DNSSEC Debugger

Domain Name:

Time: 2024-05-17 06:32:02 UTC

Analyzing DNSSEC problems for cen.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 864 octets ;; HEADER SECTION ;; id = 52863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for cen.eu/A
	Received 676 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 676 octets ;; HEADER SECTION ;; id = 6696 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . WSXVva/7CZW6nO56oYkKM5/UsOdrC9+3FCbVob9lbyTBEPPe+RhLd0C95xDKaOc/SL71XJ7CkLtq aEzC+PsQ/c7bwgDW1XL78BYCRLz2bi1MVrkMfLj0W//jp5wIjTiZ9+saOQCQVJvgugIZdUdeS8mU aAoK/Aod7ku03aFTI1TouZQpvCvPOc12JqJYTmP/q7ZgkiLs1EQQ25U06GTG1CRzPzRaTPhTrSf7 pnbZbGVASvIX9ST+GBoQsHGZ1TZ8n1dgjLqq9Op2Ptz7jnjtStL6onkcD3mkMdDOSXthq3un7cO+ WiZh3OaEORREu8dPNHJ4I89CCvZwCVKyPDvRZQ== ) ;; ADDITIONAL SECTION (11 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 be.dns.eu. 172800 IN A 149.38.1.26 si.dns.eu. 172800 IN A 193.2.221.62 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for eu/DNSKEY
	Received 672 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 672 octets ;; HEADER SECTION ;; id = 59608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . WSXVva/7CZW6nO56oYkKM5/UsOdrC9+3FCbVob9lbyTBEPPe+RhLd0C95xDKaOc/SL71XJ7CkLtq aEzC+PsQ/c7bwgDW1XL78BYCRLz2bi1MVrkMfLj0W//jp5wIjTiZ9+saOQCQVJvgugIZdUdeS8mU aAoK/Aod7ku03aFTI1TouZQpvCvPOc12JqJYTmP/q7ZgkiLs1EQQ25U06GTG1CRzPzRaTPhTrSf7 pnbZbGVASvIX9ST+GBoQsHGZ1TZ8n1dgjLqq9Op2Ptz7jnjtStL6onkcD3mkMdDOSXthq3un7cO+ WiZh3OaEORREu8dPNHJ4I89CCvZwCVKyPDvRZQ== ) ;; ADDITIONAL SECTION (11 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 be.dns.eu. 172800 IN A 149.38.1.26 si.dns.eu. 172800 IN A 193.2.221.62 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 ;; { "EDNS-VERSION": 0 }
	Found child zone eu

	Checking DS between . and eu
	Query to k.root-servers.net for eu/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 42707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . WSXVva/7CZW6nO56oYkKM5/UsOdrC9+3FCbVob9lbyTBEPPe+RhLd0C95xDKaOc/SL71XJ7CkLtq aEzC+PsQ/c7bwgDW1XL78BYCRLz2bi1MVrkMfLj0W//jp5wIjTiZ9+saOQCQVJvgugIZdUdeS8mU aAoK/Aod7ku03aFTI1TouZQpvCvPOc12JqJYTmP/q7ZgkiLs1EQQ25U06GTG1CRzPzRaTPhTrSf7 pnbZbGVASvIX9ST+GBoQsHGZ1TZ8n1dgjLqq9Op2Ptz7jnjtStL6onkcD3mkMdDOSXthq3un7cO+ WiZh3OaEORREu8dPNHJ4I89CCvZwCVKyPDvRZQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for eu in the . zone
	DS=35926/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . WSXVva/7CZW6nO56oYkKM5/UsOdrC9+3FCbVob9lbyTBEPPe+RhLd0C95xDKaOc/SL71XJ7CkLtq aEzC+PsQ/c7bwgDW1XL78BYCRLz2bi1MVrkMfLj0W//jp5wIjTiZ9+saOQCQVJvgugIZdUdeS8mU aAoK/Aod7ku03aFTI1TouZQpvCvPOc12JqJYTmP/q7ZgkiLs1EQQ25U06GTG1CRzPzRaTPhTrSf7 pnbZbGVASvIX9ST+GBoQsHGZ1TZ8n1dgjLqq9Op2Ptz7jnjtStL6onkcD3mkMdDOSXthq3un7cO+ WiZh3OaEORREu8dPNHJ4I89CCvZwCVKyPDvRZQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=35926/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c )`
	Query to y.dns.eu for eu/DNSKEY
	Received 1621 bytes from 194.146.106.90
	;; Response received from [194.146.106.90] 1621 octets ;; HEADER SECTION ;; id = 37954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (7 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAddduyfD66D69CZuTbWDQLkZ18gyA8DGbunPSc+ZzrBOqjZ/YM87Okfh7JO4jINMmZTaqLc6 NBpBKizsMeib6FF3iRhlFMYZm1n9KCunxMgOc2Z7KGqWAurM4WO3vrF6b6swcO8fl0HmB3VNkUoc n33YIOBEU+4ewbfkjZoDgUdN ) ; Key ID = 27138 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAa6loil1wvq79w7TDRb3/8uCeECEWtn6JMrheWJiK5a/zfwObM6/rDeKF/B6LBAmsXrVy1Cq irfXaFJEbN1J6jStcrvNhNCQboeXOyVoMs04F1bYxnLNK6PPiW3IBO2qEhJXErJGxdZL8oC21cZp rsFgL9bRQMvriBekPcATwg4b ) ; Key ID = 27798 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; Key ID = 35926 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 27138 eu. Rbm0l19BovUWorxtZEmTX9Dfg6ZdElsj3gbkuHA8ZPQB5Ps4psKsMOSF/vxe8SM3aO8eQUBkNVmE /ZJf/P6j5tbldIwVx2l0C+lgPnI5FtHgee4ScT07Qyb5nBOsG4xwO8s37h3XG1doFICtWkMDFGTd tfDCExx5tyMTUvyfqU8= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 35926 eu. FzY6c8ZVAHAd87RSuT9bRxaFUC76qFPO96xRniS6lxKFHU7XFjFYfyncXT6HMeJNQGuoXOcOV5S4 8fQTzK2S+fc3Yl2UwcOCjyNPwHqNvLKP12OcQvs/s2vD4N7mdAex0KY2velT9eXIkp+vhJQwdW4C A+DHx0KB088jfc7w6G0QgRTs1vr8K/hD2orx0rIiikriwL8Y+evUg13h0eUJPSCcT142nMJxWoEB U9Mlat4l5tF8pq9xHkNN0EC+peKg1TzjAeL0i8DAczajXu3HNfUshPxK06j3girgBNv/X/jKgeCA 1o/dE1h/OUbu6Ky15h3pioCUiGxFEqzIPVuWbQ== ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 59479 eu. f1wWN7BJ5XXBvLnWKpJoXYYIigXjzrY/Sz/Fv87bZOtYJm/vZrO9TAUkHy92FjiEVVCGbJK2T4Uq xn0GX+aiPSMD5Fj0CpqoJUpoMh2R6kyNUk+Ixao6aBbDr6/oXiJljd1K2dZsj/Udul27Sa1S0rzT ycUJeBY5cLevIJcK+2azd9xuc0r/2k3sveD/3gjNk5/eD77NyIhkKDwFQO6g01aFyphSMGpN/OrE wcmH7zcQusS3U6X10KICTcIRDBxfrKB39GEcoCb01yUCw0SRCw4luQYTb664Cadec2myH3YaDcEq rbHU3AUHiqrm1sQBa4yCUE+XS69X2Jv551IBqg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAddduyfD66D69CZuTbWDQLkZ18gyA8DGbunPSc+ZzrBOqjZ/YM87Okfh7JO4jINMmZTaqLc6 NBpBKizsMeib6FF3iRhlFMYZm1n9KCunxMgOc2Z7KGqWAurM4WO3vrF6b6swcO8fl0HmB3VNkUoc n33YIOBEU+4ewbfkjZoDgUdN ) ; Key ID = 27138`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAa6loil1wvq79w7TDRb3/8uCeECEWtn6JMrheWJiK5a/zfwObM6/rDeKF/B6LBAmsXrVy1Cq irfXaFJEbN1J6jStcrvNhNCQboeXOyVoMs04F1bYxnLNK6PPiW3IBO2qEhJXErJGxdZL8oC21cZp rsFgL9bRQMvriBekPcATwg4b ) ; Key ID = 27798`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; Key ID = 35926`
	DNSKEY=35926/SEP is now in the chain-of-trust
	DS=35926/SHA-256 verifies DNSKEY=35926/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 27138 eu. Rbm0l19BovUWorxtZEmTX9Dfg6ZdElsj3gbkuHA8ZPQB5Ps4psKsMOSF/vxe8SM3aO8eQUBkNVmE /ZJf/P6j5tbldIwVx2l0C+lgPnI5FtHgee4ScT07Qyb5nBOsG4xwO8s37h3XG1doFICtWkMDFGTd tfDCExx5tyMTUvyfqU8= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 35926 eu. FzY6c8ZVAHAd87RSuT9bRxaFUC76qFPO96xRniS6lxKFHU7XFjFYfyncXT6HMeJNQGuoXOcOV5S4 8fQTzK2S+fc3Yl2UwcOCjyNPwHqNvLKP12OcQvs/s2vD4N7mdAex0KY2velT9eXIkp+vhJQwdW4C A+DHx0KB088jfc7w6G0QgRTs1vr8K/hD2orx0rIiikriwL8Y+evUg13h0eUJPSCcT142nMJxWoEB U9Mlat4l5tF8pq9xHkNN0EC+peKg1TzjAeL0i8DAczajXu3HNfUshPxK06j3girgBNv/X/jKgeCA 1o/dE1h/OUbu6Ky15h3pioCUiGxFEqzIPVuWbQ== )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240520090000 20240513080000 59479 eu. f1wWN7BJ5XXBvLnWKpJoXYYIigXjzrY/Sz/Fv87bZOtYJm/vZrO9TAUkHy92FjiEVVCGbJK2T4Uq xn0GX+aiPSMD5Fj0CpqoJUpoMh2R6kyNUk+Ixao6aBbDr6/oXiJljd1K2dZsj/Udul27Sa1S0rzT ycUJeBY5cLevIJcK+2azd9xuc0r/2k3sveD/3gjNk5/eD77NyIhkKDwFQO6g01aFyphSMGpN/OrE wcmH7zcQusS3U6X10KICTcIRDBxfrKB39GEcoCb01yUCw0SRCw4luQYTb664Cadec2myH3YaDcEq rbHU3AUHiqrm1sQBa4yCUE+XS69X2Jv551IBqg== )`
	RRSIG=27138 and DNSKEY=27138 verifies the DNSKEY RRset
	RRSIG=35926 and DNSKEY=35926/SEP verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=27138 is now in the chain-of-trust
	DNSKEY=27798 is now in the chain-of-trust
	DNSKEY=59479/SEP is now in the chain-of-trust
	Query to be.dns.eu for cen.eu/A
	Received 599 bytes from 149.38.1.26
	;; Response received from [149.38.1.26] 599 octets ;; HEADER SECTION ;; id = 32724 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cen.eu. 86400 IN NS ns1.be.colt.net. cen.eu. 86400 IN NS ns0.be.colt.net. CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN NSEC3 ( 1 1 0 - cs7oqv4ruts8u2jm24vnlt8ruuncp8th NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240519044949 20240512044854 27138 eu. N10zf1tysO6YMX/J08pXVH8MiWAt7c5zWru+BnoA6HwJZuP9tNziP0gN2RNik/HgDs3b5OHxKC7X S1tlrY2AKGCI99MU+JVOm6nlG6rHxEQLESUwAJNK2pZ5h9a4ihgOTjpN7dHWzPbN9N7QjIPfuWs3 vXW+aa+3OFXbTcdQBYs= ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN NSEC3 ( 1 1 0 - g6p0runvihs1t01bvt4gk28p4m7vo3pi NS DS RRSIG ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240521213939 20240514213543 27138 eu. jemYeKzPHPdonB7JWGLrtxLyt7eLBg4O2RsDC8BAmSkuJeo7RnpA3I4I7CkpgMYT4qD+HkH7EpWi 4YiF4zlsfY5Vd/Gf57E7gZ6jJpiZsvHpXwt4cSrXS4UnQawDCmKs0VMui8NwSl+QLBBLQIIF30yC DIBgyBpBV+So7990d+4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to si.dns.eu for cen.eu/DNSKEY
	Received 599 bytes from 193.2.221.62
	;; Response received from [193.2.221.62] 599 octets ;; HEADER SECTION ;; id = 10955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cen.eu. 86400 IN NS ns0.be.colt.net. cen.eu. 86400 IN NS ns1.be.colt.net. CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN NSEC3 ( 1 1 0 - cs7oqv4ruts8u2jm24vnlt8ruuncp8th NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240519044949 20240512044854 27138 eu. N10zf1tysO6YMX/J08pXVH8MiWAt7c5zWru+BnoA6HwJZuP9tNziP0gN2RNik/HgDs3b5OHxKC7X S1tlrY2AKGCI99MU+JVOm6nlG6rHxEQLESUwAJNK2pZ5h9a4ihgOTjpN7dHWzPbN9N7QjIPfuWs3 vXW+aa+3OFXbTcdQBYs= ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN NSEC3 ( 1 1 0 - g6p0runvihs1t01bvt4gk28p4m7vo3pi NS DS RRSIG ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240521213939 20240514213543 27138 eu. jemYeKzPHPdonB7JWGLrtxLyt7eLBg4O2RsDC8BAmSkuJeo7RnpA3I4I7CkpgMYT4qD+HkH7EpWi 4YiF4zlsfY5Vd/Gf57E7gZ6jJpiZsvHpXwt4cSrXS4UnQawDCmKs0VMui8NwSl+QLBBLQIIF30yC DIBgyBpBV+So7990d+4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone cen.eu

cen.eu

	Checking DS between eu and cen.eu
	Query to x.dns.eu for cen.eu/DS
	Received 772 bytes from 185.151.141.1
	;; Response received from [185.151.141.1] 772 octets ;; HEADER SECTION ;; id = 24581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN NSEC3 ( 1 1 0 - cs7oqv4ruts8u2jm24vnlt8ruuncp8th NS SOA RRSIG DNSKEY NSEC3PARAM TYPE65534 ) CS7NL1V9TGTKJ2D4IPJVDFM81OHCDD0C.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240519044949 20240512044854 27138 eu. N10zf1tysO6YMX/J08pXVH8MiWAt7c5zWru+BnoA6HwJZuP9tNziP0gN2RNik/HgDs3b5OHxKC7X S1tlrY2AKGCI99MU+JVOm6nlG6rHxEQLESUwAJNK2pZ5h9a4ihgOTjpN7dHWzPbN9N7QjIPfuWs3 vXW+aa+3OFXbTcdQBYs= ) eu. 600 IN SOA ( si.dns.eu. tech.eurid.eu. 1101231870 ;serial 3600 ;refresh 1800 ;retry 3600000 ;expire 600 ;minimum ) eu. 600 IN RRSIG ( SOA 8 1 86400 20240524063202 20240517053202 27798 eu. P8dTFAs34GyjxRamLlMYCqbaH9yqRkHbkamAhLFNFpS81WxOI+qhNMpnErTWiSf9D7/XqIGgSeyr 2FGJ/RSiTkDc/kW99tC9SEk+sKd9RTNwWUuUFDLdZC38RX5mlcUOXPQ+TMZ0nUIdLUiMItzJGwga N7ouGsi3/NgpzwOl2fE= ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN NSEC3 ( 1 1 0 - g6p0runvihs1t01bvt4gk28p4m7vo3pi NS DS RRSIG ) G6OT0T7UVIFLQJE6KQF78NSGIP0SBABM.eu. 600 IN RRSIG ( NSEC3 8 2 600 20240521213939 20240514213543 27138 eu. jemYeKzPHPdonB7JWGLrtxLyt7eLBg4O2RsDC8BAmSkuJeo7RnpA3I4I7CkpgMYT4qD+HkH7EpWi 4YiF4zlsfY5Vd/Gf57E7gZ6jJpiZsvHpXwt4cSrXS4UnQawDCmKs0VMui8NwSl+QLBBLQIIF30yC DIBgyBpBV+So7990d+4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cen.eu in the eu zone
	Query to ns1.be.colt.net for cen.eu/DNSKEY
	Received 98 bytes from 212.74.77.17
	;; Response received from [212.74.77.17] 98 octets ;; HEADER SECTION ;; id = 55900 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cen.eu. 900 IN SOA ( ns0.be.colt.net. eudnsmaster.colt.net. 2024021400 ;serial 43200 ;refresh 14400 ;retry 604800 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.be.colt.net for cen.eu/A
	Received 98 bytes from 212.74.77.17
	;; Response received from [212.74.77.17] 98 octets ;; HEADER SECTION ;; id = 45496 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (1 record) cen.eu. 900 IN A 217.111.181.2 ;; AUTHORITY SECTION (2 records) cen.eu. 900 IN NS ns1.be.colt.net. cen.eu. 900 IN NS ns0.be.colt.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.be.colt.net is authoritative for cen.eu
	Query to ns0.be.colt.net for cen.eu/SOA
	Received 130 bytes from 212.74.78.17
	;; Response received from [212.74.78.17] 130 octets ;; HEADER SECTION ;; id = 21515 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN SOA ;; ANSWER SECTION (1 record) cen.eu. 900 IN SOA ( ns0.be.colt.net. eudnsmaster.colt.net. 2024021400 ;serial 43200 ;refresh 14400 ;retry 604800 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (2 records) cen.eu. 900 IN NS ns1.be.colt.net. cen.eu. 900 IN NS ns0.be.colt.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.be.colt.net for cen.eu/A
	Received 98 bytes from 212.74.77.17
	;; Response received from [212.74.77.17] 98 octets ;; HEADER SECTION ;; id = 32590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (1 record) cen.eu. 900 IN A 217.111.181.2 ;; AUTHORITY SECTION (2 records) cen.eu. 900 IN NS ns0.be.colt.net. cen.eu. 900 IN NS ns1.be.colt.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cen.eu A RR has value 217.111.181.2
	No RRSIGs found

cen.eu

	Query to ns0.be.colt.net for cen.eu/A
	Received 98 bytes from 212.74.78.17
	;; Response received from [212.74.78.17] 98 octets ;; HEADER SECTION ;; id = 56807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (1 record) cen.eu. 900 IN A 217.111.181.2 ;; AUTHORITY SECTION (2 records) cen.eu. 900 IN NS ns0.be.colt.net. cen.eu. 900 IN NS ns1.be.colt.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns0.be.colt.net is authoritative for cen.eu
	Query to ns0.be.colt.net for cen.eu/A
	Received 98 bytes from 212.74.78.17
	;; Response received from [212.74.78.17] 98 octets ;; HEADER SECTION ;; id = 560 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cen.eu. IN A ;; ANSWER SECTION (1 record) cen.eu. 900 IN A 217.111.181.2 ;; AUTHORITY SECTION (2 records) cen.eu. 900 IN NS ns0.be.colt.net. cen.eu. 900 IN NS ns1.be.colt.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	cen.eu A RR has value 217.111.181.2
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test cen.eu at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: