DNSSEC Analyzer

Domain Name:

Time: 2012-05-18 17:59:22 UTC, NTP stratum 3

Analyzing DNSSEC problems for czar.dk

DS=19036/SHA1 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. 0 IN DS 19036 8 1 B256BD09DC8DD59F0E0F0D8541B8328DD986DF6E ; xosih-kezeb-nulum-tohin-zafab-zyfom-hubur-masam-tikam-kelek-vyxex`
	`. 0 IN DS 19036 8 2 49AAC11D7B6F6446702E54A1607371607A1A41855200FD2CE1CDDE32F24E8FB5 ; xidep-pybec-tyvak-zonag-kesud-vohip-cumul-fysuk-bivac-pubam-hugeb-buzud-symes-tylaf-dosog-vufor-huxax`
	Query to a.root-servers.net for ./DNSKEY
	Received 736 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (736 bytes) ;; HEADER SECTION ;; id = 28457 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxh JhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd 0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJR kxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/V HL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68 LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtu A6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoB Qzgul0sGIcGOYl7OyQdXfZ57relSQageu+ip AdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwh YB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY 256 3 8 ( AwEAAbd0IPTQdvyndWSX6HHcB+JycMl1aCGT HSJUBs/y9S93el05VvXg1VqSF4vveB9rEuAZ 1z8RNWZ9ac+rlaK7PrI5RlCIyKKPbtHbpgQG kwai8O6BZ4J/ch7DGuhGJfvoECcWjsucs683 WFRtmfLx5WNdPxxi30Czt1zPqMWfY6YJ ) ; Key ID = 56158 . 172800 IN RRSIG DNSKEY 8 0 172800 20120525235959 ( 20120511000000 19036 . MtzzHscNjLh7BQcxREmsMELOepbmiXhXuob47LYuJU5Eo N9qDG3eiV7otfXNi/sOzmcbV+mPuxd6kvjwVumGlcQdY9 3Fnf8CocL7WTW94Z85tV9PtVjWiYwtGhjPaO0zscgNcHe h0DEeSooXVFhpkc35fkDKSPfpV2LyBt+KpaFY2aCDLhrN qYdFaERDwsxeWVeZLB3yO631puhCL+D7WyRBff5ZiVQKt Cw4g4s0q1z+riHRktdXs68gy8QFcDWssJyW+mZa/gXmFa F+IDbOo2pvaagRZm5Qy0DE92LDwiALKfYhVq1uV4vBmRp gk+uHCyZjOHpY6nRh7gPuW1BALg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxh JhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd 0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJR kxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/V HL496M/QZxkjf5/Efucp2gaDX6RS6CXpoY68 LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtu A6G3LQpzW5hOA2hzCTMjJPJ8LbqF6dsV6DoB Qzgul0sGIcGOYl7OyQdXfZ57relSQageu+ip AdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwh YB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY 256 3 8 ( AwEAAbd0IPTQdvyndWSX6HHcB+JycMl1aCGT HSJUBs/y9S93el05VvXg1VqSF4vveB9rEuAZ 1z8RNWZ9ac+rlaK7PrI5RlCIyKKPbtHbpgQG kwai8O6BZ4J/ch7DGuhGJfvoECcWjsucs683 WFRtmfLx5WNdPxxi30Czt1zPqMWfY6YJ ) ; Key ID = 56158`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA1 verifies DNSKEY=19036/SEP
	DS=19036/SHA256 verifies DNSKEY=19036/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG DNSKEY 8 0 172800 20120525235959 ( 20120511000000 19036 . MtzzHscNjLh7BQcxREmsMELOepbmiXhXuob47LYuJU5Eo N9qDG3eiV7otfXNi/sOzmcbV+mPuxd6kvjwVumGlcQdY9 3Fnf8CocL7WTW94Z85tV9PtVjWiYwtGhjPaO0zscgNcHe h0DEeSooXVFhpkc35fkDKSPfpV2LyBt+KpaFY2aCDLhrN qYdFaERDwsxeWVeZLB3yO631puhCL+D7WyRBff5ZiVQKt Cw4g4s0q1z+riHRktdXs68gy8QFcDWssJyW+mZa/gXmFa F+IDbOo2pvaagRZm5Qy0DE92LDwiALKfYhVq1uV4vBmRp gk+uHCyZjOHpY6nRh7gPuW1BALg== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=56158 is now in the chain-of-trust
	Query to k.root-servers.net for czar.dk/A
	Received 523 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (523 bytes) ;; HEADER SECTION ;; id = 571 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; QUESTION SECTION (1 record) ;; czar.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS a.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 86400 IN DS 26887 8 2 a1ab8546b80e438a7dfe0ec559a7088ec5aed3c4e0d26b1b60ed3735f853dfd7 ; xomep-rocig-kavub-vobom-pazez-vifis-hakop-lydem-vucep-vegus-gumyt-dipec-rimav-tityf-hevah-falot-loxux dk. 86400 IN RRSIG DS 8 1 86400 20120525000000 ( 20120517230000 56158 . j1B4HJ+HkM4e+qZ8QdkonINwmi3hHEyPtlFNmrVI/j+af igvhii7dJc0bllaZ29PKM83avUeua9izG3MF0UNNHiu5k 2MM5s6QXFVRcUG32EtlmlJ3SKuRqbikLOiwR72Lac2N8c oe6vuYbYpZYDcE5x0Hej+Dwr9OKrR3CJO2/g= ) ;; ADDITIONAL SECTION (10 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 c.nic.dk. 172800 IN A 208.76.168.244 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 204.61.216.36 s.nic.dk. 172800 IN A 77.72.229.252 b.nic.dk. 172800 IN AAAA 2a01:630:0:80:0:0:0:53 p.nic.dk. 172800 IN AAAA 2001:500:14:6036:ad:0:0:1 s.nic.dk. 172800 IN AAAA 2a01:3f0:0:303:0:0:0:53 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to c.root-servers.net for dk/DNSKEY
	Received 518 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (518 bytes) ;; HEADER SECTION ;; id = 36174 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dk. 172800 IN NS l.nic.dk. dk. 172800 IN NS c.nic.dk. dk. 172800 IN NS s.nic.dk. dk. 172800 IN NS b.nic.dk. dk. 172800 IN NS p.nic.dk. dk. 172800 IN NS a.nic.dk. dk. 86400 IN DS 26887 8 2 a1ab8546b80e438a7dfe0ec559a7088ec5aed3c4e0d26b1b60ed3735f853dfd7 ; xomep-rocig-kavub-vobom-pazez-vifis-hakop-lydem-vucep-vegus-gumyt-dipec-rimav-tityf-hevah-falot-loxux dk. 86400 IN RRSIG DS 8 1 86400 20120525000000 ( 20120517230000 56158 . j1B4HJ+HkM4e+qZ8QdkonINwmi3hHEyPtlFNmrVI/j+af igvhii7dJc0bllaZ29PKM83avUeua9izG3MF0UNNHiu5k 2MM5s6QXFVRcUG32EtlmlJ3SKuRqbikLOiwR72Lac2N8c oe6vuYbYpZYDcE5x0Hej+Dwr9OKrR3CJO2/g= ) ;; ADDITIONAL SECTION (10 records) a.nic.dk. 172800 IN A 212.88.78.122 b.nic.dk. 172800 IN A 193.163.102.222 b.nic.dk. 172800 IN AAAA 2a01:630:0:80:0:0:0:53 c.nic.dk. 172800 IN A 208.76.168.244 l.nic.dk. 172800 IN A 192.38.7.242 p.nic.dk. 172800 IN A 204.61.216.36 p.nic.dk. 172800 IN AAAA 2001:500:14:6036:ad:0:0:1 s.nic.dk. 172800 IN A 77.72.229.252 s.nic.dk. 172800 IN AAAA 2a01:3f0:0:303:0:0:0:53 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found child zone dk

	Checking DS between . and dk
	Query to j.root-servers.net for dk/DS
	Received 238 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (238 bytes) ;; HEADER SECTION ;; id = 40584 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; dk. IN DS ;; ANSWER SECTION (2 records) dk. 86400 IN DS 26887 8 2 a1ab8546b80e438a7dfe0ec559a7088ec5aed3c4e0d26b1b60ed3735f853dfd7 ; xomep-rocig-kavub-vobom-pazez-vifis-hakop-lydem-vucep-vegus-gumyt-dipec-rimav-tityf-hevah-falot-loxux dk. 86400 IN RRSIG DS 8 1 86400 20120525000000 ( 20120517230000 56158 . j1B4HJ+HkM4e+qZ8QdkonINwmi3hHEyPtlFNmrVI/j+af igvhii7dJc0bllaZ29PKM83avUeua9izG3MF0UNNHiu5k 2MM5s6QXFVRcUG32EtlmlJ3SKuRqbikLOiwR72Lac2N8c oe6vuYbYpZYDcE5x0Hej+Dwr9OKrR3CJO2/g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 1 DS records for dk in the . zone
	Found 1 RRSIGs over DS RRset
	`dk. 86400 IN RRSIG DS 8 1 86400 20120525000000 ( 20120517230000 56158 . j1B4HJ+HkM4e+qZ8QdkonINwmi3hHEyPtlFNmrVI/j+af igvhii7dJc0bllaZ29PKM83avUeua9izG3MF0UNNHiu5k 2MM5s6QXFVRcUG32EtlmlJ3SKuRqbikLOiwR72Lac2N8c oe6vuYbYpZYDcE5x0Hej+Dwr9OKrR3CJO2/g= )`
	RRSIG=56158 and DNSKEY=56158 verifies the DS RRset
	DS=26887/SHA256 is now in the chain-of-trust
	`dk. 86400 IN DS 26887 8 2 a1ab8546b80e438a7dfe0ec559a7088ec5aed3c4e0d26b1b60ed3735f853dfd7 ; xomep-rocig-kavub-vobom-pazez-vifis-hakop-lydem-vucep-vegus-gumyt-dipec-rimav-tityf-hevah-falot-loxux`
	Query to c.nic.dk for dk/DNSKEY
	Received 1459 bytes from 208.76.168.244
	;; Answer received from 208.76.168.244 (1459 bytes) ;; HEADER SECTION ;; id = 19459 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; dk. IN DNSKEY ;; ANSWER SECTION (6 records) dk. 86400 IN DNSKEY 257 3 8 ( AwEAAcX56/UAMzmxalCMl5KWD5ViYJIRhWI8 upQy/KI7HL8rCkltQOY+MGkdNIndl1m0IrqJ 58pbFn3X6CSfXsbas0G0Pg5NyApomTtalw3E 4CQHLeXc6aZF97PcE4w1tjucZAtgGmvPEJLP nkQJOrUoqklAUaKUyT4HXyr8zPwsuT+S0sSJ mpTrtQVbZwY0TXr7CrYRtpg/aFjNzRRSQC8R ljQjRZi2KammIx7PocVx8VXy6pzKEWDP4yOC mcJkh0oa3fP0QCIpSlrlPArKbLsAUN62ARfl z04TrA0zskvRo4ah+C9Di9Il6KgkdAcUgdNX 1FAvoo80GTqb6rpZFsx7tn0= ) ; Key ID = 26887 dk. 86400 IN DNSKEY 256 3 8 ( AwEAAb5g1ekJbX1ZTQWVL/OcDAEwe3jn+Rcy Cm9Zzx+sQrcglaWKsc0Ou5WEHG5hhqks/7b+ j2+2hfwGmGhDwyp6qlQ2Nj0fCceZUIPMju0K 7dVCOpOlmUjZobzpz5de+E91xyqsnt+RK5C1 NvQvKLd3bvVLncz5MCsOYfoVKJhtS333 ) ; Key ID = 5074 dk. 86400 IN DNSKEY 256 3 8 ( AwEAAdmoTYL0C+NQGL2s8QgL8ofBbA8yx6MI 7N83e+KnofSoF6ANh/j32ZF05Oo4QE2bDtx6 BMZpj8/hDS7ho6Df5Ge3/zY32KPX0VR82KkF 6eqPQu3Iq4tuJSFTeIjVRAOhVEFU0ZkjDDSd aqCRAHmm+eNzaTWCFnF99oz5zCNgNwKV ) ; Key ID = 11383 dk. 86400 IN DNSKEY 257 3 8 ( AwEAAcTmmF7z9YEcJDrzwgzpHDglqRh6Utvx 9PeUhQan5WtwJnwa44KLLxRZfFKGbuHG8kms Uk/7bRx2ydHWSOXU5stnAA8uiX3VSRkTUYe2 WuIDqH+TH4ADl9t0ubyVai6B/ZLd1afmATfs Z2K2FA8brtDGT9DYNGFDBzesq3lhv+iUZcjT jgbKNKRvMYf6cBeQmi9BwJiZdDeFtm5okGFR 4you4La2zV0hUho9HeTfDK5mbarZg85viXEG iam2H7jCzAp5HIB8ld5B8xknQHDdSi4V/8LE 4p/OQ7im9W/GjypBSSP9y1zX+JQhlKGCKGwM 1tOyZMqJ1OmzL4GGwHB/LQU= ) ; Key ID = 31369 dk. 86400 IN RRSIG DNSKEY 8 1 86400 20120524125552 ( 20120517230255 31369 dk. sER1y0eq3oSQGHxnBhhAf3jFIs/xb5hV9kraRkY/NJ1JT YQoT+z7rD4s2/vXqk25Dt4T3+d/YqVz37wZGeLhXDWPeE QMf23qu98D0SN/JGoJW3sgMV3L9cRCX2M8CqYv5Xoh+Qx 0ODd0pRv3T1KX71AKX2ypxt9zlL3o1uJJEeqI51S0n953 hjucy8vnMhfBPcnYC8Iw/sjb/bPcclmQ4cYnZxDu4V+l5 OFGQf+8f2VRKOga6Evcgnu0TYqPaKTnu3oIElNw6hSO25 54kIs5rwzc/8epN5qebhSktuw3wTVNqmzekVPJhIoJq3r OYK26ZSGec8WGcTs99y0TqFhuaw== ) dk. 86400 IN RRSIG DNSKEY 8 1 86400 20120524144800 ( 20120518005503 26887 dk. DUbASLjKr4sCaXuerOCP6gfLTacRU6xwytkrAooAxA5JK OSMvzEnZxfAvKSJ5WktDDAWdA0d2UqteHjzT5kWOC50HG C4q4yJdjBxTgMbnLBz5F/i2r2eZMxcnTpRwmicXZBd/Mq 75wz9BI/JUKb40IQqA4md9HwNyXvVZcVcUkuMpUV92+RI twT5ctOAr9WNzKk2CEPK7tD3phTCspBen9wRctwzwiULp IABrL5hMJ9nGJzishBpAMKB0phFi0CaRA2HXJOTo4Ijey KTNneHMD9d+gE3XvtlqogYHV7Pq5L1zx9bWVH7wVsohjD S6N+4QJqhjBzWgV+3XHNHebhk9g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 4 DNSKEY records for dk
	`dk. 86400 IN DNSKEY 257 3 8 ( AwEAAcX56/UAMzmxalCMl5KWD5ViYJIRhWI8 upQy/KI7HL8rCkltQOY+MGkdNIndl1m0IrqJ 58pbFn3X6CSfXsbas0G0Pg5NyApomTtalw3E 4CQHLeXc6aZF97PcE4w1tjucZAtgGmvPEJLP nkQJOrUoqklAUaKUyT4HXyr8zPwsuT+S0sSJ mpTrtQVbZwY0TXr7CrYRtpg/aFjNzRRSQC8R ljQjRZi2KammIx7PocVx8VXy6pzKEWDP4yOC mcJkh0oa3fP0QCIpSlrlPArKbLsAUN62ARfl z04TrA0zskvRo4ah+C9Di9Il6KgkdAcUgdNX 1FAvoo80GTqb6rpZFsx7tn0= ) ; Key ID = 26887`
	`dk. 86400 IN DNSKEY 256 3 8 ( AwEAAb5g1ekJbX1ZTQWVL/OcDAEwe3jn+Rcy Cm9Zzx+sQrcglaWKsc0Ou5WEHG5hhqks/7b+ j2+2hfwGmGhDwyp6qlQ2Nj0fCceZUIPMju0K 7dVCOpOlmUjZobzpz5de+E91xyqsnt+RK5C1 NvQvKLd3bvVLncz5MCsOYfoVKJhtS333 ) ; Key ID = 5074`
	`dk. 86400 IN DNSKEY 256 3 8 ( AwEAAdmoTYL0C+NQGL2s8QgL8ofBbA8yx6MI 7N83e+KnofSoF6ANh/j32ZF05Oo4QE2bDtx6 BMZpj8/hDS7ho6Df5Ge3/zY32KPX0VR82KkF 6eqPQu3Iq4tuJSFTeIjVRAOhVEFU0ZkjDDSd aqCRAHmm+eNzaTWCFnF99oz5zCNgNwKV ) ; Key ID = 11383`
	`dk. 86400 IN DNSKEY 257 3 8 ( AwEAAcTmmF7z9YEcJDrzwgzpHDglqRh6Utvx 9PeUhQan5WtwJnwa44KLLxRZfFKGbuHG8kms Uk/7bRx2ydHWSOXU5stnAA8uiX3VSRkTUYe2 WuIDqH+TH4ADl9t0ubyVai6B/ZLd1afmATfs Z2K2FA8brtDGT9DYNGFDBzesq3lhv+iUZcjT jgbKNKRvMYf6cBeQmi9BwJiZdDeFtm5okGFR 4you4La2zV0hUho9HeTfDK5mbarZg85viXEG iam2H7jCzAp5HIB8ld5B8xknQHDdSi4V/8LE 4p/OQ7im9W/GjypBSSP9y1zX+JQhlKGCKGwM 1tOyZMqJ1OmzL4GGwHB/LQU= ) ; Key ID = 31369`
	DNSKEY=26887/SEP is now in the chain-of-trust
	DS=26887/SHA256 verifies DNSKEY=26887/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dk. 86400 IN RRSIG DNSKEY 8 1 86400 20120524125552 ( 20120517230255 31369 dk. sER1y0eq3oSQGHxnBhhAf3jFIs/xb5hV9kraRkY/NJ1JT YQoT+z7rD4s2/vXqk25Dt4T3+d/YqVz37wZGeLhXDWPeE QMf23qu98D0SN/JGoJW3sgMV3L9cRCX2M8CqYv5Xoh+Qx 0ODd0pRv3T1KX71AKX2ypxt9zlL3o1uJJEeqI51S0n953 hjucy8vnMhfBPcnYC8Iw/sjb/bPcclmQ4cYnZxDu4V+l5 OFGQf+8f2VRKOga6Evcgnu0TYqPaKTnu3oIElNw6hSO25 54kIs5rwzc/8epN5qebhSktuw3wTVNqmzekVPJhIoJq3r OYK26ZSGec8WGcTs99y0TqFhuaw== )`
	`dk. 86400 IN RRSIG DNSKEY 8 1 86400 20120524144800 ( 20120518005503 26887 dk. DUbASLjKr4sCaXuerOCP6gfLTacRU6xwytkrAooAxA5JK OSMvzEnZxfAvKSJ5WktDDAWdA0d2UqteHjzT5kWOC50HG C4q4yJdjBxTgMbnLBz5F/i2r2eZMxcnTpRwmicXZBd/Mq 75wz9BI/JUKb40IQqA4md9HwNyXvVZcVcUkuMpUV92+RI twT5ctOAr9WNzKk2CEPK7tD3phTCspBen9wRctwzwiULp IABrL5hMJ9nGJzishBpAMKB0phFi0CaRA2HXJOTo4Ijey KTNneHMD9d+gE3XvtlqogYHV7Pq5L1zx9bWVH7wVsohjD S6N+4QJqhjBzWgV+3XHNHebhk9g== )`
	RRSIG=31369 and DNSKEY=31369/SEP verifies the DNSKEY RRset
	RRSIG=26887 and DNSKEY=26887/SEP verifies the DNSKEY RRset
	DNSKEY=5074 is now in the chain-of-trust
	DNSKEY=11383 is now in the chain-of-trust
	DNSKEY=31369/SEP is now in the chain-of-trust
	Query to a.nic.dk for czar.dk/A
	Received 499 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (499 bytes) ;; HEADER SECTION ;; id = 31733 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; QUESTION SECTION (1 record) ;; czar.dk. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) czar.dk. 86400 IN NS ns1.gratisdns.dk. czar.dk. 86400 IN NS ns2.gratisdns.dk. czar.dk. 86400 IN NS ns3.gratisdns.dk. czar.dk. 86400 IN NS ns4.gratisdns.dk. czar.dk. 86400 IN DS 13036 5 1 3bca98205594e54d795e1a4ded41bbb5d6e4c0f9 ; xevos-puked-bohun-ganog-tuvyh-vikeg-tirug-cyvor-hihav-gibyz-nuxax czar.dk. 86400 IN RRSIG DS 8 2 86400 20120523065141 ( 20120516075917 5074 dk. iOM4dOmeicZn7UK2imNOE3Mf5nq7KFFE10V0sKCUdMnkc pyODLOj+oCLGWuDaPFbMNc6FQI8N1YcW++QrOC5FcKcYc K4Dgyr9NH7jrTn4na8vR2ZP3XeonijytHqawQbUqXdTu6 /QcaoASdk/p/DCvUMtHiCaFlRnZ1M0Z84V0o= ) ;; ADDITIONAL SECTION (9 records) ns1.gratisdns.dk. 86400 IN A 109.238.48.13 ns2.gratisdns.dk. 86400 IN A 208.43.238.42 ns3.gratisdns.dk. 86400 IN A 194.0.2.6 ns4.gratisdns.dk. 86400 IN A 87.73.3.3 ns1.gratisdns.dk. 86400 IN AAAA 2a02:9d0:3002:1:0:0:0:2 ns2.gratisdns.dk. 86400 IN AAAA 2607:f0d0:3001:16:0:0:0:2 ns3.gratisdns.dk. 86400 IN AAAA 2001:678:5:0:0:0:0:6 ns4.gratisdns.dk. 86400 IN AAAA 2a01:558:4000:0:0:0:0:3 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Query to a.nic.dk for czar.dk/DNSKEY
	Received 499 bytes from 212.88.78.122
	;; Answer received from 212.88.78.122 (499 bytes) ;; HEADER SECTION ;; id = 33942 ;; qr = 1 opcode = QUERY aa = 0 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; QUESTION SECTION (1 record) ;; czar.dk. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) czar.dk. 86400 IN NS ns1.gratisdns.dk. czar.dk. 86400 IN NS ns2.gratisdns.dk. czar.dk. 86400 IN NS ns3.gratisdns.dk. czar.dk. 86400 IN NS ns4.gratisdns.dk. czar.dk. 86400 IN DS 13036 5 1 3bca98205594e54d795e1a4ded41bbb5d6e4c0f9 ; xevos-puked-bohun-ganog-tuvyh-vikeg-tirug-cyvor-hihav-gibyz-nuxax czar.dk. 86400 IN RRSIG DS 8 2 86400 20120523065141 ( 20120516075917 5074 dk. iOM4dOmeicZn7UK2imNOE3Mf5nq7KFFE10V0sKCUdMnkc pyODLOj+oCLGWuDaPFbMNc6FQI8N1YcW++QrOC5FcKcYc K4Dgyr9NH7jrTn4na8vR2ZP3XeonijytHqawQbUqXdTu6 /QcaoASdk/p/DCvUMtHiCaFlRnZ1M0Z84V0o= ) ;; ADDITIONAL SECTION (9 records) ns1.gratisdns.dk. 86400 IN A 109.238.48.13 ns2.gratisdns.dk. 86400 IN A 208.43.238.42 ns3.gratisdns.dk. 86400 IN A 194.0.2.6 ns4.gratisdns.dk. 86400 IN A 87.73.3.3 ns1.gratisdns.dk. 86400 IN AAAA 2a02:9d0:3002:1:0:0:0:2 ns2.gratisdns.dk. 86400 IN AAAA 2607:f0d0:3001:16:0:0:0:2 ns3.gratisdns.dk. 86400 IN AAAA 2001:678:5:0:0:0:0:6 ns4.gratisdns.dk. 86400 IN AAAA 2a01:558:4000:0:0:0:0:3 ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x0000
	Found child zone czar.dk

czar.dk

	Checking DS between dk and czar.dk
	Query to b.nic.dk for czar.dk/DS
	Received 234 bytes from 193.163.102.222
	;; Answer received from 193.163.102.222 (234 bytes) ;; HEADER SECTION ;; id = 51485 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN DS ;; ANSWER SECTION (2 records) czar.dk. 86400 IN DS 13036 5 1 3bca98205594e54d795e1a4ded41bbb5d6e4c0f9 ; xevos-puked-bohun-ganog-tuvyh-vikeg-tirug-cyvor-hihav-gibyz-nuxax czar.dk. 86400 IN RRSIG DS 8 2 86400 20120523065141 ( 20120516075917 5074 dk. iOM4dOmeicZn7UK2imNOE3Mf5nq7KFFE10V0sKCUdMnkc pyODLOj+oCLGWuDaPFbMNc6FQI8N1YcW++QrOC5FcKcYc K4Dgyr9NH7jrTn4na8vR2ZP3XeonijytHqawQbUqXdTu6 /QcaoASdk/p/DCvUMtHiCaFlRnZ1M0Z84V0o= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 1 DS records for czar.dk in the dk zone
	Found 1 RRSIGs over DS RRset
	`czar.dk. 86400 IN RRSIG DS 8 2 86400 20120523065141 ( 20120516075917 5074 dk. iOM4dOmeicZn7UK2imNOE3Mf5nq7KFFE10V0sKCUdMnkc pyODLOj+oCLGWuDaPFbMNc6FQI8N1YcW++QrOC5FcKcYc K4Dgyr9NH7jrTn4na8vR2ZP3XeonijytHqawQbUqXdTu6 /QcaoASdk/p/DCvUMtHiCaFlRnZ1M0Z84V0o= )`
	RRSIG=5074 and DNSKEY=5074 verifies the DS RRset
	DS=13036/SHA1 is now in the chain-of-trust
	`czar.dk. 86400 IN DS 13036 5 1 3bca98205594e54d795e1a4ded41bbb5d6e4c0f9 ; xevos-puked-bohun-ganog-tuvyh-vikeg-tirug-cyvor-hihav-gibyz-nuxax`
	Query to ns2.gratisdns.dk for czar.dk/DNSKEY
	Received 410 bytes from 208.43.238.42
	;; Answer received from 208.43.238.42 (410 bytes) ;; HEADER SECTION ;; id = 43654 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN DNSKEY ;; ANSWER SECTION (4 records) czar.dk. 43200 IN DNSKEY 256 3 5 ( AwEAAcX6zRMGtKJhviPE59KAbzoU+N+cadAP ryT6y/OKcj9+wZhT/zZyThXo3zWGTSYwFQsc iqaA/WDp4nvjxtvFbNs= ) ; Key ID = 60723 czar.dk. 43200 IN DNSKEY 257 3 5 ( AwEAAc61iSogOeyDnRva9d4pgPEYtbhrsj/G Yc+TTzrmgF04+WlDf7DUyWo+vIOI4oC2UEf4 qHU8bpeUayQiDNL0DPs= ) ; Key ID = 13036 czar.dk. 43200 IN RRSIG DNSKEY 5 2 43200 20120611010607 ( 20120512010607 13036 czar.dk. Ar4wiuN36R5PfAs6bOsNurP/kGchpWfWOn65cwlnJ3ayY 7hTrRXYOXWUdAOcveIiTDCniicbkC+ETVSN69Ay4w== ) czar.dk. 43200 IN RRSIG DNSKEY 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. Gfg63wgUWQi7/Z9HK0pmSFhm/Jis/jMkyB0Zbv/YiYyXE bydVKBR4TfvxFGy21EH2r13V5p7B/FIWELGe3C0KQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Found 2 DNSKEY records for czar.dk
	`czar.dk. 43200 IN DNSKEY 256 3 5 ( AwEAAcX6zRMGtKJhviPE59KAbzoU+N+cadAP ryT6y/OKcj9+wZhT/zZyThXo3zWGTSYwFQsc iqaA/WDp4nvjxtvFbNs= ) ; Key ID = 60723`
	`czar.dk. 43200 IN DNSKEY 257 3 5 ( AwEAAc61iSogOeyDnRva9d4pgPEYtbhrsj/G Yc+TTzrmgF04+WlDf7DUyWo+vIOI4oC2UEf4 qHU8bpeUayQiDNL0DPs= ) ; Key ID = 13036`
	DNSKEY=13036/SEP is now in the chain-of-trust
	DS=13036/SHA1 verifies DNSKEY=13036/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`czar.dk. 43200 IN RRSIG DNSKEY 5 2 43200 20120611010607 ( 20120512010607 13036 czar.dk. Ar4wiuN36R5PfAs6bOsNurP/kGchpWfWOn65cwlnJ3ayY 7hTrRXYOXWUdAOcveIiTDCniicbkC+ETVSN69Ay4w== )`
	`czar.dk. 43200 IN RRSIG DNSKEY 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. Gfg63wgUWQi7/Z9HK0pmSFhm/Jis/jMkyB0Zbv/YiYyXE bydVKBR4TfvxFGy21EH2r13V5p7B/FIWELGe3C0KQ== )`
	RRSIG=13036 and DNSKEY=13036/SEP verifies the DNSKEY RRset
	RRSIG=60723 and DNSKEY=60723 verifies the DNSKEY RRset
	DNSKEY=60723 is now in the chain-of-trust
	Query to ns4.gratisdns.dk for czar.dk/A
	Received 358 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (358 bytes) ;; HEADER SECTION ;; id = 34326 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN A ;; ANSWER SECTION (2 records) czar.dk. 43200 IN A 91.221.196.253 czar.dk. 43200 IN RRSIG A 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. mIKRVvew8rFh1lY68g+VpC7rHox3scqQz/+MhOlm5oOW1 Me/roHuA3intSGR6EVKdZF14KHFqx9e32A981Y3xg== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	czar.dk is authoritative for czar.dk
	Found RRSIG signed by czar.dk zone
	Query to ns2.gratisdns.dk for czar.dk/SOA
	Received 402 bytes from 208.43.238.42
	;; Answer received from 208.43.238.42 (402 bytes) ;; HEADER SECTION ;; id = 49581 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN SOA ;; ANSWER SECTION (2 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns5.gratisdns.dk for czar.dk/SOA
	Received 402 bytes from 85.17.221.46
	;; Answer received from 85.17.221.46 (402 bytes) ;; HEADER SECTION ;; id = 7880 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN SOA ;; ANSWER SECTION (2 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns3.gratisdns.dk for czar.dk/SOA
	Received 217 bytes from 194.0.2.6
	;; Answer received from 194.0.2.6 (217 bytes) ;; HEADER SECTION ;; id = 54648 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN SOA ;; ANSWER SECTION (2 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns1.gratisdns.dk for czar.dk/SOA
	Received 402 bytes from 109.238.48.13
	;; Answer received from 109.238.48.13 (402 bytes) ;; HEADER SECTION ;; id = 42520 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN SOA ;; ANSWER SECTION (2 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns4.gratisdns.dk for czar.dk/SOA
	Received 402 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (402 bytes) ;; HEADER SECTION ;; id = 8468 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN SOA ;; ANSWER SECTION (2 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns4.gratisdns.dk for czar.dk/A
	Received 358 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (358 bytes) ;; HEADER SECTION ;; id = 35163 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN A ;; ANSWER SECTION (2 records) czar.dk. 43200 IN A 91.221.196.253 czar.dk. 43200 IN RRSIG A 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. mIKRVvew8rFh1lY68g+VpC7rHox3scqQz/+MhOlm5oOW1 Me/roHuA3intSGR6EVKdZF14KHFqx9e32A981Y3xg== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	czar.dk A RR has value 91.221.196.253
	Found 1 RRSIGs over A RRset
	`czar.dk. 43200 IN RRSIG A 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. mIKRVvew8rFh1lY68g+VpC7rHox3scqQz/+MhOlm5oOW1 Me/roHuA3intSGR6EVKdZF14KHFqx9e32A981Y3xg== )`
	RRSIG=60723 and DNSKEY=60723 verifies the A RRset
	Query to ns4.gratisdns.dk for czar.dk/AAAA
	Received 370 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (370 bytes) ;; HEADER SECTION ;; id = 53088 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN AAAA ;; ANSWER SECTION (2 records) czar.dk. 600 IN AAAA 2001:67c:3c0:12:0:0:0:53 czar.dk. 600 IN RRSIG AAAA 5 2 600 20120611010607 ( 20120512010607 60723 czar.dk. bzxd4OR6Y+RqtNOWhI23y6S5IQ+pC3lkuVCewUlttcoKt sul+HlYzGCjrbABb3CuNeMEABY2stkie/80xHleBw== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	czar.dk AAAA RR has value 2001:67c:3c0:12:0:0:0:53
	Found 1 RRSIGs over AAAA RRset
	`czar.dk. 600 IN RRSIG AAAA 5 2 600 20120611010607 ( 20120512010607 60723 czar.dk. bzxd4OR6Y+RqtNOWhI23y6S5IQ+pC3lkuVCewUlttcoKt sul+HlYzGCjrbABb3CuNeMEABY2stkie/80xHleBw== )`
	RRSIG=60723 and DNSKEY=60723 verifies the AAAA RRset
	Query to ns4.gratisdns.dk for czar.dk/MX
	Received 405 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (405 bytes) ;; HEADER SECTION ;; id = 29766 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 6 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN MX ;; ANSWER SECTION (3 records) czar.dk. 43200 IN MX 9 antispam01b.mxhotel.dk. czar.dk. 43200 IN MX 9 antispam01.mxhotel.dk. czar.dk. 43200 IN RRSIG MX 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. Ex1Db8tSQ9pYCu8YyzBEpIumOOnqQbfv7q8rpox9KxS7l E7mlJjUCFcQ6P14rkw18TJPr/NLw1a4RcFXVNNQoQ== ) ;; AUTHORITY SECTION (6 records) czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	czar.dk MX RR has value 9 antispam01b.mxhotel.dk.
	czar.dk MX RR has value 9 antispam01.mxhotel.dk.
	Found 1 RRSIGs over MX RRset
	`czar.dk. 43200 IN RRSIG MX 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. Ex1Db8tSQ9pYCu8YyzBEpIumOOnqQbfv7q8rpox9KxS7l E7mlJjUCFcQ6P14rkw18TJPr/NLw1a4RcFXVNNQoQ== )`
	RRSIG=60723 and DNSKEY=60723 verifies the MX RRset
	Query to ns4.gratisdns.dk for czar.dk/PTR
	Received 348 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (348 bytes) ;; HEADER SECTION ;; id = 24211 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN PTR ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) czar.dk. 43200 IN NSEC *.czar.dk. A AAAA DNSKEY MX NS NSEC RRSIG SOA czar.dk. 43200 IN RRSIG NSEC 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. q59gBChViat3wFNBKI0gHWLGlw6kxXByEw5cufdac0es6 LTxO+2/F4PBzK0M3D5QFJFeoh+vJ3sfuFvOBofr3A== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns4.gratisdns.dk for czar.dk/TXT
	Received 348 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (348 bytes) ;; HEADER SECTION ;; id = 32483 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN TXT ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) czar.dk. 43200 IN SOA ns1.gratisdns.dk. peter.larsen.larsendata.dk. ( 2011110829 ; Serial 10800 ; Refresh 3600 ; Retry 2419000 ; Expire 43200 ) ; Minimum TTL czar.dk. 43200 IN RRSIG SOA 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. YHhOpotvIATvEn9MjTwOEge+ChgZ78JhlkVhLzZBrmQEU FTDnoDkCu6maPQzJm6+cxCVnMr9xPGr7GsU+/RHlw== ) czar.dk. 43200 IN NSEC *.czar.dk. A AAAA DNSKEY MX NS NSEC RRSIG SOA czar.dk. 43200 IN RRSIG NSEC 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. q59gBChViat3wFNBKI0gHWLGlw6kxXByEw5cufdac0es6 LTxO+2/F4PBzK0M3D5QFJFeoh+vJ3sfuFvOBofr3A== ) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	Query to ns4.gratisdns.dk for czar.dk/NS
	Received 239 bytes from 87.73.3.3
	;; Answer received from 87.73.3.3 (239 bytes) ;; HEADER SECTION ;; id = 49932 ;; qr = 1 opcode = QUERY aa = 1 tc = 0 rd = 0 ;; ra = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; QUESTION SECTION (1 record) ;; czar.dk. IN NS ;; ANSWER SECTION (6 records) czar.dk. 43200 IN NS ns5.gratisdns.dk. czar.dk. 43200 IN NS ns2.gratisdns.dk. czar.dk. 43200 IN NS ns4.gratisdns.dk. czar.dk. 43200 IN NS ns1.gratisdns.dk. czar.dk. 43200 IN NS ns3.gratisdns.dk. czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ; EDNS Version 0 UDP Packetsize: 4096 ; EDNS-RCODE: 0 (ONLY_RDATA) ; EDNS-FLAGS: 0x8000
	czar.dk NS RR has value ns5.gratisdns.dk.
	czar.dk NS RR has value ns2.gratisdns.dk.
	czar.dk NS RR has value ns4.gratisdns.dk.
	czar.dk NS RR has value ns1.gratisdns.dk.
	czar.dk NS RR has value ns3.gratisdns.dk.
	Found 1 RRSIGs over NS RRset
	`czar.dk. 43200 IN RRSIG NS 5 2 43200 20120611010607 ( 20120512010607 60723 czar.dk. EDVMB5JuimcFw0AaXOsqnH1umKBaJLsR20d1bp8ocM5qx CLkaRh0DPSxO6EI2gP7sVU097OpggyYl1DLOmFeVg== )`
	RRSIG=60723 and DNSKEY=60723 verifies the NS RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test czar.dk at dnsviz.net.

DNSSEC Analyzer r47 2012-05-11 09:42:31

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: