DNSSEC Debugger - estada.ch

Domain Name:

Time: 2024-05-17 05:49:30 UTC

Analyzing DNSSEC problems for estada.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 14793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to g.root-servers.net for estada.ch/A
	Received 679 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 679 octets ;; HEADER SECTION ;; id = 33912 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . OVIDf/OpD0rwg+gsTFrOY35txQX3KAxhi+1LDUYRpN7JdGLgFPTPg2Wm/lSsdCTyADPnEGieX47z s4gErrxkwKSiqnic8VzmqMXuGwT1wW1zwUIqfFEyXqYlHy074MIIXXGpx6ONWGjm3S4FhqW8idQT joYSnQ8Gv+3/n7pVqdzK9CTSli22YvT0yKL9UZ9EXWvHwc/Lz+7xb0o27ETRnjbPnf8Jz61ugl6e or+WNZlMZhpoHHbthaSzbJh/q0Ps/RJtU9jUTHx1Cg8iGq06vUyjk6eZbeNEqToELZmww2PuWKp4 uaI3BNIKhPt84RNxlTdx5o79EvvNOfwNKb4bLQ== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for ch/DNSKEY
	Received 672 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 672 octets ;; HEADER SECTION ;; id = 50069 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . OVIDf/OpD0rwg+gsTFrOY35txQX3KAxhi+1LDUYRpN7JdGLgFPTPg2Wm/lSsdCTyADPnEGieX47z s4gErrxkwKSiqnic8VzmqMXuGwT1wW1zwUIqfFEyXqYlHy074MIIXXGpx6ONWGjm3S4FhqW8idQT joYSnQ8Gv+3/n7pVqdzK9CTSli22YvT0yKL9UZ9EXWvHwc/Lz+7xb0o27ETRnjbPnf8Jz61ugl6e or+WNZlMZhpoHHbthaSzbJh/q0Ps/RJtU9jUTHx1Cg8iGq06vUyjk6eZbeNEqToELZmww2PuWKp4 uaI3BNIKhPt84RNxlTdx5o79EvvNOfwNKb4bLQ== ) ;; ADDITIONAL SECTION (11 records) f.nic.ch. 172800 IN A 194.146.106.10 e.nic.ch. 172800 IN A 194.0.17.1 d.nic.ch. 172800 IN A 194.0.25.39 b.nic.ch. 172800 IN A 130.59.31.43 a.nic.ch. 172800 IN A 130.59.31.41 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN AAAA 2001:678:20::39 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; { "EDNS-VERSION": 0 }
	Found child zone ch

	Checking DS between . and ch
	Query to g.root-servers.net for ch/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 51205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . OVIDf/OpD0rwg+gsTFrOY35txQX3KAxhi+1LDUYRpN7JdGLgFPTPg2Wm/lSsdCTyADPnEGieX47z s4gErrxkwKSiqnic8VzmqMXuGwT1wW1zwUIqfFEyXqYlHy074MIIXXGpx6ONWGjm3S4FhqW8idQT joYSnQ8Gv+3/n7pVqdzK9CTSli22YvT0yKL9UZ9EXWvHwc/Lz+7xb0o27ETRnjbPnf8Jz61ugl6e or+WNZlMZhpoHHbthaSzbJh/q0Ps/RJtU9jUTHx1Cg8iGq06vUyjk6eZbeNEqToELZmww2PuWKp4 uaI3BNIKhPt84RNxlTdx5o79EvvNOfwNKb4bLQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ch in the . zone
	DS=450/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . OVIDf/OpD0rwg+gsTFrOY35txQX3KAxhi+1LDUYRpN7JdGLgFPTPg2Wm/lSsdCTyADPnEGieX47z s4gErrxkwKSiqnic8VzmqMXuGwT1wW1zwUIqfFEyXqYlHy074MIIXXGpx6ONWGjm3S4FhqW8idQT joYSnQ8Gv+3/n7pVqdzK9CTSli22YvT0yKL9UZ9EXWvHwc/Lz+7xb0o27ETRnjbPnf8Jz61ugl6e or+WNZlMZhpoHHbthaSzbJh/q0Ps/RJtU9jUTHx1Cg8iGq06vUyjk6eZbeNEqToELZmww2PuWKp4 uaI3BNIKhPt84RNxlTdx5o79EvvNOfwNKb4bLQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=450/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 450 13 2 4994913d9ff4f0df95f08acdf1d66149d873368ff6c1836c64bdface62734fa2 )`
	Query to b.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.43
	;; Response received from [130.59.31.43] 369 octets ;; HEADER SECTION ;; id = 61573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 257 3 13 X9G00h5by86dkmMZE7PD2dVzSCGFyiTDpgVh61isB0sA/tohdssa+399tXmXjfltYa4A2LmltIms rxVENcL7XA== ) ; Key ID = 450 ch. 86400 IN DNSKEY ( 256 3 13 rI5r0MR7ImWX940c4GLeuZ+IdVAA0ommOGbtpA+mgE5/6tm3FYVpagpmIK8s/S2+5lY4VuEGtFm0 1dzeoJh/Sw== ) ; Key ID = 216 ch. 86400 IN DNSKEY ( 256 3 13 nlsYVmsOCS7wBWxw+r8VkfSLeM+hxzDBTgqtBzfmhe+rvhzx3pUhiiJUU6QzmbCBfwrS3chqArLY oexNeEAOgg== ) ; Key ID = 8233 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240608100909 20240423090909 450 ch. LkNxcTycjk6Gmm6qbpFdNfPJHjBy4Vpv9IpCAE5mfF2Sjp9N4RRVjJqzmzmt67aovIs+xpId5isV j5/3UdszOw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 257 3 13 X9G00h5by86dkmMZE7PD2dVzSCGFyiTDpgVh61isB0sA/tohdssa+399tXmXjfltYa4A2LmltIms rxVENcL7XA== ) ; Key ID = 450`
	`ch. 86400 IN DNSKEY ( 256 3 13 rI5r0MR7ImWX940c4GLeuZ+IdVAA0ommOGbtpA+mgE5/6tm3FYVpagpmIK8s/S2+5lY4VuEGtFm0 1dzeoJh/Sw== ) ; Key ID = 216`
	`ch. 86400 IN DNSKEY ( 256 3 13 nlsYVmsOCS7wBWxw+r8VkfSLeM+hxzDBTgqtBzfmhe+rvhzx3pUhiiJUU6QzmbCBfwrS3chqArLY oexNeEAOgg== ) ; Key ID = 8233`
	DNSKEY=450/SEP is now in the chain-of-trust
	DS=450/SHA-256 verifies DNSKEY=450/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240608100909 20240423090909 450 ch. LkNxcTycjk6Gmm6qbpFdNfPJHjBy4Vpv9IpCAE5mfF2Sjp9N4RRVjJqzmzmt67aovIs+xpId5isV j5/3UdszOw== )`
	RRSIG=450 and DNSKEY=450/SEP verifies the DNSKEY RRset
	DNSKEY=216 is now in the chain-of-trust
	DNSKEY=8233 is now in the chain-of-trust
	Query to f.nic.ch for estada.ch/A
	Received 354 bytes from 194.146.106.10
	;; Response received from [194.146.106.10] 354 octets ;; HEADER SECTION ;; id = 61519 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) estada.ch. 3600 IN NS ns2.estada.ch. estada.ch. 3600 IN NS ns1.estada.ch. estada.ch. 3600 IN NS ns0.estada.ch. estada.ch. 3600 IN DS ( 14725 8 2 a37717d80e4d9322db637def9a6135561d8afc05dce12662403738cde46445d6 ) estada.ch. 3600 IN RRSIG ( DS 13 2 3600 20240615025951 20240516020213 216 ch. ECq06JagoU4CAXAuE6xjLfgfHHveelgZTI8M8VLzqk0Fylcfzvo88eMuZLcoTo+le6+PnTv53bE7 twICYIlHVw== ) ;; ADDITIONAL SECTION (6 records) ns1.estada.ch. 3600 IN A 185.194.239.73 ns0.estada.ch. 3600 IN A 94.199.214.171 ns2.estada.ch. 3600 IN AAAA 2a0a:e5c0:2:12:0:f0ff:fea9:c3c4 ns1.estada.ch. 3600 IN AAAA 2a0a:51c0::61 ns0.estada.ch. 3600 IN AAAA 2a0a:51c0::fe3 ;; { "EDNS-VERSION": 0 }
	Query to d.nic.ch for estada.ch/DNSKEY
	Received 354 bytes from 194.0.25.39
	;; Response received from [194.0.25.39] 354 octets ;; HEADER SECTION ;; id = 31752 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) estada.ch. 3600 IN NS ns0.estada.ch. estada.ch. 3600 IN NS ns1.estada.ch. estada.ch. 3600 IN NS ns2.estada.ch. estada.ch. 3600 IN DS ( 14725 8 2 a37717d80e4d9322db637def9a6135561d8afc05dce12662403738cde46445d6 ) estada.ch. 3600 IN RRSIG ( DS 13 2 3600 20240615025951 20240516020213 216 ch. ECq06JagoU4CAXAuE6xjLfgfHHveelgZTI8M8VLzqk0Fylcfzvo88eMuZLcoTo+le6+PnTv53bE7 twICYIlHVw== ) ;; ADDITIONAL SECTION (6 records) ns0.estada.ch. 3600 IN A 94.199.214.171 ns1.estada.ch. 3600 IN A 185.194.239.73 ns0.estada.ch. 3600 IN AAAA 2a0a:51c0::fe3 ns1.estada.ch. 3600 IN AAAA 2a0a:51c0::61 ns2.estada.ch. 3600 IN AAAA 2a0a:e5c0:2:12:0:f0ff:fea9:c3c4 ;; { "EDNS-VERSION": 0 }
	Found child zone estada.ch

estada.ch

	Checking DS between ch and estada.ch
	Query to e.nic.ch for estada.ch/DS
	Received 184 bytes from 194.0.17.1
	;; Response received from [194.0.17.1] 184 octets ;; HEADER SECTION ;; id = 33262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN DS ;; ANSWER SECTION (2 records) estada.ch. 3600 IN DS ( 14725 8 2 a37717d80e4d9322db637def9a6135561d8afc05dce12662403738cde46445d6 ) estada.ch. 3600 IN RRSIG ( DS 13 2 3600 20240615025951 20240516020213 216 ch. ECq06JagoU4CAXAuE6xjLfgfHHveelgZTI8M8VLzqk0Fylcfzvo88eMuZLcoTo+le6+PnTv53bE7 twICYIlHVw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for estada.ch in the ch zone
	DS=14725/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`estada.ch. 3600 IN RRSIG ( DS 13 2 3600 20240615025951 20240516020213 216 ch. ECq06JagoU4CAXAuE6xjLfgfHHveelgZTI8M8VLzqk0Fylcfzvo88eMuZLcoTo+le6+PnTv53bE7 twICYIlHVw== )`
	RRSIG=216 and DNSKEY=216 verifies the DS RRset
	DS=14725/SHA-256 is now in the chain-of-trust
	`estada.ch. 3600 IN DS ( 14725 8 2 a37717d80e4d9322db637def9a6135561d8afc05dce12662403738cde46445d6 )`
	Query to ns0.estada.ch for estada.ch/DNSKEY
	Received 1088 bytes from 94.199.214.171
	;; Response received from [94.199.214.171] 1088 octets ;; HEADER SECTION ;; id = 52449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN DNSKEY ;; ANSWER SECTION (6 records) estada.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAaTdEUQ++pUmsF2FtYw+zh9wnevAHLXEcEN4SjO2zOd/bL8pG7Aczzad18Q9GUp+2vkpo1lQ J7KwNrQx2FhiQRkzkQsrgn9562yaN8b+Lb93mcWZ21OFQxIV9bVUMuI9NmzosG4Qpo5OwCydJjW3 0c8tmdhK4TYK/fx1gQwvmq5BpUzHWINPX22KvLaCvTmTUBdgdcN9Z1IysF28MmI68JDSZTVaFQh4 bIxqWICFI+dyeZ+I0K66WWeYcFfZV7AwEtLScbzaarHeycgzB7mvh7+ygR8COOHTWwxOqGwy4fcd ViTaHsrcqU8fS6DUhh2yPrgQRxtr/66mBysA99YsWB8= ) ; Key ID = 27843 estada.ch. 86400 IN DNSKEY ( 256 3 15 IswNZPE4B3UYR/9UJx3WEhlPVQYir/CPwc4z7A3eTmk= ) ; Key ID = 5456 estada.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAd4Ys9oUh4Vsbt65JfONhyXjefXeX9Bz4QyTrmM0kzKGoV8yDJlkou9asaTdrPKXSkZLcfXb 5I1QKT5WDS9kRK/9cyEnpfIBYdR06SfrngB2w6DNNLJ4BiKL6FQ3MWechO0VboHJ1vOt3S7WystI khfpTgtX75Hh7esTwWjedD4UewhBc1I4oTrlDNoyHDNqP0R143jez0MQej8zIcP8C+BFZuXwVLyp r+inqwl+0JOca9hNgt/FXd4GCOHfGIV63ahyX49T6gd41ErIgWSjGoQaFmn89jryBsZQqvRc8cEC ZQIEL7KkyXAFRhJ5BYbYmgR6od6ZhEr+Jh2TTmWrDMk= ) ; Key ID = 14725 estada.ch. 86400 IN DNSKEY ( 257 3 15 nVCBEnKNUoWEcDFC0An7BXOZ1fWcBMPjTPYpvgXLOq0= ) ; Key ID = 51436 estada.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240528194628 20240514181628 14725 estada.ch. lW6iqBgRIoPYTV8dLXnet2E+ZFBHEuFlhBhpmBbwmzn80h3o3pYX/Fp1lIM0sePdqwhh1+knMBKb +kyJtSZv+L51z+vQAdtOVXY4fzqXGhcNg1fujcZByGS2kWLUOiL8Q97o3HcG1R71hWZXJ4hA4x7G l81BIToredlkancDgVQGHqdMjawRj2hocikD0XNrcOhuam8atnhtyOv2XcU4DxrHsAIL3XExTiTd dgwv4F6YY7M1rexninrhPOFGQ+dIZJjMM/yEGJmI56GD/yNQjMH9Szrh7DVf6AZSrE6eGP729uo2 kkawlbOx+cJ9YF0LsOO3SuxMMCn8rV0XhvgCrw== ) estada.ch. 86400 IN RRSIG ( DNSKEY 15 2 86400 20240528194628 20240514181628 51436 estada.ch. gLIERFRF/uD48tYU+znxQMc4PDNDS0/BSOpt8AziZ7D/ReSiLJQ5rFeq9YSJGB+sgEcIjGBVS2YC muFsbHSfAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for estada.ch
	`estada.ch. 86400 IN DNSKEY ( 256 3 8 AwEAAaTdEUQ++pUmsF2FtYw+zh9wnevAHLXEcEN4SjO2zOd/bL8pG7Aczzad18Q9GUp+2vkpo1lQ J7KwNrQx2FhiQRkzkQsrgn9562yaN8b+Lb93mcWZ21OFQxIV9bVUMuI9NmzosG4Qpo5OwCydJjW3 0c8tmdhK4TYK/fx1gQwvmq5BpUzHWINPX22KvLaCvTmTUBdgdcN9Z1IysF28MmI68JDSZTVaFQh4 bIxqWICFI+dyeZ+I0K66WWeYcFfZV7AwEtLScbzaarHeycgzB7mvh7+ygR8COOHTWwxOqGwy4fcd ViTaHsrcqU8fS6DUhh2yPrgQRxtr/66mBysA99YsWB8= ) ; Key ID = 27843`
	`estada.ch. 86400 IN DNSKEY ( 256 3 15 IswNZPE4B3UYR/9UJx3WEhlPVQYir/CPwc4z7A3eTmk= ) ; Key ID = 5456`
	`estada.ch. 86400 IN DNSKEY ( 257 3 8 AwEAAd4Ys9oUh4Vsbt65JfONhyXjefXeX9Bz4QyTrmM0kzKGoV8yDJlkou9asaTdrPKXSkZLcfXb 5I1QKT5WDS9kRK/9cyEnpfIBYdR06SfrngB2w6DNNLJ4BiKL6FQ3MWechO0VboHJ1vOt3S7WystI khfpTgtX75Hh7esTwWjedD4UewhBc1I4oTrlDNoyHDNqP0R143jez0MQej8zIcP8C+BFZuXwVLyp r+inqwl+0JOca9hNgt/FXd4GCOHfGIV63ahyX49T6gd41ErIgWSjGoQaFmn89jryBsZQqvRc8cEC ZQIEL7KkyXAFRhJ5BYbYmgR6od6ZhEr+Jh2TTmWrDMk= ) ; Key ID = 14725`
	`estada.ch. 86400 IN DNSKEY ( 257 3 15 nVCBEnKNUoWEcDFC0An7BXOZ1fWcBMPjTPYpvgXLOq0= ) ; Key ID = 51436`
	DNSKEY=14725/SEP is now in the chain-of-trust
	DS=14725/SHA-256 verifies DNSKEY=14725/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`estada.ch. 86400 IN RRSIG ( DNSKEY 8 2 86400 20240528194628 20240514181628 14725 estada.ch. lW6iqBgRIoPYTV8dLXnet2E+ZFBHEuFlhBhpmBbwmzn80h3o3pYX/Fp1lIM0sePdqwhh1+knMBKb +kyJtSZv+L51z+vQAdtOVXY4fzqXGhcNg1fujcZByGS2kWLUOiL8Q97o3HcG1R71hWZXJ4hA4x7G l81BIToredlkancDgVQGHqdMjawRj2hocikD0XNrcOhuam8atnhtyOv2XcU4DxrHsAIL3XExTiTd dgwv4F6YY7M1rexninrhPOFGQ+dIZJjMM/yEGJmI56GD/yNQjMH9Szrh7DVf6AZSrE6eGP729uo2 kkawlbOx+cJ9YF0LsOO3SuxMMCn8rV0XhvgCrw== )`
	`estada.ch. 86400 IN RRSIG ( DNSKEY 15 2 86400 20240528194628 20240514181628 51436 estada.ch. gLIERFRF/uD48tYU+znxQMc4PDNDS0/BSOpt8AziZ7D/ReSiLJQ5rFeq9YSJGB+sgEcIjGBVS2YC muFsbHSfAg== )`
	RRSIG=14725 and DNSKEY=14725/SEP verifies the DNSKEY RRset
	RRSIG=51436 and DNSKEY=51436/SEP verifies the DNSKEY RRset
	DNSKEY=27843 is now in the chain-of-trust
	DNSKEY=5456 is now in the chain-of-trust
	DNSKEY=51436/SEP is now in the chain-of-trust
	Query to ns0.estada.ch for estada.ch/A
	Received 456 bytes from 94.199.214.171
	;; Response received from [94.199.214.171] 456 octets ;; HEADER SECTION ;; id = 14593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (3 records) estada.ch. 86400 IN A 185.194.239.73 estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== ) estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns0.estada.ch is authoritative for estada.ch
	Found RRSIG signed by estada.ch zone
	Query to ns2.estada.ch for estada.ch/SOA
	Cannot reach IPv6-only name server ns2.estada.ch
	Query to ns1.estada.ch for estada.ch/SOA
	Received 489 bytes from 185.194.239.73
	;; Response received from [185.194.239.73] 489 octets ;; HEADER SECTION ;; id = 16985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN SOA ;; ANSWER SECTION (3 records) estada.ch. 86400 IN SOA ( ns2.estada.ch. dnsadmin.estada.ch. 2024032907 ;serial 14400 ;refresh 600 ;retry 2419200 ;expire 600 ;minimum ) estada.ch. 86400 IN RRSIG ( SOA 8 2 86400 20240528194628 20240514181628 27843 estada.ch. U/r8Z17YDpu6bq014L8VOQapH4g8rTddsjyZaAx8W7jvLXvqQwvJMxJCyzIYg04jPHqnHcm1zekl 0+XbfGZI20/k0mWFmj/5Dl/l/Vdzn6VsN4OVRDlHrIQEufGeU6Z60laYWmYpjblrWDJ4AdbTreN9 Vn83Ud3YBQcSnykcwnKuHWF8nwFeOlEKkGWBLMkhcft10ki9wj5+y1gfZgZzIq9eSwh1VB1IFwWI /piSH4MOWCUz1genl6mYOrTJ7q3n8/5gJ8NaBrP5i9/smTdJ12wM2GE3H7SIcpto8fJHDBAeEMND qkYRuthzEXmOnWFCcvQMNIgRnoOINWIiWN2bIQ== ) estada.ch. 86400 IN RRSIG ( SOA 15 2 86400 20240528194628 20240514181628 5456 estada.ch. ADVQUoaFPGyYH3yq2tB/tbbPK5gbRQFEk+3JL/NjwNTjz4oME0Io2jDezquzg/9PqKFx3w5J7u3S JqdZQHjgDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns0.estada.ch for estada.ch/A
	Received 456 bytes from 94.199.214.171
	;; Response received from [94.199.214.171] 456 octets ;; HEADER SECTION ;; id = 58122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (3 records) estada.ch. 86400 IN A 185.194.239.73 estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== ) estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	estada.ch A RR has value 185.194.239.73
	Found 2 RRSIGs over A RRset
	`estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== )`
	`estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== )`
	RRSIG=27843 and DNSKEY=27843 verifies the A RRset
	RRSIG=5456 and DNSKEY=5456 verifies the A RRset

estada.ch

	Query to ns1.estada.ch for estada.ch/A
	Received 456 bytes from 185.194.239.73
	;; Response received from [185.194.239.73] 456 octets ;; HEADER SECTION ;; id = 55483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (3 records) estada.ch. 86400 IN A 185.194.239.73 estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== ) estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.estada.ch is authoritative for estada.ch
	Found RRSIG signed by estada.ch zone
	Query to ns1.estada.ch for estada.ch/A
	Received 456 bytes from 185.194.239.73
	;; Response received from [185.194.239.73] 456 octets ;; HEADER SECTION ;; id = 41155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; estada.ch. IN A ;; ANSWER SECTION (3 records) estada.ch. 86400 IN A 185.194.239.73 estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== ) estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	estada.ch A RR has value 185.194.239.73
	Found 2 RRSIGs over A RRset
	`estada.ch. 86400 IN RRSIG ( A 8 2 86400 20240528194628 20240514181628 27843 estada.ch. FTiXr9ggvoXXVdtqhsIqmsZz/PWjRNUVvviYixQbN55AMfrZyuWCN4Y2Yix7XtoOU7IJTWyXQ+Ah Ew3AI2pEVV99HG47gxv7nKXNCP4TSF4GIxXue6o1qos0r3Xzku8UAtrLC01rSF2J6aShqSrN2p5p x8EvW+md2G9kAJgivDWVRPdBN00pSs42uSkDe0aMkAof8rqAsbvODOe/K29HbYgZU568kmXYlvX8 sL5e2T0loY/hSnnbJEvhbx4N3BGYzrb2//S5ibTmjgaHyFnfZN/X5H4+dc5bQsm/zqvUvBjGsXOo pvSrcosbDDN5WkL2/PmZCSaZ0dLPSnES3RuyLA== )`
	`estada.ch. 86400 IN RRSIG ( A 15 2 86400 20240528194628 20240514181628 5456 estada.ch. SgVxQ+jEXe4xdsAaaXeUFZ7gMvwF5oM31iD6bqNJZX+lvSXciVTHZud6uo3dlM5XPORWwgGXAWcG 4VeHhI15Aw== )`
	RRSIG=27843 and DNSKEY=27843 verifies the A RRset
	RRSIG=5456 and DNSKEY=5456 verifies the A RRset

estada.ch

	Query to ns2.estada.ch for estada.ch/A
	Cannot reach IPv6-only name server ns2.estada.ch
	No response from estada.ch nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test estada.ch at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: