hYya0DkLmLGfOBXaXRDr7dx/5pXaOW ivz+/ibhDkpb1dJT5MHfJQQV ) ; Key ID = 27108`
	`io. 3600 IN DNSKEY ( 256 3 8 AwEAAaLASRPiGmFtDEPgozcCgfQBXnMY76WdF3wSKZztCUNjTuTWT6GgK9DrSOfBr6MvemMczIhw oH1v4gv4sPpzeDCzOilZHGB+PP8Z/z2POL3iXi0OXfxBdxOsceZuIvKK1TsZxvQsjtZ0h4wjY/A1 zlz7KOw+Q5nANbKR7XV7oBWd ) ; Key ID = 12723`
	`io. 3600 IN DNSKEY ( 257 3 8 AwEAAdgV7ipvizPjJNDZ1O5Ea7hmp+qelixmzCqWbwPH00VOKvlEcWfM/PKGLt+Phj9jVJqDytWI m7Ff7+fUaRMPzMuUW2Z7ViLitxH4iNtKtwU+DMzdGpzRMXFAF1WdbxCF5lWoK0MHsIR5oD9Vkwop kttyGnKjYhTDNObYHg8Mi5E9j0FjU4OEpKw6NbZduVKp2pRBBejm/8WKq0O1PukchMa6TQIJlYNs JZNzD1QLcKZWEup+fTvqzAWiK2Su6rlDC7rgwe6OjhrT2ejqlORp3h5S4WJGi3haUczvA/O5GYjh GmXxp5CJ01RJSYG0BsbY1tpEX+9Y4+GhS/nf8Qo0iDc= ) ; Key ID = 57355`
	DNSKEY=57355/SEP is now in the chain-of-trust
	DS=57355/SHA-256 verifies DNSKEY=57355/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`io. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240607155151 20240517145151 57355 io. N5YUgw/lxYmsZeI4mCBwEwNysa2fYm6q4iaw04kaPKCCMLFUl9oIGl7B4RO+mD/XWqyk9sFL+YCR xWbhJei6eJw3TItRFaq/FA7B9uCYSVI5MVNJLn1CEu0Kw89bTbil7U14WCuzvf90pOZFKDxZS49V 9q9SWgc0R3ru2R1Bxi529594LU1QQn4Gc5MID/bqsHJjOWQowaovD24sQsNjr/FtbpxXl+UPptiy RSx3NbZltD6joH30meo2ij/A2dgZgMFGlh1cPpX02dMnavcGlU9iD/O8jqo8MUAMB76L/qH+9cN2 RiLr/e8pAfR8NAqqs2JWDCoAVofBr484rmHQEw== )`
	RRSIG=57355 and DNSKEY=57355/SEP verifies the DNSKEY RRset
	DNSKEY=27108 is now in the chain-of-trust
	DNSKEY=12723 is now in the chain-of-trust
	Query to b0.nic.io for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io/A
	Received 639 bytes from 65.22.161.17
	;; Response received from [65.22.161.17] 639 octets ;; HEADER SECTION ;; id = 28180 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) acme-dns.io. 3600 IN NS pablo.ns.cloudflare.com. acme-dns.io. 3600 IN NS bonnie.ns.cloudflare.com. u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a u92ur6uh0np6mtnkm7m61mg4fqgg6k45 NS SOA RRSIG DNSKEY NSEC3PARAM ) u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240609221808 20240519211808 27108 io. BeETppnccSjLlCgqenWUATn/F0lbFt8DFDNwSYbCdVI0dja+e4uVjvvCVlqKXZALrteJpdMW4WiG qtZT3LecQngW3rtNPp/YPSDvdDOeHuZCwXpEd7enIRWu+dwPgiTiCkGaKL6Vm7VGq7jhuASV1r75 oJErzMGmdvfP6m9PXZo= ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a 8q2cgtpa5q1urij4bcud0vq2ne9aocij NS DS RRSIG ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240607155151 20240517145151 27108 io. QPLgmodEC9Yv9++I6LRPgTHctu0ox3eUFFBxAAjJKfnA51m0BcYOnncIf684nVWhxUqzVDCC9eT/ IQc7J+eWKIhVjCw+hHZtX0PkW/8Mtj3f8pHucfeZ6A7I9GETUvwcVEXUUAaHRgot8TTFpIWlSSGi NJSE8KwQuhcsZ47j1fQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a2.nic.io for acme-dns.io/DNSKEY
	Received 597 bytes from 65.22.163.17
	;; Response received from [65.22.163.17] 597 octets ;; HEADER SECTION ;; id = 41687 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; acme-dns.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) acme-dns.io. 3600 IN NS pablo.ns.cloudflare.com. acme-dns.io. 3600 IN NS bonnie.ns.cloudflare.com. u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a u92ur6uh0np6mtnkm7m61mg4fqgg6k45 NS SOA RRSIG DNSKEY NSEC3PARAM ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a 8q2cgtpa5q1urij4bcud0vq2ne9aocij NS DS RRSIG ) u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240609221808 20240519211808 27108 io. BeETppnccSjLlCgqenWUATn/F0lbFt8DFDNwSYbCdVI0dja+e4uVjvvCVlqKXZALrteJpdMW4WiG qtZT3LecQngW3rtNPp/YPSDvdDOeHuZCwXpEd7enIRWu+dwPgiTiCkGaKL6Vm7VGq7jhuASV1r75 oJErzMGmdvfP6m9PXZo= ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240607155151 20240517145151 27108 io. QPLgmodEC9Yv9++I6LRPgTHctu0ox3eUFFBxAAjJKfnA51m0BcYOnncIf684nVWhxUqzVDCC9eT/ IQc7J+eWKIhVjCw+hHZtX0PkW/8Mtj3f8pHucfeZ6A7I9GETUvwcVEXUUAaHRgot8TTFpIWlSSGi NJSE8KwQuhcsZ47j1fQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone acme-dns.io

acme-dns.io

	Checking DS between io and acme-dns.io
	Query to a2.nic.io for acme-dns.io/DS
	Received 769 bytes from 65.22.163.17
	;; Response received from [65.22.163.17] 769 octets ;; HEADER SECTION ;; id = 50902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; acme-dns.io. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a u92ur6uh0np6mtnkm7m61mg4fqgg6k45 NS SOA RRSIG DNSKEY NSEC3PARAM ) u92tce82j4l1t382opcath2ulsjsm9qg.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240609221808 20240519211808 27108 io. BeETppnccSjLlCgqenWUATn/F0lbFt8DFDNwSYbCdVI0dja+e4uVjvvCVlqKXZALrteJpdMW4WiG qtZT3LecQngW3rtNPp/YPSDvdDOeHuZCwXpEd7enIRWu+dwPgiTiCkGaKL6Vm7VGq7jhuASV1r75 oJErzMGmdvfP6m9PXZo= ) io. 3600 IN SOA ( a0.nic.io. hostmaster.donuts.email. 1716156954 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) io. 3600 IN RRSIG ( SOA 8 1 3600 20240609221808 20240519211808 27108 io. kQWPd16M55knL3b9Ayn0mw9+35zA5tDnNhkgw4QntCTfbpESJA6so1GQYTnxsFBUQuLrUWhJv6/3 90a9wPn6joGihzPwlObVdulhdo3oTBLcP9xL5I/mfV/61wn5h3s0rhbD/3cgE4IrVFPDWMh4Dbo/ 72Uz0X1AFQYKE5jAKCM= ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN NSEC3 ( 1 1 100 332539ee7f95c32a 8q2cgtpa5q1urij4bcud0vq2ne9aocij NS DS RRSIG ) 8q20lbh03dh78ka816h7b42gi8nodgal.io. 3600 IN RRSIG ( NSEC3 8 2 3600 20240607155151 20240517145151 27108 io. QPLgmodEC9Yv9++I6LRPgTHctu0ox3eUFFBxAAjJKfnA51m0BcYOnncIf684nVWhxUqzVDCC9eT/ IQc7J+eWKIhVjCw+hHZtX0PkW/8Mtj3f8pHucfeZ6A7I9GETUvwcVEXUUAaHRgot8TTFpIWlSSGi NJSE8KwQuhcsZ47j1fQ= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for acme-dns.io in the io zone
	Query to pablo.ns.cloudflare.com for acme-dns.io/DNSKEY
	Received 104 bytes from 108.162.193.220
	;; Response received from [108.162.193.220] 104 octets ;; HEADER SECTION ;; id = 36182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; acme-dns.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) acme-dns.io. 1800 IN SOA ( bonnie.ns.cloudflare.com. dns.cloudflare.com. 2339461712 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to bonnie.ns.cloudflare.com for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io/A
	Received 115 bytes from 172.64.32.76
	;; Response received from [172.64.32.76] 115 octets ;; HEADER SECTION ;; id = 60572 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) auth.acme-dns.io. 300 IN NS ns.auth.acme-dns.io. ;; ADDITIONAL SECTION (2 records) ns.auth.acme-dns.io. 300 IN A 49.12.60.200 ;; { "EDNS-VERSION": 0 }
	Query to pablo.ns.cloudflare.com for auth.acme-dns.io/DNSKEY
	Received 109 bytes from 172.64.33.220
	;; Response received from [172.64.33.220] 109 octets ;; HEADER SECTION ;; id = 50458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; auth.acme-dns.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) acme-dns.io. 1800 IN SOA ( bonnie.ns.cloudflare.com. dns.cloudflare.com. 2339461712 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to pablo.ns.cloudflare.com for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io/DNSKEY
	Received 146 bytes from 108.162.193.220
	;; Response received from [108.162.193.220] 146 octets ;; HEADER SECTION ;; id = 32188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) acme-dns.io. 1800 IN SOA ( bonnie.ns.cloudflare.com. dns.cloudflare.com. 2339461712 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	acme-dns.io refers to auth.acme-dns.io for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io
	No DS records found for auth.acme-dns.io in the referral

auth.acme-dns.io

	Checking DS between acme-dns.io and auth.acme-dns.io
	Query to bonnie.ns.cloudflare.com for auth.acme-dns.io/DS
	Received 109 bytes from 172.64.32.76
	;; Response received from [172.64.32.76] 109 octets ;; HEADER SECTION ;; id = 31301 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; auth.acme-dns.io. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) acme-dns.io. 1800 IN SOA ( bonnie.ns.cloudflare.com. dns.cloudflare.com. 2339461712 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for auth.acme-dns.io in the acme-dns.io zone
	Query to ns.auth.acme-dns.io for auth.acme-dns.io/DNSKEY
	Received 34 bytes from 49.12.60.200
	;; Response received from [49.12.60.200] 34 octets ;; HEADER SECTION ;; id = 6417 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 0 arcount = 0 ;; do = 0 ;; QUESTION SECTION (1 record) ;; auth.acme-dns.io. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (0 records)
	No DNSKEY records found
	Query to ns.auth.acme-dns.io for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io/A
	Received 157 bytes from 49.12.60.200
	;; Response received from [49.12.60.200] 157 octets ;; HEADER SECTION ;; id = 39244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 0 ;; do = 0 ;; QUESTION SECTION (1 record) ;; e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) auth.acme-dns.io. 3600 IN SOA ( ns.auth.acme-dns.io. joona@kuori.org. 2023100400 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (0 records)
	Zone auth.acme-dns.io (49.12.60.200) returns NXDOMAIN for e1a698db-9db9-4e41-abcf-7db73bfa6418.auth.acme-dns.io
	No NSEC records in response

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test _acme-challenge.kolaboratu.int.cines.teledetection.fr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: