DNSSEC Debugger

Domain Name:

Time: 2024-05-19 00:00:06 UTC

Analyzing DNSSEC problems for ku.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 864 octets ;; HEADER SECTION ;; id = 27310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for ku.de/A
	Received 739 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 739 octets ;; HEADER SECTION ;; id = 2894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for de/DNSKEY
	Received 738 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 738 octets ;; HEADER SECTION ;; id = 2911 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS f.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to g.root-servers.net for de/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 4115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to a.nic.de for de/DNSKEY
	Received 893 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 893 octets ;; HEADER SECTION ;; id = 46753 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240531180309 20240517163309 26755 de. CjQdQYF8/3kjDogYgLpkyl4c/XCbFW6rFxpQRQgT3tCYozHKMyVBv7xpa8feH+5ea9KbA3HurVVw CdiZOCuMCWyBzCfPE3PxSVKEzqU9wlRWi4HZIQUUQMHOncOgzp/PNmT/7WL+M5kxrATx2Rs4WQ9n UWaCrZSE/ixMjd0xcJT6agg23aSHcfT5FKlLsgtzkjeJgRn/qdKaLDh9pmoAMHoLkcFTCUmsYVR9 gU7lQUoaVuN4yjDdzHkH9zd7pgqKTSDwUUKgXNDoe3/tLQF+V3EATQeBmzYuyF2QXkpZM7P8LmYA ZMXh4wVGqkCjKA5G70FM56DKjEJ2c8xdaRD/UQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240531180309 20240517163309 26755 de. CjQdQYF8/3kjDogYgLpkyl4c/XCbFW6rFxpQRQgT3tCYozHKMyVBv7xpa8feH+5ea9KbA3HurVVw CdiZOCuMCWyBzCfPE3PxSVKEzqU9wlRWi4HZIQUUQMHOncOgzp/PNmT/7WL+M5kxrATx2Rs4WQ9n UWaCrZSE/ixMjd0xcJT6agg23aSHcfT5FKlLsgtzkjeJgRn/qdKaLDh9pmoAMHoLkcFTCUmsYVR9 gU7lQUoaVuN4yjDdzHkH9zd7pgqKTSDwUUKgXNDoe3/tLQF+V3EATQeBmzYuyF2QXkpZM7P8LmYA ZMXh4wVGqkCjKA5G70FM56DKjEJ2c8xdaRD/UQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56445 is now in the chain-of-trust
	DNSKEY=720 is now in the chain-of-trust
	Query to a.nic.de for ku.de/A
	Received 385 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 385 octets ;; HEADER SECTION ;; id = 7996 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN DS ( 47166 10 2 e90aeb0c5963a8400f0a1717d0ad98e69e010a666ade5a07f6f600fb29fe9fe6 ) ku.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. Rqjp2MN13s1AS/QK5vLhGRQIleXOILohhwOagTLy3dEd9BhvPKzM+tDjS4+AmDemSkrgPjYNKLMk cfrLJyRgVEjN2rVBMVi3Jk9+fTzvpwnQdbZ51AMrrs7D7Jr7XrbQ8lhHdSOY+5snRY4QJw8+M3at bRR4c0Ml1/jG1ZNwH9M= ) ;; ADDITIONAL SECTION (3 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ;; { "EDNS-VERSION": 0 }
	Query to f.nic.de for ku.de/DNSKEY
	Received 385 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 385 octets ;; HEADER SECTION ;; id = 14466 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN DS ( 47166 10 2 e90aeb0c5963a8400f0a1717d0ad98e69e010a666ade5a07f6f600fb29fe9fe6 ) ku.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. Rqjp2MN13s1AS/QK5vLhGRQIleXOILohhwOagTLy3dEd9BhvPKzM+tDjS4+AmDemSkrgPjYNKLMk cfrLJyRgVEjN2rVBMVi3Jk9+fTzvpwnQdbZ51AMrrs7D7Jr7XrbQ8lhHdSOY+5snRY4QJw8+M3at bRR4c0Ml1/jG1ZNwH9M= ) ;; ADDITIONAL SECTION (3 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ;; { "EDNS-VERSION": 0 }
	Found child zone ku.de

ku.de

	Checking DS between de and ku.de
	Query to s.de.net for ku.de/DS
	Received 244 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 244 octets ;; HEADER SECTION ;; id = 12403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN DS ;; ANSWER SECTION (2 records) ku.de. 86400 IN DS ( 47166 10 2 e90aeb0c5963a8400f0a1717d0ad98e69e010a666ade5a07f6f600fb29fe9fe6 ) ku.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. Rqjp2MN13s1AS/QK5vLhGRQIleXOILohhwOagTLy3dEd9BhvPKzM+tDjS4+AmDemSkrgPjYNKLMk cfrLJyRgVEjN2rVBMVi3Jk9+fTzvpwnQdbZ51AMrrs7D7Jr7XrbQ8lhHdSOY+5snRY4QJw8+M3at bRR4c0Ml1/jG1ZNwH9M= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ku.de in the de zone
	DS=47166/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`ku.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. Rqjp2MN13s1AS/QK5vLhGRQIleXOILohhwOagTLy3dEd9BhvPKzM+tDjS4+AmDemSkrgPjYNKLMk cfrLJyRgVEjN2rVBMVi3Jk9+fTzvpwnQdbZ51AMrrs7D7Jr7XrbQ8lhHdSOY+5snRY4QJw8+M3at bRR4c0Ml1/jG1ZNwH9M= )`
	RRSIG=56445 and DNSKEY=56445 verifies the DS RRset
	DS=47166/SHA-256 is now in the chain-of-trust
	`ku.de. 86400 IN DS ( 47166 10 2 e90aeb0c5963a8400f0a1717d0ad98e69e010a666ade5a07f6f600fb29fe9fe6 )`
	Query to ns.ku.de for ku.de/DNSKEY
	Received 1172 bytes from 141.78.7.250
	;; Response received from [141.78.7.250] 1172 octets ;; HEADER SECTION ;; id = 2615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN DNSKEY ;; ANSWER SECTION (4 records) ku.de. 86400 IN DNSKEY ( 257 3 10 AwEAAa0XMEoFoC7HURIvTC8xKXRAqO5sW/3EPwrUScKtPtan0Qkt2XA/HcFvq26UBzDiJpG6UPGE lyl6lB75wWKbOERL8F5btZZFUoCNSDG4AOtVGwnnLH6JAMxHKZY8lWfD2x3zyAWcR2HlmiiwF7N4 SD2g54y0CAyNVeSbra3uPrFwhcnsSRzfvUFh4Ph4ZvaOOaE64RSAcgha34wWlbIUu67UL3oiBQya 05Nua4EUE6nUYF/I5sVDQ1lS3Gnfj1asOc57O7uyYw3ByyNhyLGtESp2vqosUnAAoUbBqmQLmulS Rp2DSRM0sZQJqy3HaaHr3o302KEW5BVo/qwDGC+B1Bk= ) ; Key ID = 47166 ku.de. 86400 IN DNSKEY ( 256 3 10 AwEAAa290kXyU31IVlKXqUKsHujajZZLaoRCis1fWbmDidWIBkCU/E+CK8A4TsbZCLIxouMZXKkX MYIupFrfW4qoXHB9sGStVWDtd5Sc2NXfykHRO5V3C62zzyJP1MLPMaXmJoP8sAYkV2Wt564BHatn DXE1xrY2odEgLO4P2Dvs552Ui/A9Rv4JuGYqMjPyXcvf3u7dlTJ+v8Bqu3pXlnFRzSh/CTe4cAi/ 9xKSPFAhFeoKelp0Nt/V1Kiy4hgxJ2gduP8MfxsuuLJuCbzuW0FitKgJ9oGnaqhDjs7FDG/aAMwy puk+VGbKa1cWl6UZiuSgh1Q3BhBt/oIVJqwaGqS/MV0= ) ; Key ID = 4487 ku.de. 86400 IN RRSIG ( DNSKEY 10 2 86400 20240529152016 20240429145332 4487 ku.de. N6AAj+BwEjj9/CktWXmyiIWPPDC98d0eyVCTLwfr21lm1J/cpNixcxBslFLTuiiO/jy8JbJB2FNT J25ozmItOtFb8lRU0SLx9EBoXHqwqasRc14u8+bQdthYbadDb2yAA4fjnv7j3rCbjgg1SJN2zsP9 looDL1Myy+JTWhyp3pgn5LGxhxzGBMvbMDBoAs6RMR4WWJBhhn758Y4jJdTrcdITc1y+Kw9pWAWD u5pww4D0JOxW1VVO7DbNlzV5yaJoMgKINUEiOy7+hk/LOyr1yLJHza3xKlvX3swdG+F4KZXEkxSc lweJ8FdYTYfR8CncKij3O67F4HFCYqnMKsolQQ== ) ku.de. 86400 IN RRSIG ( DNSKEY 10 2 86400 20240529152016 20240429145332 47166 ku.de. jkNK92qkk2pfb0it+twChhfq7SyYAlDso6eCcmTTBnnhgVEmIfqbb1O6bcs5YSC30zSaVtIB/2/i 8fnDowygqFp9PnmxcbfMv1UaiFzMJRQbA92q++o8tUptGEqQg8UWa405hvKfLq93/AecP674wlzF +SLjXr4HlKbHan/KTDLwbgFde2oKhjF2FvWQf2dxDaqlVgUtkJWblcEnO5E2jKmnj+xHhuHzZUU2 VzQ+oRL1XyeaREJKLADyjDqvQMTUaa/7PJd+pnPAVv+NfxiRYgITV4GvS7iia/EhSYBn4IZ6gqwL kTn0UtBIOchubf2qupqgTah0MJig8OmmPgWivg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ku.de
	`ku.de. 86400 IN DNSKEY ( 257 3 10 AwEAAa0XMEoFoC7HURIvTC8xKXRAqO5sW/3EPwrUScKtPtan0Qkt2XA/HcFvq26UBzDiJpG6UPGE lyl6lB75wWKbOERL8F5btZZFUoCNSDG4AOtVGwnnLH6JAMxHKZY8lWfD2x3zyAWcR2HlmiiwF7N4 SD2g54y0CAyNVeSbra3uPrFwhcnsSRzfvUFh4Ph4ZvaOOaE64RSAcgha34wWlbIUu67UL3oiBQya 05Nua4EUE6nUYF/I5sVDQ1lS3Gnfj1asOc57O7uyYw3ByyNhyLGtESp2vqosUnAAoUbBqmQLmulS Rp2DSRM0sZQJqy3HaaHr3o302KEW5BVo/qwDGC+B1Bk= ) ; Key ID = 47166`
	`ku.de. 86400 IN DNSKEY ( 256 3 10 AwEAAa290kXyU31IVlKXqUKsHujajZZLaoRCis1fWbmDidWIBkCU/E+CK8A4TsbZCLIxouMZXKkX MYIupFrfW4qoXHB9sGStVWDtd5Sc2NXfykHRO5V3C62zzyJP1MLPMaXmJoP8sAYkV2Wt564BHatn DXE1xrY2odEgLO4P2Dvs552Ui/A9Rv4JuGYqMjPyXcvf3u7dlTJ+v8Bqu3pXlnFRzSh/CTe4cAi/ 9xKSPFAhFeoKelp0Nt/V1Kiy4hgxJ2gduP8MfxsuuLJuCbzuW0FitKgJ9oGnaqhDjs7FDG/aAMwy puk+VGbKa1cWl6UZiuSgh1Q3BhBt/oIVJqwaGqS/MV0= ) ; Key ID = 4487`
	DNSKEY=47166/SEP is now in the chain-of-trust
	DS=47166/SHA-256 verifies DNSKEY=47166/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ku.de. 86400 IN RRSIG ( DNSKEY 10 2 86400 20240529152016 20240429145332 4487 ku.de. N6AAj+BwEjj9/CktWXmyiIWPPDC98d0eyVCTLwfr21lm1J/cpNixcxBslFLTuiiO/jy8JbJB2FNT J25ozmItOtFb8lRU0SLx9EBoXHqwqasRc14u8+bQdthYbadDb2yAA4fjnv7j3rCbjgg1SJN2zsP9 looDL1Myy+JTWhyp3pgn5LGxhxzGBMvbMDBoAs6RMR4WWJBhhn758Y4jJdTrcdITc1y+Kw9pWAWD u5pww4D0JOxW1VVO7DbNlzV5yaJoMgKINUEiOy7+hk/LOyr1yLJHza3xKlvX3swdG+F4KZXEkxSc lweJ8FdYTYfR8CncKij3O67F4HFCYqnMKsolQQ== )`
	`ku.de. 86400 IN RRSIG ( DNSKEY 10 2 86400 20240529152016 20240429145332 47166 ku.de. jkNK92qkk2pfb0it+twChhfq7SyYAlDso6eCcmTTBnnhgVEmIfqbb1O6bcs5YSC30zSaVtIB/2/i 8fnDowygqFp9PnmxcbfMv1UaiFzMJRQbA92q++o8tUptGEqQg8UWa405hvKfLq93/AecP674wlzF +SLjXr4HlKbHan/KTDLwbgFde2oKhjF2FvWQf2dxDaqlVgUtkJWblcEnO5E2jKmnj+xHhuHzZUU2 VzQ+oRL1XyeaREJKLADyjDqvQMTUaa/7PJd+pnPAVv+NfxiRYgITV4GvS7iia/EhSYBn4IZ6gqwL kTn0UtBIOchubf2qupqgTah0MJig8OmmPgWivg== )`
	RRSIG=4487 and DNSKEY=4487 verifies the DNSKEY RRset
	RRSIG=47166 and DNSKEY=47166/SEP verifies the DNSKEY RRset
	DNSKEY=4487 is now in the chain-of-trust
	Query to dns-1.dfn.de for ku.de/A
	Received 1074 bytes from 193.174.75.50
	;; Response received from [193.174.75.50] 1074 octets ;; HEADER SECTION ;; id = 38393 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	dns-1.dfn.de is authoritative for ku.de
	Found RRSIG signed by ku.de zone
	Query to dns-3.dfn.de for ku.de/SOA
	Received 1102 bytes from 193.174.75.58
	;; Response received from [193.174.75.58] 1102 octets ;; HEADER SECTION ;; id = 40736 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN SOA ;; ANSWER SECTION (2 records) ku.de. 86400 IN SOA ( ns.ku.de. netzadm.ku.de. 202417361 ;serial 21600 ;refresh 3600 ;retry 3600000 ;expire 86400 ;minimum ) ku.de. 86400 IN RRSIG ( SOA 10 2 86400 20240617232116 20240518222116 4487 ku.de. IK9KOgWoGacgerUPkKw+iWGxWS1O4sm18os3TJyGOD3d0x4vYMofBRUiLhVoJgVMzTjTtcoOOV1w Uu0LQxArn1PNuStZKPZdCR4UyC6z5amk6COj3rqVARXt5xMCdVwFW7+QUITJfFCd1XngdI0GkIaf 3yG/yYasAiwb0kykUSeVyJ2w+s2Dk5U4iJghEQuUl60R6cjrUHKewOSDtTCpdKMdrp4jNlbyeQpe U0nFbdvKLFowncjV9LZ5QcmTFCJ6yDrbzfEL09Wuv+vgZLxAkA12DijVvV7RfLuJAtxLo07Ovh8q fo7NzGWYXhQKuKJ4IGWeMnOhYeRT4foPJ9290w== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	Query to ns3.rrze.uni-erlangen.de for ku.de/SOA
	Received 1102 bytes from 131.188.3.4
	;; Response received from [131.188.3.4] 1102 octets ;; HEADER SECTION ;; id = 20003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN SOA ;; ANSWER SECTION (2 records) ku.de. 86400 IN SOA ( ns.ku.de. netzadm.ku.de. 202417361 ;serial 21600 ;refresh 3600 ;retry 3600000 ;expire 86400 ;minimum ) ku.de. 86400 IN RRSIG ( SOA 10 2 86400 20240617232116 20240518222116 4487 ku.de. IK9KOgWoGacgerUPkKw+iWGxWS1O4sm18os3TJyGOD3d0x4vYMofBRUiLhVoJgVMzTjTtcoOOV1w Uu0LQxArn1PNuStZKPZdCR4UyC6z5amk6COj3rqVARXt5xMCdVwFW7+QUITJfFCd1XngdI0GkIaf 3yG/yYasAiwb0kykUSeVyJ2w+s2Dk5U4iJghEQuUl60R6cjrUHKewOSDtTCpdKMdrp4jNlbyeQpe U0nFbdvKLFowncjV9LZ5QcmTFCJ6yDrbzfEL09Wuv+vgZLxAkA12DijVvV7RfLuJAtxLo07Ovh8q fo7NzGWYXhQKuKJ4IGWeMnOhYeRT4foPJ9290w== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	Query to ns.ku.de for ku.de/SOA
	Received 1098 bytes from 141.78.7.250
	;; Response received from [141.78.7.250] 1098 octets ;; HEADER SECTION ;; id = 61946 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN SOA ;; ANSWER SECTION (2 records) ku.de. 86400 IN SOA ( ns.ku.de. netzadm.ku.de. 202417361 ;serial 21600 ;refresh 3600 ;retry 3600000 ;expire 86400 ;minimum ) ku.de. 86400 IN RRSIG ( SOA 10 2 86400 20240617232116 20240518222116 4487 ku.de. IK9KOgWoGacgerUPkKw+iWGxWS1O4sm18os3TJyGOD3d0x4vYMofBRUiLhVoJgVMzTjTtcoOOV1w Uu0LQxArn1PNuStZKPZdCR4UyC6z5amk6COj3rqVARXt5xMCdVwFW7+QUITJfFCd1XngdI0GkIaf 3yG/yYasAiwb0kykUSeVyJ2w+s2Dk5U4iJghEQuUl60R6cjrUHKewOSDtTCpdKMdrp4jNlbyeQpe U0nFbdvKLFowncjV9LZ5QcmTFCJ6yDrbzfEL09Wuv+vgZLxAkA12DijVvV7RfLuJAtxLo07Ovh8q fo7NzGWYXhQKuKJ4IGWeMnOhYeRT4foPJ9290w== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	Query to dns-1.dfn.de for ku.de/A
	Received 1074 bytes from 193.174.75.50
	;; Response received from [193.174.75.50] 1074 octets ;; HEADER SECTION ;; id = 7413 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ku.de A RR has value 141.78.7.198
	Found 1 RRSIGs over A RRset
	`ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== )`
	RRSIG=4487 and DNSKEY=4487 verifies the A RRset

ku.de

	Query to ns.ku.de for ku.de/A
	Received 1070 bytes from 141.78.7.250
	;; Response received from [141.78.7.250] 1070 octets ;; HEADER SECTION ;; id = 58212 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ns.ku.de is authoritative for ku.de
	Found RRSIG signed by ku.de zone
	Query to ns.ku.de for ku.de/A
	Received 1070 bytes from 141.78.7.250
	;; Response received from [141.78.7.250] 1070 octets ;; HEADER SECTION ;; id = 42227 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ku.de A RR has value 141.78.7.198
	Found 1 RRSIGs over A RRset
	`ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== )`
	RRSIG=4487 and DNSKEY=4487 verifies the A RRset

ku.de

	Query to ns3.rrze.uni-erlangen.de for ku.de/A
	Received 1074 bytes from 131.188.3.4
	;; Response received from [131.188.3.4] 1074 octets ;; HEADER SECTION ;; id = 25751 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ns3.rrze.uni-erlangen.de is authoritative for ku.de
	Found RRSIG signed by ku.de zone
	Query to ns3.rrze.uni-erlangen.de for ku.de/A
	Received 1074 bytes from 131.188.3.4
	;; Response received from [131.188.3.4] 1074 octets ;; HEADER SECTION ;; id = 12160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ku.de A RR has value 141.78.7.198
	Found 1 RRSIGs over A RRset
	`ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== )`
	RRSIG=4487 and DNSKEY=4487 verifies the A RRset

ku.de

	Query to dns-3.dfn.de for ku.de/A
	Received 1074 bytes from 193.174.75.58
	;; Response received from [193.174.75.58] 1074 octets ;; HEADER SECTION ;; id = 7464 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	dns-3.dfn.de is authoritative for ku.de
	Found RRSIG signed by ku.de zone
	Query to dns-3.dfn.de for ku.de/A
	Received 1074 bytes from 193.174.75.58
	;; Response received from [193.174.75.58] 1074 octets ;; HEADER SECTION ;; id = 23369 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ku.de. IN A ;; ANSWER SECTION (2 records) ku.de. 86400 IN A 141.78.7.198 ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== ) ;; AUTHORITY SECTION (5 records) ku.de. 86400 IN NS dns-1.dfn.de. ku.de. 86400 IN NS ns3.rrze.uni-erlangen.de. ku.de. 86400 IN NS ns.ku.de. ku.de. 86400 IN NS dns-3.dfn.de. ku.de. 86400 IN RRSIG ( NS 10 2 86400 20240529154429 20240429145241 4487 ku.de. OJ8FJqgz4Em5h8vXMl+k410N22fcIKTwhmKR4aHZmZAqQvBRBiarpKALGD96xKTGg/coeOsQOo1p 0naZODgWmZv6vA/mMO3WhMoaHgxE8i6ZcQY2c8DjsgdgdHlpNlZz+163k19ui23CM0gD3wl5U17U o+rXABha0M82KJSYkHSUn/E6wzl61fVmpUubrm/pb9SPvc+v52igC+LXPRXMOe27rwoqg1azp9ce FUPCedfwVVxnDXF6XBzO+TNlaXxNJ00j8DAGdVm0CmHv3deMYsV1NinWPnebNa0FyHrZNUNB2LpL nCPZcI+Pum27kqB57Q5BGyfbK3OITTanyxp9bQ== ) ;; ADDITIONAL SECTION (4 records) ns.ku.de. 86400 IN A 141.78.7.250 ns.ku.de. 86400 IN AAAA 2001:638:10b::ffff:ffff:7fa ns.ku.de. 86400 IN RRSIG ( A 10 3 86400 20240529155617 20240429153433 4487 ku.de. qdLVn3TRrN5r88XQFcig8XAC+WB+UgUhyr6FjyXcNGJg7sUS/tfhU2tPaA04bRAmrRGVcmf4mdc3 z7a5BhMOZ/xCqaEI10zTh1dVtV5AefofjyNsGmNEAM4M0y6brewrrbGvfDqRAcoINpf1Mxz7kXHD 0WqTPZLhE0sNlFD6zTZzStTPEHeYBkQrM302E4qD0EmrktI4N0WlB4REDKP2O+3OVbdAeapV6Pno LDVRVa7+0EbrwLpKebVnBOU3ivz7lIOK1NktsdIcUuGVnnrsimPGT3702ZHUv7XVII7lpUtZVPz3 pwB8CRI4VCGooq+1ajN+N/ogRGNBrhZferCF3g== ) ;; { "EDNS-VERSION": 0 }
	ku.de A RR has value 141.78.7.198
	Found 1 RRSIGs over A RRset
	`ku.de. 86400 IN RRSIG ( A 10 2 86400 20240609051723 20240510043603 4487 ku.de. BfC/nEcqgxxipH3QXBPGV6T8ITQqAlrlutrh+K6+XTguH6VQP0DQEtBMtWX0hbgjrJ/TyfqNR5i+ LC+GXt84Jwz5r8+ux3aQ3ArkRkmMte6y9+JustaaaRx83BbT+ozGUjnMZ8q9ldGYF41WNbvM/9PF YI8dyWzOZkcjHRoBQJ432lyCYtXyW0giZkEmoumHoJ2pNiCb1TJjtyrdvbff05LIE+Kz0Cqt3x3D eGCTsUlB+l4Njus0K+1+5CG0YD/pEOtM7P472dL+4G6/aQosffzuzdTwAbkwK2M45JuMgNB9TiRr SCxA7DezZgvTVSq5RDm/LNvHEBNm40ONmBDxow== )`
	RRSIG=4487 and DNSKEY=4487 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ku.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: