DNSSEC Debugger

Domain Name:

Time: 2024-05-18 13:01:39 UTC

Analyzing DNSSEC problems for byte.ma

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 56440 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for byte.ma/A
	Received 885 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 885 octets ;; HEADER SECTION ;; id = 51215 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS d.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS ns-ma.nic.fr. ma. 86400 IN DS ( 41102 8 2 ec91608875e8628e96fb65403d828e0782103ee815fd7e0b67ecccab4b44ef56 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . F89mGnvfSIUcIwc9OXOlmqfhssDdYa5XlmShHQWZWcSEKg7utHeh4K/aBGtRldxOIzxojaFHtRSv EMSjp45Km3FWPGaYEodrlNvwPkyNwPBYfHMpaw2vOT8ZbRO6MDyJoTppnutvulOZQ1hNSy+h/3iD HvbX8sBdHoMER7GO4oNv+8czcqkh24chGHA/44XklMqE/zxub/Dq3yxEHqcqJm9RmkSVBW25cAyG OcxzNS1uJuTjk3Uk35qq/pwn/aYdQCwzkJUmBC2z+JrxvSXS756iFln3KEMGdGJYz9z8Z0RkPU5Q PWHqVVCZ3CjwI5VF3Bu5yyX6MnHArp9dbp4YZQ== ) ;; ADDITIONAL SECTION (19 records) ns-ma.nic.fr. 172800 IN A 194.0.9.1 dns.inria.fr. 172800 IN A 193.51.208.13 f.tld.ma. 172800 IN A 41.214.240.4 e.tld.ma. 172800 IN A 105.73.80.236 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 f.tld.ma. 172800 IN AAAA 2c0f:fb20:100:fc::33 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for ma/DNSKEY
	Received 876 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 876 octets ;; HEADER SECTION ;; id = 48259 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ma. 172800 IN NS a.tld.ma. ma. 172800 IN NS b.tld.ma. ma. 172800 IN NS c.tld.ma. ma. 172800 IN NS d.tld.ma. ma. 172800 IN NS e.tld.ma. ma. 172800 IN NS f.tld.ma. ma. 172800 IN NS dns.inria.fr. ma. 172800 IN NS ns-ma.nic.fr. ma. 86400 IN DS ( 41102 8 2 ec91608875e8628e96fb65403d828e0782103ee815fd7e0b67ecccab4b44ef56 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . F89mGnvfSIUcIwc9OXOlmqfhssDdYa5XlmShHQWZWcSEKg7utHeh4K/aBGtRldxOIzxojaFHtRSv EMSjp45Km3FWPGaYEodrlNvwPkyNwPBYfHMpaw2vOT8ZbRO6MDyJoTppnutvulOZQ1hNSy+h/3iD HvbX8sBdHoMER7GO4oNv+8czcqkh24chGHA/44XklMqE/zxub/Dq3yxEHqcqJm9RmkSVBW25cAyG OcxzNS1uJuTjk3Uk35qq/pwn/aYdQCwzkJUmBC2z+JrxvSXS756iFln3KEMGdGJYz9z8Z0RkPU5Q PWHqVVCZ3CjwI5VF3Bu5yyX6MnHArp9dbp4YZQ== ) ;; ADDITIONAL SECTION (19 records) a.tld.ma. 172800 IN A 81.192.171.83 a.tld.ma. 172800 IN A 81.192.171.131 b.tld.ma. 172800 IN A 81.192.171.84 b.tld.ma. 172800 IN A 81.192.171.132 c.tld.ma. 172800 IN A 81.192.171.115 c.tld.ma. 172800 IN A 81.192.171.139 d.tld.ma. 172800 IN A 81.192.171.116 d.tld.ma. 172800 IN A 81.192.171.140 e.tld.ma. 172800 IN A 105.73.80.236 f.tld.ma. 172800 IN A 41.214.240.4 dns.inria.fr. 172800 IN A 193.51.208.13 ns-ma.nic.fr. 172800 IN A 194.0.9.1 a.tld.ma. 172800 IN AAAA 2001:4288:1800:186::3 b.tld.ma. 172800 IN AAAA 2001:4288:1800:186::4 c.tld.ma. 172800 IN AAAA 2001:4288:1800:386::3 d.tld.ma. 172800 IN AAAA 2001:4288:1800:386::4 f.tld.ma. 172800 IN AAAA 2c0f:fb20:100:fc::33 ns-ma.nic.fr. 172800 IN AAAA 2001:678:c::1 ;; { "EDNS-VERSION": 0 }
	Found child zone ma

	Checking DS between . and ma
	Query to d.root-servers.net for ma/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 32367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DS ;; ANSWER SECTION (2 records) ma. 86400 IN DS ( 41102 8 2 ec91608875e8628e96fb65403d828e0782103ee815fd7e0b67ecccab4b44ef56 ) ma. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . F89mGnvfSIUcIwc9OXOlmqfhssDdYa5XlmShHQWZWcSEKg7utHeh4K/aBGtRldxOIzxojaFHtRSv EMSjp45Km3FWPGaYEodrlNvwPkyNwPBYfHMpaw2vOT8ZbRO6MDyJoTppnutvulOZQ1hNSy+h/3iD HvbX8sBdHoMER7GO4oNv+8czcqkh24chGHA/44XklMqE/zxub/Dq3yxEHqcqJm9RmkSVBW25cAyG OcxzNS1uJuTjk3Uk35qq/pwn/aYdQCwzkJUmBC2z+JrxvSXS756iFln3KEMGdGJYz9z8Z0RkPU5Q PWHqVVCZ3CjwI5VF3Bu5yyX6MnHArp9dbp4YZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ma in the . zone
	DS=41102/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ma. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . F89mGnvfSIUcIwc9OXOlmqfhssDdYa5XlmShHQWZWcSEKg7utHeh4K/aBGtRldxOIzxojaFHtRSv EMSjp45Km3FWPGaYEodrlNvwPkyNwPBYfHMpaw2vOT8ZbRO6MDyJoTppnutvulOZQ1hNSy+h/3iD HvbX8sBdHoMER7GO4oNv+8czcqkh24chGHA/44XklMqE/zxub/Dq3yxEHqcqJm9RmkSVBW25cAyG OcxzNS1uJuTjk3Uk35qq/pwn/aYdQCwzkJUmBC2z+JrxvSXS756iFln3KEMGdGJYz9z8Z0RkPU5Q PWHqVVCZ3CjwI5VF3Bu5yyX6MnHArp9dbp4YZQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=41102/SHA-256 is now in the chain-of-trust
	`ma. 86400 IN DS ( 41102 8 2 ec91608875e8628e96fb65403d828e0782103ee815fd7e0b67ecccab4b44ef56 )`
	Query to e.tld.ma for ma/DNSKEY
	Received 1769 bytes from 105.73.80.236
	;; Response received from [105.73.80.236] 1769 octets ;; HEADER SECTION ;; id = 44639 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 8 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ma. IN DNSKEY ;; ANSWER SECTION (8 records) ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcMZvjtHcqDhVwfijsNkDkEh3iATSm3DqIV6NhxTJIDOfdTSH4Oab0OX0QXr8rSdgCTu8sCY p0crgHp0wn97C1iZaB6VLcr0M9ijUckjpcIhnhHnH7wvV0NbfPZevgvnyCsfHbesOZTJuHTpcoB5 21hP9/C1y/PNQu/pyN0RYZF9 ) ; Key ID = 31609 ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAb1yPwpoh6fEEFcNZasV7w2TsFaCkdR/K4nkmibsYizSwEhU6BvupGD/Lx9JuKxmN6DF+dky 8WanBxrZxioM9NsjopxadsvO9YOvJShQ2I6kygtaBMGUzzPtXMsO7X40fD3EHOI6oRYK3lUkdpF0 mSJ0HBgQNCbC3HDCirEfIV45 ) ; Key ID = 15625 ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAcSVIAQfBj8XFiYFyle3TsvQcrc0DZnmte8SZ3eHW7PBgAbi9ag0B1pzxj+dt9JjfyVoWO7e Z8JfOGnEU7OM4TKMzfq4pjXtCRO4Fi0UpP+ND72x2rDqlAjn6CcRSeUPIdYXNVJ7uUbz+QOCwyCe aOx5W8k6H3KTWl7ZbL9S8qbs3BSE1Mil6Esm3tZKc7Jx72o40OAob5bqGRAqKnGFm3Blir+Q+9PF ksfm0GGcBOh8Bytl3E9a1xXzkIMiXOLS+YGXVf+kc/simX2Qfn9aYvXhbRVd9WmWPWAILAz9nxE+ GznnUeo/VCo9u7oug7Zco7AQOox8Ub6Om9u1rtRyKd8= ) ; Key ID = 44392 ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAe4qoqSfzY5PLjQ+pRlH8i+AybsRckFGFrridTRXu8pUkMwnfpt7xLOKGdcVCOs6YvUfJd5v KWfWoD8mg+qcO07znXZVbwhQYSITwAs5HMiMDi+bb1l5G0P0F040ajJPm5qwyWsjmYQZlaXZVlOm GTNHqi99lk2Q6LMCbCrxCIvMJDBr+3s++tvWC140QLI1kPcDbRO6PphlsqMQjd4Rs0O9mBTCwfWr WQyH5Bo8oOdPgmdeEkOsia8AnH/m1XpnNcbaXO8lthpKiT4PS2kcC9H+z1mS+euzOTf3LVttsWD0 KNpc3NzXLBYLH2sObOscIR49NP0SUMoMTHr1J04Tw20= ) ; Key ID = 41102 ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAfA5qnIlc4fDRxrZY43dlxY55VK9bGd0U22mkdNjknSMxqqe1hjFBgaycDUnqKlKfF/bjerz fiiaFaHegUdrmMkqavMxru5p39p7IxbBLGmW9yVen/xfB78ngIusPer07bcLMw7njtIStZwekUGr cXErjoOjZZoEeDo28pHciwJ9 ) ; Key ID = 1371 ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 1371 ma. ZXEXS/35KxovA42NQNOI2F/YykHuGdMX93jqnCFh66y/We4UW9hW0JmnLxvZPjd7pHWq4YXQ6/y3 JSAkq4Ie6S/8L0x6zpds0Tspqq26nqJI/+fFLJ1LgHlUWg7colOuTpVXqZGRK39t53Ajn8ut99C7 Z30R8NF6YYLgd8cLmzg= ) ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 41102 ma. HH4WoK/+YIcwqczeS4Pw18LR5P9V8i3MQt9TtbiJDTpO6noaGQtJsxy5Rp2CEZGBdMK0/ESrDwRO bU6m5VcJ9xgo0laq0xsMbOnY8x1VkI6L5b+I3RK8WcbxGmO8RytNmBC8wj3y3tJMGiiGCs+DBNzZ UwWM4t3OuDkzmNL1xCr/oRtx96abkOYnxmxvGFjGBKy0aPKqTGSemkxpT0hbkjBWF+xgcRqPEJnD GFNnbp3J9H/wezT0QbSztZNGWUyxII5Polteaj0xP7NLUK0ZPaOchvIQ1NTlB9TCem34ZE04BGLD J3ftsqOxszDG1Sa9DuZ1B3vJ7VC37JbLnhAdyg== ) ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 44392 ma. Uud6T5fmd7JUjgPaHkWQmiYrzLT20dfYCTruIN3057DLoSXBHfmsWZppzhAMCXULWZ/s+WcNBwgz eIk8WpEUAjmw9htO8xBKzVH68cZWHSsgxaWyqVTx7O/3hVG0kyIrbGg81vnod6tfqhGSzTtG/4TR U016I62d0kmJSu1TpunCXIgWuGRungFK+T0J+lFQFg1lS2Hlsy3FZNU4auW4iSO/qeZyFixYQUja KjtOxx39Q66LG4I7hBalESPRVY9jLszRJfT36FL30fD6nmcYCnL7Kn40UIvZenjcV0mReuWD++Fz ItTrbHH2uz7DdKYtnmNZGGo5CMfuZc+/Ekgu6Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for ma
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAcMZvjtHcqDhVwfijsNkDkEh3iATSm3DqIV6NhxTJIDOfdTSH4Oab0OX0QXr8rSdgCTu8sCY p0crgHp0wn97C1iZaB6VLcr0M9ijUckjpcIhnhHnH7wvV0NbfPZevgvnyCsfHbesOZTJuHTpcoB5 21hP9/C1y/PNQu/pyN0RYZF9 ) ; Key ID = 31609`
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAb1yPwpoh6fEEFcNZasV7w2TsFaCkdR/K4nkmibsYizSwEhU6BvupGD/Lx9JuKxmN6DF+dky 8WanBxrZxioM9NsjopxadsvO9YOvJShQ2I6kygtaBMGUzzPtXMsO7X40fD3EHOI6oRYK3lUkdpF0 mSJ0HBgQNCbC3HDCirEfIV45 ) ; Key ID = 15625`
	`ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAcSVIAQfBj8XFiYFyle3TsvQcrc0DZnmte8SZ3eHW7PBgAbi9ag0B1pzxj+dt9JjfyVoWO7e Z8JfOGnEU7OM4TKMzfq4pjXtCRO4Fi0UpP+ND72x2rDqlAjn6CcRSeUPIdYXNVJ7uUbz+QOCwyCe aOx5W8k6H3KTWl7ZbL9S8qbs3BSE1Mil6Esm3tZKc7Jx72o40OAob5bqGRAqKnGFm3Blir+Q+9PF ksfm0GGcBOh8Bytl3E9a1xXzkIMiXOLS+YGXVf+kc/simX2Qfn9aYvXhbRVd9WmWPWAILAz9nxE+ GznnUeo/VCo9u7oug7Zco7AQOox8Ub6Om9u1rtRyKd8= ) ; Key ID = 44392`
	`ma. 1296000 IN DNSKEY ( 257 3 8 AwEAAe4qoqSfzY5PLjQ+pRlH8i+AybsRckFGFrridTRXu8pUkMwnfpt7xLOKGdcVCOs6YvUfJd5v KWfWoD8mg+qcO07znXZVbwhQYSITwAs5HMiMDi+bb1l5G0P0F040ajJPm5qwyWsjmYQZlaXZVlOm GTNHqi99lk2Q6LMCbCrxCIvMJDBr+3s++tvWC140QLI1kPcDbRO6PphlsqMQjd4Rs0O9mBTCwfWr WQyH5Bo8oOdPgmdeEkOsia8AnH/m1XpnNcbaXO8lthpKiT4PS2kcC9H+z1mS+euzOTf3LVttsWD0 KNpc3NzXLBYLH2sObOscIR49NP0SUMoMTHr1J04Tw20= ) ; Key ID = 41102`
	`ma. 1296000 IN DNSKEY ( 256 3 8 AwEAAfA5qnIlc4fDRxrZY43dlxY55VK9bGd0U22mkdNjknSMxqqe1hjFBgaycDUnqKlKfF/bjerz fiiaFaHegUdrmMkqavMxru5p39p7IxbBLGmW9yVen/xfB78ngIusPer07bcLMw7njtIStZwekUGr cXErjoOjZZoEeDo28pHciwJ9 ) ; Key ID = 1371`
	DNSKEY=41102/SEP is now in the chain-of-trust
	DS=41102/SHA-256 verifies DNSKEY=41102/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 1371 ma. ZXEXS/35KxovA42NQNOI2F/YykHuGdMX93jqnCFh66y/We4UW9hW0JmnLxvZPjd7pHWq4YXQ6/y3 JSAkq4Ie6S/8L0x6zpds0Tspqq26nqJI/+fFLJ1LgHlUWg7colOuTpVXqZGRK39t53Ajn8ut99C7 Z30R8NF6YYLgd8cLmzg= )`
	`ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 41102 ma. HH4WoK/+YIcwqczeS4Pw18LR5P9V8i3MQt9TtbiJDTpO6noaGQtJsxy5Rp2CEZGBdMK0/ESrDwRO bU6m5VcJ9xgo0laq0xsMbOnY8x1VkI6L5b+I3RK8WcbxGmO8RytNmBC8wj3y3tJMGiiGCs+DBNzZ UwWM4t3OuDkzmNL1xCr/oRtx96abkOYnxmxvGFjGBKy0aPKqTGSemkxpT0hbkjBWF+xgcRqPEJnD GFNnbp3J9H/wezT0QbSztZNGWUyxII5Polteaj0xP7NLUK0ZPaOchvIQ1NTlB9TCem34ZE04BGLD J3ftsqOxszDG1Sa9DuZ1B3vJ7VC37JbLnhAdyg== )`
	`ma. 1296000 IN RRSIG ( DNSKEY 8 1 1296000 20240611102051 20240512094519 44392 ma. Uud6T5fmd7JUjgPaHkWQmiYrzLT20dfYCTruIN3057DLoSXBHfmsWZppzhAMCXULWZ/s+WcNBwgz eIk8WpEUAjmw9htO8xBKzVH68cZWHSsgxaWyqVTx7O/3hVG0kyIrbGg81vnod6tfqhGSzTtG/4TR U016I62d0kmJSu1TpunCXIgWuGRungFK+T0J+lFQFg1lS2Hlsy3FZNU4auW4iSO/qeZyFixYQUja KjtOxx39Q66LG4I7hBalESPRVY9jLszRJfT36FL30fD6nmcYCnL7Kn40UIvZenjcV0mReuWD++Fz ItTrbHH2uz7DdKYtnmNZGGo5CMfuZc+/Ekgu6Q== )`
	RRSIG=1371 and DNSKEY=1371 verifies the DNSKEY RRset
	RRSIG=41102 and DNSKEY=41102/SEP verifies the DNSKEY RRset
	RRSIG=44392 and DNSKEY=44392/SEP verifies the DNSKEY RRset
	DNSKEY=31609 is now in the chain-of-trust
	DNSKEY=15625 is now in the chain-of-trust
	DNSKEY=44392/SEP is now in the chain-of-trust
	DNSKEY=1371 is now in the chain-of-trust
	Query to a.tld.ma for byte.ma/A
	Received 338 bytes from 81.192.171.83
	;; Response received from [81.192.171.83] 338 octets ;; HEADER SECTION ;; id = 774 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) byte.ma. 108000 IN NS becky.ns.cloudflare.com. byte.ma. 108000 IN NS thomas.ns.cloudflare.com. SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN NSEC3 ( 1 0 10 6953dd4f22c2caa4 sjgvcasorekaumacdfksg1d8ituo1416 NS ) SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20240611102833 20240512094949 1371 ma. COAgXWrLtsPSVHWZx9YKjgVED6z14wecmQE8p5l+LYBOSsj1ggwl3naXVjARhvxvF0nX37O9F531 A4rAM5rf2Zkjv0o0d1lg00rYJWOZ5HmEH+EcwTq8psBsYd/r+B4fkb7RrqDb7Mr278ZAkzBY84jb LKA+tUFDiY1v+dM90d4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.tld.ma for byte.ma/DNSKEY
	Received 338 bytes from 81.192.171.116
	;; Response received from [81.192.171.116] 338 octets ;; HEADER SECTION ;; id = 2750 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) byte.ma. 108000 IN NS becky.ns.cloudflare.com. byte.ma. 108000 IN NS thomas.ns.cloudflare.com. SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN NSEC3 ( 1 0 10 6953dd4f22c2caa4 sjgvcasorekaumacdfksg1d8ituo1416 NS ) SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20240611102833 20240512094949 1371 ma. COAgXWrLtsPSVHWZx9YKjgVED6z14wecmQE8p5l+LYBOSsj1ggwl3naXVjARhvxvF0nX37O9F531 A4rAM5rf2Zkjv0o0d1lg00rYJWOZ5HmEH+EcwTq8psBsYd/r+B4fkb7RrqDb7Mr278ZAkzBY84jb LKA+tUFDiY1v+dM90d4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone byte.ma

byte.ma

	Checking DS between ma and byte.ma
	Query to d.tld.ma for byte.ma/DS
	Received 492 bytes from 81.192.171.140
	;; Response received from [81.192.171.140] 492 octets ;; HEADER SECTION ;; id = 30329 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ma. 1800 IN SOA ( c.tld.ma. ma.anrt.ma. 2037077950 ;serial 900 ;refresh 90 ;retry 604800000 ;expire 1800 ;minimum ) ma. 1800 IN RRSIG ( SOA 8 1 108000 20240617130018 20240518120018 1371 ma. BxHFUhn2KaJUjGN849Wpmfq+hzyyoqt/vxefnh0b+nwIKI29Y98AJxZXIWeJLQ2g9/xhL1+t3Qik 3JBWA5KZiPv+AzeE4X+eEUZnolle++PjT1N5qkD8n1kVK3qFoMVySE2wfB9P9tQS+SOXDDCGrjAq CSEcFkdli2pwbXfdOK4= ) SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN NSEC3 ( 1 0 10 6953dd4f22c2caa4 sjgvcasorekaumacdfksg1d8ituo1416 NS ) SJGSHU9UMR5F5MSRRTNM228MAP5I2D0P.ma. 1800 IN RRSIG ( NSEC3 8 2 1800 20240611102833 20240512094949 1371 ma. COAgXWrLtsPSVHWZx9YKjgVED6z14wecmQE8p5l+LYBOSsj1ggwl3naXVjARhvxvF0nX37O9F531 A4rAM5rf2Zkjv0o0d1lg00rYJWOZ5HmEH+EcwTq8psBsYd/r+B4fkb7RrqDb7Mr278ZAkzBY84jb LKA+tUFDiY1v+dM90d4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for byte.ma in the ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/DNSKEY
	Received 299 bytes from 108.162.193.238
	;; Response received from [108.162.193.238] 299 octets ;; HEADER SECTION ;; id = 35276 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN DNSKEY ;; ANSWER SECTION (3 records) byte.ma. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 byte.ma. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 byte.ma. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240709175142 20240509175142 2371 byte.ma. IcTv6Ja/me9FejICK2nQfak+bGkYD7PIAIaFg9bW+a1XWT0F3EVebyyHavFAfD6q/tyA81wtvTAH aXX02qO66g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for byte.ma
	`byte.ma. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`byte.ma. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`byte.ma. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240709175142 20240509175142 2371 byte.ma. IcTv6Ja/me9FejICK2nQfak+bGkYD7PIAIaFg9bW+a1XWT0F3EVebyyHavFAfD6q/tyA81wtvTAH aXX02qO66g== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to becky.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 173.245.58.73
	;; Response received from [173.245.58.73] 171 octets ;; HEADER SECTION ;; id = 12972 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140139 20240517120139 34505 byte.ma. SpRQ77fBuHyNgZtUIFyvsLps9mneTZObkKfcnQ7KozQQe+NckdFHB5RtAoc9/nYIPwvDct6xyjLl 9tPBqz8cWA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	becky.ns.cloudflare.com is authoritative for byte.ma
	Found RRSIG signed by byte.ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/SOA
	Received 202 bytes from 173.245.59.238
	;; Response received from [173.245.59.238] 202 octets ;; HEADER SECTION ;; id = 54134 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN SOA ;; ANSWER SECTION (2 records) byte.ma. 1800 IN SOA ( becky.ns.cloudflare.com. dns.cloudflare.com. 2340849212 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) byte.ma. 1800 IN RRSIG ( SOA 13 2 1800 20240519140140 20240517120140 34505 byte.ma. fAX+u6/9tVvkHN/9n/TmKDTqMdny7sS1yri3vnTWFKuyFBWYvmuxgtJpv+dZb/k/AvbZ1g9JRttW tugEGi4JGw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to becky.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 172.64.32.73
	;; Response received from [172.64.32.73] 171 octets ;; HEADER SECTION ;; id = 62746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140140 20240517120140 34505 byte.ma. oNEnOJqOv/68jkIBbogNcXizuhZEHSFs/WtI2qTzlHmUk9lmJp6Yx5E/Z2sZPQ19UOVog6n22JaJ U1yux6CLrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	byte.ma A RR has value 104.21.1.242
	byte.ma A RR has value 172.67.152.154
	Found 1 RRSIGs over A RRset
	`byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140140 20240517120140 34505 byte.ma. oNEnOJqOv/68jkIBbogNcXizuhZEHSFs/WtI2qTzlHmUk9lmJp6Yx5E/Z2sZPQ19UOVog6n22JaJ U1yux6CLrQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

byte.ma

	Query to thomas.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 172.64.33.238
	;; Response received from [172.64.33.238] 171 octets ;; HEADER SECTION ;; id = 20151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140140 20240517120140 34505 byte.ma. XvC9zMuMs8U/WRT3FFF4wjuCQgC6bYy82wrGXf1tx+NP9Tj1iTN1kI+8VwqsYCVRhm+w2sVuka3d rXsqARIHDA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	thomas.ns.cloudflare.com is authoritative for byte.ma
	Found RRSIG signed by byte.ma zone
	Query to thomas.ns.cloudflare.com for byte.ma/A
	Received 171 bytes from 172.64.33.238
	;; Response received from [172.64.33.238] 171 octets ;; HEADER SECTION ;; id = 32908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; byte.ma. IN A ;; ANSWER SECTION (3 records) byte.ma. 300 IN A 172.67.152.154 byte.ma. 300 IN A 104.21.1.242 byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140140 20240517120140 34505 byte.ma. M5Zb9VygGJbEHJoz7ejOj75h88Xrz5eetqvWugtej/RVMtHdolE1rxTmxK1COXW47J3IHTuhzcGn K27VjpCG1w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	byte.ma A RR has value 172.67.152.154
	byte.ma A RR has value 104.21.1.242
	Found 1 RRSIGs over A RRset
	`byte.ma. 300 IN RRSIG ( A 13 2 300 20240519140140 20240517120140 34505 byte.ma. M5Zb9VygGJbEHJoz7ejOj75h88Xrz5eetqvWugtej/RVMtHdolE1rxTmxK1COXW47J3IHTuhzcGn K27VjpCG1w== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test byte.ma at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: