DNSSEC Debugger - permit.zone

Domain Name:

Time: 2024-05-18 08:53:21 UTC

Analyzing DNSSEC problems for permit.zone

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 40507 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for permit.zone/A
	Received 757 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 757 octets ;; HEADER SECTION ;; id = 11717 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) zone. 172800 IN NS v0n0.nic.zone. zone. 172800 IN NS v0n1.nic.zone. zone. 172800 IN NS v0n2.nic.zone. zone. 172800 IN NS v0n3.nic.zone. zone. 172800 IN NS v2n0.nic.zone. zone. 172800 IN NS v2n1.nic.zone. zone. 86400 IN DS ( 12136 8 2 44853e072aa0c590351b822b9a23ff95631412a3583228163a995598ef764baf ) zone. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . L6AaT2wtIhPPxqb7EhFXOF2i7zre0jnzkVvfsqOg6t3jeziuKQ8kRXPcwWfLi85Rlug5lZBlrCWn bUU1qnTyV5fWP/hAcHDNUKj/bMs5QtR05MJLnAMMQi38ulXRCsMUlp+sx+75HOhPFtIRt6DJ+w/4 QPhcWOYkmD2j+SzjvBZ1MPzbXWmTrRFE7madB6Sbbv447440z9TbWitlUUaasrJQ3ti3q8XJmNXs r+E/woZ2cTyqa7OJmhWhbx9xzBD7XlzDpooEtxOOY3FUqF00795+hKmPnoVh+A8Ol6kE0wdtDulE mLCF6TlLieRGzDnKtpTCXGxQQx6Hu8jL66xsaw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.zone. 172800 IN A 65.22.28.5 v0n1.nic.zone. 172800 IN A 65.22.29.5 v0n2.nic.zone. 172800 IN A 65.22.30.5 v0n3.nic.zone. 172800 IN A 161.232.14.5 v2n0.nic.zone. 172800 IN A 65.22.31.5 v2n1.nic.zone. 172800 IN A 161.232.15.5 v0n0.nic.zone. 172800 IN AAAA 2a01:8840:1e::5 v0n1.nic.zone. 172800 IN AAAA 2a01:8840:1f::5 v0n2.nic.zone. 172800 IN AAAA 2a01:8840:20::5 v0n3.nic.zone. 172800 IN AAAA 2a01:8840:f8::5 v2n0.nic.zone. 172800 IN AAAA 2a01:8840:21::5 v2n1.nic.zone. 172800 IN AAAA 2a01:8840:f9::5 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for zone/DNSKEY
	Received 750 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 750 octets ;; HEADER SECTION ;; id = 13749 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zone. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) zone. 172800 IN NS v0n0.nic.zone. zone. 172800 IN NS v0n1.nic.zone. zone. 172800 IN NS v0n2.nic.zone. zone. 172800 IN NS v0n3.nic.zone. zone. 172800 IN NS v2n0.nic.zone. zone. 172800 IN NS v2n1.nic.zone. zone. 86400 IN DS ( 12136 8 2 44853e072aa0c590351b822b9a23ff95631412a3583228163a995598ef764baf ) zone. 86400 IN RRSIG ( DS 8 1 86400 20240531050000 20240518040000 5613 . L6AaT2wtIhPPxqb7EhFXOF2i7zre0jnzkVvfsqOg6t3jeziuKQ8kRXPcwWfLi85Rlug5lZBlrCWn bUU1qnTyV5fWP/hAcHDNUKj/bMs5QtR05MJLnAMMQi38ulXRCsMUlp+sx+75HOhPFtIRt6DJ+w/4 QPhcWOYkmD2j+SzjvBZ1MPzbXWmTrRFE7madB6Sbbv447440z9TbWitlUUaasrJQ3ti3q8XJmNXs r+E/woZ2cTyqa7OJmhWhbx9xzBD7XlzDpooEtxOOY3FUqF00795+hKmPnoVh+A8Ol6kE0wdtDulE mLCF6TlLieRGzDnKtpTCXGxQQx6Hu8jL66xsaw== ) ;; ADDITIONAL SECTION (13 records) v0n0.nic.zone. 172800 IN A 65.22.28.5 v0n1.nic.zone. 172800 IN A 65.22.29.5 v0n2.nic.zone. 172800 IN A 65.22.30.5 v0n3.nic.zone. 172800 IN A 161.232.14.5 v2n0.nic.zone. 172800 IN A 65.22.31.5 v2n1.nic.zone. 172800 IN A 161.232.15.5 v0n0.nic.zone. 172800 IN AAAA 2a01:8840:1e::5 v0n1.nic.zone. 172800 IN AAAA 2a01:8840:1f::5 v0n2.nic.zone. 172800 IN AAAA 2a01:8840:20::5 v0n3.nic.zone. 172800 IN AAAA 2a01:8840:f8::5 v2n0.nic.zone. 172800 IN AAAA 2a01:8840:21::5 v2n1.nic.zone. 172800 IN AAAA 2a01:8840:f9::5 ;; { "EDNS-VERSION": 0 }
	Found child zone zone

zone

	Checking DS between . and zone
	Query to c.root-servers.net for zone/DS
	Received 368 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 368 octets ;; HEADER SECTION ;; id = 62717 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zone. IN DS ;; ANSWER SECTION (2 records) zone. 86400 IN DS ( 12136 8 2 44853e072aa0c590351b822b9a23ff95631412a3583228163a995598ef764baf ) zone. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . TXTgvzqJtyDn3zy8K/CcOpV8cqx3hXKQVxGj78Xos0m8jYDDG/1EsCdwnX/JHTLSz0owCvfEu9hx aRG3T3IwdrOyYWqTPkCF3G13Hxp2Mrj6CAkVruI0e1NXPR8iiydTI6XK6Lunjkoj8QOlPy6ki+EI 7fQsp+098qVqCNBGzEfhSWr1FVc/rfNj4xAxUeEOEpA3NhUU5wJd9FgmRud9sCRYyieoYYgqcT81 e/KNrB5wWKrF1GVleB3wqLLUi8vu+wtCvavZs9c6fmBwJ4jHSH+soe3/0oylNxDsr8Slg0B7D1jp umk3Mx6/ZlFvQUifBL2csr7TS1I4e85NJGEEkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for zone in the . zone
	DS=12136/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`zone. 86400 IN RRSIG ( DS 8 1 86400 20240530050000 20240517040000 5613 . TXTgvzqJtyDn3zy8K/CcOpV8cqx3hXKQVxGj78Xos0m8jYDDG/1EsCdwnX/JHTLSz0owCvfEu9hx aRG3T3IwdrOyYWqTPkCF3G13Hxp2Mrj6CAkVruI0e1NXPR8iiydTI6XK6Lunjkoj8QOlPy6ki+EI 7fQsp+098qVqCNBGzEfhSWr1FVc/rfNj4xAxUeEOEpA3NhUU5wJd9FgmRud9sCRYyieoYYgqcT81 e/KNrB5wWKrF1GVleB3wqLLUi8vu+wtCvavZs9c6fmBwJ4jHSH+soe3/0oylNxDsr8Slg0B7D1jp umk3Mx6/ZlFvQUifBL2csr7TS1I4e85NJGEEkw== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=12136/SHA-256 is now in the chain-of-trust
	`zone. 86400 IN DS ( 12136 8 2 44853e072aa0c590351b822b9a23ff95631412a3583228163a995598ef764baf )`
	Query to v2n1.nic.zone for zone/DNSKEY
	Received 897 bytes from 161.232.15.5
	;; Response received from [161.232.15.5] 897 octets ;; HEADER SECTION ;; id = 39671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; zone. IN DNSKEY ;; ANSWER SECTION (4 records) zone. 3600 IN DNSKEY ( 256 3 8 AwEAAcLKUTiDjeiH40C4NObJgLLKzCJzYAG4d3147s/2UM8b1AyO4Z/nDovTu40X+phpWOMKv4NU Rlp2ZPRvpU6yWFU1IobM5NTOIb3/f5vHxEoD2zBDb+iW8w0JDSyiBtp5/0joZziWypm7vBfF/lXQ ak1ybe+Co1SG0eps7uvPki8x ) ; Key ID = 23226 zone. 3600 IN DNSKEY ( 256 3 8 AwEAAcc3A+KT2Vu1fTCl6S3/oHQuQiya9xGWJgxCqlvjjQ98GMaBKFGCGL7zW+YIGq7SJQUADFig pDLg8JbHTYgso+yqspo5NnI/ez4sYw6yP2On9Cr8MebviFyiwtPQFeX3OA1rSS1KTzlHbL2dzjhQ lnqEP/FJqbRqJGa7gULN38q7 ) ; Key ID = 60183 zone. 3600 IN DNSKEY ( 257 3 8 AwEAAbLZGnFfUc4RaNsT+g4ALtMV4bPQD9aHdaqAZE+O4pXfonyQb++rf+Q0XGMcXw82ycZvoUWU KCWbOxf51Wjqlt65o4h3zTqk1MLecqIEKKvsNXYkUU1UF/Do8lksGEDYfGMoJBmrgUHHoJXGRrcS SCavf3H+g4FBSHOE5JD0OdFYw5uF59UC3Eo+AIhDwmEbRGSER8r6KQU5NDQfOKnQnPTYewpclkIg nTaBpPi+X7E41KUGO7Oao2nnhM1RZn0JBvGh3+jxGWYYZIRCuZDye3lWbMvpwThiJuMh66tFQGbK 88XgbgSs3khsfj3DI8H4/Knap+hBCvs6N0eRpHJgSyc= ) ; Key ID = 12136 zone. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240607161629 20240517151629 12136 zone. khZ68B0oBxYZS29ew7iKZLCmBc0EZ64cRoYAVkARfpiCmbxg0xr5EPf03B6Sirjo55BH0mbqFUaE ZqPI6fS68kFYORFUVLjdZdZq8y4KXuI40ZwtwrxXC05wbvKHsaOjikX0EEpF75QSr304C2FlIcrF Zg0pTtgbLJzyYSxxElBp7ufhffw9SeLxVHiIF5GjlpB8feWn7MxpusAP+dCMNrgXwYHYaT3/zn4c +Gusx15rLm/HlkfF8doLh2FBGAgojiyDAUMj61ZMwyYNm1MC8rk4jwRXpaw0cAOj41NLvvZ6FaBO MBsCgvHClGA95szn5vyXB+NO1ueAi+0pjNazEg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for zone
	`zone. 3600 IN DNSKEY ( 256 3 8 AwEAAcLKUTiDjeiH40C4NObJgLLKzCJzYAG4d3147s/2UM8b1AyO4Z/nDovTu40X+phpWOMKv4NU Rlp2ZPRvpU6yWFU1IobM5NTOIb3/f5vHxEoD2zBDb+iW8w0JDSyiBtp5/0joZziWypm7vBfF/lXQ ak1ybe+Co1SG0eps7uvPki8x ) ; Key ID = 23226`
	`zone. 3600 IN DNSKEY ( 256 3 8 AwEAAcc3A+KT2Vu1fTCl6S3/oHQuQiya9xGWJgxCqlvjjQ98GMaBKFGCGL7zW+YIGq7SJQUADFig pDLg8JbHTYgso+yqspo5NnI/ez4sYw6yP2On9Cr8MebviFyiwtPQFeX3OA1rSS1KTzlHbL2dzjhQ lnqEP/FJqbRqJGa7gULN38q7 ) ; Key ID = 60183`
	`zone. 3600 IN DNSKEY ( 257 3 8 AwEAAbLZGnFfUc4RaNsT+g4ALtMV4bPQD9aHdaqAZE+O4pXfonyQb++rf+Q0XGMcXw82ycZvoUWU KCWbOxf51Wjqlt65o4h3zTqk1MLecqIEKKvsNXYkUU1UF/Do8lksGEDYfGMoJBmrgUHHoJXGRrcS SCavf3H+g4FBSHOE5JD0OdFYw5uF59UC3Eo+AIhDwmEbRGSER8r6KQU5NDQfOKnQnPTYewpclkIg nTaBpPi+X7E41KUGO7Oao2nnhM1RZn0JBvGh3+jxGWYYZIRCuZDye3lWbMvpwThiJuMh66tFQGbK 88XgbgSs3khsfj3DI8H4/Knap+hBCvs6N0eRpHJgSyc= ) ; Key ID = 12136`
	DNSKEY=12136/SEP is now in the chain-of-trust
	DS=12136/SHA-256 verifies DNSKEY=12136/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`zone. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240607161629 20240517151629 12136 zone. khZ68B0oBxYZS29ew7iKZLCmBc0EZ64cRoYAVkARfpiCmbxg0xr5EPf03B6Sirjo55BH0mbqFUaE ZqPI6fS68kFYORFUVLjdZdZq8y4KXuI40ZwtwrxXC05wbvKHsaOjikX0EEpF75QSr304C2FlIcrF Zg0pTtgbLJzyYSxxElBp7ufhffw9SeLxVHiIF5GjlpB8feWn7MxpusAP+dCMNrgXwYHYaT3/zn4c +Gusx15rLm/HlkfF8doLh2FBGAgojiyDAUMj61ZMwyYNm1MC8rk4jwRXpaw0cAOj41NLvvZ6FaBO MBsCgvHClGA95szn5vyXB+NO1ueAi+0pjNazEg== )`
	RRSIG=12136 and DNSKEY=12136/SEP verifies the DNSKEY RRset
	DNSKEY=23226 is now in the chain-of-trust
	DNSKEY=60183 is now in the chain-of-trust
	Query to v0n2.nic.zone for permit.zone/A
	Received 312 bytes from 65.22.30.5
	;; Response received from [65.22.30.5] 312 octets ;; HEADER SECTION ;; id = 63556 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) permit.zone. 3600 IN NS augustus.ns.cloudflare.com. permit.zone. 3600 IN NS laura.ns.cloudflare.com. permit.zone. 3600 IN DS ( 2371 13 2 ba4df69acb645614161bd31796d38c83ddb69cbab3bc2250b342836f32c084eb ) permit.zone. 3600 IN RRSIG ( DS 8 2 3600 20240607161629 20240517151629 60183 zone. BOxzj1A52W4Vr+45qMfYi6OnTaHneAz0ILpXXM8HxOppMp1xOvaSjT40U7L5FiiDjbg5IkbmmI57 eUvvOM3e/Lq/fsAxrbiJfsrlfcGKE+xAUkltQb5zqjLLifEZo1ap3C/yN/fEEOt6dtOz3o/OMLBq iYBXcxJTMcp10gcfkrE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to v0n3.nic.zone for permit.zone/DNSKEY
	Received 312 bytes from 161.232.14.5
	;; Response received from [161.232.14.5] 312 octets ;; HEADER SECTION ;; id = 40568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) permit.zone. 3600 IN NS augustus.ns.cloudflare.com. permit.zone. 3600 IN NS laura.ns.cloudflare.com. permit.zone. 3600 IN DS ( 2371 13 2 ba4df69acb645614161bd31796d38c83ddb69cbab3bc2250b342836f32c084eb ) permit.zone. 3600 IN RRSIG ( DS 8 2 3600 20240607161629 20240517151629 60183 zone. BOxzj1A52W4Vr+45qMfYi6OnTaHneAz0ILpXXM8HxOppMp1xOvaSjT40U7L5FiiDjbg5IkbmmI57 eUvvOM3e/Lq/fsAxrbiJfsrlfcGKE+xAUkltQb5zqjLLifEZo1ap3C/yN/fEEOt6dtOz3o/OMLBq iYBXcxJTMcp10gcfkrE= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone permit.zone

permit.zone

	Checking DS between zone and permit.zone
	Query to v0n0.nic.zone for permit.zone/DS
	Received 252 bytes from 65.22.28.5
	;; Response received from [65.22.28.5] 252 octets ;; HEADER SECTION ;; id = 4839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN DS ;; ANSWER SECTION (2 records) permit.zone. 3600 IN DS ( 2371 13 2 ba4df69acb645614161bd31796d38c83ddb69cbab3bc2250b342836f32c084eb ) permit.zone. 3600 IN RRSIG ( DS 8 2 3600 20240607161629 20240517151629 60183 zone. BOxzj1A52W4Vr+45qMfYi6OnTaHneAz0ILpXXM8HxOppMp1xOvaSjT40U7L5FiiDjbg5IkbmmI57 eUvvOM3e/Lq/fsAxrbiJfsrlfcGKE+xAUkltQb5zqjLLifEZo1ap3C/yN/fEEOt6dtOz3o/OMLBq iYBXcxJTMcp10gcfkrE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for permit.zone in the zone zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`permit.zone. 3600 IN RRSIG ( DS 8 2 3600 20240607161629 20240517151629 60183 zone. BOxzj1A52W4Vr+45qMfYi6OnTaHneAz0ILpXXM8HxOppMp1xOvaSjT40U7L5FiiDjbg5IkbmmI57 eUvvOM3e/Lq/fsAxrbiJfsrlfcGKE+xAUkltQb5zqjLLifEZo1ap3C/yN/fEEOt6dtOz3o/OMLBq iYBXcxJTMcp10gcfkrE= )`
	RRSIG=60183 and DNSKEY=60183 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`permit.zone. 3600 IN DS ( 2371 13 2 ba4df69acb645614161bd31796d38c83ddb69cbab3bc2250b342836f32c084eb )`
	Query to laura.ns.cloudflare.com for permit.zone/DNSKEY
	Received 106 bytes from 173.245.58.183
	;; Response received from [173.245.58.183] 106 octets ;; HEADER SECTION ;; id = 64821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) permit.zone. 1800 IN SOA ( augustus.ns.cloudflare.com. dns.cloudflare.com. 2336422852 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	DS=2371/SHA-256 is published, but a corresponding DNSKEY is not
	Query to laura.ns.cloudflare.com for permit.zone/A
	Received 72 bytes from 173.245.58.183
	;; Response received from [173.245.58.183] 72 octets ;; HEADER SECTION ;; id = 53774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (2 records) permit.zone. 300 IN A 172.67.154.152 permit.zone. 300 IN A 104.21.6.26 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	laura.ns.cloudflare.com is authoritative for permit.zone
	Query to augustus.ns.cloudflare.com for permit.zone/SOA
	Received 106 bytes from 172.64.35.2
	;; Response received from [172.64.35.2] 106 octets ;; HEADER SECTION ;; id = 46927 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN SOA ;; ANSWER SECTION (1 record) permit.zone. 1800 IN SOA ( augustus.ns.cloudflare.com. dns.cloudflare.com. 2336422852 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to laura.ns.cloudflare.com for permit.zone/A
	Received 72 bytes from 108.162.192.183
	;; Response received from [108.162.192.183] 72 octets ;; HEADER SECTION ;; id = 28273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (2 records) permit.zone. 300 IN A 104.21.6.26 permit.zone. 300 IN A 172.67.154.152 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	permit.zone A RR has value 104.21.6.26
	permit.zone A RR has value 172.67.154.152
	No RRSIGs found

permit.zone

	Query to augustus.ns.cloudflare.com for permit.zone/A
	Received 72 bytes from 162.159.44.2
	;; Response received from [162.159.44.2] 72 octets ;; HEADER SECTION ;; id = 14510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (2 records) permit.zone. 300 IN A 104.21.6.26 permit.zone. 300 IN A 172.67.154.152 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	augustus.ns.cloudflare.com is authoritative for permit.zone
	Query to augustus.ns.cloudflare.com for permit.zone/A
	Received 72 bytes from 108.162.195.2
	;; Response received from [108.162.195.2] 72 octets ;; HEADER SECTION ;; id = 33468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; permit.zone. IN A ;; ANSWER SECTION (2 records) permit.zone. 300 IN A 104.21.6.26 permit.zone. 300 IN A 172.67.154.152 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	permit.zone A RR has value 104.21.6.26
	permit.zone A RR has value 172.67.154.152
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test permit.zone at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: