DNSSEC Debugger - duradera.co

Domain Name:

Time: 2024-05-19 12:07:53 UTC

Analyzing DNSSEC problems for duradera.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 865 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 865 octets ;; HEADER SECTION ;; id = 33131 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to f.root-servers.net for duradera.co/A
	Received 753 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 753 octets ;; HEADER SECTION ;; id = 38645 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . eTftHSSf3sH4Xxdwio633gY4rrmoE8cYKEX89b2EI84NF9Lj0plKoZ7EUlLwebpajJTxJXge1vy2 YtcI5uHzcwBHtBHP/Z37QHFtmXaWcJ8wwk1cMbKHvMIZyCDJq6FyUnzLF06vHnzvA1ILE8B+i6RH mWzxuU1MPe9K/UwJJOw7jfi8iy+wzRD0aioz3G2gjC5u1haaqpKFioavROrRE1r+4mYA+isMHeb5 vuM0Pz7AeDchSoQ0xbeGS2Ix0nNCDWodQQ2Ty9r+VVV6pn1UXJdRjINtt++vYhWfY1lmHaInr+zp OETo6t/+WwYrJnlNnMryqmpmhmqsypAopZhBlg== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN A 156.154.104.25 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN A 156.154.105.25 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for co/DNSKEY
	Received 744 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 744 octets ;; HEADER SECTION ;; id = 9742 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . eTftHSSf3sH4Xxdwio633gY4rrmoE8cYKEX89b2EI84NF9Lj0plKoZ7EUlLwebpajJTxJXge1vy2 YtcI5uHzcwBHtBHP/Z37QHFtmXaWcJ8wwk1cMbKHvMIZyCDJq6FyUnzLF06vHnzvA1ILE8B+i6RH mWzxuU1MPe9K/UwJJOw7jfi8iy+wzRD0aioz3G2gjC5u1haaqpKFioavROrRE1r+4mYA+isMHeb5 vuM0Pz7AeDchSoQ0xbeGS2Ix0nNCDWodQQ2Ty9r+VVV6pn1UXJdRjINtt++vYhWfY1lmHaInr+zp OETo6t/+WwYrJnlNnMryqmpmhmqsypAopZhBlg== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; { "EDNS-VERSION": 0 }
	Found child zone co

	Checking DS between . and co
	Query to h.root-servers.net for co/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 366 octets ;; HEADER SECTION ;; id = 9 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (2 records) co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . eTftHSSf3sH4Xxdwio633gY4rrmoE8cYKEX89b2EI84NF9Lj0plKoZ7EUlLwebpajJTxJXge1vy2 YtcI5uHzcwBHtBHP/Z37QHFtmXaWcJ8wwk1cMbKHvMIZyCDJq6FyUnzLF06vHnzvA1ILE8B+i6RH mWzxuU1MPe9K/UwJJOw7jfi8iy+wzRD0aioz3G2gjC5u1haaqpKFioavROrRE1r+4mYA+isMHeb5 vuM0Pz7AeDchSoQ0xbeGS2Ix0nNCDWodQQ2Ty9r+VVV6pn1UXJdRjINtt++vYhWfY1lmHaInr+zp OETo6t/+WwYrJnlNnMryqmpmhmqsypAopZhBlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co in the . zone
	DS=62110/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . eTftHSSf3sH4Xxdwio633gY4rrmoE8cYKEX89b2EI84NF9Lj0plKoZ7EUlLwebpajJTxJXge1vy2 YtcI5uHzcwBHtBHP/Z37QHFtmXaWcJ8wwk1cMbKHvMIZyCDJq6FyUnzLF06vHnzvA1ILE8B+i6RH mWzxuU1MPe9K/UwJJOw7jfi8iy+wzRD0aioz3G2gjC5u1haaqpKFioavROrRE1r+4mYA+isMHeb5 vuM0Pz7AeDchSoQ0xbeGS2Ix0nNCDWodQQ2Ty9r+VVV6pn1UXJdRjINtt++vYhWfY1lmHaInr+zp OETo6t/+WwYrJnlNnMryqmpmhmqsypAopZhBlg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=62110/SHA-256 is now in the chain-of-trust
	`co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 )`
	Query to ns5.cctld.co for co/DNSKEY
	Received 1247 bytes from 156.154.104.25
	;; Response received from [156.154.104.25] 1247 octets ;; HEADER SECTION ;; id = 24986 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (5 records) co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065 co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744 co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110 co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== ) co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for co
	`co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065`
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744`
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110`
	DNSKEY=62110/SEP is now in the chain-of-trust
	DS=62110/SHA-256 verifies DNSKEY=62110/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== )`
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== )`
	RRSIG=19065 and DNSKEY=19065 verifies the DNSKEY RRset
	RRSIG=62110 and DNSKEY=62110/SEP verifies the DNSKEY RRset
	DNSKEY=19065 is now in the chain-of-trust
	DNSKEY=61744/SEP is now in the chain-of-trust
	Query to ns4.cctld.co for duradera.co/A
	Received 642 bytes from 156.154.103.25
	;; Response received from [156.154.103.25] 642 octets ;; HEADER SECTION ;; id = 59697 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) duradera.co. 3600 IN NS ns27.domaincontrol.com. duradera.co. 3600 IN NS ns28.domaincontrol.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN NSEC3 ( 1 1 0 - ujb58ijcq5iccjhc9j5qq60gush38j3m NS DS RRSIG ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN RRSIG ( NSEC3 8 2 900 20240613081246 20240514080628 19065 co. L9CC+EFty9KWsx4CMO9PNfPygXmxxaEZEUtjBcelAPjG+ayO/AFk3s1ufT1+evGbgxQqgL6JEuHo /WTi7miAuQN1/XggKlezxO0K5GM2IiiAjw3rFpsRw1hAFvYxjJV6JAVJapxXbowFjkgJDUYDDYCz T+0w6rtl1iBRuv3pMtd5EUtxSwreIEww1CYC1tKT5xEj9TWkA3rXNs6fgDFRRQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns6.cctld.co for duradera.co/DNSKEY
	Received 642 bytes from 156.154.105.25
	;; Response received from [156.154.105.25] 642 octets ;; HEADER SECTION ;; id = 17648 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) duradera.co. 3600 IN NS ns28.domaincontrol.com. duradera.co. 3600 IN NS ns27.domaincontrol.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN NSEC3 ( 1 1 0 - ujb58ijcq5iccjhc9j5qq60gush38j3m NS DS RRSIG ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN RRSIG ( NSEC3 8 2 900 20240613081246 20240514080628 19065 co. L9CC+EFty9KWsx4CMO9PNfPygXmxxaEZEUtjBcelAPjG+ayO/AFk3s1ufT1+evGbgxQqgL6JEuHo /WTi7miAuQN1/XggKlezxO0K5GM2IiiAjw3rFpsRw1hAFvYxjJV6JAVJapxXbowFjkgJDUYDDYCz T+0w6rtl1iBRuv3pMtd5EUtxSwreIEww1CYC1tKT5xEj9TWkA3rXNs6fgDFRRQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone duradera.co

duradera.co

	Checking DS between co and duradera.co
	Query to ns4.cctld.co for duradera.co/DS
	Received 848 bytes from 156.154.103.25
	;; Response received from [156.154.103.25] 848 octets ;; HEADER SECTION ;; id = 59989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) co. 900 IN SOA ( ns1.cctld.co. admin.tldns.godaddy. 1716119903 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) co. 900 IN RRSIG ( SOA 8 1 900 20240618115847 20240519105847 19065 co. ggj4YTjJGu4cq2+yNoPOpJXWTHECbXPO8d9T/cPasODpttuqpbDBcBQmkJO79qg53UskXXPvF+Ti vZYlYyV/9ydpEbfHXLrTsU4p4UPhT7V8WcxliE07KOVLFEoElqmh07ptmoF2Hq1o63YzzIFhv3wD bFzKJhUrXe9Jt4TTM0SvOstPG+qB0c5gJNBpiBmwRV8qB/Ie/5ZV9vqHg5tg7A== ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN NSEC3 ( 1 1 0 - ujb58ijcq5iccjhc9j5qq60gush38j3m NS DS RRSIG ) uja89upulqg5sundqldaiic2b76los7d.co. 900 IN RRSIG ( NSEC3 8 2 900 20240613081246 20240514080628 19065 co. L9CC+EFty9KWsx4CMO9PNfPygXmxxaEZEUtjBcelAPjG+ayO/AFk3s1ufT1+evGbgxQqgL6JEuHo /WTi7miAuQN1/XggKlezxO0K5GM2IiiAjw3rFpsRw1hAFvYxjJV6JAVJapxXbowFjkgJDUYDDYCz T+0w6rtl1iBRuv3pMtd5EUtxSwreIEww1CYC1tKT5xEj9TWkA3rXNs6fgDFRRQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for duradera.co in the co zone
	Query to ns27.domaincontrol.com for duradera.co/DNSKEY
	Received 111 bytes from 97.74.103.14
	;; Response received from [97.74.103.14] 111 octets ;; HEADER SECTION ;; id = 38269 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) duradera.co. 600 IN SOA ( ns27.domaincontrol.com. dns.jomax.net. 2024051302 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns27.domaincontrol.com for duradera.co/A
	Received 127 bytes from 97.74.103.14
	;; Response received from [97.74.103.14] 127 octets ;; HEADER SECTION ;; id = 59695 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (2 records) duradera.co. 600 IN A 3.33.130.190 duradera.co. 600 IN A 15.197.148.33 ;; AUTHORITY SECTION (2 records) duradera.co. 3600 IN NS ns28.domaincontrol.com. duradera.co. 3600 IN NS ns27.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns27.domaincontrol.com is authoritative for duradera.co
	Query to ns28.domaincontrol.com for duradera.co/SOA
	Received 144 bytes from 173.201.71.14
	;; Response received from [173.201.71.14] 144 octets ;; HEADER SECTION ;; id = 13465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN SOA ;; ANSWER SECTION (1 record) duradera.co. 3600 IN SOA ( ns27.domaincontrol.com. dns.jomax.net. 2024051302 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (2 records) duradera.co. 3600 IN NS ns27.domaincontrol.com. duradera.co. 3600 IN NS ns28.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns27.domaincontrol.com for duradera.co/A
	Received 127 bytes from 97.74.103.14
	;; Response received from [97.74.103.14] 127 octets ;; HEADER SECTION ;; id = 39748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (2 records) duradera.co. 600 IN A 3.33.130.190 duradera.co. 600 IN A 15.197.148.33 ;; AUTHORITY SECTION (2 records) duradera.co. 3600 IN NS ns28.domaincontrol.com. duradera.co. 3600 IN NS ns27.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	duradera.co A RR has value 3.33.130.190
	duradera.co A RR has value 15.197.148.33
	No RRSIGs found

duradera.co

	Query to ns28.domaincontrol.com for duradera.co/A
	Received 127 bytes from 173.201.71.14
	;; Response received from [173.201.71.14] 127 octets ;; HEADER SECTION ;; id = 40696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (2 records) duradera.co. 600 IN A 3.33.130.190 duradera.co. 600 IN A 15.197.148.33 ;; AUTHORITY SECTION (2 records) duradera.co. 3600 IN NS ns28.domaincontrol.com. duradera.co. 3600 IN NS ns27.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns28.domaincontrol.com is authoritative for duradera.co
	Query to ns28.domaincontrol.com for duradera.co/A
	Received 127 bytes from 173.201.71.14
	;; Response received from [173.201.71.14] 127 octets ;; HEADER SECTION ;; id = 14315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; duradera.co. IN A ;; ANSWER SECTION (2 records) duradera.co. 600 IN A 3.33.130.190 duradera.co. 600 IN A 15.197.148.33 ;; AUTHORITY SECTION (2 records) duradera.co. 3600 IN NS ns28.domaincontrol.com. duradera.co. 3600 IN NS ns27.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	duradera.co A RR has value 3.33.130.190
	duradera.co A RR has value 15.197.148.33
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test duradera.co at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: