DNSSEC Debugger - nucleus.be

Domain Name:

Time: 2024-05-19 04:31:27 UTC

Analyzing DNSSEC problems for nucleus.be

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 38479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for nucleus.be/A
	Received 790 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 790 octets ;; HEADER SECTION ;; id = 28085 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS z.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS b.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . h7UDWm7QKz5vpc2k8SGuJjlVuy38F5Ctj8Mmh6zzafYr0EdDecs4nqagkqs+3E35KZmFRBjUeUKG jCWEwuBUbmW4XByqxDeomYh8CDJ2MC9nTQtjwMlhy8/b0fXbJxCYnwb/o7XXcyR6MjPbQuOJ8i1H 5pvOnJnqhMs/GABOBNmM0XVfVgQ+2AkNz8vCxo+Q9xVumRgEEoHOQZv1N+DN8aIVjrnf7k54gwy4 z66NzmDlACWzbkUtTjklaagHridiCE6HQoI0guIIwx4wDYXrPVjE+WtqaY6M4T7la903xBrkCkR1 LUAU/beNaAXDs+WuO5Su2xUKhxC2CmqSGAQsug== ) ;; ADDITIONAL SECTION (13 records) z.nsset.be. 172800 IN A 194.0.25.36 y.nsset.be. 172800 IN A 120.29.253.8 d.nsset.be. 172800 IN A 194.0.44.1 c.nsset.be. 172800 IN A 194.0.43.1 b.nsset.be. 172800 IN A 194.0.37.1 a.nsset.be. 172800 IN A 194.0.6.1 z.nsset.be. 172800 IN AAAA 2001:678:20::36 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 a.nsset.be. 172800 IN AAAA 2001:678:9::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for be/DNSKEY
	Received 780 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 780 octets ;; HEADER SECTION ;; id = 11082 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) be. 172800 IN NS a.nsset.be. be. 172800 IN NS b.nsset.be. be. 172800 IN NS c.nsset.be. be. 172800 IN NS d.nsset.be. be. 172800 IN NS y.nsset.be. be. 172800 IN NS z.nsset.be. be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . h7UDWm7QKz5vpc2k8SGuJjlVuy38F5Ctj8Mmh6zzafYr0EdDecs4nqagkqs+3E35KZmFRBjUeUKG jCWEwuBUbmW4XByqxDeomYh8CDJ2MC9nTQtjwMlhy8/b0fXbJxCYnwb/o7XXcyR6MjPbQuOJ8i1H 5pvOnJnqhMs/GABOBNmM0XVfVgQ+2AkNz8vCxo+Q9xVumRgEEoHOQZv1N+DN8aIVjrnf7k54gwy4 z66NzmDlACWzbkUtTjklaagHridiCE6HQoI0guIIwx4wDYXrPVjE+WtqaY6M4T7la903xBrkCkR1 LUAU/beNaAXDs+WuO5Su2xUKhxC2CmqSGAQsug== ) ;; ADDITIONAL SECTION (13 records) a.nsset.be. 172800 IN A 194.0.6.1 b.nsset.be. 172800 IN A 194.0.37.1 c.nsset.be. 172800 IN A 194.0.43.1 d.nsset.be. 172800 IN A 194.0.44.1 y.nsset.be. 172800 IN A 120.29.253.8 z.nsset.be. 172800 IN A 194.0.25.36 a.nsset.be. 172800 IN AAAA 2001:678:9::1 b.nsset.be. 172800 IN AAAA 2001:678:64::1 c.nsset.be. 172800 IN AAAA 2001:678:68::1 d.nsset.be. 172800 IN AAAA 2001:678:6c::1 y.nsset.be. 172800 IN AAAA 2001:dcd:7::8 z.nsset.be. 172800 IN AAAA 2001:678:20::36 ;; { "EDNS-VERSION": 0 }
	Found child zone be

	Checking DS between . and be
	Query to e.root-servers.net for be/DS
	Received 414 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 414 octets ;; HEADER SECTION ;; id = 37142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DS ;; ANSWER SECTION (3 records) be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d ) be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f ) be. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . h7UDWm7QKz5vpc2k8SGuJjlVuy38F5Ctj8Mmh6zzafYr0EdDecs4nqagkqs+3E35KZmFRBjUeUKG jCWEwuBUbmW4XByqxDeomYh8CDJ2MC9nTQtjwMlhy8/b0fXbJxCYnwb/o7XXcyR6MjPbQuOJ8i1H 5pvOnJnqhMs/GABOBNmM0XVfVgQ+2AkNz8vCxo+Q9xVumRgEEoHOQZv1N+DN8aIVjrnf7k54gwy4 z66NzmDlACWzbkUtTjklaagHridiCE6HQoI0guIIwx4wDYXrPVjE+WtqaY6M4T7la903xBrkCkR1 LUAU/beNaAXDs+WuO5Su2xUKhxC2CmqSGAQsug== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for be in the . zone
	DS=12664/SHA-256 has algorithm RSASHA256
	DS=52756/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`be. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . h7UDWm7QKz5vpc2k8SGuJjlVuy38F5Ctj8Mmh6zzafYr0EdDecs4nqagkqs+3E35KZmFRBjUeUKG jCWEwuBUbmW4XByqxDeomYh8CDJ2MC9nTQtjwMlhy8/b0fXbJxCYnwb/o7XXcyR6MjPbQuOJ8i1H 5pvOnJnqhMs/GABOBNmM0XVfVgQ+2AkNz8vCxo+Q9xVumRgEEoHOQZv1N+DN8aIVjrnf7k54gwy4 z66NzmDlACWzbkUtTjklaagHridiCE6HQoI0guIIwx4wDYXrPVjE+WtqaY6M4T7la903xBrkCkR1 LUAU/beNaAXDs+WuO5Su2xUKhxC2CmqSGAQsug== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=12664/SHA-256 is now in the chain-of-trust
	DS=52756/SHA-256 is now in the chain-of-trust
	`be. 86400 IN DS ( 12664 8 2 75141e9b1188a95a7a855bf47e278a742a5e3f2ddeed8e995d749d48f2f0e72d )`
	`be. 86400 IN DS ( 52756 8 2 5485ac33dd7c7ed237ea2a4bd269731c816960fe181042024484b5ceca6ecc9f )`
	Query to a.nsset.be for be/DNSKEY
	Received 1317 bytes from 194.0.6.1
	;; Response received from [194.0.6.1] 1317 octets ;; HEADER SECTION ;; id = 5983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 6 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1350, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; be. IN DNSKEY ;; ANSWER SECTION (6 records) be. 86400 IN DNSKEY ( 256 3 8 AwEAAaDa8+khKQDoU9FiRlsT4t80AGhrNhw9C9KfKf406n6V8eRVheAH9poufaaiF9161dE14LBs pcvu6HSmK6tMotYnQnAZM4+myfhAUO0GxEUMfpes0GOMtr0pmK5sfEvitzVMOKVzgE+kgs0AUT37 dJXADJcBEwWrxS+6gwiIpgHb ) ; Key ID = 64521 be. 86400 IN DNSKEY ( 256 3 8 AwEAAaMP+rKYY62OIHe91yQmkoPD+rpGBenGEnrv7ZkKwj8RVBGtC2WTHT2EIan6lYpbqnTIHk7X wGmsSQ6k23O3JtaGNSs+HmD92J2+ZrW4CLXv07VJ8bmEgmR3UG4ABh9EvFZDtjSvWDWnc7+ErXyI IFwC3vXrMJCPylVF3PzgcFxl ) ; Key ID = 62823 be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664 be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756 be. 86400 IN DNSKEY ( 256 3 8 AwEAAZ8bE0Fi2QxXaAAmKl7Q8wdMdt+ubhkMVBiCVc5k+A+b5/g9iZnzZQSfcuziZIAWrpNzGIcP SfJTuuZcT+8UgSTf110w9PqW+DmuVEdyCAX16j/S2kt/7FUeDuXFlIfdVX16KfLg+gTeJBF69ei3 RvHTMmlMyxesnDuOVaEYG3UV ) ; Key ID = 23343 be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240709065049 20240321090638 52756 be. E0p5ZFDx3f2YSJT1CW4qtDe8IQf28OugrfkfRzd1jNtU3l13Q8gHo3Otbdxf3ZDuO6fnFBsy97eS sROx/pNLLv1VASznI4Th2FroWy6ltrEjmijE6YWXgRg3/kJNh4nNklV0ayiosoafkbQbF2AuSucU UzCOGK6XYsk489Ic81KerhR0X97XvDvBz81eXcOFVMrKCqQXTidVsvk6HrYtXFHr4gy7mQGwhCW1 e8CFBD5dLTY3Xd4w54QfAzq4OY3wi2RedICIeyZRa3v1AECjdOS9VmHxtwXHj3aK0SNR/Ajbq4ND 4J+xBQmzz05Q7qiwZr69x5RQ5ZPMLffMecudiQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for be
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAaDa8+khKQDoU9FiRlsT4t80AGhrNhw9C9KfKf406n6V8eRVheAH9poufaaiF9161dE14LBs pcvu6HSmK6tMotYnQnAZM4+myfhAUO0GxEUMfpes0GOMtr0pmK5sfEvitzVMOKVzgE+kgs0AUT37 dJXADJcBEwWrxS+6gwiIpgHb ) ; Key ID = 64521`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAaMP+rKYY62OIHe91yQmkoPD+rpGBenGEnrv7ZkKwj8RVBGtC2WTHT2EIan6lYpbqnTIHk7X wGmsSQ6k23O3JtaGNSs+HmD92J2+ZrW4CLXv07VJ8bmEgmR3UG4ABh9EvFZDtjSvWDWnc7+ErXyI IFwC3vXrMJCPylVF3PzgcFxl ) ; Key ID = 62823`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAaCP+X7/g1e8VWmvrwS3zf/9+5DPlj5D8a0bj+Vzt8/oucdtoOsdbHXWEv+Z0sY7z1G188IK ysuHjwKMrGpJz9GurbQCzmfNbjIqWyAGRnIm6CM2YM7niGxN1ji+0Vzz21pojSQJTG+Vx1VGr4SL eiB1+WuMR9kwaTh+jGKE3DE6xaEAUwEuOZrydnz7RA6urFe0POeE4aWc8NONtPafB9t2K0aLp49z ZPq3AbFZqRFRZRYQe/gtjAFFaMLMw1fEsOQVloj22poHAQAY9A38ykZVyWEcdaoBch8LRRwcBUvD SIXtlBuR05Cn+Fqi+hkupAe4H0EsOqRhDeKWEFOg+58= ) ; Key ID = 12664`
	`be. 86400 IN DNSKEY ( 257 3 8 AwEAAdmdhm3X+vItv+zWIeobCJetLBhWVqLVMrexPU1MUfX38UpivmP6YXJl1BwenPZ4eipGPESV fAEJLiD7Bi+COMyQ9ZKoisPMk3I0qwwzk4PCsvqxO+6jIIpv3JeQGeJU1gxZDilYKsl8pLEpzPNn mGjUcm06fQKdA3cjI96sgMrRbCPrrmb1tj0kksi5qXdP9e1qLdLBpizgqqF5b/OSklYeC4SzcEcq AYr5W5R+7f1p24Yp/ihMTCIMJ0kHFDdNoI+GcEu8ciXH9Ml4gf7JC6vrQXgfrgVPHLculT+z+fSO j6PQHl5uqg3vU2YpehnfO0vQ94bGZuFqmsGs6WPzMP0= ) ; Key ID = 52756`
	`be. 86400 IN DNSKEY ( 256 3 8 AwEAAZ8bE0Fi2QxXaAAmKl7Q8wdMdt+ubhkMVBiCVc5k+A+b5/g9iZnzZQSfcuziZIAWrpNzGIcP SfJTuuZcT+8UgSTf110w9PqW+DmuVEdyCAX16j/S2kt/7FUeDuXFlIfdVX16KfLg+gTeJBF69ei3 RvHTMmlMyxesnDuOVaEYG3UV ) ; Key ID = 23343`
	DNSKEY=12664/SEP is now in the chain-of-trust
	DS=12664/SHA-256 verifies DNSKEY=12664/SEP
	DNSKEY=52756/SEP is now in the chain-of-trust
	DS=52756/SHA-256 verifies DNSKEY=52756/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`be. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240709065049 20240321090638 52756 be. E0p5ZFDx3f2YSJT1CW4qtDe8IQf28OugrfkfRzd1jNtU3l13Q8gHo3Otbdxf3ZDuO6fnFBsy97eS sROx/pNLLv1VASznI4Th2FroWy6ltrEjmijE6YWXgRg3/kJNh4nNklV0ayiosoafkbQbF2AuSucU UzCOGK6XYsk489Ic81KerhR0X97XvDvBz81eXcOFVMrKCqQXTidVsvk6HrYtXFHr4gy7mQGwhCW1 e8CFBD5dLTY3Xd4w54QfAzq4OY3wi2RedICIeyZRa3v1AECjdOS9VmHxtwXHj3aK0SNR/Ajbq4ND 4J+xBQmzz05Q7qiwZr69x5RQ5ZPMLffMecudiQ== )`
	RRSIG=52756 and DNSKEY=52756/SEP verifies the DNSKEY RRset
	DNSKEY=64521 is now in the chain-of-trust
	DNSKEY=62823 is now in the chain-of-trust
	DNSKEY=23343 is now in the chain-of-trust
	Query to c.nsset.be for nucleus.be/A
	Received 569 bytes from 194.0.43.1
	;; Response received from [194.0.43.1] 569 octets ;; HEADER SECTION ;; id = 4412 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1350, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nucleus.be. 86400 IN NS ns3.combell.net. nucleus.be. 86400 IN NS ns4.combell.net. pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN NSEC3 ( 1 1 0 - pdrrmahc5llbo4dhp1j3tfp2jersm6g0 NS SOA RRSIG DNSKEY NSEC3PARAM ) pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN RRSIG ( NSEC3 8 2 600 20240605194604 20240515025623 64521 be. KMIJvza5hY9BIkLQ+jp2dWlb4b/VBYD7LOslcEcEoyRNCL+dpXneEU6EF2AzFbQYAOLQbYCBzfwI pYpXKgm+Cn/ojMC1p9ZlzwU9HMsAMiG0ZTFMq5uGUyt4kH2fJYws/gyYGEsLjH5fBa0jFeiNp/qJ SfTTbWFx0iQIFTWOB0o= ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN NSEC3 ( 1 1 0 - ks8plpi76easqbu5gdnme184o6bjeh9r NS DS RRSIG ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN RRSIG ( NSEC3 8 2 600 20240531004914 20240508173656 64521 be. LUT+35/qiL2fiyZXjzlqJRMs4Sak364oA6tCh7HVprm9ZjmBbezngzsbfPpL2s8dsm5iutwfVtOw hzZTAeS4Ui4sXMqN4uAh9sfiitKnzn3n6eNi5rVkMGJurLr3L9+0FudviWwtYFjh4oQ+UDhsjHFz 39LtRFkIKZqAN2iwTt4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to b.nsset.be for nucleus.be/DNSKEY
	Received 569 bytes from 194.0.37.1
	;; Response received from [194.0.37.1] 569 octets ;; HEADER SECTION ;; id = 19085 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1350, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) nucleus.be. 86400 IN NS ns3.combell.net. nucleus.be. 86400 IN NS ns4.combell.net. pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN NSEC3 ( 1 1 0 - pdrrmahc5llbo4dhp1j3tfp2jersm6g0 NS SOA RRSIG DNSKEY NSEC3PARAM ) pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN RRSIG ( NSEC3 8 2 600 20240605194604 20240515025623 64521 be. KMIJvza5hY9BIkLQ+jp2dWlb4b/VBYD7LOslcEcEoyRNCL+dpXneEU6EF2AzFbQYAOLQbYCBzfwI pYpXKgm+Cn/ojMC1p9ZlzwU9HMsAMiG0ZTFMq5uGUyt4kH2fJYws/gyYGEsLjH5fBa0jFeiNp/qJ SfTTbWFx0iQIFTWOB0o= ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN NSEC3 ( 1 1 0 - ks8plpi76easqbu5gdnme184o6bjeh9r NS DS RRSIG ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN RRSIG ( NSEC3 8 2 600 20240531004914 20240508173656 64521 be. LUT+35/qiL2fiyZXjzlqJRMs4Sak364oA6tCh7HVprm9ZjmBbezngzsbfPpL2s8dsm5iutwfVtOw hzZTAeS4Ui4sXMqN4uAh9sfiitKnzn3n6eNi5rVkMGJurLr3L9+0FudviWwtYFjh4oQ+UDhsjHFz 39LtRFkIKZqAN2iwTt4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone nucleus.be

nucleus.be

	Checking DS between be and nucleus.be
	Query to z.nsset.be for nucleus.be/DS
	Received 753 bytes from 194.0.25.36
	;; Response received from [194.0.25.36] 753 octets ;; HEADER SECTION ;; id = 50799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) be. 600 IN SOA ( a.nsset.be. be-hostmaster.dnsbelgium.be. 1028136354 ;serial 3600 ;refresh 1800 ;retry 2419200 ;expire 600 ;minimum ) be. 600 IN RRSIG ( SOA 8 1 86400 20240608232443 20240519031821 64521 be. jKTQgTnZ2K6aeEu15F81t92DZ7YatouAqUF1yvjWv1zzzhPJAg4WJCRdXpmIyl1zN8iBZaWjkqUF 8Ve93u5gOJoV66KlMNacCPjNwOuBNr5G4mkofPiWJnQpABWvU9OkJrdzEw1BN4U2sEoUMaVoJusC wVx+uUHGHQ8BawaDhPg= ) pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN NSEC3 ( 1 1 0 - pdrrmahc5llbo4dhp1j3tfp2jersm6g0 NS SOA RRSIG DNSKEY NSEC3PARAM ) pdrpqgs0t19r8qul7c2h4bhnb7agh1b8.be. 600 IN RRSIG ( NSEC3 8 2 600 20240605194604 20240515025623 64521 be. KMIJvza5hY9BIkLQ+jp2dWlb4b/VBYD7LOslcEcEoyRNCL+dpXneEU6EF2AzFbQYAOLQbYCBzfwI pYpXKgm+Cn/ojMC1p9ZlzwU9HMsAMiG0ZTFMq5uGUyt4kH2fJYws/gyYGEsLjH5fBa0jFeiNp/qJ SfTTbWFx0iQIFTWOB0o= ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN NSEC3 ( 1 1 0 - ks8plpi76easqbu5gdnme184o6bjeh9r NS DS RRSIG ) ks8krdkcuj92r1ncnqntd1ltbtmpmvd5.be. 600 IN RRSIG ( NSEC3 8 2 600 20240531004914 20240508173656 64521 be. LUT+35/qiL2fiyZXjzlqJRMs4Sak364oA6tCh7HVprm9ZjmBbezngzsbfPpL2s8dsm5iutwfVtOw hzZTAeS4Ui4sXMqN4uAh9sfiitKnzn3n6eNi5rVkMGJurLr3L9+0FudviWwtYFjh4oQ+UDhsjHFz 39LtRFkIKZqAN2iwTt4= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for nucleus.be in the be zone
	Query to ns4.combell.net for nucleus.be/DNSKEY
	Received 100 bytes from 86.39.202.67
	;; Response received from [86.39.202.67] 100 octets ;; HEADER SECTION ;; id = 25391 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) nucleus.be. 86400 IN SOA ( ns3.combell.net. dnsmaster.nucleus.be. 1714666124 ;serial 3600 ;refresh 1800 ;retry 2419200 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns4.combell.net for nucleus.be/A
	Received 55 bytes from 86.39.202.67
	;; Response received from [86.39.202.67] 55 octets ;; HEADER SECTION ;; id = 8524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (1 record) nucleus.be. 300 IN A 77.73.96.106 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.combell.net is authoritative for nucleus.be
	Query to ns3.combell.net for nucleus.be/SOA
	Received 100 bytes from 83.217.73.172
	;; Response received from [83.217.73.172] 100 octets ;; HEADER SECTION ;; id = 44499 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN SOA ;; ANSWER SECTION (1 record) nucleus.be. 86400 IN SOA ( ns3.combell.net. dnsmaster.nucleus.be. 1714666124 ;serial 3600 ;refresh 1800 ;retry 2419200 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.combell.net for nucleus.be/A
	Received 55 bytes from 86.39.202.67
	;; Response received from [86.39.202.67] 55 octets ;; HEADER SECTION ;; id = 20995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (1 record) nucleus.be. 300 IN A 77.73.96.106 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nucleus.be A RR has value 77.73.96.106
	No RRSIGs found

nucleus.be

	Query to ns3.combell.net for nucleus.be/A
	Received 55 bytes from 83.217.73.172
	;; Response received from [83.217.73.172] 55 octets ;; HEADER SECTION ;; id = 61466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (1 record) nucleus.be. 300 IN A 77.73.96.106 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.combell.net is authoritative for nucleus.be
	Query to ns3.combell.net for nucleus.be/A
	Received 55 bytes from 83.217.73.172
	;; Response received from [83.217.73.172] 55 octets ;; HEADER SECTION ;; id = 20235 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; nucleus.be. IN A ;; ANSWER SECTION (1 record) nucleus.be. 300 IN A 77.73.96.106 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	nucleus.be A RR has value 77.73.96.106
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nucleus.be at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: