DNSSEC Debugger - f1nalboss.de

Domain Name:

Time: 2024-05-20 00:13:14 UTC

Analyzing DNSSEC problems for f1nalboss.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 48965 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for f1nalboss.de/A
	Received 746 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 746 octets ;; HEADER SECTION ;; id = 12823 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . X90OMda/9GErOLbHF1YNPv0QddhIKi5eNw8zgme6p7gpf0/G73xSzZFcriQ0BvLfRky14s9nlU3g /aXFZcvWxyheEYt/CkVRzjxSdYx4PzFkVaoRfFohH/fKjrGo+Kj1RRsMhCN/edasqLDfWTwZ9oPb 8XbngY3U+ol+PwM3jMRv/Z8y2W6Hl7qb0ZOetcfhwDQKsNq0Rbtkh94ezuK/dzXG4mPl76zDIm38 6QrHsfygauejZhmnbRAgg8MwxVnQqMv+QNU9nB1AtpM6ex7kDxq4J2YnxUATGSQWQ3upjQKWuKLv AJERS2/5j3WMDo1dbD+oHasQB/JuL4nN/oADYw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to c.root-servers.net for de/DNSKEY
	Received 738 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 738 octets ;; HEADER SECTION ;; id = 16144 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to b.root-servers.net for de/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 48447 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . X90OMda/9GErOLbHF1YNPv0QddhIKi5eNw8zgme6p7gpf0/G73xSzZFcriQ0BvLfRky14s9nlU3g /aXFZcvWxyheEYt/CkVRzjxSdYx4PzFkVaoRfFohH/fKjrGo+Kj1RRsMhCN/edasqLDfWTwZ9oPb 8XbngY3U+ol+PwM3jMRv/Z8y2W6Hl7qb0ZOetcfhwDQKsNq0Rbtkh94ezuK/dzXG4mPl76zDIm38 6QrHsfygauejZhmnbRAgg8MwxVnQqMv+QNU9nB1AtpM6ex7kDxq4J2YnxUATGSQWQ3upjQKWuKLv AJERS2/5j3WMDo1dbD+oHasQB/JuL4nN/oADYw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . X90OMda/9GErOLbHF1YNPv0QddhIKi5eNw8zgme6p7gpf0/G73xSzZFcriQ0BvLfRky14s9nlU3g /aXFZcvWxyheEYt/CkVRzjxSdYx4PzFkVaoRfFohH/fKjrGo+Kj1RRsMhCN/edasqLDfWTwZ9oPb 8XbngY3U+ol+PwM3jMRv/Z8y2W6Hl7qb0ZOetcfhwDQKsNq0Rbtkh94ezuK/dzXG4mPl76zDIm38 6QrHsfygauejZhmnbRAgg8MwxVnQqMv+QNU9nB1AtpM6ex7kDxq4J2YnxUATGSQWQ3upjQKWuKLv AJERS2/5j3WMDo1dbD+oHasQB/JuL4nN/oADYw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to f.nic.de for de/DNSKEY
	Received 893 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 893 octets ;; HEADER SECTION ;; id = 42166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445 de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240531180309 20240517163309 26755 de. CjQdQYF8/3kjDogYgLpkyl4c/XCbFW6rFxpQRQgT3tCYozHKMyVBv7xpa8feH+5ea9KbA3HurVVw CdiZOCuMCWyBzCfPE3PxSVKEzqU9wlRWi4HZIQUUQMHOncOgzp/PNmT/7WL+M5kxrATx2Rs4WQ9n UWaCrZSE/ixMjd0xcJT6agg23aSHcfT5FKlLsgtzkjeJgRn/qdKaLDh9pmoAMHoLkcFTCUmsYVR9 gU7lQUoaVuN4yjDdzHkH9zd7pgqKTSDwUUKgXNDoe3/tLQF+V3EATQeBmzYuyF2QXkpZM7P8LmYA ZMXh4wVGqkCjKA5G70FM56DKjEJ2c8xdaRD/UQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240531180309 20240517163309 26755 de. CjQdQYF8/3kjDogYgLpkyl4c/XCbFW6rFxpQRQgT3tCYozHKMyVBv7xpa8feH+5ea9KbA3HurVVw CdiZOCuMCWyBzCfPE3PxSVKEzqU9wlRWi4HZIQUUQMHOncOgzp/PNmT/7WL+M5kxrATx2Rs4WQ9n UWaCrZSE/ixMjd0xcJT6agg23aSHcfT5FKlLsgtzkjeJgRn/qdKaLDh9pmoAMHoLkcFTCUmsYVR9 gU7lQUoaVuN4yjDdzHkH9zd7pgqKTSDwUUKgXNDoe3/tLQF+V3EATQeBmzYuyF2QXkpZM7P8LmYA ZMXh4wVGqkCjKA5G70FM56DKjEJ2c8xdaRD/UQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56445 is now in the chain-of-trust
	DNSKEY=720 is now in the chain-of-trust
	Query to f.nic.de for f1nalboss.de/A
	Received 630 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 630 octets ;; HEADER SECTION ;; id = 59 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a vbr4oosa336has5jqltag8d6dnsil5oo A RRSIG ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. cqEjd+fw3b8mu9YWQI9OdZNeMqYk3m9mGjSLikkeCzkj50mnTKD98zIMlbyeeKTAJ7eGCtTV5fWx W0tCsmlXWSsg7jFAVZuo2Kdr9d7jmXd5HlIPOTFGp2EwhC5MibO2C84gjLp8piRsfoNQMcXoQ1NN Tvnu5lyt8WqkupEFXH8= ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. GsCjLYSA1nqnZM0ZmCPDOAmMUGqNnCKgXYoqcC2chPr992wXs7usMgJfhrYPaF2uQMlNUzthSOD3 KzAx5yaVfemIx/z9T5hzX19P6FNQGA9q4b57bXUXm7W8o17lsBzwwwdAlxk+sOsjL+yR6dlL0+h/ OucHDTQwfRiyoBNgsaU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to s.de.net for f1nalboss.de/DNSKEY
	Received 630 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 630 octets ;; HEADER SECTION ;; id = 5983 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a vbr4oosa336has5jqltag8d6dnsil5oo A RRSIG ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. cqEjd+fw3b8mu9YWQI9OdZNeMqYk3m9mGjSLikkeCzkj50mnTKD98zIMlbyeeKTAJ7eGCtTV5fWx W0tCsmlXWSsg7jFAVZuo2Kdr9d7jmXd5HlIPOTFGp2EwhC5MibO2C84gjLp8piRsfoNQMcXoQ1NN Tvnu5lyt8WqkupEFXH8= ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. GsCjLYSA1nqnZM0ZmCPDOAmMUGqNnCKgXYoqcC2chPr992wXs7usMgJfhrYPaF2uQMlNUzthSOD3 KzAx5yaVfemIx/z9T5hzX19P6FNQGA9q4b57bXUXm7W8o17lsBzwwwdAlxk+sOsjL+yR6dlL0+h/ OucHDTQwfRiyoBNgsaU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone f1nalboss.de

f1nalboss.de

	Checking DS between de and f1nalboss.de
	Query to z.nic.de for f1nalboss.de/DS
	Received 769 bytes from 194.246.96.1
	;; Response received from [194.246.96.1] 769 octets ;; HEADER SECTION ;; id = 63867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. cqEjd+fw3b8mu9YWQI9OdZNeMqYk3m9mGjSLikkeCzkj50mnTKD98zIMlbyeeKTAJ7eGCtTV5fWx W0tCsmlXWSsg7jFAVZuo2Kdr9d7jmXd5HlIPOTFGp2EwhC5MibO2C84gjLp8piRsfoNQMcXoQ1NN Tvnu5lyt8WqkupEFXH8= ) de. 7200 IN SOA ( f.nic.de. dns-operations.denic.de. 1716163832 ;serial 7200 ;refresh 7200 ;retry 3600000 ;expire 7200 ;minimum ) de. 7200 IN RRSIG ( SOA 8 1 86400 20240603001013 20240519224013 56445 de. bHNhFCQuyueOidHohZnzsXE0DTUmrb0ufEsyhjwErQeRXMyo0JLy4u+fyEkO+sMcxh1+12ijjnzb Et07g5GJxaAQvWgRQR02+cUHHKaGBmiI+AC79jFGUsuVyqJLsclkjIu85HNyRrpzFTMhSpEilhHV 18HMqUYq4WhyAMGG91Y= ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a vbr4oosa336has5jqltag8d6dnsil5oo A RRSIG ) vbr1u6dps664s56qt44uusmkd2iun4up.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240529070341 20240515053341 56445 de. GsCjLYSA1nqnZM0ZmCPDOAmMUGqNnCKgXYoqcC2chPr992wXs7usMgJfhrYPaF2uQMlNUzthSOD3 KzAx5yaVfemIx/z9T5hzX19P6FNQGA9q4b57bXUXm7W8o17lsBzwwwdAlxk+sOsjL+yR6dlL0+h/ OucHDTQwfRiyoBNgsaU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for f1nalboss.de in the de zone
	Query to helium.ns.hetzner.de for f1nalboss.de/DNSKEY
	Received 104 bytes from 193.47.99.5
	;; Response received from [193.47.99.5] 104 octets ;; HEADER SECTION ;; id = 64347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) f1nalboss.de. 3600 IN SOA ( hydrogen.ns.hetzner.com. dns.hetzner.com. 2024030110 ;serial 86400 ;refresh 10800 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to oxygen.ns.hetzner.com for f1nalboss.de/A
	Received 147 bytes from 88.198.229.192
	;; Response received from [88.198.229.192] 147 octets ;; HEADER SECTION ;; id = 9333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	oxygen.ns.hetzner.com is authoritative for f1nalboss.de
	Query to hydrogen.ns.hetzner.com for f1nalboss.de/SOA
	Received 171 bytes from 213.133.100.98
	;; Response received from [213.133.100.98] 171 octets ;; HEADER SECTION ;; id = 47832 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN SOA ;; ANSWER SECTION (1 record) f1nalboss.de. 86400 IN SOA ( hydrogen.ns.hetzner.com. dns.hetzner.com. 2024030110 ;serial 86400 ;refresh 10800 ;retry 3600000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to helium.ns.hetzner.de for f1nalboss.de/SOA
	Received 171 bytes from 193.47.99.5
	;; Response received from [193.47.99.5] 171 octets ;; HEADER SECTION ;; id = 51947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN SOA ;; ANSWER SECTION (1 record) f1nalboss.de. 86400 IN SOA ( hydrogen.ns.hetzner.com. dns.hetzner.com. 2024030110 ;serial 86400 ;refresh 10800 ;retry 3600000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to oxygen.ns.hetzner.com for f1nalboss.de/A
	Received 147 bytes from 88.198.229.192
	;; Response received from [88.198.229.192] 147 octets ;; HEADER SECTION ;; id = 60803 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f1nalboss.de A RR has value 49.12.7.51
	No RRSIGs found

f1nalboss.de

	Query to helium.ns.hetzner.de for f1nalboss.de/A
	Received 147 bytes from 193.47.99.5
	;; Response received from [193.47.99.5] 147 octets ;; HEADER SECTION ;; id = 19313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	helium.ns.hetzner.de is authoritative for f1nalboss.de
	Query to helium.ns.hetzner.de for f1nalboss.de/A
	Received 147 bytes from 193.47.99.5
	;; Response received from [193.47.99.5] 147 octets ;; HEADER SECTION ;; id = 8923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f1nalboss.de A RR has value 49.12.7.51
	No RRSIGs found

f1nalboss.de

	Query to hydrogen.ns.hetzner.com for f1nalboss.de/A
	Received 147 bytes from 213.133.100.98
	;; Response received from [213.133.100.98] 147 octets ;; HEADER SECTION ;; id = 58114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	hydrogen.ns.hetzner.com is authoritative for f1nalboss.de
	Query to hydrogen.ns.hetzner.com for f1nalboss.de/A
	Received 147 bytes from 213.133.100.98
	;; Response received from [213.133.100.98] 147 octets ;; HEADER SECTION ;; id = 23596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; f1nalboss.de. IN A ;; ANSWER SECTION (1 record) f1nalboss.de. 300 IN A 49.12.7.51 ;; AUTHORITY SECTION (3 records) f1nalboss.de. 86400 IN NS helium.ns.hetzner.de. f1nalboss.de. 86400 IN NS hydrogen.ns.hetzner.com. f1nalboss.de. 86400 IN NS oxygen.ns.hetzner.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	f1nalboss.de A RR has value 49.12.7.51
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test f1nalboss.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: