DNSSEC Debugger

Domain Name:

Time: 2024-05-17 11:20:29 UTC

Analyzing DNSSEC problems for ovov.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 42752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to k.root-servers.net for ovov.co/A
	Received 749 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 749 octets ;; HEADER SECTION ;; id = 12001 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . i9dsD+UWeaquXlRsXntVk5/7nB6HqyHA3NF00SOTyKczWdUA6hIR9mbfDKfDDl2+kQH3+vhnmwhS IHSUbJ3uKGYcOLZP44xFY2U5pUEDbqs6YbttZ5Tj+53X3482tkDcGrbGPrnOglQSOsI3dDx8e5k9 Bp6mL2GVI3MJ4jDgWrSn/nF/BPKqoMsFt+CSunj/eI7QWWaepM3ASepJM6gHHBaYoqTL4BR3rLK3 tZV7/6NDznX0vsiXJk26D7XEamI2h1Dgk0KXiCvhcqHRoc7/qVTRrJICZjzQJFFhm67brLt+eaMo YiIp/kfZiPMjR7IhSuGwOJCPKoyQufD8r/PVjQ== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for co/DNSKEY
	Received 744 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 744 octets ;; HEADER SECTION ;; id = 39828 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . i9dsD+UWeaquXlRsXntVk5/7nB6HqyHA3NF00SOTyKczWdUA6hIR9mbfDKfDDl2+kQH3+vhnmwhS IHSUbJ3uKGYcOLZP44xFY2U5pUEDbqs6YbttZ5Tj+53X3482tkDcGrbGPrnOglQSOsI3dDx8e5k9 Bp6mL2GVI3MJ4jDgWrSn/nF/BPKqoMsFt+CSunj/eI7QWWaepM3ASepJM6gHHBaYoqTL4BR3rLK3 tZV7/6NDznX0vsiXJk26D7XEamI2h1Dgk0KXiCvhcqHRoc7/qVTRrJICZjzQJFFhm67brLt+eaMo YiIp/kfZiPMjR7IhSuGwOJCPKoyQufD8r/PVjQ== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; { "EDNS-VERSION": 0 }
	Found child zone co

	Checking DS between . and co
	Query to d.root-servers.net for co/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 41243 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (2 records) co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . i9dsD+UWeaquXlRsXntVk5/7nB6HqyHA3NF00SOTyKczWdUA6hIR9mbfDKfDDl2+kQH3+vhnmwhS IHSUbJ3uKGYcOLZP44xFY2U5pUEDbqs6YbttZ5Tj+53X3482tkDcGrbGPrnOglQSOsI3dDx8e5k9 Bp6mL2GVI3MJ4jDgWrSn/nF/BPKqoMsFt+CSunj/eI7QWWaepM3ASepJM6gHHBaYoqTL4BR3rLK3 tZV7/6NDznX0vsiXJk26D7XEamI2h1Dgk0KXiCvhcqHRoc7/qVTRrJICZjzQJFFhm67brLt+eaMo YiIp/kfZiPMjR7IhSuGwOJCPKoyQufD8r/PVjQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co in the . zone
	DS=62110/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . i9dsD+UWeaquXlRsXntVk5/7nB6HqyHA3NF00SOTyKczWdUA6hIR9mbfDKfDDl2+kQH3+vhnmwhS IHSUbJ3uKGYcOLZP44xFY2U5pUEDbqs6YbttZ5Tj+53X3482tkDcGrbGPrnOglQSOsI3dDx8e5k9 Bp6mL2GVI3MJ4jDgWrSn/nF/BPKqoMsFt+CSunj/eI7QWWaepM3ASepJM6gHHBaYoqTL4BR3rLK3 tZV7/6NDznX0vsiXJk26D7XEamI2h1Dgk0KXiCvhcqHRoc7/qVTRrJICZjzQJFFhm67brLt+eaMo YiIp/kfZiPMjR7IhSuGwOJCPKoyQufD8r/PVjQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=62110/SHA-256 is now in the chain-of-trust
	`co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 )`
	Query to ns1.cctld.co for co/DNSKEY
	Received 1247 bytes from 37.209.192.14
	;; Response received from [37.209.192.14] 1247 octets ;; HEADER SECTION ;; id = 51809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (5 records) co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744 co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065 co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110 co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== ) co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for co
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744`
	`co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065`
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110`
	DNSKEY=62110/SEP is now in the chain-of-trust
	DS=62110/SHA-256 verifies DNSKEY=62110/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== )`
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== )`
	RRSIG=19065 and DNSKEY=19065 verifies the DNSKEY RRset
	RRSIG=62110 and DNSKEY=62110/SEP verifies the DNSKEY RRset
	DNSKEY=61744/SEP is now in the chain-of-trust
	DNSKEY=19065 is now in the chain-of-trust
	Query to ns1.cctld.co for ovov.co/A
	Received 639 bytes from 37.209.192.14
	;; Response received from [37.209.192.14] 639 octets ;; HEADER SECTION ;; id = 43728 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ovov.co. 3600 IN NS becky.ns.cloudflare.com. ovov.co. 3600 IN NS seth.ns.cloudflare.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN NSEC3 ( 1 1 0 - i5uv40r6fbl2puqu95hp1apqcmqgljpf NS DS RRSIG ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN RRSIG ( NSEC3 8 2 900 20240615073035 20240516070032 19065 co. XyIkbbHQNx7jlhXKCq8yQklkcyAyG8WkVLKygyTSrXLPFzP0mGrm+ElU5xyyagly0nTCJuIipq3b 2+PqQkypKIkDPDGonbRjkW3XQnzThOJXxzF0D7PAAPJ1kuRaYeT058nMvsCILqEhiHyCYJaWu1lq dW0Mtv1EK2TCwGqxzeHgtuQbrQtqRr3Mh+5DO9vaSJlaYpfhUw+/SItUmcmCTQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.cctld.co for ovov.co/DNSKEY
	Received 639 bytes from 37.209.192.14
	;; Response received from [37.209.192.14] 639 octets ;; HEADER SECTION ;; id = 48888 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ovov.co. 3600 IN NS becky.ns.cloudflare.com. ovov.co. 3600 IN NS seth.ns.cloudflare.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN NSEC3 ( 1 1 0 - i5uv40r6fbl2puqu95hp1apqcmqgljpf NS DS RRSIG ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN RRSIG ( NSEC3 8 2 900 20240615073035 20240516070032 19065 co. XyIkbbHQNx7jlhXKCq8yQklkcyAyG8WkVLKygyTSrXLPFzP0mGrm+ElU5xyyagly0nTCJuIipq3b 2+PqQkypKIkDPDGonbRjkW3XQnzThOJXxzF0D7PAAPJ1kuRaYeT058nMvsCILqEhiHyCYJaWu1lq dW0Mtv1EK2TCwGqxzeHgtuQbrQtqRr3Mh+5DO9vaSJlaYpfhUw+/SItUmcmCTQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone ovov.co

ovov.co

	Checking DS between co and ovov.co
	Query to ns4.cctld.co for ovov.co/DS
	Received 844 bytes from 156.154.103.25
	;; Response received from [156.154.103.25] 844 octets ;; HEADER SECTION ;; id = 26303 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) co. 900 IN SOA ( ns1.cctld.co. admin.tldns.godaddy. 1715944230 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) co. 900 IN RRSIG ( SOA 8 1 900 20240616111047 20240517101047 19065 co. g0hrR6CtecVUblf9j4qiM3LmfwF17ACY/gOkkjy86+o/96g9i47xJA1nQRHeB3D/2f1+WvRsBIZs evwWpagU4rgL1N9429R31KECTf8OTlQvPDc3ZIxH3aaLFxvsYAIMhyHgU9UIPfzICaHaofH78i8m /9BAxsXqnb5ueGDdK3gVQqJ3OIkI59MhbtUrJT+6b/drR9Cf5dZedbCXGAytng== ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN NSEC3 ( 1 1 0 - i5uv40r6fbl2puqu95hp1apqcmqgljpf NS DS RRSIG ) i5u04kqnn51fq6d3cqkja37r84rqs79m.co. 900 IN RRSIG ( NSEC3 8 2 900 20240615073035 20240516070032 19065 co. XyIkbbHQNx7jlhXKCq8yQklkcyAyG8WkVLKygyTSrXLPFzP0mGrm+ElU5xyyagly0nTCJuIipq3b 2+PqQkypKIkDPDGonbRjkW3XQnzThOJXxzF0D7PAAPJ1kuRaYeT058nMvsCILqEhiHyCYJaWu1lq dW0Mtv1EK2TCwGqxzeHgtuQbrQtqRr3Mh+5DO9vaSJlaYpfhUw+/SItUmcmCTQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for ovov.co in the co zone
	Query to seth.ns.cloudflare.com for ovov.co/DNSKEY
	Received 299 bytes from 172.64.33.142
	;; Response received from [172.64.33.142] 299 octets ;; HEADER SECTION ;; id = 5166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN DNSKEY ;; ANSWER SECTION (3 records) ovov.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 ovov.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 ovov.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240708063927 20240508063927 2371 ovov.co. k1XLkTJFFFsN+MuI4g6qmOrEjTvlQBCmjtUJUYgsdwBmjjKTP5MuJJ2skC6IJrkIxyGPToSD2Vb3 c7psHecXkA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ovov.co
	`ovov.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`ovov.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`ovov.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240708063927 20240508063927 2371 ovov.co. k1XLkTJFFFsN+MuI4g6qmOrEjTvlQBCmjtUJUYgsdwBmjjKTP5MuJJ2skC6IJrkIxyGPToSD2Vb3 c7psHecXkA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to becky.ns.cloudflare.com for ovov.co/A
	Received 171 bytes from 172.64.32.73
	;; Response received from [172.64.32.73] 171 octets ;; HEADER SECTION ;; id = 52582 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (3 records) ovov.co. 300 IN A 104.21.9.45 ovov.co. 300 IN A 172.67.141.185 ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. gsrEji7YzPVabVyRKrx/6Or/J0+994vXV7yU6XYvgdQxp3B27NwOMxSEwwkYxIZTKNk8jn1aJryp rRX5vtZRZg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	becky.ns.cloudflare.com is authoritative for ovov.co
	Found RRSIG signed by ovov.co zone
	Query to seth.ns.cloudflare.com for ovov.co/SOA
	Received 202 bytes from 172.64.33.142
	;; Response received from [172.64.33.142] 202 octets ;; HEADER SECTION ;; id = 25603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN SOA ;; ANSWER SECTION (2 records) ovov.co. 1800 IN SOA ( becky.ns.cloudflare.com. dns.cloudflare.com. 2341353641 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ovov.co. 1800 IN RRSIG ( SOA 13 2 1800 20240518122029 20240516102029 34505 ovov.co. hr7rR3EsLZKDKC05zCs+cNY790KbosDba73pdKWa/Uw5vhnoigVbHXKXKmoKVtTsBeYRlwfpPe95 IMCqfX6inw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to becky.ns.cloudflare.com for ovov.co/A
	Received 171 bytes from 108.162.192.73
	;; Response received from [108.162.192.73] 171 octets ;; HEADER SECTION ;; id = 11641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (3 records) ovov.co. 300 IN A 172.67.141.185 ovov.co. 300 IN A 104.21.9.45 ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. 4w3Bp0QBs1mBxWDdrVPPI3iecsPjZXZVoZXH5GFQxKM9Zh6ltx7B6/+9yv7gs1WG2lggRNaRT1vy MLvm7teAQQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ovov.co A RR has value 172.67.141.185
	ovov.co A RR has value 104.21.9.45
	Found 1 RRSIGs over A RRset
	`ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. 4w3Bp0QBs1mBxWDdrVPPI3iecsPjZXZVoZXH5GFQxKM9Zh6ltx7B6/+9yv7gs1WG2lggRNaRT1vy MLvm7teAQQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

ovov.co

	Query to seth.ns.cloudflare.com for ovov.co/A
	Received 171 bytes from 173.245.59.142
	;; Response received from [173.245.59.142] 171 octets ;; HEADER SECTION ;; id = 44731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (3 records) ovov.co. 300 IN A 172.67.141.185 ovov.co. 300 IN A 104.21.9.45 ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. LrloZPivjvOt9fcjdD3CDHCxu7PxI+/HRW4Er8Kdth/I/0idBWFOTg1fQBZa6hA3YOxDI+O3LK3R 2DHg0bYHbA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	seth.ns.cloudflare.com is authoritative for ovov.co
	Found RRSIG signed by ovov.co zone
	Query to seth.ns.cloudflare.com for ovov.co/A
	Received 171 bytes from 108.162.193.142
	;; Response received from [108.162.193.142] 171 octets ;; HEADER SECTION ;; id = 25348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ovov.co. IN A ;; ANSWER SECTION (3 records) ovov.co. 300 IN A 104.21.9.45 ovov.co. 300 IN A 172.67.141.185 ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. M1k3GP8hJ5fpR/Z0tFj3UhFo+UN74edmPNCKWqrRzE6XPAY7c6WsH0fcxPZRYFGecDmedcH4dJAL 5sliZQhDTg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ovov.co A RR has value 104.21.9.45
	ovov.co A RR has value 172.67.141.185
	Found 1 RRSIGs over A RRset
	`ovov.co. 300 IN RRSIG ( A 13 2 300 20240518122029 20240516102029 34505 ovov.co. M1k3GP8hJ5fpR/Z0tFj3UhFo+UN74edmPNCKWqrRzE6XPAY7c6WsH0fcxPZRYFGecDmedcH4dJAL 5sliZQhDTg== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test ovov.co at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: