DNSSEC Debugger - irc.oftc.net

Domain Name:

Time: 2024-05-19 22:14:41 UTC

Analyzing DNSSEC problems for irc.oftc.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 55173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for irc.oftc.net/A
	Received 1175 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1175 octets ;; HEADER SECTION ;; id = 23944 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.oftc.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . TTbAesFxQxLsHs5FLINfnli4auOa9a+59ogzsRXjNDK6JWkwOVx4S69OsqI91DiSrDbljT+KNns9 lTLsHQDCjaIFkChfUBRnrwk7mDpvjroKm5K/5D6xVv7LuRNvhOHChbgfENrfLKOE86+eFkvBkvHf zON9kKQVJoM6Jw32CzpufAAMbLmvfbCmlYf8l9H2mL+olS8YE1t2nS0w4AxERdzMpeIy45QjUIxo KuRkAnrP+zb0UTZPnFLLW8nz/1YDS6EgKwMwFaQTtMNdJu3NBDcqunCvxlC95ru8XCseLUKg5iZQ XxBpEI7BPi3DshfUgL5t6OQGKJOP5IEwEugmuw== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for net/DNSKEY
	Received 1160 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1160 octets ;; HEADER SECTION ;; id = 60709 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . TTbAesFxQxLsHs5FLINfnli4auOa9a+59ogzsRXjNDK6JWkwOVx4S69OsqI91DiSrDbljT+KNns9 lTLsHQDCjaIFkChfUBRnrwk7mDpvjroKm5K/5D6xVv7LuRNvhOHChbgfENrfLKOE86+eFkvBkvHf zON9kKQVJoM6Jw32CzpufAAMbLmvfbCmlYf8l9H2mL+olS8YE1t2nS0w4AxERdzMpeIy45QjUIxo KuRkAnrP+zb0UTZPnFLLW8nz/1YDS6EgKwMwFaQTtMNdJu3NBDcqunCvxlC95ru8XCseLUKg5iZQ XxBpEI7BPi3DshfUgL5t6OQGKJOP5IEwEugmuw== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to m.root-servers.net for net/DS
	Received 367 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 367 octets ;; HEADER SECTION ;; id = 59854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . TTbAesFxQxLsHs5FLINfnli4auOa9a+59ogzsRXjNDK6JWkwOVx4S69OsqI91DiSrDbljT+KNns9 lTLsHQDCjaIFkChfUBRnrwk7mDpvjroKm5K/5D6xVv7LuRNvhOHChbgfENrfLKOE86+eFkvBkvHf zON9kKQVJoM6Jw32CzpufAAMbLmvfbCmlYf8l9H2mL+olS8YE1t2nS0w4AxERdzMpeIy45QjUIxo KuRkAnrP+zb0UTZPnFLLW8nz/1YDS6EgKwMwFaQTtMNdJu3NBDcqunCvxlC95ru8XCseLUKg5iZQ XxBpEI7BPi3DshfUgL5t6OQGKJOP5IEwEugmuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240601170000 20240519160000 5613 . TTbAesFxQxLsHs5FLINfnli4auOa9a+59ogzsRXjNDK6JWkwOVx4S69OsqI91DiSrDbljT+KNns9 lTLsHQDCjaIFkChfUBRnrwk7mDpvjroKm5K/5D6xVv7LuRNvhOHChbgfENrfLKOE86+eFkvBkvHf zON9kKQVJoM6Jw32CzpufAAMbLmvfbCmlYf8l9H2mL+olS8YE1t2nS0w4AxERdzMpeIy45QjUIxo KuRkAnrP+zb0UTZPnFLLW8nz/1YDS6EgKwMwFaQTtMNdJu3NBDcqunCvxlC95ru8XCseLUKg5iZQ XxBpEI7BPi3DshfUgL5t6OQGKJOP5IEwEugmuw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to i.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 291 octets ;; HEADER SECTION ;; id = 31552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to b.gtld-servers.net for irc.oftc.net/A
	Received 324 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 324 octets ;; HEADER SECTION ;; id = 59881 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.oftc.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) oftc.net. 172800 IN NS ns1.linode.com. oftc.net. 172800 IN NS ns2.linode.com. oftc.net. 172800 IN NS ns3.linode.com. oftc.net. 172800 IN NS ns4.linode.com. oftc.net. 172800 IN NS ns5.linode.com. oftc.net. 86400 IN DS 2821 8 1 6cd16ff5b5c44d030a936a8e8d0012720cdd0c24 oftc.net. 86400 IN DS ( 2821 8 2 bcc28d334d6d2bef59c78ae5d2c1052e69071431197c0d9e1867501a49288f95 ) oftc.net. 86400 IN RRSIG ( DS 13 2 86400 20240523064803 20240516053803 51809 net. YuAb/66YsVF1PX6HBXWEFDBVQHXB1nBe5S/rlA9tRBUIr+Y6NqPj7Zm5SjKuoYXVNx9LGPfM4Bcy kiwBWClowg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.gtld-servers.net for oftc.net/DNSKEY
	Received 320 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 320 octets ;; HEADER SECTION ;; id = 9230 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oftc.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) oftc.net. 172800 IN NS ns1.linode.com. oftc.net. 172800 IN NS ns2.linode.com. oftc.net. 172800 IN NS ns3.linode.com. oftc.net. 172800 IN NS ns4.linode.com. oftc.net. 172800 IN NS ns5.linode.com. oftc.net. 86400 IN DS 2821 8 1 6cd16ff5b5c44d030a936a8e8d0012720cdd0c24 oftc.net. 86400 IN DS ( 2821 8 2 bcc28d334d6d2bef59c78ae5d2c1052e69071431197c0d9e1867501a49288f95 ) oftc.net. 86400 IN RRSIG ( DS 13 2 86400 20240523064803 20240516053803 51809 net. YuAb/66YsVF1PX6HBXWEFDBVQHXB1nBe5S/rlA9tRBUIr+Y6NqPj7Zm5SjKuoYXVNx9LGPfM4Bcy kiwBWClowg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone oftc.net

oftc.net

	Checking DS between net and oftc.net
	Query to h.gtld-servers.net for oftc.net/DS
	Received 1112 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 1112 octets ;; HEADER SECTION ;; id = 45926 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oftc.net. IN DS ;; ANSWER SECTION (3 records) oftc.net. 86400 IN DS 2821 8 1 6cd16ff5b5c44d030a936a8e8d0012720cdd0c24 oftc.net. 86400 IN DS ( 2821 8 2 bcc28d334d6d2bef59c78ae5d2c1052e69071431197c0d9e1867501a49288f95 ) oftc.net. 86400 IN RRSIG ( DS 13 2 86400 20240523064803 20240516053803 51809 net. YuAb/66YsVF1PX6HBXWEFDBVQHXB1nBe5S/rlA9tRBUIr+Y6NqPj7Zm5SjKuoYXVNx9LGPfM4Bcy kiwBWClowg== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20240526065220 20240519054220 51809 net. oHGT2Pc9/wZYLbjhnk6EVjhDpQqhkKfN0R8wEufjIVDVe3CGGWHZ6tQBNjIH5iVUw0yL8H94zPAg 0LqABQXZAQ== ) ;; ADDITIONAL SECTION (27 records) d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for oftc.net in the net zone
	DS=2821/SHA-1 uses a deprecated digest algorithm
	DS=2821/SHA-1 has algorithm RSASHA256
	DS=2821/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`oftc.net. 86400 IN RRSIG ( DS 13 2 86400 20240523064803 20240516053803 51809 net. YuAb/66YsVF1PX6HBXWEFDBVQHXB1nBe5S/rlA9tRBUIr+Y6NqPj7Zm5SjKuoYXVNx9LGPfM4Bcy kiwBWClowg== )`
	RRSIG=51809 and DNSKEY=51809 verifies the DS RRset
	DS=2821/SHA-1 is now in the chain-of-trust
	`oftc.net. 86400 IN DS 2821 8 1 6cd16ff5b5c44d030a936a8e8d0012720cdd0c24`
	`oftc.net. 86400 IN DS ( 2821 8 2 bcc28d334d6d2bef59c78ae5d2c1052e69071431197c0d9e1867501a49288f95 )`
	Query to ns5.linode.com for oftc.net/DNSKEY
	Received 481 bytes from 92.123.95.2
	;; Response received from [92.123.95.2] 481 octets ;; HEADER SECTION ;; id = 51814 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; oftc.net. IN DNSKEY ;; ANSWER SECTION (2 records) oftc.net. 5 IN DNSKEY ( 257 3 8 AwEAAfA/Nd3sH7CwDnnGATCcx2RSkWCAj/oL8rE4IcAWvP/5M8zqdM5Dxu7YSMLIMP0mEtFIyMsD inbR66Er2crfUXGeFdX/o/iMVI1+5wgJ3TLPX4GOSr6D4oKNmvfo65tnsPGaU+PCMS3lbjwdbvcG ghT7ErIIUPIXd5M3/TgKGZm1AChF8FGKbGF8i6JFtOdg65Y0UcZPtib22FzVUSyv8L0M3+hUm+CN t6DIGUsEkKAcZlfiqg3WxuyR27OhTn57AQ== ) ; Key ID = 2821 oftc.net. 5 IN RRSIG ( DNSKEY 8 2 5 20240608180140 20240509180054 2821 oftc.net. WjLe8+cJJMRk21aDRpa63lGgpnxUUCNYYpcJef9MJpv9n8w3e7V2xqREJKJgXn3yISDHI3EQqr4O 77/BiD065WUa7RZYLq2v6Eq9lEbAuwsiIRTWroUcXqgdH3DhCjUJ865fi7/qgu6Plw42cZ1VzAHC oWCx2C+BSkRpPWWtMAY8p6HqErOGICS7rsnCKgThu1BG9xX2ouEoRJyxOjaMM1GpFQ5keaZx+hFg NBzPDV3hmuUHv0bWrcEnlA05J8iM ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for oftc.net
	`oftc.net. 5 IN DNSKEY ( 257 3 8 AwEAAfA/Nd3sH7CwDnnGATCcx2RSkWCAj/oL8rE4IcAWvP/5M8zqdM5Dxu7YSMLIMP0mEtFIyMsD inbR66Er2crfUXGeFdX/o/iMVI1+5wgJ3TLPX4GOSr6D4oKNmvfo65tnsPGaU+PCMS3lbjwdbvcG ghT7ErIIUPIXd5M3/TgKGZm1AChF8FGKbGF8i6JFtOdg65Y0UcZPtib22FzVUSyv8L0M3+hUm+CN t6DIGUsEkKAcZlfiqg3WxuyR27OhTn57AQ== ) ; Key ID = 2821`
	DNSKEY=2821/SEP is now in the chain-of-trust
	DS=2821/SHA-1 verifies DNSKEY=2821/SEP
	DS=2821/SHA-256 verifies DNSKEY=2821/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`oftc.net. 5 IN RRSIG ( DNSKEY 8 2 5 20240608180140 20240509180054 2821 oftc.net. WjLe8+cJJMRk21aDRpa63lGgpnxUUCNYYpcJef9MJpv9n8w3e7V2xqREJKJgXn3yISDHI3EQqr4O 77/BiD065WUa7RZYLq2v6Eq9lEbAuwsiIRTWroUcXqgdH3DhCjUJ865fi7/qgu6Plw42cZ1VzAHC oWCx2C+BSkRpPWWtMAY8p6HqErOGICS7rsnCKgThu1BG9xX2ouEoRJyxOjaMM1GpFQ5keaZx+hFg NBzPDV3hmuUHv0bWrcEnlA05J8iM )`
	RRSIG=2821 and DNSKEY=2821/SEP verifies the DNSKEY RRset
	Query to ns5.linode.com for irc.oftc.net/A
	Received 933 bytes from 92.123.95.2
	;; Response received from [92.123.95.2] 933 octets ;; HEADER SECTION ;; id = 24384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.oftc.net. IN A ;; ANSWER SECTION (2 records) irc.oftc.net. 14400 IN CNAME irc.geo.oftc.net. irc.oftc.net. 14400 IN RRSIG ( CNAME 8 3 14400 20240528013209 20240428011545 2821 oftc.net. AIVXBlGyuJuZbNISQZ3FtyJULITmXY1Dh4HSfMvSvpGgqjYOVxZt1K6ZiEsl5oIqZyqDurvMjgtG PCk8go6K5SUor9zYgRtKLSrRXJnOtqMuxriH6WuFjYBjfVTd3ikhcqdsQmD8R1epS8wX14BeafIm qOIHJEGt1AcJQlBFLzZLSmSqgRhZNy/JCc9nAgV6J6D0OUgeonijCEea6QWysbyS1Nq20QK8h7OG xSJ67qs4t3v4MEPK0+xRqSdAdFMk ) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 43200 IN NS gns1.oftc.net. geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 ) geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk ) ;; ADDITIONAL SECTION (6 records) gns1.oftc.net. 172800 IN A 109.169.7.195 gns1.oftc.net. 172800 IN AAAA 2001:1b40:5000:fe0::53 gns4.oftc.net. 172800 IN A 195.10.223.172 gns4.oftc.net. 172800 IN AAAA 2a00:1098:0:80:1000:4c:0:53 gns1.oftc.net. 172800 IN RRSIG ( A 8 3 172800 20240527224615 20240427215600 2821 oftc.net. V6wESer3AUsiu7OuXXtRWrkzzJ9Qq7ZYJ3SE7K7OHpyJKyhbw+aG5IccgP51tLSeVrPaW6j+oPdz ll095ET4xHVQEXf1zGpExKyHkg+/zLdxlGv50r0aEkTWtU/eAQ60+6yfZBMxjEDzFA1S/+8pMbyS XrRBS7yVxLULbcH8teMsymK8/inFO+H5Y8RHhwtivGfmwCeLpxZjJ7GsAuv5Kaep4Jl8dnZ6sj3V 5Qsm7kXvmb3OMvsXJHPeeD88p+yT ) ;; { "EDNS-VERSION": 0 }
	ns5.linode.com is authoritative for irc.oftc.net
	Query to ns2.linode.com for irc.oftc.net/DNSKEY
	Received 933 bytes from 92.123.94.3
	;; Response received from [92.123.94.3] 933 octets ;; HEADER SECTION ;; id = 56517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.oftc.net. IN DNSKEY ;; ANSWER SECTION (2 records) irc.oftc.net. 14400 IN CNAME irc.geo.oftc.net. irc.oftc.net. 14400 IN RRSIG ( CNAME 8 3 14400 20240528013209 20240428011545 2821 oftc.net. AIVXBlGyuJuZbNISQZ3FtyJULITmXY1Dh4HSfMvSvpGgqjYOVxZt1K6ZiEsl5oIqZyqDurvMjgtG PCk8go6K5SUor9zYgRtKLSrRXJnOtqMuxriH6WuFjYBjfVTd3ikhcqdsQmD8R1epS8wX14BeafIm qOIHJEGt1AcJQlBFLzZLSmSqgRhZNy/JCc9nAgV6J6D0OUgeonijCEea6QWysbyS1Nq20QK8h7OG xSJ67qs4t3v4MEPK0+xRqSdAdFMk ) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns1.oftc.net. geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 ) geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk ) ;; ADDITIONAL SECTION (6 records) gns1.oftc.net. 172800 IN A 109.169.7.195 gns1.oftc.net. 172800 IN AAAA 2001:1b40:5000:fe0::53 gns4.oftc.net. 172800 IN A 195.10.223.172 gns4.oftc.net. 172800 IN AAAA 2a00:1098:0:80:1000:4c:0:53 gns1.oftc.net. 172800 IN RRSIG ( A 8 3 172800 20240527224615 20240427215600 2821 oftc.net. V6wESer3AUsiu7OuXXtRWrkzzJ9Qq7ZYJ3SE7K7OHpyJKyhbw+aG5IccgP51tLSeVrPaW6j+oPdz ll095ET4xHVQEXf1zGpExKyHkg+/zLdxlGv50r0aEkTWtU/eAQ60+6yfZBMxjEDzFA1S/+8pMbyS XrRBS7yVxLULbcH8teMsymK8/inFO+H5Y8RHhwtivGfmwCeLpxZjJ7GsAuv5Kaep4Jl8dnZ6sj3V 5Qsm7kXvmb3OMvsXJHPeeD88p+yT ) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by oftc.net zone
	irc.oftc.net is a CNAME to irc.geo.oftc.net
	Found 1 RRSIGs over CNAME RRset
	`irc.oftc.net. 14400 IN RRSIG ( CNAME 8 3 14400 20240528013209 20240428011545 2821 oftc.net. AIVXBlGyuJuZbNISQZ3FtyJULITmXY1Dh4HSfMvSvpGgqjYOVxZt1K6ZiEsl5oIqZyqDurvMjgtG PCk8go6K5SUor9zYgRtKLSrRXJnOtqMuxriH6WuFjYBjfVTd3ikhcqdsQmD8R1epS8wX14BeafIm qOIHJEGt1AcJQlBFLzZLSmSqgRhZNy/JCc9nAgV6J6D0OUgeonijCEea6QWysbyS1Nq20QK8h7OG xSJ67qs4t3v4MEPK0+xRqSdAdFMk )`
	RRSIG=2821 and DNSKEY=2821/SEP verifies the CNAME RRset
	Query to ns2.linode.com for irc.geo.oftc.net/A
	Received 915 bytes from 92.123.94.3
	;; Response received from [92.123.94.3] 915 octets ;; HEADER SECTION ;; id = 47565 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns1.oftc.net. geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 ) geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk ) ;; ADDITIONAL SECTION (7 records) gns1.oftc.net. 172800 IN A 109.169.7.195 gns1.oftc.net. 172800 IN AAAA 2001:1b40:5000:fe0::53 gns4.oftc.net. 172800 IN A 195.10.223.172 gns4.oftc.net. 172800 IN AAAA 2a00:1098:0:80:1000:4c:0:53 gns1.oftc.net. 172800 IN RRSIG ( A 8 3 172800 20240527224615 20240427215600 2821 oftc.net. V6wESer3AUsiu7OuXXtRWrkzzJ9Qq7ZYJ3SE7K7OHpyJKyhbw+aG5IccgP51tLSeVrPaW6j+oPdz ll095ET4xHVQEXf1zGpExKyHkg+/zLdxlGv50r0aEkTWtU/eAQ60+6yfZBMxjEDzFA1S/+8pMbyS XrRBS7yVxLULbcH8teMsymK8/inFO+H5Y8RHhwtivGfmwCeLpxZjJ7GsAuv5Kaep4Jl8dnZ6sj3V 5Qsm7kXvmb3OMvsXJHPeeD88p+yT ) gns1.oftc.net. 172800 IN RRSIG ( AAAA 8 3 172800 20240527224615 20240427215600 2821 oftc.net. L05ankw/eiNMdplDw5d481NYI6bY5obb9rn8etfGco6dzOykCpCYaIeqgu9lfyoXW0ZVJpULfI3G KS3iMpehDya6K4Lx39tEmRX/HjKTNvW764ti2dSlSAk1N4Xqfv5oo85RR3g8w+p2V2SMaw2RqC5W mbcF1ulzvc9o+4fmBS5Q7OKfXYS0lQG0Y0wQNRBdAgTK6lI/Uxw9eiHeYaknhQraA1VRqZ3UYtYc NA1dlX3iTQieHsexy9cN5gXZtSjj ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.linode.com for geo.oftc.net/DNSKEY
	Received 911 bytes from 92.123.95.3
	;; Response received from [92.123.95.3] 911 octets ;; HEADER SECTION ;; id = 53042 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 7 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; geo.oftc.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns1.oftc.net. geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 ) geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk ) ;; ADDITIONAL SECTION (7 records) gns1.oftc.net. 172800 IN A 109.169.7.195 gns1.oftc.net. 172800 IN AAAA 2001:1b40:5000:fe0::53 gns4.oftc.net. 172800 IN A 195.10.223.172 gns4.oftc.net. 172800 IN AAAA 2a00:1098:0:80:1000:4c:0:53 gns1.oftc.net. 172800 IN RRSIG ( A 8 3 172800 20240527224615 20240427215600 2821 oftc.net. V6wESer3AUsiu7OuXXtRWrkzzJ9Qq7ZYJ3SE7K7OHpyJKyhbw+aG5IccgP51tLSeVrPaW6j+oPdz ll095ET4xHVQEXf1zGpExKyHkg+/zLdxlGv50r0aEkTWtU/eAQ60+6yfZBMxjEDzFA1S/+8pMbyS XrRBS7yVxLULbcH8teMsymK8/inFO+H5Y8RHhwtivGfmwCeLpxZjJ7GsAuv5Kaep4Jl8dnZ6sj3V 5Qsm7kXvmb3OMvsXJHPeeD88p+yT ) gns1.oftc.net. 172800 IN RRSIG ( AAAA 8 3 172800 20240527224615 20240427215600 2821 oftc.net. L05ankw/eiNMdplDw5d481NYI6bY5obb9rn8etfGco6dzOykCpCYaIeqgu9lfyoXW0ZVJpULfI3G KS3iMpehDya6K4Lx39tEmRX/HjKTNvW764ti2dSlSAk1N4Xqfv5oo85RR3g8w+p2V2SMaw2RqC5W mbcF1ulzvc9o+4fmBS5Q7OKfXYS0lQG0Y0wQNRBdAgTK6lI/Uxw9eiHeYaknhQraA1VRqZ3UYtYc NA1dlX3iTQieHsexy9cN5gXZtSjj ) ;; { "EDNS-VERSION": 0 }
	Found child zone geo.oftc.net

geo.oftc.net

	Checking DS between oftc.net and geo.oftc.net
	Query to ns4.linode.com for geo.oftc.net/DS
	Received 321 bytes from 92.123.95.4
	;; Response received from [92.123.95.4] 321 octets ;; HEADER SECTION ;; id = 49133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1024, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; geo.oftc.net. IN DS ;; ANSWER SECTION (2 records) geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 ) geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for geo.oftc.net in the oftc.net zone
	DS=57016/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`geo.oftc.net. 43200 IN RRSIG ( DS 8 3 43200 20240527224615 20240427215600 2821 oftc.net. WxyIbAG9JFLssIGh2ZL95B5+RkFWc6sVWI/NmmNd/RrTmbibtycnRBGvmB6ICKeKGyybgrnedm3F jCjY22D9I/zhDoD81dJx1BCwUs7Pyg6FDongb3h06okPU49tB3boO4Xy+Y410NgzspEcjY2tv6CS 4FPQxZjyq8uY4mJivrkDVZNqPkkRr16lp7IJwbzv+x58n+nGFIhMlDJhEQ4rmhZel3r0lSAYhWeC iH278kexqF2iChLGncSl9+Gyceyk )`
	RRSIG=2821 and DNSKEY=2821/SEP verifies the DS RRset
	DS=57016/SHA-256 is now in the chain-of-trust
	`geo.oftc.net. 43200 IN DS ( 57016 8 2 8f7df119f678856c151f67b4f07d18aecdabdacf3824dd8e9f22e8b4da3e0bb1 )`
	Query to gns1.oftc.net for geo.oftc.net/DNSKEY
	Received 489 bytes from 109.169.7.195
	;; Response received from [109.169.7.195] 489 octets ;; HEADER SECTION ;; id = 10517 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; geo.oftc.net. IN DNSKEY ;; ANSWER SECTION (2 records) geo.oftc.net. 43200 IN DNSKEY ( 257 3 8 AwEAAbwY0RF6vJiKIyMqBlP8o0WJ2/ivkq3yuK8tV77JRIpgpryZUVBrp9ut8PYjpPgTGkQqSLnC 5Ci0AnNHQcOdpQzvB4MA2/U680Ttk5J0Yx1IZN5bFCvUWJlZzLu1E21HtAndwwU+3lHO/Vce0wpi r359mNWrRTk38i3oKANJgX+EJlDlpvi7m1hpAo/hytnmyfAyDJWvPxmmPl/MrLwfogUBzNtwH50c R4w2n4MpkzeQPqqKyB3B8f7nLyGfmERsIQ== ) ; Key ID = 57016 geo.oftc.net. 43200 IN RRSIG ( DNSKEY 8 3 43200 20240608175053 20240509172156 57016 geo.oftc.net. t2Hg+mQibYsSel50rU3HUTiV1xz+rS+EfK/X/m44wRhx/Ns8wpyHRdHR5bJr7cmG4O/0aAUWSO2d JMduYjBM236742l+g1PrJKfBXhv4LhqieqPSPCfuR5NOvi5XOyLHtu+c81lYhKAwExshGN1b5HMd 5+kUQvUnRi17A1JC4hwd9UtOy8wohKuVHjGWPCAsuZ6xwNeH6RdE4EGpVPLrNbxMFd5UqPHsbB5H 9CQ0GGeq36y0b3y8TMYHwfDKG/WQ ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for geo.oftc.net
	`geo.oftc.net. 43200 IN DNSKEY ( 257 3 8 AwEAAbwY0RF6vJiKIyMqBlP8o0WJ2/ivkq3yuK8tV77JRIpgpryZUVBrp9ut8PYjpPgTGkQqSLnC 5Ci0AnNHQcOdpQzvB4MA2/U680Ttk5J0Yx1IZN5bFCvUWJlZzLu1E21HtAndwwU+3lHO/Vce0wpi r359mNWrRTk38i3oKANJgX+EJlDlpvi7m1hpAo/hytnmyfAyDJWvPxmmPl/MrLwfogUBzNtwH50c R4w2n4MpkzeQPqqKyB3B8f7nLyGfmERsIQ== ) ; Key ID = 57016`
	DNSKEY=57016/SEP is now in the chain-of-trust
	DS=57016/SHA-256 verifies DNSKEY=57016/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`geo.oftc.net. 43200 IN RRSIG ( DNSKEY 8 3 43200 20240608175053 20240509172156 57016 geo.oftc.net. t2Hg+mQibYsSel50rU3HUTiV1xz+rS+EfK/X/m44wRhx/Ns8wpyHRdHR5bJr7cmG4O/0aAUWSO2d JMduYjBM236742l+g1PrJKfBXhv4LhqieqPSPCfuR5NOvi5XOyLHtu+c81lYhKAwExshGN1b5HMd 5+kUQvUnRi17A1JC4hwd9UtOy8wohKuVHjGWPCAsuZ6xwNeH6RdE4EGpVPLrNbxMFd5UqPHsbB5H 9CQ0GGeq36y0b3y8TMYHwfDKG/WQ )`
	RRSIG=57016 and DNSKEY=57016/SEP verifies the DNSKEY RRset
	Query to gns1.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 109.169.7.195
	;; Response received from [109.169.7.195] 603 octets ;; HEADER SECTION ;; id = 57756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gns1.oftc.net is authoritative for irc.geo.oftc.net
	Query to gns1.oftc.net for irc.geo.oftc.net/DNSKEY
	Received 618 bytes from 109.169.7.195
	;; Response received from [109.169.7.195] 618 octets ;; HEADER SECTION ;; id = 19580 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 600 IN SOA ( hidden-master.oftc.net. noc.oftc.net. 1716139972 ;serial 600 ;refresh 300 ;retry 3600000 ;expire 600 ;minimum ) geo.oftc.net. 600 IN RRSIG ( SOA 8 3 43200 20240618173252 20240519163252 57016 geo.oftc.net. nEUYxf3M/JxDRMU6Pe6pdzPMIStkiihoRjvbUUgeI9AA6X5j0xGXuDRWcsCptXOSdEPU5hBHMsWb MCnnjSGYTV7oLTjBcsQ7JNeLUe2rlowVovTZStODqZ0OZ9TbPSdBYknRj7vZo7BEoCXjSns7aOyX WK9hd0JZ16wTbY5yJqC6k7PQq0w6B6EH4ImaUdhJP6TS4eYFm7lBO41uKhs3z3xT8R8PGO9E109l QZHO9YcCbho7yCOzlYGLC0THE3vO ) irc.geo.oftc.net. 600 IN NSEC irc4.geo.oftc.net. A TXT AAAA RRSIG NSEC irc.geo.oftc.net. 600 IN RRSIG ( NSEC 8 4 600 20240528215713 20240428213833 57016 geo.oftc.net. jTr16kFOPB9SkUai6mBeEHLfF3YY/fMV2xLTxZOwf6fHF0d5/yf4E3ag8cz7aa+g88XNqGxS/liE vhoe/BT3i1j5JP5NLvxCTKWzMVKjk5IbEHGUfEae5Yva1bQ0ia9AfHlkJgwaDTDJMTLIUFTrwQhS xlyZL3F8AIf/SFROIkAD8Z/cbyYWShTGhg2Gm8dHV7l8ONVQrh1fXz63Db4pRVJsiVO4Wvyjet8U aGCUURdkwV1ryC6CBiDtGQ1MhrT/ ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by geo.oftc.net zone
	Query to gns4.oftc.net for geo.oftc.net/SOA
	Received 605 bytes from 195.10.223.172
	;; Response received from [195.10.223.172] 605 octets ;; HEADER SECTION ;; id = 1864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; geo.oftc.net. IN SOA ;; ANSWER SECTION (2 records) geo.oftc.net. 43200 IN SOA ( hidden-master.oftc.net. noc.oftc.net. 1716139972 ;serial 600 ;refresh 300 ;retry 3600000 ;expire 600 ;minimum ) geo.oftc.net. 43200 IN RRSIG ( SOA 8 3 43200 20240618173252 20240519163252 57016 geo.oftc.net. nEUYxf3M/JxDRMU6Pe6pdzPMIStkiihoRjvbUUgeI9AA6X5j0xGXuDRWcsCptXOSdEPU5hBHMsWb MCnnjSGYTV7oLTjBcsQ7JNeLUe2rlowVovTZStODqZ0OZ9TbPSdBYknRj7vZo7BEoCXjSns7aOyX WK9hd0JZ16wTbY5yJqC6k7PQq0w6B6EH4ImaUdhJP6TS4eYFm7lBO41uKhs3z3xT8R8PGO9E109l QZHO9YcCbho7yCOzlYGLC0THE3vO ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gns5.oftc.net for geo.oftc.net/SOA
	Received 605 bytes from 209.87.16.242
	;; Response received from [209.87.16.242] 605 octets ;; HEADER SECTION ;; id = 46864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; geo.oftc.net. IN SOA ;; ANSWER SECTION (2 records) geo.oftc.net. 43200 IN SOA ( hidden-master.oftc.net. noc.oftc.net. 1716139972 ;serial 600 ;refresh 300 ;retry 3600000 ;expire 600 ;minimum ) geo.oftc.net. 43200 IN RRSIG ( SOA 8 3 43200 20240618173252 20240519163252 57016 geo.oftc.net. nEUYxf3M/JxDRMU6Pe6pdzPMIStkiihoRjvbUUgeI9AA6X5j0xGXuDRWcsCptXOSdEPU5hBHMsWb MCnnjSGYTV7oLTjBcsQ7JNeLUe2rlowVovTZStODqZ0OZ9TbPSdBYknRj7vZo7BEoCXjSns7aOyX WK9hd0JZ16wTbY5yJqC6k7PQq0w6B6EH4ImaUdhJP6TS4eYFm7lBO41uKhs3z3xT8R8PGO9E109l QZHO9YcCbho7yCOzlYGLC0THE3vO ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to gns1.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 109.169.7.195
	;; Response received from [109.169.7.195] 603 octets ;; HEADER SECTION ;; id = 36347 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	irc.geo.oftc.net A RR has value 64.86.243.183
	irc.geo.oftc.net A RR has value 140.211.166.64
	irc.geo.oftc.net A RR has value 207.192.72.99
	Found 1 RRSIGs over A RRset
	`irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs )`
	RRSIG=57016 and DNSKEY=57016/SEP verifies the A RRset

geo.oftc.net

	Query to gns5.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 209.87.16.242
	;; Response received from [209.87.16.242] 603 octets ;; HEADER SECTION ;; id = 36980 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gns5.oftc.net is authoritative for irc.geo.oftc.net
	Query to gns4.oftc.net for irc.geo.oftc.net/DNSKEY
	Received 618 bytes from 195.10.223.172
	;; Response received from [195.10.223.172] 618 octets ;; HEADER SECTION ;; id = 55421 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 600 IN SOA ( hidden-master.oftc.net. noc.oftc.net. 1716139972 ;serial 600 ;refresh 300 ;retry 3600000 ;expire 600 ;minimum ) geo.oftc.net. 600 IN RRSIG ( SOA 8 3 43200 20240618173252 20240519163252 57016 geo.oftc.net. nEUYxf3M/JxDRMU6Pe6pdzPMIStkiihoRjvbUUgeI9AA6X5j0xGXuDRWcsCptXOSdEPU5hBHMsWb MCnnjSGYTV7oLTjBcsQ7JNeLUe2rlowVovTZStODqZ0OZ9TbPSdBYknRj7vZo7BEoCXjSns7aOyX WK9hd0JZ16wTbY5yJqC6k7PQq0w6B6EH4ImaUdhJP6TS4eYFm7lBO41uKhs3z3xT8R8PGO9E109l QZHO9YcCbho7yCOzlYGLC0THE3vO ) irc.geo.oftc.net. 600 IN NSEC irc4.geo.oftc.net. A TXT AAAA RRSIG NSEC irc.geo.oftc.net. 600 IN RRSIG ( NSEC 8 4 600 20240528215713 20240428213833 57016 geo.oftc.net. jTr16kFOPB9SkUai6mBeEHLfF3YY/fMV2xLTxZOwf6fHF0d5/yf4E3ag8cz7aa+g88XNqGxS/liE vhoe/BT3i1j5JP5NLvxCTKWzMVKjk5IbEHGUfEae5Yva1bQ0ia9AfHlkJgwaDTDJMTLIUFTrwQhS xlyZL3F8AIf/SFROIkAD8Z/cbyYWShTGhg2Gm8dHV7l8ONVQrh1fXz63Db4pRVJsiVO4Wvyjet8U aGCUURdkwV1ryC6CBiDtGQ1MhrT/ ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by geo.oftc.net zone
	Query to gns5.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 209.87.16.242
	;; Response received from [209.87.16.242] 603 octets ;; HEADER SECTION ;; id = 22804 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	irc.geo.oftc.net A RR has value 64.86.243.183
	irc.geo.oftc.net A RR has value 207.192.72.99
	irc.geo.oftc.net A RR has value 140.211.166.64
	Found 1 RRSIGs over A RRset
	`irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs )`
	RRSIG=57016 and DNSKEY=57016/SEP verifies the A RRset

geo.oftc.net

	Query to gns4.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 195.10.223.172
	;; Response received from [195.10.223.172] 603 octets ;; HEADER SECTION ;; id = 52696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	gns4.oftc.net is authoritative for irc.geo.oftc.net
	Query to gns4.oftc.net for irc.geo.oftc.net/DNSKEY
	Received 618 bytes from 195.10.223.172
	;; Response received from [195.10.223.172] 618 octets ;; HEADER SECTION ;; id = 12843 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) geo.oftc.net. 600 IN SOA ( hidden-master.oftc.net. noc.oftc.net. 1716139972 ;serial 600 ;refresh 300 ;retry 3600000 ;expire 600 ;minimum ) geo.oftc.net. 600 IN RRSIG ( SOA 8 3 43200 20240618173252 20240519163252 57016 geo.oftc.net. nEUYxf3M/JxDRMU6Pe6pdzPMIStkiihoRjvbUUgeI9AA6X5j0xGXuDRWcsCptXOSdEPU5hBHMsWb MCnnjSGYTV7oLTjBcsQ7JNeLUe2rlowVovTZStODqZ0OZ9TbPSdBYknRj7vZo7BEoCXjSns7aOyX WK9hd0JZ16wTbY5yJqC6k7PQq0w6B6EH4ImaUdhJP6TS4eYFm7lBO41uKhs3z3xT8R8PGO9E109l QZHO9YcCbho7yCOzlYGLC0THE3vO ) irc.geo.oftc.net. 600 IN NSEC irc4.geo.oftc.net. A TXT AAAA RRSIG NSEC irc.geo.oftc.net. 600 IN RRSIG ( NSEC 8 4 600 20240528215713 20240428213833 57016 geo.oftc.net. jTr16kFOPB9SkUai6mBeEHLfF3YY/fMV2xLTxZOwf6fHF0d5/yf4E3ag8cz7aa+g88XNqGxS/liE vhoe/BT3i1j5JP5NLvxCTKWzMVKjk5IbEHGUfEae5Yva1bQ0ia9AfHlkJgwaDTDJMTLIUFTrwQhS xlyZL3F8AIf/SFROIkAD8Z/cbyYWShTGhg2Gm8dHV7l8ONVQrh1fXz63Db4pRVJsiVO4Wvyjet8U aGCUURdkwV1ryC6CBiDtGQ1MhrT/ ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by geo.oftc.net zone
	Query to gns4.oftc.net for irc.geo.oftc.net/A
	Received 603 bytes from 195.10.223.172
	;; Response received from [195.10.223.172] 603 octets ;; HEADER SECTION ;; id = 62882 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; irc.geo.oftc.net. IN A ;; ANSWER SECTION (4 records) irc.geo.oftc.net. 60 IN A 207.192.72.99 irc.geo.oftc.net. 60 IN A 140.211.166.64 irc.geo.oftc.net. 60 IN A 64.86.243.183 irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs ) ;; AUTHORITY SECTION (3 records) geo.oftc.net. 43200 IN NS gns4.oftc.net. geo.oftc.net. 43200 IN NS gns5.oftc.net. geo.oftc.net. 43200 IN RRSIG ( NS 8 3 43200 20240609144716 20240510143330 57016 geo.oftc.net. fGkQKflxYs4vwKBnNQX0P/NsY+Mm/rTbfbF7wrPAYQ6W4w9gAAP4GRQZ0l2wMUZzZqNPREzVWQu6 dfiDhvqKgejMlwY3QbP0zr0ijMm3Cr4KWeHrrMCY0WlxkrZJc1XSSh2x+k94aFHiCiMBU50VVPCU hzfeQGvPYP8/uP8RRpYi9A7NR+ndrD/nckHcJA2PDeTVf8U3tZZqtfqTEJBlJcUtRFivunb+uIYb jNiOnbMkXquy7RogaGCK0OqCB8iw ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	irc.geo.oftc.net A RR has value 207.192.72.99
	irc.geo.oftc.net A RR has value 140.211.166.64
	irc.geo.oftc.net A RR has value 64.86.243.183
	Found 1 RRSIGs over A RRset
	`irc.geo.oftc.net. 60 IN RRSIG ( A 8 4 60 20240614194318 20240515184318 57016 geo.oftc.net. fqYfERdkRO66SIrMzOaztq29krlhnWDT7HtUTsu2IVVwu/JptH8OITGDzb6w0ECwuT43aMvvnpAg IMTftIBw321NJGsnO12TaoMvFVRFa/F+02DRCZJqzhvC82ylPWUflUAMLd2NMlkavyXgwgfFr7F2 im3b4rn/Iz7B30V7v+nVuNEPDVn/8Clcr3vCmCY2QcwfyXudp+23nHVEhkOoqmdBjnq/Zw9rGphh 7dcwcJvIo3tuGE7E9io5f2E8rAKs )`
	RRSIG=57016 and DNSKEY=57016/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test irc.oftc.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: