DNSSEC Debugger - berendsen.cc

Domain Name:

Time: 2024-05-18 15:52:13 UTC

Analyzing DNSSEC problems for berendsen.cc

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 864 octets ;; HEADER SECTION ;; id = 8960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for berendsen.cc/A
	Received 633 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 633 octets ;; HEADER SECTION ;; id = 36875 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 172800 IN NS ac4.nstld.com. cc. 172800 IN NS ac2.nstld.com. cc. 172800 IN NS ac1.nstld.com. cc. 172800 IN NS ac3.nstld.com. cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . GVGUdmZdZp9hSfAw89XoCXoejveI/pW5bWVfkApNvSP22GBdaIpYuhqcqU3FP1LgAcgoaA4UwAhE CqEZpWiUiRC/90cZO2kEZ6eIp8OzWq7i8Qv0r1DjDpSBSOmGvRzVlzBZo4kbrdnO15phoDfUFSRK msC9/8SVYkolUA1aZiOyR/T8ZVC1GWq0/J8RTbPkdACrJohD6hpB7G/UDkCALI5AGQ0rya2CIOwS f/C/uQ53NGKUKVrfsPUeDOSz3aMVP7rpGcevZI2uACYVRY77DLrAOPmrZoEseQ1MnTJM/I553OQs PpJFOuwJAXFhmBIHkxHf/u3GBbBq78ou4jfP8g== ) ;; ADDITIONAL SECTION (9 records) ac4.nstld.com. 172800 IN A 192.42.176.30 ac3.nstld.com. 172800 IN A 192.42.175.30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac1.nstld.com. 172800 IN A 192.42.173.30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for cc/DNSKEY
	Received 623 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 623 octets ;; HEADER SECTION ;; id = 14313 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 172800 IN NS ac1.nstld.com. cc. 172800 IN NS ac2.nstld.com. cc. 172800 IN NS ac3.nstld.com. cc. 172800 IN NS ac4.nstld.com. cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . GeyNrMeuEufk7fJdwwsQilJCy84CwuYLim/P0FcjjQ5qR0nWrMkioLIiPHud6eRcpykQ89I8QpKA tEuwca4NrYkNYOmUKwX/djVk2IS4QC+4+/rv67cRfTSYl0tOP4GBtWHWRFhh1u9kUoAPBZdg575k JEKuSw4F4wH3xo7GwQQKkJHGDOlxG+u89ej1dY9toafTZJhVZU+lENz2YiKNrU9pNe2gFAWXOFv6 HHX+vXAOxC1p++HReYbVakxl1auNZgUQERxu1ghuhEWgnfxmXASM4Q+Q3dARqIvrejdGME045ZoB lM/wHKbFNWaGT6MTvDoKhJFndybGQZYOFK90HQ== ) ;; ADDITIONAL SECTION (9 records) ac1.nstld.com. 172800 IN A 192.42.173.30 ac1.nstld.com. 172800 IN AAAA 2001:500:120::30 ac2.nstld.com. 172800 IN A 192.42.174.30 ac2.nstld.com. 172800 IN AAAA 2001:500:121::30 ac3.nstld.com. 172800 IN A 192.42.175.30 ac3.nstld.com. 172800 IN AAAA 2001:500:122::30 ac4.nstld.com. 172800 IN A 192.42.176.30 ac4.nstld.com. 172800 IN AAAA 2001:500:123::30 ;; { "EDNS-VERSION": 0 }
	Found child zone cc

	Checking DS between . and cc
	Query to g.root-servers.net for cc/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 25320 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DS ;; ANSWER SECTION (2 records) cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 ) cc. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . GeyNrMeuEufk7fJdwwsQilJCy84CwuYLim/P0FcjjQ5qR0nWrMkioLIiPHud6eRcpykQ89I8QpKA tEuwca4NrYkNYOmUKwX/djVk2IS4QC+4+/rv67cRfTSYl0tOP4GBtWHWRFhh1u9kUoAPBZdg575k JEKuSw4F4wH3xo7GwQQKkJHGDOlxG+u89ej1dY9toafTZJhVZU+lENz2YiKNrU9pNe2gFAWXOFv6 HHX+vXAOxC1p++HReYbVakxl1auNZgUQERxu1ghuhEWgnfxmXASM4Q+Q3dARqIvrejdGME045ZoB lM/wHKbFNWaGT6MTvDoKhJFndybGQZYOFK90HQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cc in the . zone
	DS=519/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`cc. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . GeyNrMeuEufk7fJdwwsQilJCy84CwuYLim/P0FcjjQ5qR0nWrMkioLIiPHud6eRcpykQ89I8QpKA tEuwca4NrYkNYOmUKwX/djVk2IS4QC+4+/rv67cRfTSYl0tOP4GBtWHWRFhh1u9kUoAPBZdg575k JEKuSw4F4wH3xo7GwQQKkJHGDOlxG+u89ej1dY9toafTZJhVZU+lENz2YiKNrU9pNe2gFAWXOFv6 HHX+vXAOxC1p++HReYbVakxl1auNZgUQERxu1ghuhEWgnfxmXASM4Q+Q3dARqIvrejdGME045ZoB lM/wHKbFNWaGT6MTvDoKhJFndybGQZYOFK90HQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=519/SHA-256 is now in the chain-of-trust
	`cc. 86400 IN DS ( 519 8 2 e1ec6495abd34562e6f433dee201e6c6a52cb10af69c04d675da692d2d566897 )`
	Query to ac4.nstld.com for cc/DNSKEY
	Received 775 bytes from 192.42.176.30
	;; Response received from [192.42.176.30] 775 octets ;; HEADER SECTION ;; id = 57544 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cc. IN DNSKEY ;; ANSWER SECTION (3 records) cc. 86400 IN DNSKEY ( 257 3 8 AQPpexyFq/cE7G+Kh1V9tl7nccHwSH3KRpsm6Rqj3LHdI1LhaZpqfl/yg9elcY/I0G3o7Cc+BV3R pFpSZXSt1FCH7/gm8VG9ei5QxQoCcrhIV/EIDzW8E+oVKE//FtCP9WnZ7am4J+tErndII+mtJdpp uAYjXk7ub0tgWfebl3zLHwZSxSIJ4ZWAEDvzV4nvBU1AxdNwBYnacWGqM38REh5nsTOkysX3TuH9 VIz5lT3caMrFXyiq8aLBXo9KYmfwTs/wr2qtdvD3gFqspO22rDyEFPsrZIDBQtBx/hJFHAzvhaQG s3zH+Vzu1hrji9GZEvZC4dhhzMEl18ZRDpOebsaZ ) ; Key ID = 519 cc. 86400 IN DNSKEY ( 256 3 8 AwEAAaI9CeatjdxzMojJt+z9v0Pqnu5O9rQ9ux7fxAoexLK1widKKh0w/sTUJrhRxWYvCxvfEVrn Uuc4skkvUtnHIMpNvuDdsY++OjIE/54tDKbz0whEX4ebYkdAcyWORu+mFY+XBOrr8C9cP0OO5bxi dsFnAWRwXFiZdJyI3EwOrRRw4FqagZ1Zp9O9bTSqi63av5707NV4c6iq1MF0kXuf33E= ) ; Key ID = 39195 cc. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240602143408 20240518142908 519 cc. TE3qRycGiElG6aVXVaBx038kix1VdTUNyeCz9ROpo2MdA5rjN4sZRcmB8J9oq7KFRWV+1GsD5r7Y BP4q6K0OxtxHJXSKKGZM1iomLcFNKpaYLwIRNzqp4tHLZvVUSouaOkLWg/+yZPSbN4OE5j5q8udo FXsxzSakDVGFMnnGD5ml/s3/03+5Wrv09LXmLaxE+nCK5/Puwo+U0++s7u7vLy5EeyISnu0MaSNs xfrMeHd7K7V1cBy4BXLtTeyR6O9UhMn1tpdfpBP7Fnlm/zJlRut3Wvq70d3y+OYYO/doz2JI6n9T KvNbn6ZXFAaZv1jkg1GES809aRpf2JMWFd66lA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cc
	`cc. 86400 IN DNSKEY ( 257 3 8 AQPpexyFq/cE7G+Kh1V9tl7nccHwSH3KRpsm6Rqj3LHdI1LhaZpqfl/yg9elcY/I0G3o7Cc+BV3R pFpSZXSt1FCH7/gm8VG9ei5QxQoCcrhIV/EIDzW8E+oVKE//FtCP9WnZ7am4J+tErndII+mtJdpp uAYjXk7ub0tgWfebl3zLHwZSxSIJ4ZWAEDvzV4nvBU1AxdNwBYnacWGqM38REh5nsTOkysX3TuH9 VIz5lT3caMrFXyiq8aLBXo9KYmfwTs/wr2qtdvD3gFqspO22rDyEFPsrZIDBQtBx/hJFHAzvhaQG s3zH+Vzu1hrji9GZEvZC4dhhzMEl18ZRDpOebsaZ ) ; Key ID = 519`
	`cc. 86400 IN DNSKEY ( 256 3 8 AwEAAaI9CeatjdxzMojJt+z9v0Pqnu5O9rQ9ux7fxAoexLK1widKKh0w/sTUJrhRxWYvCxvfEVrn Uuc4skkvUtnHIMpNvuDdsY++OjIE/54tDKbz0whEX4ebYkdAcyWORu+mFY+XBOrr8C9cP0OO5bxi dsFnAWRwXFiZdJyI3EwOrRRw4FqagZ1Zp9O9bTSqi63av5707NV4c6iq1MF0kXuf33E= ) ; Key ID = 39195`
	DNSKEY=519/SEP is now in the chain-of-trust
	DS=519/SHA-256 verifies DNSKEY=519/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cc. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240602143408 20240518142908 519 cc. TE3qRycGiElG6aVXVaBx038kix1VdTUNyeCz9ROpo2MdA5rjN4sZRcmB8J9oq7KFRWV+1GsD5r7Y BP4q6K0OxtxHJXSKKGZM1iomLcFNKpaYLwIRNzqp4tHLZvVUSouaOkLWg/+yZPSbN4OE5j5q8udo FXsxzSakDVGFMnnGD5ml/s3/03+5Wrv09LXmLaxE+nCK5/Puwo+U0++s7u7vLy5EeyISnu0MaSNs xfrMeHd7K7V1cBy4BXLtTeyR6O9UhMn1tpdfpBP7Fnlm/zJlRut3Wvq70d3y+OYYO/doz2JI6n9T KvNbn6ZXFAaZv1jkg1GES809aRpf2JMWFd66lA== )`
	RRSIG=519 and DNSKEY=519/SEP verifies the DNSKEY RRset
	DNSKEY=39195 is now in the chain-of-trust
	Query to ac2.nstld.com for berendsen.cc/A
	Received 644 bytes from 192.42.174.30
	;; Response received from [192.42.174.30] 644 octets ;; HEADER SECTION ;; id = 44055 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) berendsen.cc. 172800 IN NS marty.ns.cloudflare.com. berendsen.cc. 172800 IN NS dana.ns.cloudflare.com. RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqmjnmql3frbmb0msddeb0crplopt5if NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522162011 20240515162011 39195 cc. DKP0g8D8Ahr+hCkLlnAQ4zhPF17UpsR7F7n4p+oNdaV1pLvoDNJY7yn0vT0VE27KIToRzh3JHNYu TQJpe7tx2WYymBNZ/kWRnh3QDREYwcOtsx/3WZFEINTgt4SouK/opsi/67nMxzNu2Ol08Xef9ws0 00R8v3FBtNRy5fKhHHpOEDT9p/6Iodos58XJHx4+qrx/tDyYTIPdZXvRyBvKpQ== ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN NSEC3 ( 1 1 0 - eo1arlpjqrb1o3ijq6phj8ja7974eha2 NS DS RRSIG ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522172012 20240515172012 39195 cc. cfkSxvQ0x2Zd0iQkig/FrXdaw2z8qu2dG51P1H9OvLJp30iSGZaM3OJadnMGaLknvrcqlscb24B6 cCjhBvW7OIXExWOLneMqeKR4MmpJVIJUL+3RrIJSCwmDIh9l0ayZiAhD4CAa3d9W14T+dNqp+7dR WwDPkFPg7UrcPCx4+AhFYc0mTLa4ufCGE5DICCudpkdg/jBrhxwFufDg515MVQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ac4.nstld.com for berendsen.cc/DNSKEY
	Received 644 bytes from 192.42.176.30
	;; Response received from [192.42.176.30] 644 octets ;; HEADER SECTION ;; id = 51674 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) berendsen.cc. 172800 IN NS marty.ns.cloudflare.com. berendsen.cc. 172800 IN NS dana.ns.cloudflare.com. RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqmjnmql3frbmb0msddeb0crplopt5if NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522162011 20240515162011 39195 cc. DKP0g8D8Ahr+hCkLlnAQ4zhPF17UpsR7F7n4p+oNdaV1pLvoDNJY7yn0vT0VE27KIToRzh3JHNYu TQJpe7tx2WYymBNZ/kWRnh3QDREYwcOtsx/3WZFEINTgt4SouK/opsi/67nMxzNu2Ol08Xef9ws0 00R8v3FBtNRy5fKhHHpOEDT9p/6Iodos58XJHx4+qrx/tDyYTIPdZXvRyBvKpQ== ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN NSEC3 ( 1 1 0 - eo1arlpjqrb1o3ijq6phj8ja7974eha2 NS DS RRSIG ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522172012 20240515172012 39195 cc. cfkSxvQ0x2Zd0iQkig/FrXdaw2z8qu2dG51P1H9OvLJp30iSGZaM3OJadnMGaLknvrcqlscb24B6 cCjhBvW7OIXExWOLneMqeKR4MmpJVIJUL+3RrIJSCwmDIh9l0ayZiAhD4CAa3d9W14T+dNqp+7dR WwDPkFPg7UrcPCx4+AhFYc0mTLa4ufCGE5DICCudpkdg/jBrhxwFufDg515MVQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone berendsen.cc

berendsen.cc

	Checking DS between cc and berendsen.cc
	Query to ac2.nstld.com for berendsen.cc/DS
	Received 849 bytes from 192.42.174.30
	;; Response received from [192.42.174.30] 849 octets ;; HEADER SECTION ;; id = 31013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cc. 86400 IN SOA ( ac1.nstld.com. info.verisign-grs.com. 1716047495 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) cc. 86400 IN RRSIG ( SOA 8 1 86400 20240525134135 20240518134135 39195 cc. Kf7pPwYXl39UvenTXU8fMrFvMgMXBjnxeY0ahs8+pTmlq6Zn0diDH73ERAEQRIKq2iZL4KiSG4Wr dpaekWxjAwnHP4+D3o0KP64XXi8PepavJhSDSfDYcNXuIrfD0tr4EUecgD4qU/cpAYuQ3PRqcXVo bUXTHzgL+hLBUAuvvVxdNwgtqCNdxilqMqxgsczN7Vcj0p5cmUVOr9GfX24YzA== ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN NSEC3 ( 1 1 0 - rqmjnmql3frbmb0msddeb0crplopt5if NS SOA RRSIG DNSKEY NSEC3PARAM ) RQGAP5UF6Q1NGVCKFNO8RANVDN5ILRIN.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522162011 20240515162011 39195 cc. DKP0g8D8Ahr+hCkLlnAQ4zhPF17UpsR7F7n4p+oNdaV1pLvoDNJY7yn0vT0VE27KIToRzh3JHNYu TQJpe7tx2WYymBNZ/kWRnh3QDREYwcOtsx/3WZFEINTgt4SouK/opsi/67nMxzNu2Ol08Xef9ws0 00R8v3FBtNRy5fKhHHpOEDT9p/6Iodos58XJHx4+qrx/tDyYTIPdZXvRyBvKpQ== ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN NSEC3 ( 1 1 0 - eo1arlpjqrb1o3ijq6phj8ja7974eha2 NS DS RRSIG ) ENQC1NFC55GCMF06D2IBU8EBKB3DQOD2.cc. 86400 IN RRSIG ( NSEC3 8 2 86400 20240522172012 20240515172012 39195 cc. cfkSxvQ0x2Zd0iQkig/FrXdaw2z8qu2dG51P1H9OvLJp30iSGZaM3OJadnMGaLknvrcqlscb24B6 cCjhBvW7OIXExWOLneMqeKR4MmpJVIJUL+3RrIJSCwmDIh9l0ayZiAhD4CAa3d9W14T+dNqp+7dR WwDPkFPg7UrcPCx4+AhFYc0mTLa4ufCGE5DICCudpkdg/jBrhxwFufDg515MVQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for berendsen.cc in the cc zone
	Query to dana.ns.cloudflare.com for berendsen.cc/DNSKEY
	Received 309 bytes from 108.162.192.105
	;; Response received from [108.162.192.105] 309 octets ;; HEADER SECTION ;; id = 55391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN DNSKEY ;; ANSWER SECTION (3 records) berendsen.cc. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 berendsen.cc. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 berendsen.cc. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240707185812 20240507185812 2371 berendsen.cc. P8DtXrmFw7KlhUZWy3LLqWYLi1QJJ9u7qPV5pkhRYFI9If3rVTLgW2hXix2ZHKGZJXpqzdhNKt3m ROL0wc0+xg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for berendsen.cc
	`berendsen.cc. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`berendsen.cc. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`berendsen.cc. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240707185812 20240507185812 2371 berendsen.cc. P8DtXrmFw7KlhUZWy3LLqWYLi1QJJ9u7qPV5pkhRYFI9If3rVTLgW2hXix2ZHKGZJXpqzdhNKt3m ROL0wc0+xg== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to dana.ns.cloudflare.com for berendsen.cc/A
	Received 181 bytes from 108.162.192.105
	;; Response received from [108.162.192.105] 181 octets ;; HEADER SECTION ;; id = 17284 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (3 records) berendsen.cc. 300 IN A 104.21.75.244 berendsen.cc. 300 IN A 172.67.184.11 berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. aQJ4wTlsVQ26ntiaVxUocEagJXyGFPrsS7VPHj8VTaJ0hBL1gPOkcIpnnJQB4DD8aAJaLiMjt0Yx odWP4XdIjA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dana.ns.cloudflare.com is authoritative for berendsen.cc
	Found RRSIG signed by berendsen.cc zone
	Query to marty.ns.cloudflare.com for berendsen.cc/SOA
	Received 211 bytes from 173.245.59.204
	;; Response received from [173.245.59.204] 211 octets ;; HEADER SECTION ;; id = 61782 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN SOA ;; ANSWER SECTION (2 records) berendsen.cc. 1800 IN SOA ( dana.ns.cloudflare.com. dns.cloudflare.com. 2340680402 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) berendsen.cc. 1800 IN RRSIG ( SOA 13 2 1800 20240519165214 20240517145214 34505 berendsen.cc. NC5dWtUp8WSvEh4z8FpBVOcn/5oIadqn2p+QtA2a+DflGqzmoQ6m22n82vGbWf1F23Vzcb3WOuLS U6wJQzpkiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dana.ns.cloudflare.com for berendsen.cc/A
	Received 181 bytes from 172.64.32.105
	;; Response received from [172.64.32.105] 181 octets ;; HEADER SECTION ;; id = 46557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (3 records) berendsen.cc. 300 IN A 104.21.75.244 berendsen.cc. 300 IN A 172.67.184.11 berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. 5muRrOIUq+CV5Lumi9f/yIcBSowcKk88CsMQM4/9qe5VDp2H0Gbat6WiET/3ysaUXOohbwz7SS/P wHC5F6DC4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	berendsen.cc A RR has value 104.21.75.244
	berendsen.cc A RR has value 172.67.184.11
	Found 1 RRSIGs over A RRset
	`berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. 5muRrOIUq+CV5Lumi9f/yIcBSowcKk88CsMQM4/9qe5VDp2H0Gbat6WiET/3ysaUXOohbwz7SS/P wHC5F6DC4Q== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

berendsen.cc

	Query to marty.ns.cloudflare.com for berendsen.cc/A
	Received 181 bytes from 172.64.33.204
	;; Response received from [172.64.33.204] 181 octets ;; HEADER SECTION ;; id = 61919 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (3 records) berendsen.cc. 300 IN A 172.67.184.11 berendsen.cc. 300 IN A 104.21.75.244 berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. WKfxobdoCdQQwNZizFb9q7lV5O9AvIga8nhL8ZSGQvdgyrbIcxRy+10narSBXcQzgn+G2Z5KmihR iRth348eAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	marty.ns.cloudflare.com is authoritative for berendsen.cc
	Found RRSIG signed by berendsen.cc zone
	Query to marty.ns.cloudflare.com for berendsen.cc/A
	Received 181 bytes from 173.245.59.204
	;; Response received from [173.245.59.204] 181 octets ;; HEADER SECTION ;; id = 10677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; berendsen.cc. IN A ;; ANSWER SECTION (3 records) berendsen.cc. 300 IN A 104.21.75.244 berendsen.cc. 300 IN A 172.67.184.11 berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. QFvHt9si5LHPuTXNbmrorGn1GHLTTxkJ2h3ASqxrcfnAK1EODLWOIx8INotq7gc4L/UHALccDLKb nYPNNCsNnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	berendsen.cc A RR has value 104.21.75.244
	berendsen.cc A RR has value 172.67.184.11
	Found 1 RRSIGs over A RRset
	`berendsen.cc. 300 IN RRSIG ( A 13 2 300 20240519165214 20240517145214 34505 berendsen.cc. QFvHt9si5LHPuTXNbmrorGn1GHLTTxkJ2h3ASqxrcfnAK1EODLWOIx8INotq7gc4L/UHALccDLKb nYPNNCsNnQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test berendsen.cc at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: