DNSSEC Debugger

Domain Name:

Time: 2024-05-21 20:08:00 UTC

Analyzing DNSSEC problems for bw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 37605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for bw/A
	Received 563 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 563 octets ;; HEADER SECTION ;; id = 7328 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bw. 172800 IN NS pch.nic.net.bw. bw. 172800 IN NS dns1.nic.net.bw. bw. 172800 IN NS ns-bw.afrinic.net. bw. 172800 IN NS master.btc.net.bw. bw. 86400 IN NSEC by. NS RRSIG NSEC bw. 86400 IN RRSIG ( NSEC 8 1 86400 20240603170000 20240521160000 5613 . Re+TiC8vXTvOrkRMxP61Xv9389KVakKPP+ihSJ0ZAugJK9JaIP8dhbdpqIadNfCwrWbxxY8VTgkA Y0a7kJKBoWylunMPjBzps6Rko7M8BIO2NBphGFdcaeL53NRd8EbUsrMsZrGpWljhIjmribE0npTk 9ZO1Opvhc+AFRu65QC4IpbMuRV1Jte0YgNROK50gh3szChEeC2oMrmIhKlTECH25X0dbkWeeQ4ic byeZbzJtmEB3R50guq+ZS+mitkSwljyyZNNIpRcUyrgrp7kjNBCpjf73gcrkUszDKtBbXPNMKpHz +btfz8ssHCQ6Bm3BDVk0rORr/M8u0QFqL7a/mg== ) ;; ADDITIONAL SECTION (7 records) pch.nic.net.bw. 172800 IN A 204.61.216.70 pch.nic.net.bw. 172800 IN AAAA 2001:500:14:6070:ad::1 dns1.nic.net.bw. 172800 IN A 168.167.98.226 ns-bw.afrinic.net. 172800 IN A 196.216.168.72 ns-bw.afrinic.net. 172800 IN AAAA 2001:43f8:120::72 master.btc.net.bw. 172800 IN A 168.167.168.37 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for bw/DNSKEY
	Received 563 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 563 octets ;; HEADER SECTION ;; id = 58082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) bw. 172800 IN NS dns1.nic.net.bw. bw. 172800 IN NS ns-bw.afrinic.net. bw. 172800 IN NS pch.nic.net.bw. bw. 172800 IN NS master.btc.net.bw. bw. 86400 IN NSEC by. NS RRSIG NSEC bw. 86400 IN RRSIG ( NSEC 8 1 86400 20240603170000 20240521160000 5613 . Re+TiC8vXTvOrkRMxP61Xv9389KVakKPP+ihSJ0ZAugJK9JaIP8dhbdpqIadNfCwrWbxxY8VTgkA Y0a7kJKBoWylunMPjBzps6Rko7M8BIO2NBphGFdcaeL53NRd8EbUsrMsZrGpWljhIjmribE0npTk 9ZO1Opvhc+AFRu65QC4IpbMuRV1Jte0YgNROK50gh3szChEeC2oMrmIhKlTECH25X0dbkWeeQ4ic byeZbzJtmEB3R50guq+ZS+mitkSwljyyZNNIpRcUyrgrp7kjNBCpjf73gcrkUszDKtBbXPNMKpHz +btfz8ssHCQ6Bm3BDVk0rORr/M8u0QFqL7a/mg== ) ;; ADDITIONAL SECTION (7 records) dns1.nic.net.bw. 172800 IN A 168.167.98.226 ns-bw.afrinic.net. 172800 IN A 196.216.168.72 ns-bw.afrinic.net. 172800 IN AAAA 2001:43f8:120::72 pch.nic.net.bw. 172800 IN A 204.61.216.70 pch.nic.net.bw. 172800 IN AAAA 2001:500:14:6070:ad::1 master.btc.net.bw. 172800 IN A 168.167.168.37 ;; { "EDNS-VERSION": 0 }
	Found child zone bw

	Checking DS between . and bw
	Query to k.root-servers.net for bw/DS
	Received 703 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 703 octets ;; HEADER SECTION ;; id = 14651 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2024052101 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) . 86400 IN RRSIG ( SOA 8 0 86400 20240603170000 20240521160000 5613 . ZbxYFcKh/dAi/OkDouSgNhLsyt9fPqsLdVatVpR/LQB7v3HuEdcjM2Wz25+44+03voobkDmsT8ps iWXZiq5ZbMycMbFn1AcjBEmfDSwCR/DgeSyL43zCJu4rid1au1U1/anHWTrmw5VZtjREH3sQikVd ZcHQBx56f6sPkJ+Fr8iiUx/BqcPCYbW5f141eEUffKqKniyqpu0XFckwQpdQ6/6oPxSAlTHWbmfw eJXMmwqeFsT7kbdAgdCE+TDble9cHVfrzPWkMxCyWMIUS4x+zznmQ4D5N+rUEpA2DLury+WUhCsp dwIzwcsmCbpu34sQMt8S4KA2JmIHGUQs4IEjoQ== ) bw. 86400 IN NSEC by. NS RRSIG NSEC bw. 86400 IN RRSIG ( NSEC 8 1 86400 20240603170000 20240521160000 5613 . Re+TiC8vXTvOrkRMxP61Xv9389KVakKPP+ihSJ0ZAugJK9JaIP8dhbdpqIadNfCwrWbxxY8VTgkA Y0a7kJKBoWylunMPjBzps6Rko7M8BIO2NBphGFdcaeL53NRd8EbUsrMsZrGpWljhIjmribE0npTk 9ZO1Opvhc+AFRu65QC4IpbMuRV1Jte0YgNROK50gh3szChEeC2oMrmIhKlTECH25X0dbkWeeQ4ic byeZbzJtmEB3R50guq+ZS+mitkSwljyyZNNIpRcUyrgrp7kjNBCpjf73gcrkUszDKtBbXPNMKpHz +btfz8ssHCQ6Bm3BDVk0rORr/M8u0QFqL7a/mg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for bw in the . zone
	Query to ns-bw.afrinic.net for bw/DNSKEY
	Received 289 bytes from 196.216.168.72
	;; Response received from [196.216.168.72] 289 octets ;; HEADER SECTION ;; id = 24300 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN DNSKEY ;; ANSWER SECTION (3 records) bw. 7200 IN DNSKEY ( 256 3 13 tZTLnyUNsKM6Dvn9Javn4TtgQ99E+zqe9aUOLxVnv6SE7NJr9K/HIHMi6IHuCSCyA3Is2W6Rv1oy Z8UzSSrLug== ) ; Key ID = 23686 bw. 7200 IN DNSKEY ( 257 3 13 ZyV13l2yVxCeDGcnzFmE8AJjgzuJ6At1xtpBmNNzdFeDwVIzkgAhBEI3oa2oXfTP1B5H0gDtkbZj 8u2otuvbQA== ) ; Key ID = 62453 bw. 7200 IN RRSIG ( DNSKEY 13 1 7200 20240604200047 20240521183047 62453 bw. cg4oYb9o3H5ncjwSiGtiCS/zN9zc1+M+/iVixYgKZWgd1k74NlD+mEog8jAbT8Yo0Zes6lYHBOlR owGHpCuIzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for bw
	`bw. 7200 IN DNSKEY ( 256 3 13 tZTLnyUNsKM6Dvn9Javn4TtgQ99E+zqe9aUOLxVnv6SE7NJr9K/HIHMi6IHuCSCyA3Is2W6Rv1oy Z8UzSSrLug== ) ; Key ID = 23686`
	`bw. 7200 IN DNSKEY ( 257 3 13 ZyV13l2yVxCeDGcnzFmE8AJjgzuJ6At1xtpBmNNzdFeDwVIzkgAhBEI3oa2oXfTP1B5H0gDtkbZj 8u2otuvbQA== ) ; Key ID = 62453`
	Found 1 RRSIGs over DNSKEY RRset
	`bw. 7200 IN RRSIG ( DNSKEY 13 1 7200 20240604200047 20240521183047 62453 bw. cg4oYb9o3H5ncjwSiGtiCS/zN9zc1+M+/iVixYgKZWgd1k74NlD+mEog8jAbT8Yo0Zes6lYHBOlR owGHpCuIzg== )`
	RRSIG=62453 and DNSKEY=62453/SEP verifies the DNSKEY RRset
	Query to dns1.nic.net.bw for bw/A
	Received 373 bytes from 168.167.98.226
	;; Response received from [168.167.98.226] 373 octets ;; HEADER SECTION ;; id = 18191 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.nic.net.bw is authoritative for bw
	Found RRSIG signed by bw zone
	Query to master.btc.net.bw for bw/SOA
	Timeout querying master.btc.net.bw/168.167.168.37 for bw/SOA
	All Queries to master.btc.net.bw for bw/SOA timed out or failed
	Query to ns-bw.afrinic.net for bw/SOA
	Received 729 bytes from 196.216.168.72
	;; Response received from [196.216.168.72] 729 octets ;; HEADER SECTION ;; id = 1977 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN SOA ;; ANSWER SECTION (2 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) ;; AUTHORITY SECTION (5 records) bw. 7200 IN NS pch.nic.net.bw. bw. 7200 IN NS dns1.nic.net.bw. bw. 7200 IN NS ns-bw.afrinic.net. bw. 7200 IN NS master.btc.net.bw. bw. 7200 IN RRSIG ( NS 13 1 7200 20240604200047 20240521183047 23686 bw. yDtjb17HEKNRI/4gYeH1R7Yy+tASm5+yrk05RUr3ukT+ayJLNCdOzpJVCKPGoHomW3P7tlmeJutE ZeJKh4VMNw== ) ;; ADDITIONAL SECTION (10 records) pch.nic.net.bw. 7200 IN A 204.61.216.70 dns1.nic.net.bw. 7200 IN A 168.167.98.226 master.btc.net.bw. 7200 IN A 168.167.168.37 master.btc.net.bw. 7200 IN RRSIG ( A 13 4 7200 20240604200047 20240521183047 23686 bw. 6oh8thZe2qraB4syVj9qAPTMhVzors24SfBbIEBRb+WYy52YLpoC2B26+bBVWhNaqiKKQxyiSypI NXPwcn+P6A== ) pch.nic.net.bw. 7200 IN AAAA 2001:500:14:6070:ad::1 dns1.nic.net.bw. 7200 IN AAAA 2c0f:ff00:1:3::226 master.btc.net.bw. 7200 IN AAAA 2c0f:ff00:0:6::3 master.btc.net.bw. 7200 IN AAAA 2c0f:ff00:0:6::5 master.btc.net.bw. 7200 IN RRSIG ( AAAA 13 4 7200 20240604200047 20240521183047 23686 bw. tbdzQxB7iDJtepO3e8w+tiLmwMIHVE8ef43HNQXLBa6qL9xOxswpm0te6+Xxdg4pAv6JWJee3EcS siJDPaWO9Q== ) ;; { "EDNS-VERSION": 0 }
	Query to pch.nic.net.bw for bw/SOA
	Received 649 bytes from 204.61.216.70
	;; Response received from [204.61.216.70] 649 octets ;; HEADER SECTION ;; id = 2617 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN SOA ;; ANSWER SECTION (2 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) ;; AUTHORITY SECTION (5 records) bw. 7200 IN NS ns-bw.afrinic.net. bw. 7200 IN NS pch.nic.net.bw. bw. 7200 IN NS dns1.nic.net.bw. bw. 7200 IN NS master.btc.net.bw. bw. 7200 IN RRSIG ( NS 13 1 7200 20240604200047 20240521183047 23686 bw. yDtjb17HEKNRI/4gYeH1R7Yy+tASm5+yrk05RUr3ukT+ayJLNCdOzpJVCKPGoHomW3P7tlmeJutE ZeJKh4VMNw== ) ;; ADDITIONAL SECTION (6 records) master.btc.net.bw. 7200 IN A 168.167.168.37 master.btc.net.bw. 7200 IN AAAA 2c0f:ff00:0:6::3 master.btc.net.bw. 7200 IN AAAA 2c0f:ff00:0:6::5 master.btc.net.bw. 7200 IN RRSIG ( A 13 4 7200 20240604200047 20240521183047 23686 bw. 6oh8thZe2qraB4syVj9qAPTMhVzors24SfBbIEBRb+WYy52YLpoC2B26+bBVWhNaqiKKQxyiSypI NXPwcn+P6A== ) master.btc.net.bw. 7200 IN RRSIG ( AAAA 13 4 7200 20240604200047 20240521183047 23686 bw. tbdzQxB7iDJtepO3e8w+tiLmwMIHVE8ef43HNQXLBa6qL9xOxswpm0te6+Xxdg4pAv6JWJee3EcS siJDPaWO9Q== ) ;; { "EDNS-VERSION": 0 }
	Query to dns1.nic.net.bw for bw/A
	Received 373 bytes from 168.167.98.226
	;; Response received from [168.167.98.226] 373 octets ;; HEADER SECTION ;; id = 23181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== )`
	RRSIG=23686 and DNSKEY=23686 verifies the SOA RRset

	Query to ns-bw.afrinic.net for bw/A
	Received 373 bytes from 196.216.168.72
	;; Response received from [196.216.168.72] 373 octets ;; HEADER SECTION ;; id = 52219 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns-bw.afrinic.net is authoritative for bw
	Found RRSIG signed by bw zone
	Query to ns-bw.afrinic.net for bw/A
	Received 373 bytes from 196.216.168.72
	;; Response received from [196.216.168.72] 373 octets ;; HEADER SECTION ;; id = 21653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== )`
	RRSIG=23686 and DNSKEY=23686 verifies the SOA RRset

	Query to pch.nic.net.bw for bw/A
	Received 375 bytes from 204.61.216.70
	;; Response received from [204.61.216.70] 375 octets ;; HEADER SECTION ;; id = 13274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	pch.nic.net.bw is authoritative for bw
	Found RRSIG signed by bw zone
	Query to pch.nic.net.bw for bw/A
	Received 375 bytes from 204.61.216.70
	;; Response received from [204.61.216.70] 375 octets ;; HEADER SECTION ;; id = 53684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) bw. 7200 IN SOA ( pch.nic.net.bw. registry.nic.net.bw. 2024052120 ;serial 21600 ;refresh 3600 ;retry 604800 ;expire 7200 ;minimum ) bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN NSEC3 ( 1 0 0 0edada44e0a8a1a9 8vdfocm44pqqbblt77qgasjqb62q2k2v NS SOA TXT RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY ) 8vbus3e3qt817pu26gr6s72i20a18mec.bw. 7200 IN RRSIG ( NSEC3 13 2 7200 20240604200047 20240521183047 23686 bw. 0tnk5I2crlD9CNtLzEpwZEe4Fa4H+UUHExxhBH1uq2iwI67FDZ1w0sqbHgRZ8JfWcdqnXfM/1NY4 nqDBuSr9dw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	NSEC3 validation not implemented yet
	Found 1 RRSIGs over SOA RRset
	`bw. 7200 IN RRSIG ( SOA 13 1 7200 20240604200047 20240521183047 23686 bw. wUV69thMNBEJaDKUzcgOBbRepT92wOATM2xqSMt7THoKxwdPV+iFE59n39SJexemEOgSvTEXInGp ungtdWRijw== )`
	RRSIG=23686 and DNSKEY=23686 verifies the SOA RRset

No response from bw nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test bw at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: