DNSSEC Debugger

Domain Name:

Time: 2024-05-17 03:17:38 UTC

Analyzing DNSSEC problems for ac.at

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 58042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for ac.at/A
	Received 913 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 913 octets ;; HEADER SECTION ;; id = 29678 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS d.ns.at. at. 172800 IN NS ns9.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . WDcYt3+HcG0ZgNdr1j+3NuwUz1WYrXxWwtQ/iEcCIX1ZPIh5OObQAPGU8QsBmdZ+mvIfnHRU5gmV vFnWA05hn2s6XyVzkLLI9VUFes8A3ZST4oCP2ur5tBD3dKK1XJ9cmqcR1wLo2t/oGNMyUA2gpZdx GDIvvzEJ/RYwR0m78bJcqJzPuxOYPb5CG3rco6pf/VIuNmQy7LNDV4HHt+kuF9gR45JPROshl+vC qBH5kTlRI0rD2eNbyRhwUXBM1NmSfcu057+bHFn3NzuP916CHr3ASfOwBqk6uFdF0ckNZWEhP18t +qM4vbKiiNl8cP+89Of4qNa3MqxAQTcunlUvXQ== ) ;; ADDITIONAL SECTION (17 records) ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 j.ns.at. 172800 IN A 194.146.106.50 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN A 81.91.173.130 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN A 194.0.25.10 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN A 185.102.12.2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 d.ns.at. 172800 IN A 81.91.161.98 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d ns9.univie.ac.at. 172800 IN A 194.0.10.100 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for at/DNSKEY
	Received 917 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 917 octets ;; HEADER SECTION ;; id = 44938 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS n.ns.at. at. 172800 IN NS d.ns.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS ns9.univie.ac.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS r.ns.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . WDcYt3+HcG0ZgNdr1j+3NuwUz1WYrXxWwtQ/iEcCIX1ZPIh5OObQAPGU8QsBmdZ+mvIfnHRU5gmV vFnWA05hn2s6XyVzkLLI9VUFes8A3ZST4oCP2ur5tBD3dKK1XJ9cmqcR1wLo2t/oGNMyUA2gpZdx GDIvvzEJ/RYwR0m78bJcqJzPuxOYPb5CG3rco6pf/VIuNmQy7LNDV4HHt+kuF9gR45JPROshl+vC qBH5kTlRI0rD2eNbyRhwUXBM1NmSfcu057+bHFn3NzuP916CHr3ASfOwBqk6uFdF0ckNZWEhP18t +qM4vbKiiNl8cP+89Of4qNa3MqxAQTcunlUvXQ== ) ;; ADDITIONAL SECTION (17 records) ns9.univie.ac.at. 172800 IN A 194.0.10.100 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 u.ns.at. 172800 IN A 185.102.12.2 r.ns.at. 172800 IN A 194.0.25.10 n.ns.at. 172800 IN A 81.91.173.130 j.ns.at. 172800 IN A 194.146.106.50 d.ns.at. 172800 IN A 81.91.161.98 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 r.ns.at. 172800 IN AAAA 2001:678:20::10 n.ns.at. 172800 IN AAAA 2a02:568:281::130 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d ;; { "EDNS-VERSION": 0 }
	Found child zone at

	Checking DS between . and at
	Query to i.root-servers.net for at/DS
	Received 414 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 414 octets ;; HEADER SECTION ;; id = 54482 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DS ;; ANSWER SECTION (3 records) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . WDcYt3+HcG0ZgNdr1j+3NuwUz1WYrXxWwtQ/iEcCIX1ZPIh5OObQAPGU8QsBmdZ+mvIfnHRU5gmV vFnWA05hn2s6XyVzkLLI9VUFes8A3ZST4oCP2ur5tBD3dKK1XJ9cmqcR1wLo2t/oGNMyUA2gpZdx GDIvvzEJ/RYwR0m78bJcqJzPuxOYPb5CG3rco6pf/VIuNmQy7LNDV4HHt+kuF9gR45JPROshl+vC qBH5kTlRI0rD2eNbyRhwUXBM1NmSfcu057+bHFn3NzuP916CHr3ASfOwBqk6uFdF0ckNZWEhP18t +qM4vbKiiNl8cP+89Of4qNa3MqxAQTcunlUvXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for at in the . zone
	DS=18942/SHA-256 has algorithm ECDSAP256SHA256
	DS=1253/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`at. 86400 IN RRSIG ( DS 8 1 86400 20240529200000 20240516190000 5613 . WDcYt3+HcG0ZgNdr1j+3NuwUz1WYrXxWwtQ/iEcCIX1ZPIh5OObQAPGU8QsBmdZ+mvIfnHRU5gmV vFnWA05hn2s6XyVzkLLI9VUFes8A3ZST4oCP2ur5tBD3dKK1XJ9cmqcR1wLo2t/oGNMyUA2gpZdx GDIvvzEJ/RYwR0m78bJcqJzPuxOYPb5CG3rco6pf/VIuNmQy7LNDV4HHt+kuF9gR45JPROshl+vC qBH5kTlRI0rD2eNbyRhwUXBM1NmSfcu057+bHFn3NzuP916CHr3ASfOwBqk6uFdF0ckNZWEhP18t +qM4vbKiiNl8cP+89Of4qNa3MqxAQTcunlUvXQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=18942/SHA-256 is now in the chain-of-trust
	DS=1253/SHA-256 is now in the chain-of-trust
	`at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f )`
	`at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e )`
	Query to n.ns.at for at/DNSKEY
	Received 449 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 449 octets ;; HEADER SECTION ;; id = 13155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (5 records) at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460 at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345 at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942 at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253 at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240528074710 20240514030154 18942 at. 8Hf8sZ6P2CEkDq7267Wz+lUSp+qG14CqEZaa17J2Wxcjc3O/fY4jdHu0U2PgHVqw/u2crw3pXXzd ubupWfgBcg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for at
	`at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460`
	`at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345`
	`at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942`
	`at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253`
	DNSKEY=18942/SEP is now in the chain-of-trust
	DS=18942/SHA-256 verifies DNSKEY=18942/SEP
	DNSKEY=1253/SEP is now in the chain-of-trust
	DS=1253/SHA-256 verifies DNSKEY=1253/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240528074710 20240514030154 18942 at. 8Hf8sZ6P2CEkDq7267Wz+lUSp+qG14CqEZaa17J2Wxcjc3O/fY4jdHu0U2PgHVqw/u2crw3pXXzd ubupWfgBcg== )`
	RRSIG=18942 and DNSKEY=18942/SEP verifies the DNSKEY RRset
	DNSKEY=8460 is now in the chain-of-trust
	DNSKEY=6345 is now in the chain-of-trust
	Query to n.ns.at for ac.at/A
	Received 525 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 525 octets ;; HEADER SECTION ;; id = 38767 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n.ns.at is authoritative for ac.at
	Query to ns2.univie.ac.at for ac.at/DNSKEY
	Received 751 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 751 octets ;; HEADER SECTION ;; id = 21343 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN DNSKEY ;; ANSWER SECTION (3 records) ac.at. 3600 IN DNSKEY ( 257 3 8 AwEAAb/+imJTFFVOIWo+zwFheIIQz8YwrXO7UH8LcM+Mh9iB2W0iZNDNgEOIuvabKZp6S3TLcly+ GcjnxeZfGT3joR3G6U+N2ULCavzo7+Konzes9P4L0gvKKMF6JYokj8+hlRviP3GBIb54w8LPjkOU kTg6N6N5OeD73h1Gjk5eJxvqwKIan2vlE8b+/xHgFAcY4uVF+cqrbYu2XKc9JvtOVvXySMfiivGt DPnEinRey2kaL+QlqaVyUecRn8RQqE5/kDlWy9bYoIa6ffp3XA6Y5AF2xvmxvntdR+PWO4AVMa5+ 9IcjqItWTh1d5HpvsDdAjVzWabFg+RvTahP0B10YSgM= ) ; Key ID = 21577 ac.at. 3600 IN DNSKEY ( 256 3 8 AwEAAdZ2eGi7ibcPk2R1OC2yusWaCqUwdjJGcilXM0YWKf+P8bF6pRuTqHNYCJDOVKU1j52HjD+s APJ5Yb2E3OzOvlIcs9igRilEIYcMSfJ75EOxj3mRRP4+8QU/I1ajiIJEJhSwrbiWdTcHODJfvGvB AP3MY2tdAaEE0AH5R1gT512b ) ; Key ID = 13683 ac.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240528110136 20240514014605 21577 ac.at. QsIMVW9gwrn+T9cStKK6kFURLxj7leRQgpXF+BKzj+/2ru7yqiHWXI3C1MEgSbDT8dgZlvIKE18c QuXhJ0c3gBWxynDDAfOQJDwsNjQ0jOO6pCS+pYy6ktJru0vLaPTzAo/otCavcd8muxfksq7pzohv apPC42NA6OPRwhn0SJliq5F3UYnULejAnYZx3OBLsSs3yO8I2kxUS/5Afi81I8hW4Ig8LbR9Z6mD tRMJ5TIdEuiJQ27Wvstfa59O65sjnZ+2l40KZPx0HKefK7bGmNgtB9O0GPeraeBm02kchSh6JPls yz9nLgvei1gSsBGEGe4JD2ziEaeZaTYOvPvOMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ac.at
	Attempting to learn nameservers for ac.at
	Query to ns2.univie.ac.at for ac.at/NS
	Received 284 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 284 octets ;; HEADER SECTION ;; id = 28324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN NS ;; ANSWER SECTION (5 records) ac.at. 10800 IN NS d.ns.at. ac.at. 10800 IN NS ns1.univie.ac.at. ac.at. 10800 IN NS n.ns.at. ac.at. 10800 IN NS ns2.univie.ac.at. ac.at. 10800 IN RRSIG ( NS 8 2 10800 20240527231854 20240514034605 13683 ac.at. b9FbgfTnOzVJsMeQ0Y6qhKKEMLlk0WgzL6+audldxXXYb/5mnd2b6OWYqbHK0zB3xPlhMdlGR3gf JREvmypA6vrY2i0k07rSAHBitSVJHLxUWU3sW2URvhJvI1aBdVrjmSSXBzAWcEj+NIvZDX5Xyi+e i+pyYG7s7F0SbZXmqTA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found ac.at nameservers: d.ns.at, ns1.univie.ac.at, n.ns.at, ns2.univie.ac.at

ac.at

	Checking DS between at and ac.at
	Query to u.ns.at for ac.at/DS
	Received 180 bytes from 185.102.12.2
	;; Response received from [185.102.12.2] 180 octets ;; HEADER SECTION ;; id = 23333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN DS ;; ANSWER SECTION (2 records) ac.at. 10800 IN DS ( 21577 8 2 54dfd9b3aedaf666a279ccb25da32f63775be5fc848e6776994a4327fc426b73 ) ac.at. 10800 IN RRSIG ( DS 13 2 10800 20240526173849 20240512040158 6345 at. OXyfN1Ve44vUqw0nG8BN5cXzF3ws+NkGyMIQmTvJmJTcbevh65bEm8QavJsSzNpu+dU5WvA25LJ/ QdgsWJ6fSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ac.at in the at zone
	DS=21577/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ac.at. 10800 IN RRSIG ( DS 13 2 10800 20240526173849 20240512040158 6345 at. OXyfN1Ve44vUqw0nG8BN5cXzF3ws+NkGyMIQmTvJmJTcbevh65bEm8QavJsSzNpu+dU5WvA25LJ/ QdgsWJ6fSg== )`
	RRSIG=6345 and DNSKEY=6345 verifies the DS RRset
	DS=21577/SHA-256 is now in the chain-of-trust
	`ac.at. 10800 IN DS ( 21577 8 2 54dfd9b3aedaf666a279ccb25da32f63775be5fc848e6776994a4327fc426b73 )`
	Query to ns1.univie.ac.at for ac.at/DNSKEY
	Received 751 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 751 octets ;; HEADER SECTION ;; id = 59308 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN DNSKEY ;; ANSWER SECTION (3 records) ac.at. 3600 IN DNSKEY ( 256 3 8 AwEAAdZ2eGi7ibcPk2R1OC2yusWaCqUwdjJGcilXM0YWKf+P8bF6pRuTqHNYCJDOVKU1j52HjD+s APJ5Yb2E3OzOvlIcs9igRilEIYcMSfJ75EOxj3mRRP4+8QU/I1ajiIJEJhSwrbiWdTcHODJfvGvB AP3MY2tdAaEE0AH5R1gT512b ) ; Key ID = 13683 ac.at. 3600 IN DNSKEY ( 257 3 8 AwEAAb/+imJTFFVOIWo+zwFheIIQz8YwrXO7UH8LcM+Mh9iB2W0iZNDNgEOIuvabKZp6S3TLcly+ GcjnxeZfGT3joR3G6U+N2ULCavzo7+Konzes9P4L0gvKKMF6JYokj8+hlRviP3GBIb54w8LPjkOU kTg6N6N5OeD73h1Gjk5eJxvqwKIan2vlE8b+/xHgFAcY4uVF+cqrbYu2XKc9JvtOVvXySMfiivGt DPnEinRey2kaL+QlqaVyUecRn8RQqE5/kDlWy9bYoIa6ffp3XA6Y5AF2xvmxvntdR+PWO4AVMa5+ 9IcjqItWTh1d5HpvsDdAjVzWabFg+RvTahP0B10YSgM= ) ; Key ID = 21577 ac.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240528110136 20240514014605 21577 ac.at. QsIMVW9gwrn+T9cStKK6kFURLxj7leRQgpXF+BKzj+/2ru7yqiHWXI3C1MEgSbDT8dgZlvIKE18c QuXhJ0c3gBWxynDDAfOQJDwsNjQ0jOO6pCS+pYy6ktJru0vLaPTzAo/otCavcd8muxfksq7pzohv apPC42NA6OPRwhn0SJliq5F3UYnULejAnYZx3OBLsSs3yO8I2kxUS/5Afi81I8hW4Ig8LbR9Z6mD tRMJ5TIdEuiJQ27Wvstfa59O65sjnZ+2l40KZPx0HKefK7bGmNgtB9O0GPeraeBm02kchSh6JPls yz9nLgvei1gSsBGEGe4JD2ziEaeZaTYOvPvOMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ac.at
	`ac.at. 3600 IN DNSKEY ( 256 3 8 AwEAAdZ2eGi7ibcPk2R1OC2yusWaCqUwdjJGcilXM0YWKf+P8bF6pRuTqHNYCJDOVKU1j52HjD+s APJ5Yb2E3OzOvlIcs9igRilEIYcMSfJ75EOxj3mRRP4+8QU/I1ajiIJEJhSwrbiWdTcHODJfvGvB AP3MY2tdAaEE0AH5R1gT512b ) ; Key ID = 13683`
	`ac.at. 3600 IN DNSKEY ( 257 3 8 AwEAAb/+imJTFFVOIWo+zwFheIIQz8YwrXO7UH8LcM+Mh9iB2W0iZNDNgEOIuvabKZp6S3TLcly+ GcjnxeZfGT3joR3G6U+N2ULCavzo7+Konzes9P4L0gvKKMF6JYokj8+hlRviP3GBIb54w8LPjkOU kTg6N6N5OeD73h1Gjk5eJxvqwKIan2vlE8b+/xHgFAcY4uVF+cqrbYu2XKc9JvtOVvXySMfiivGt DPnEinRey2kaL+QlqaVyUecRn8RQqE5/kDlWy9bYoIa6ffp3XA6Y5AF2xvmxvntdR+PWO4AVMa5+ 9IcjqItWTh1d5HpvsDdAjVzWabFg+RvTahP0B10YSgM= ) ; Key ID = 21577`
	DNSKEY=21577/SEP is now in the chain-of-trust
	DS=21577/SHA-256 verifies DNSKEY=21577/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ac.at. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240528110136 20240514014605 21577 ac.at. QsIMVW9gwrn+T9cStKK6kFURLxj7leRQgpXF+BKzj+/2ru7yqiHWXI3C1MEgSbDT8dgZlvIKE18c QuXhJ0c3gBWxynDDAfOQJDwsNjQ0jOO6pCS+pYy6ktJru0vLaPTzAo/otCavcd8muxfksq7pzohv apPC42NA6OPRwhn0SJliq5F3UYnULejAnYZx3OBLsSs3yO8I2kxUS/5Afi81I8hW4Ig8LbR9Z6mD tRMJ5TIdEuiJQ27Wvstfa59O65sjnZ+2l40KZPx0HKefK7bGmNgtB9O0GPeraeBm02kchSh6JPls yz9nLgvei1gSsBGEGe4JD2ziEaeZaTYOvPvOMQ== )`
	RRSIG=21577 and DNSKEY=21577/SEP verifies the DNSKEY RRset
	DNSKEY=13683 is now in the chain-of-trust
	Query to ns1.univie.ac.at for ac.at/A
	Received 520 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 520 octets ;; HEADER SECTION ;; id = 26294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.univie.ac.at is authoritative for ac.at
	Found RRSIG signed by ac.at zone
	Query to d.ns.at for ac.at/SOA
	Received 518 bytes from 81.91.161.98
	;; Response received from [81.91.161.98] 518 octets ;; HEADER SECTION ;; id = 54866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN SOA ;; ANSWER SECTION (2 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) ;; AUTHORITY SECTION (5 records) ac.at. 10800 IN NS ns1.univie.ac.at. ac.at. 10800 IN NS d.ns.at. ac.at. 10800 IN NS n.ns.at. ac.at. 10800 IN NS ns2.univie.ac.at. ac.at. 10800 IN RRSIG ( NS 8 2 10800 20240527231854 20240514034605 13683 ac.at. b9FbgfTnOzVJsMeQ0Y6qhKKEMLlk0WgzL6+audldxXXYb/5mnd2b6OWYqbHK0zB3xPlhMdlGR3gf JREvmypA6vrY2i0k07rSAHBitSVJHLxUWU3sW2URvhJvI1aBdVrjmSSXBzAWcEj+NIvZDX5Xyi+e i+pyYG7s7F0SbZXmqTA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.univie.ac.at for ac.at/SOA
	Received 518 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 518 octets ;; HEADER SECTION ;; id = 20830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN SOA ;; ANSWER SECTION (2 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) ;; AUTHORITY SECTION (5 records) ac.at. 10800 IN NS ns1.univie.ac.at. ac.at. 10800 IN NS ns2.univie.ac.at. ac.at. 10800 IN NS d.ns.at. ac.at. 10800 IN NS n.ns.at. ac.at. 10800 IN RRSIG ( NS 8 2 10800 20240527231854 20240514034605 13683 ac.at. b9FbgfTnOzVJsMeQ0Y6qhKKEMLlk0WgzL6+audldxXXYb/5mnd2b6OWYqbHK0zB3xPlhMdlGR3gf JREvmypA6vrY2i0k07rSAHBitSVJHLxUWU3sW2URvhJvI1aBdVrjmSSXBzAWcEj+NIvZDX5Xyi+e i+pyYG7s7F0SbZXmqTA= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n.ns.at for ac.at/SOA
	Received 280 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 280 octets ;; HEADER SECTION ;; id = 11893 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN SOA ;; ANSWER SECTION (2 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.univie.ac.at for ac.at/A
	Received 520 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 520 octets ;; HEADER SECTION ;; id = 45682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= )`
	RRSIG=13683 and DNSKEY=13683 verifies the SOA RRset

ac.at

	Query to d.ns.at for ac.at/A
	Received 525 bytes from 81.91.161.98
	;; Response received from [81.91.161.98] 525 octets ;; HEADER SECTION ;; id = 31491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	d.ns.at is authoritative for ac.at
	Found RRSIG signed by ac.at zone
	Query to d.ns.at for ac.at/A
	Received 525 bytes from 81.91.161.98
	;; Response received from [81.91.161.98] 525 octets ;; HEADER SECTION ;; id = 47168 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= )`
	RRSIG=13683 and DNSKEY=13683 verifies the SOA RRset

ac.at

	Query to ns2.univie.ac.at for ac.at/A
	Received 525 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 525 octets ;; HEADER SECTION ;; id = 57024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.univie.ac.at is authoritative for ac.at
	Found RRSIG signed by ac.at zone
	Query to ns2.univie.ac.at for ac.at/A
	Received 525 bytes from 192.92.125.2
	;; Response received from [192.92.125.2] 525 octets ;; HEADER SECTION ;; id = 5506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= )`
	RRSIG=13683 and DNSKEY=13683 verifies the SOA RRset

ac.at

	Query to n.ns.at for ac.at/A
	Received 525 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 525 octets ;; HEADER SECTION ;; id = 14539 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n.ns.at is authoritative for ac.at
	Found RRSIG signed by ac.at zone
	Query to n.ns.at for ac.at/A
	Received 525 bytes from 81.91.173.130
	;; Response received from [81.91.173.130] 525 octets ;; HEADER SECTION ;; id = 10817 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ac.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ac.at. 3600 IN SOA ( ac-at-master.aco.net. domain-admin.univie.ac.at. 1715913962 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN NSEC3 ( 1 1 0 - va0171aj9d9s2e0rvgapgtk1b3tfrrt6 NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= ) v5elmve3g20i7o5k4okvoph6hmi1se50.ac.at. 3600 IN RRSIG ( NSEC3 8 3 3600 20240528004103 20240513124606 13683 ac.at. EYHn2y9N2FGTIW+hU2aKf2Q5sS7JaiULdEywI7eyAq2+gsRk0XpdUl3wP52XX7JUExajfFdtKycH 004jf7d1/C1HQ/1+jLiPeozl4m6eIaHympI+cgxFrmHyfyIVv3Dk41K4SNjozN+0VlOuEaFCUKHv YujlErm88kjbx57xD8w= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`ac.at. 3600 IN RRSIG ( SOA 8 2 3600 20240531101009 20240517014605 13683 ac.at. KAcZkI3z9Zo6VtW3HGPFcjSHtba4LqFldK60Ni4gNrjCaOFZxcDjGwUvno0ZCB7WxtVAVoqvnPYK NXtMOoZs2mDgoPG6iusEqmUZT0RQqruYdccJLOc8iBn1qiS9bZcIa1t5oP0rh9orcXIZppkwY3j/ MepuRExlBanZaP2+xFk= )`
	RRSIG=13683 and DNSKEY=13683 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ac.at at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: