DNSSEC Debugger

Domain Name:

Time: 2024-05-13 06:26:05 UTC

Analyzing DNSSEC problems for pizd.ec

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 48471 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for pizd.ec/A
	Received 684 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 684 octets ;; HEADER SECTION ;; id = 3916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ec. 172800 IN NS ns1.anycastdns.cz. ec. 172800 IN NS a.lactld.org. ec. 172800 IN NS n3.dns.ec. ec. 172800 IN NS n2.nic.ec. ec. 172800 IN NS ns2.anycastdns.cz. ec. 86400 IN DS ( 35138 13 2 2de23508e6ac307fc11f86b8768025bff14e2b585d555b020e218ec65c9a0223 ) ec. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . SD5DZSYa0lrIfxySdTkSKHXsRJaE8T6Ch4O0GynDwgpbn0e0b/H2CeLhA1KLdHU+z1fqgG4412Sy JAI4ZwKO6h5FM93YQ9GEcCSBgCAp+pgF1kvqbHiytk/iZ98VWwGquNJRUVoh5+dJxsJVSmCJKK2b CjYZiER4NwytHNngVh12zvKtJ1/mBzQOcKnEsd/QbYSOJlgnUuNCNQmRFoKOzngm+Ho6GpV/C/gq J9m4EqWimUwCbAKzVKAGp98rRd6y+fjOnt+PGPxfFV7Uzi2FsiG+pMtvNKwrrVcJbNPbNmQndQDe y8fv5yr4Cm/raMJqjHzZvs1PJANoWqRMk6NYKQ== ) ;; ADDITIONAL SECTION (10 records) ns2.anycastdns.cz. 172800 IN A 185.28.194.194 ns1.anycastdns.cz. 172800 IN A 185.38.108.108 n3.dns.ec. 172800 IN A 204.61.216.39 n2.nic.ec. 172800 IN A 200.12.199.1 a.lactld.org. 172800 IN A 200.0.68.10 ns1.anycastdns.cz. 172800 IN AAAA 2a00:fea0:dead::beef n3.dns.ec. 172800 IN AAAA 2001:500:14:6039:ad::1 n2.nic.ec. 172800 IN AAAA 2801:0:60::1 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for ec/DNSKEY
	Received 677 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 677 octets ;; HEADER SECTION ;; id = 7245 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ec. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ec. 172800 IN NS a.lactld.org. ec. 172800 IN NS n2.nic.ec. ec. 172800 IN NS n3.dns.ec. ec. 172800 IN NS ns1.anycastdns.cz. ec. 172800 IN NS ns2.anycastdns.cz. ec. 86400 IN DS ( 35138 13 2 2de23508e6ac307fc11f86b8768025bff14e2b585d555b020e218ec65c9a0223 ) ec. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . SD5DZSYa0lrIfxySdTkSKHXsRJaE8T6Ch4O0GynDwgpbn0e0b/H2CeLhA1KLdHU+z1fqgG4412Sy JAI4ZwKO6h5FM93YQ9GEcCSBgCAp+pgF1kvqbHiytk/iZ98VWwGquNJRUVoh5+dJxsJVSmCJKK2b CjYZiER4NwytHNngVh12zvKtJ1/mBzQOcKnEsd/QbYSOJlgnUuNCNQmRFoKOzngm+Ho6GpV/C/gq J9m4EqWimUwCbAKzVKAGp98rRd6y+fjOnt+PGPxfFV7Uzi2FsiG+pMtvNKwrrVcJbNPbNmQndQDe y8fv5yr4Cm/raMJqjHzZvs1PJANoWqRMk6NYKQ== ) ;; ADDITIONAL SECTION (10 records) n2.nic.ec. 172800 IN A 200.12.199.1 n2.nic.ec. 172800 IN AAAA 2801:0:60::1 n3.dns.ec. 172800 IN A 204.61.216.39 n3.dns.ec. 172800 IN AAAA 2001:500:14:6039:ad::1 a.lactld.org. 172800 IN A 200.0.68.10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ns1.anycastdns.cz. 172800 IN A 185.38.108.108 ns1.anycastdns.cz. 172800 IN AAAA 2a00:fea0:dead::beef ns2.anycastdns.cz. 172800 IN A 185.28.194.194 ;; { "EDNS-VERSION": 0 }
	Found child zone ec

	Checking DS between . and ec
	Query to g.root-servers.net for ec/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 366 octets ;; HEADER SECTION ;; id = 1948 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ec. IN DS ;; ANSWER SECTION (2 records) ec. 86400 IN DS ( 35138 13 2 2de23508e6ac307fc11f86b8768025bff14e2b585d555b020e218ec65c9a0223 ) ec. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . SD5DZSYa0lrIfxySdTkSKHXsRJaE8T6Ch4O0GynDwgpbn0e0b/H2CeLhA1KLdHU+z1fqgG4412Sy JAI4ZwKO6h5FM93YQ9GEcCSBgCAp+pgF1kvqbHiytk/iZ98VWwGquNJRUVoh5+dJxsJVSmCJKK2b CjYZiER4NwytHNngVh12zvKtJ1/mBzQOcKnEsd/QbYSOJlgnUuNCNQmRFoKOzngm+Ho6GpV/C/gq J9m4EqWimUwCbAKzVKAGp98rRd6y+fjOnt+PGPxfFV7Uzi2FsiG+pMtvNKwrrVcJbNPbNmQndQDe y8fv5yr4Cm/raMJqjHzZvs1PJANoWqRMk6NYKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ec in the . zone
	DS=35138/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ec. 86400 IN RRSIG ( DS 8 1 86400 20240526050000 20240513040000 5613 . SD5DZSYa0lrIfxySdTkSKHXsRJaE8T6Ch4O0GynDwgpbn0e0b/H2CeLhA1KLdHU+z1fqgG4412Sy JAI4ZwKO6h5FM93YQ9GEcCSBgCAp+pgF1kvqbHiytk/iZ98VWwGquNJRUVoh5+dJxsJVSmCJKK2b CjYZiER4NwytHNngVh12zvKtJ1/mBzQOcKnEsd/QbYSOJlgnUuNCNQmRFoKOzngm+Ho6GpV/C/gq J9m4EqWimUwCbAKzVKAGp98rRd6y+fjOnt+PGPxfFV7Uzi2FsiG+pMtvNKwrrVcJbNPbNmQndQDe y8fv5yr4Cm/raMJqjHzZvs1PJANoWqRMk6NYKQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=35138/SHA-256 is now in the chain-of-trust
	`ec. 86400 IN DS ( 35138 13 2 2de23508e6ac307fc11f86b8768025bff14e2b585d555b020e218ec65c9a0223 )`
	Query to n3.dns.ec for ec/DNSKEY
	Received 289 bytes from 204.61.216.39
	;; Response received from [204.61.216.39] 289 octets ;; HEADER SECTION ;; id = 14296 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ec. IN DNSKEY ;; ANSWER SECTION (3 records) ec. 7200 IN DNSKEY ( 256 3 13 5HTaOjVR5ntityKKJ6BFTK1XHTAgOqOlNLVyIEr6beh1XkJF6ZEAhHPzHgUMex+TevHSUg1fup0M Uc5YMQHq/w== ) ; Key ID = 10884 ec. 7200 IN DNSKEY ( 257 3 13 60paeTUq9hBEOqJFybwjahuoByxt4Eqty7fXuu6DKBIv8Jt/papXjWcmwE611yJ7BzoZ+gUEffCm C8Kn36D2Ng== ) ; Key ID = 35138 ec. 7200 IN RRSIG ( DNSKEY 13 1 7200 20240518153750 20240503143750 35138 ec. 39GK0I1M2v4zt6vJnnELi4UOE1Dii41PR5A/+VPYgKDFJsJpuL5fNdFbQpO4i3tc6Lp0dlskwWSH MTo3JFMyaQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ec
	`ec. 7200 IN DNSKEY ( 256 3 13 5HTaOjVR5ntityKKJ6BFTK1XHTAgOqOlNLVyIEr6beh1XkJF6ZEAhHPzHgUMex+TevHSUg1fup0M Uc5YMQHq/w== ) ; Key ID = 10884`
	`ec. 7200 IN DNSKEY ( 257 3 13 60paeTUq9hBEOqJFybwjahuoByxt4Eqty7fXuu6DKBIv8Jt/papXjWcmwE611yJ7BzoZ+gUEffCm C8Kn36D2Ng== ) ; Key ID = 35138`
	DNSKEY=35138/SEP is now in the chain-of-trust
	DS=35138/SHA-256 verifies DNSKEY=35138/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ec. 7200 IN RRSIG ( DNSKEY 13 1 7200 20240518153750 20240503143750 35138 ec. 39GK0I1M2v4zt6vJnnELi4UOE1Dii41PR5A/+VPYgKDFJsJpuL5fNdFbQpO4i3tc6Lp0dlskwWSH MTo3JFMyaQ== )`
	RRSIG=35138 and DNSKEY=35138/SEP verifies the DNSKEY RRset
	DNSKEY=10884 is now in the chain-of-trust
	Query to ns1.anycastdns.cz for pizd.ec/A
	Received 333 bytes from 185.38.108.108
	;; Response received from [185.38.108.108] 333 octets ;; HEADER SECTION ;; id = 55333 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) pizd.ec. 7200 IN NS ns.pizd.ec. pizd.ec. 7200 IN NS ns0.pizd.ec. pizd.ec. 7200 IN NS ns1.pizd.ec. 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN NSEC3 ( 1 0 3 07feb022bd850e78 2h90di652cd7ibcrog1v9389jo7sfbbh NS ) 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN RRSIG ( NSEC3 13 2 300 20240524225538 20240509222528 10884 ec. vTaxSLDbseLuoOAaUYNBthnSVstmaKfub6os3nI0ytbn9SXg7axnrDM6rHAn5d9GXC32UwuuQd/m ffH/esCMdQ== ) ;; ADDITIONAL SECTION (5 records) ;; { "EDNS-VERSION": 0 } ns.pizd.ec. 7200 IN A 79.134.208.216 ns.pizd.ec. 7200 IN A 95.169.181.24 ns0.pizd.ec. 7200 IN A 95.169.181.124 ns1.pizd.ec. 7200 IN A 79.134.208.216
	Query to ns2.anycastdns.cz for pizd.ec/DNSKEY
	Received 333 bytes from 185.28.194.194
	;; Response received from [185.28.194.194] 333 octets ;; HEADER SECTION ;; id = 20409 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1200, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) pizd.ec. 7200 IN NS ns.pizd.ec. pizd.ec. 7200 IN NS ns0.pizd.ec. pizd.ec. 7200 IN NS ns1.pizd.ec. 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN NSEC3 ( 1 0 3 07feb022bd850e78 2h90di652cd7ibcrog1v9389jo7sfbbh NS ) 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN RRSIG ( NSEC3 13 2 300 20240524225538 20240509222528 10884 ec. vTaxSLDbseLuoOAaUYNBthnSVstmaKfub6os3nI0ytbn9SXg7axnrDM6rHAn5d9GXC32UwuuQd/m ffH/esCMdQ== ) ;; ADDITIONAL SECTION (5 records) ;; { "EDNS-VERSION": 0 } ns.pizd.ec. 7200 IN A 79.134.208.216 ns.pizd.ec. 7200 IN A 95.169.181.24 ns0.pizd.ec. 7200 IN A 95.169.181.124 ns1.pizd.ec. 7200 IN A 79.134.208.216
	Found child zone pizd.ec

pizd.ec

	Checking DS between ec and pizd.ec
	Query to a.lactld.org for pizd.ec/DS
	Received 367 bytes from 200.0.68.10
	;; Response received from [200.0.68.10] 367 octets ;; HEADER SECTION ;; id = 29835 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ec. 300 IN SOA ( master.nic.ec. admin.nic.ec. 2024073565 ;serial 600 ;refresh 600 ;retry 2592000 ;expire 3600 ;minimum ) ec. 300 IN RRSIG ( SOA 13 1 300 20240528062458 20240513052458 10884 ec. KAqYj06rMyBQ179NlT4S6b/XJ5Xs2BeRJTSQzHcKxkngwq8RdVfZCkSZ/pte4PrBWxenDDc/XBPc 3dBqEBJiRA== ) 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN NSEC3 ( 1 0 3 07feb022bd850e78 2h90di652cd7ibcrog1v9389jo7sfbbh NS ) 2h7s7di5eo33ksc8pn746830hodg1p1h.ec. 300 IN RRSIG ( NSEC3 13 2 300 20240524225538 20240509222528 10884 ec. vTaxSLDbseLuoOAaUYNBthnSVstmaKfub6os3nI0ytbn9SXg7axnrDM6rHAn5d9GXC32UwuuQd/m ffH/esCMdQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for pizd.ec in the ec zone
	Query to ns0.pizd.ec for pizd.ec/DNSKEY
	Received 80 bytes from 95.169.181.124
	;; Response received from [95.169.181.124] 80 octets ;; HEADER SECTION ;; id = 31485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) pizd.ec. 3600 IN SOA ( ns.pizd.ec. vsem.pizd.ec. 2024040300 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns0.pizd.ec for pizd.ec/A
	Received 153 bytes from 95.169.181.124
	;; Response received from [95.169.181.124] 153 octets ;; HEADER SECTION ;; id = 36521 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	ns0.pizd.ec is authoritative for pizd.ec
	Query to ns.pizd.ec for pizd.ec/SOA
	Received 178 bytes from 95.169.181.24
	;; Response received from [95.169.181.24] 178 octets ;; HEADER SECTION ;; id = 44311 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN SOA ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN SOA ( ns.pizd.ec. vsem.pizd.ec. 2024040300 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns.pizd.ec. pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns1.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	Query to ns1.pizd.ec for pizd.ec/SOA
	Received 178 bytes from 79.134.208.216
	;; Response received from [79.134.208.216] 178 octets ;; HEADER SECTION ;; id = 12057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN SOA ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN SOA ( ns.pizd.ec. vsem.pizd.ec. 2024040300 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	Query to ns0.pizd.ec for pizd.ec/A
	Received 153 bytes from 95.169.181.124
	;; Response received from [95.169.181.124] 153 octets ;; HEADER SECTION ;; id = 3139 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	pizd.ec A RR has value 95.169.181.124
	No RRSIGs found

pizd.ec

	Query to ns1.pizd.ec for pizd.ec/A
	Received 153 bytes from 79.134.208.216
	;; Response received from [79.134.208.216] 153 octets ;; HEADER SECTION ;; id = 3659 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. pizd.ec. 3600 IN NS ns0.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	ns1.pizd.ec is authoritative for pizd.ec
	Query to ns1.pizd.ec for pizd.ec/A
	Received 153 bytes from 79.134.208.216
	;; Response received from [79.134.208.216] 153 octets ;; HEADER SECTION ;; id = 37487 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	pizd.ec A RR has value 95.169.181.124
	No RRSIGs found

pizd.ec

	Query to ns.pizd.ec for pizd.ec/A
	Received 153 bytes from 95.169.181.24
	;; Response received from [95.169.181.24] 153 octets ;; HEADER SECTION ;; id = 54096 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	ns.pizd.ec is authoritative for pizd.ec
	Query to ns.pizd.ec for pizd.ec/A
	Received 153 bytes from 95.169.181.24
	;; Response received from [95.169.181.24] 153 octets ;; HEADER SECTION ;; id = 13067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pizd.ec. IN A ;; ANSWER SECTION (1 record) pizd.ec. 3600 IN A 95.169.181.124 ;; AUTHORITY SECTION (3 records) pizd.ec. 3600 IN NS ns0.pizd.ec. pizd.ec. 3600 IN NS ns1.pizd.ec. pizd.ec. 3600 IN NS ns.pizd.ec. ;; ADDITIONAL SECTION (4 records) ns.pizd.ec. 3600 IN A 95.169.181.24 ns0.pizd.ec. 3600 IN A 95.169.181.124 ns1.pizd.ec. 3600 IN A 79.134.208.216 ;; { "EDNS-VERSION": 0 }
	pizd.ec A RR has value 95.169.181.124
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test pizd.ec at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: