DNSSEC Debugger

Domain Name:

Time: 2024-05-18 21:09:12 UTC

Analyzing DNSSEC problems for gov.cm

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 51221 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for gov.cm/A
	Received 695 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 695 octets ;; HEADER SECTION ;; id = 51947 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cm. 172800 IN NS ns.itu.ch. cm. 172800 IN NS ns1.nic.cm. cm. 172800 IN NS ns2.nic.cm. cm. 172800 IN NS ns-cm.nic.fr. cm. 172800 IN NS ns-cm.afrinic.net. cm. 172800 IN NS auth02.ns.uu.net. cm. 172800 IN NS phloem.uoregon.edu. cm. 86400 IN NSEC cn. NS RRSIG NSEC cm. 86400 IN RRSIG ( NSEC 8 1 86400 20240531170000 20240518160000 5613 . Hwp5y4S9UxUf10x1miFUpFBCJhsbAFVpAfaDOj6wBzxZta921ux50HOBEiD6ZgtAWipoI05el72j oM4j5PRCafVJt+J5bHtkW08pBR/gDvuypPcbCR/c+RQA7QcQ/DhvFRZK/4yn6aoFVGueE+C5QLFD o7P6D+UG4sqL/UNKBe97NU1k75E63I/el6AZIMji18sJBayhE+5U8gEQAJpykjm+gNLX21Uuh87S 2EIL5pw6Jn5Ukj1U7yAumpUPIEjUKPSYnRu70P6e7y+nq/nHM37JCWWP288Z8cweqwr3HBdPrhFm JQWKjxPZ+iQmae4AsxEbbO0OkZnN820glN3Liw== ) ;; ADDITIONAL SECTION (10 records) ns1.nic.cm. 172800 IN A 195.24.205.60 ns2.nic.cm. 172800 IN A 195.24.205.61 ns.itu.ch. 172800 IN A 156.106.192.121 ns.itu.ch. 172800 IN AAAA 2a00:7580:60:2141::10 ns-cm.nic.fr. 172800 IN A 194.0.9.1 ns-cm.afrinic.net. 172800 IN A 196.216.168.67 auth02.ns.uu.net. 172800 IN A 198.6.1.82 phloem.uoregon.edu. 172800 IN A 128.223.32.35 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for cm/DNSKEY
	Received 689 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 689 octets ;; HEADER SECTION ;; id = 6031 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cm. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) cm. 172800 IN NS ns.itu.ch. cm. 172800 IN NS auth02.ns.uu.net. cm. 172800 IN NS ns1.nic.cm. cm. 172800 IN NS ns2.nic.cm. cm. 172800 IN NS ns-cm.nic.fr. cm. 172800 IN NS ns-cm.afrinic.net. cm. 172800 IN NS phloem.uoregon.edu. cm. 86400 IN NSEC cn. NS RRSIG NSEC cm. 86400 IN RRSIG ( NSEC 8 1 86400 20240531170000 20240518160000 5613 . Hwp5y4S9UxUf10x1miFUpFBCJhsbAFVpAfaDOj6wBzxZta921ux50HOBEiD6ZgtAWipoI05el72j oM4j5PRCafVJt+J5bHtkW08pBR/gDvuypPcbCR/c+RQA7QcQ/DhvFRZK/4yn6aoFVGueE+C5QLFD o7P6D+UG4sqL/UNKBe97NU1k75E63I/el6AZIMji18sJBayhE+5U8gEQAJpykjm+gNLX21Uuh87S 2EIL5pw6Jn5Ukj1U7yAumpUPIEjUKPSYnRu70P6e7y+nq/nHM37JCWWP288Z8cweqwr3HBdPrhFm JQWKjxPZ+iQmae4AsxEbbO0OkZnN820glN3Liw== ) ;; ADDITIONAL SECTION (10 records) ns.itu.ch. 172800 IN A 156.106.192.121 auth02.ns.uu.net. 172800 IN A 198.6.1.82 ns1.nic.cm. 172800 IN A 195.24.205.60 ns2.nic.cm. 172800 IN A 195.24.205.61 ns-cm.nic.fr. 172800 IN A 194.0.9.1 ns-cm.afrinic.net. 172800 IN A 196.216.168.67 phloem.uoregon.edu. 172800 IN A 128.223.32.35 ns.itu.ch. 172800 IN AAAA 2a00:7580:60:2141::10 phloem.uoregon.edu. 172800 IN AAAA 2001:468:d01:20::80df:2023 ;; { "EDNS-VERSION": 0 }
	Found child zone cm

	Checking DS between . and cm
	Query to b.root-servers.net for cm/DS
	Received 703 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 703 octets ;; HEADER SECTION ;; id = 60260 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cm. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) . 86400 IN SOA ( a.root-servers.net. nstld.verisign-grs.com. 2024051801 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) cm. 86400 IN NSEC cn. NS RRSIG NSEC . 86400 IN RRSIG ( SOA 8 0 86400 20240531170000 20240518160000 5613 . Y4VwhTIXoSqCluIVqWUK3fIf2YuNRufU/j1g+3jo37ZNUT4pTCCE0X2SC1CLBaLknpGs3odcSsUw Zvv+f0m59PZ++gD0QinONo+jP7glztR0rDa3FW9rrq5SP1spo+ormrbJP8PsPdGJsNhwkvlecPEE ooRVEWhRhFvXmJypHfmSOpHhXuKK0FQWFlqH3ng9ep1ng6yYwfYukFoAfbJ5PgV11900vyE1Q5yq 9MrIhlq+++VqNb4AV/9eiE7fRuZVq8CYN+32Cvl6s/lBfSj3k+1wXz/zsErUyf87utip5zWK8eV2 c8OoQ5Y/YVjSop7+ijim0Q/Rz5pYu4Nl8lSjUQ== ) cm. 86400 IN RRSIG ( NSEC 8 1 86400 20240531170000 20240518160000 5613 . Hwp5y4S9UxUf10x1miFUpFBCJhsbAFVpAfaDOj6wBzxZta921ux50HOBEiD6ZgtAWipoI05el72j oM4j5PRCafVJt+J5bHtkW08pBR/gDvuypPcbCR/c+RQA7QcQ/DhvFRZK/4yn6aoFVGueE+C5QLFD o7P6D+UG4sqL/UNKBe97NU1k75E63I/el6AZIMji18sJBayhE+5U8gEQAJpykjm+gNLX21Uuh87S 2EIL5pw6Jn5Ukj1U7yAumpUPIEjUKPSYnRu70P6e7y+nq/nHM37JCWWP288Z8cweqwr3HBdPrhFm JQWKjxPZ+iQmae4AsxEbbO0OkZnN820glN3Liw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for cm in the . zone
	Query to auth02.ns.uu.net for cm/DNSKEY
	Received 91 bytes from 198.6.1.82
	;; Response received from [198.6.1.82] 91 octets ;; HEADER SECTION ;; id = 17904 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cm. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cm. 86400 IN SOA ( ns1.nic.cm. dotcm.antic.cm. 2024051821 ;serial 28800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns-cm.afrinic.net for gov.cm/A
	Received 112 bytes from 196.216.168.67
	;; Response received from [196.216.168.67] 112 octets ;; HEADER SECTION ;; id = 18695 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) gov.cm. 86400 IN NS babimbi.gov.cm. gov.cm. 86400 IN NS babimbi1.gov.cm. ;; ADDITIONAL SECTION (3 records) babimbi.gov.cm. 86400 IN A 195.24.203.4 babimbi1.gov.cm. 86400 IN A 195.24.203.8 ;; { "EDNS-VERSION": 0 }
	Query to ns-cm.afrinic.net for gov.cm/DNSKEY
	Received 112 bytes from 196.216.168.67
	;; Response received from [196.216.168.67] 112 octets ;; HEADER SECTION ;; id = 34809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) gov.cm. 86400 IN NS babimbi.gov.cm. gov.cm. 86400 IN NS babimbi1.gov.cm. ;; ADDITIONAL SECTION (3 records) babimbi.gov.cm. 86400 IN A 195.24.203.4 babimbi1.gov.cm. 86400 IN A 195.24.203.8 ;; { "EDNS-VERSION": 0 }
	Found child zone gov.cm

gov.cm

	Checking DS between cm and gov.cm
	Query to ns1.nic.cm for gov.cm/DS
	Received 91 bytes from 195.24.205.60
	;; Response received from [195.24.205.60] 91 octets ;; HEADER SECTION ;; id = 45818 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) cm. 86400 IN SOA ( ns1.nic.cm. dotcm.antic.cm. 2024051821 ;serial 28800 ;refresh 3600 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for gov.cm in the cm zone
	Query to babimbi.gov.cm for gov.cm/DNSKEY
	Received 94 bytes from 195.24.203.4
	;; Response received from [195.24.203.4] 94 octets ;; HEADER SECTION ;; id = 46914 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.cm. 600 IN SOA ( babimbi.gov.cm. hostmaster.spm.gov.cm. 2022013102 ;serial 86400 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to babimbi1.gov.cm for gov.cm/A
	Timeout querying babimbi1.gov.cm/195.24.203.8 for gov.cm/A
	All Queries to babimbi1.gov.cm for gov.cm/A timed out or failed
	Query to babimbi.gov.cm for gov.cm/A
	Received 94 bytes from 195.24.203.4
	;; Response received from [195.24.203.4] 94 octets ;; HEADER SECTION ;; id = 54254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.cm. 600 IN SOA ( babimbi.gov.cm. hostmaster.spm.gov.cm. 2022013102 ;serial 86400 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	babimbi.gov.cm is authoritative for gov.cm
	Query to babimbi.gov.cm for gov.cm/A
	Received 94 bytes from 195.24.203.4
	;; Response received from [195.24.203.4] 94 octets ;; HEADER SECTION ;; id = 26437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov.cm. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) gov.cm. 600 IN SOA ( babimbi.gov.cm. hostmaster.spm.gov.cm. 2022013102 ;serial 86400 ;refresh 3600 ;retry 2592000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No NSEC records in response
	No RRSIGs found

gov.cm

No response from gov.cm nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test gov.cm at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: