DNSSEC Debugger - rings.strn.pl

Domain Name:

Time: 2024-05-13 05:26:21 UTC

Analyzing DNSSEC problems for rings.strn.pl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 64290 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to h.root-servers.net for rings.strn.pl/A
	Received 761 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 761 octets ;; HEADER SECTION ;; id = 24686 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS j-dns.pl. pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . anMGQshd/jNIn1f1T10uD/sHNk7oYyQtD+LjR4PY4OCr16GQHR3S2rm/Bgv7D0eJdKbmFrY8g20R tXX+RvYJv0Eodt/6sWMnyO+3tONLFwKpeBiejLhfKZrUkGw+SeZsO1RnCGSysrFwGf21KC2rv7Hu SiWqxovYXwQGKBdsOntjWVQalVwVFEauYCdY3EazvKEmZr7yG7hlLekrOUXqjlyF654CpPFradJM +enaYrvuNXnvExJdb/wFyoO+b+ubsIEM1akKP81eBxIpd5XoKTA2OWEz/B2itIZAz1e0uP6kwyAA 5cnNtBnjWy6cCbv7AaO6/g20swRlF8AaGiXaCg== ) ;; ADDITIONAL SECTION (13 records) a-dns.pl. 172800 IN A 192.102.225.53 b-dns.pl. 172800 IN A 192.195.72.53 d-dns.pl. 172800 IN A 185.159.197.48 f-dns.pl. 172800 IN A 194.0.25.29 h-dns.pl. 172800 IN A 185.159.198.48 j-dns.pl. 172800 IN A 204.61.217.4 a-dns.pl. 172800 IN AAAA 2001:7f9::53 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 d-dns.pl. 172800 IN AAAA 2620:10a:80aa::48 f-dns.pl. 172800 IN AAAA 2001:678:20::29 h-dns.pl. 172800 IN AAAA 2620:10a:80ab::48 j-dns.pl. 172800 IN AAAA 2001:500:14:7004:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for pl/DNSKEY
	Received 750 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 750 octets ;; HEADER SECTION ;; id = 14729 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS j-dns.pl. pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . anMGQshd/jNIn1f1T10uD/sHNk7oYyQtD+LjR4PY4OCr16GQHR3S2rm/Bgv7D0eJdKbmFrY8g20R tXX+RvYJv0Eodt/6sWMnyO+3tONLFwKpeBiejLhfKZrUkGw+SeZsO1RnCGSysrFwGf21KC2rv7Hu SiWqxovYXwQGKBdsOntjWVQalVwVFEauYCdY3EazvKEmZr7yG7hlLekrOUXqjlyF654CpPFradJM +enaYrvuNXnvExJdb/wFyoO+b+ubsIEM1akKP81eBxIpd5XoKTA2OWEz/B2itIZAz1e0uP6kwyAA 5cnNtBnjWy6cCbv7AaO6/g20swRlF8AaGiXaCg== ) ;; ADDITIONAL SECTION (13 records) j-dns.pl. 172800 IN A 204.61.217.4 h-dns.pl. 172800 IN A 185.159.198.48 f-dns.pl. 172800 IN A 194.0.25.29 d-dns.pl. 172800 IN A 185.159.197.48 b-dns.pl. 172800 IN A 192.195.72.53 a-dns.pl. 172800 IN A 192.102.225.53 j-dns.pl. 172800 IN AAAA 2001:500:14:7004:ad::1 h-dns.pl. 172800 IN AAAA 2620:10a:80ab::48 f-dns.pl. 172800 IN AAAA 2001:678:20::29 d-dns.pl. 172800 IN AAAA 2620:10a:80aa::48 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 a-dns.pl. 172800 IN AAAA 2001:7f9::53 ;; { "EDNS-VERSION": 0 }
	Found child zone pl

	Checking DS between . and pl
	Query to b.root-servers.net for pl/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 30503 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DS ;; ANSWER SECTION (2 records) pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . anMGQshd/jNIn1f1T10uD/sHNk7oYyQtD+LjR4PY4OCr16GQHR3S2rm/Bgv7D0eJdKbmFrY8g20R tXX+RvYJv0Eodt/6sWMnyO+3tONLFwKpeBiejLhfKZrUkGw+SeZsO1RnCGSysrFwGf21KC2rv7Hu SiWqxovYXwQGKBdsOntjWVQalVwVFEauYCdY3EazvKEmZr7yG7hlLekrOUXqjlyF654CpPFradJM +enaYrvuNXnvExJdb/wFyoO+b+ubsIEM1akKP81eBxIpd5XoKTA2OWEz/B2itIZAz1e0uP6kwyAA 5cnNtBnjWy6cCbv7AaO6/g20swRlF8AaGiXaCg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pl in the . zone
	DS=48559/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pl. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . anMGQshd/jNIn1f1T10uD/sHNk7oYyQtD+LjR4PY4OCr16GQHR3S2rm/Bgv7D0eJdKbmFrY8g20R tXX+RvYJv0Eodt/6sWMnyO+3tONLFwKpeBiejLhfKZrUkGw+SeZsO1RnCGSysrFwGf21KC2rv7Hu SiWqxovYXwQGKBdsOntjWVQalVwVFEauYCdY3EazvKEmZr7yG7hlLekrOUXqjlyF654CpPFradJM +enaYrvuNXnvExJdb/wFyoO+b+ubsIEM1akKP81eBxIpd5XoKTA2OWEz/B2itIZAz1e0uP6kwyAA 5cnNtBnjWy6cCbv7AaO6/g20swRlF8AaGiXaCg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=48559/SHA-256 is now in the chain-of-trust
	`pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f )`
	Query to h-dns.pl for pl/DNSKEY
	Received 1661 bytes from 185.159.198.48
	;; Response received from [185.159.198.48] 1661 octets ;; HEADER SECTION ;; id = 17422 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (4 records) pl. 86400 IN DNSKEY ( 257 3 8 AwEAAd85/h24DHNy+oC5gZVLEZfG4AQaegUN8zwsVBFhe7rLGBhC/MaCax8ToGrU57vZqcva0VCV eF7TRP5+V2EZ3v67350fJxGxJXjrN9qXx7UF8VPDlcXIDg6RNmHJ2dbVNF8EzQMEg9fYU0NFmHpy y9FAxENw2I21FVbx6FGvCarXGSUqAsCw3gPkGJEZbIIyVxvNiMK4NYpvlQOoY08zoywTFS4/HscL DmUWWDh4iFP++o/vuTV94IxG2YNOPo1ja+GpcHulANsV5gH+uUDR/9Q+BuqD4Dp7Mn8Q53x7PAxm iFIW/ImFphyLw4XGQ5j8cDT+/3mPblJRgcKNind3bcuNT8VXGevV/wsjdwlZ0/sKMQdPZ6zWKccS Vd0qWRODafMY8AHAMT4PJNDMRUkJxDsayCEwvMIHUKk6ZufYQ+n58k1nFmRL1k1fW/TdznBatCU4 NgSZy6BpVhGUk9VDP8mnrdaLQ6GYGMk8fuQ3KR3eLMXhzauUmToF2PXd5Qw7j5sICokv75kAvF/S hGX+rXvB4g2oVs6qwkRXDJ2U3Wj58Sw0l86A9T90VZy/sGSJvtgMHxlEd0ULWWY0BVTgLT0IHTGG eIXbn/pdWTvXVUaHr5reCXa2wPpv6MoBUPfQJ2eszMDSebM5PEU+JNCm2wy7Cw+iZLZBBogZsoHG rZ8d ) ; Key ID = 48559 pl. 86400 IN DNSKEY ( 256 3 8 AwEAAfcYJNopyr6o03/R3fXFkayosO9/k5iEVuIn67nKXraKnKPNJ6kUc59FujfqDe3bZVB+9LIL 5wFgoN8WTnRiGaW1DuWbHZXDSBgpWC5ryJ/dZMLxlM9WCEgXk23jS3apYcSYaZEQRhE2cLY7g7/o yVYGMZGFPzcu3Ay3dTRTi74Ley86IKHm64t+tJVPtDlEC9NlD7XbZ2If30qfvqWZGI6h/JGYp/Rh j0asmEt/SaDDNYuHpENu7GMlaxtTaYGHA7d1wW7xN4spq/LhhRtpo1GxaXhu5QxVAFRrD5y92hTr 1yHFoW5m9nKIMKBJoJ3umr5CaNdF705RGIL8ISeil9c= ) ; Key ID = 42684 pl. 86400 IN DNSKEY ( 256 3 8 AwEAAdKUVz9ZTrh7H4r2bRvurvKH0j/m7eIQpTYsfeedADxwICgHl62Pi1tsrPcWohQKMKlDiWPR Cj6LzrA2goxPe2cIqKONa2yOqCEpIBSKC0Ks9MJfGPX2M3q4rB3tno/wf/mwag7CDwX+t4cFGa4H YDuNuWdjbrkp4A8rbvc18WefGmP5X6Lf6fRT9MQ5nbFPj6AEmWnjGm9XuFWDnjeBhGRSKIqoUYy5 X77l2pg1Y3gNZ2Z2vyAKw4e2VXeiOkULtb22tVd4c6323Sh2Nd9p5OpFG3LdvnXFGAHu01zg/LIO ZBf3T0m/XdRHww+RvTyTo+Lzf18Ivks+CPOcOvsnPBM= ) ; Key ID = 36729 pl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240604120000 20240505120000 48559 pl. 3drBQN7V4GrKdG27Lk012snKMQqu9AcSVPJ+kyAe+7YV9KmdR2iIkJPFJ6Z+CoseFksm8X698vCn nZFZLTxjL+lFTOBMXAhCbbgDrjCKHyYUWmBXxxah0SN3HkrQ3pbiNopDEt3aJ/Io5x3wVsYHae4v Ytba+G6csm0+CpPGr0ndCRDJnV3CfaJv9wu8gXgaWbCOPx/NWIip/xRHdrYVtA1ymw5ztqXRM56J 5oMOlRA5UWYHIZOFwamX2bOG0Pk9mmDrixNtdsg2D+aG071Uh9vu+U5zBcpxzWDwsiAuMi/Oaj2I ThnK0pPVK2VTe0cInwJi4X+38CrVrU58eFuvNjLVSSSGVz82Z7m0iwBqA9Wy+27SXzCecxAGJzMV GQZg7URzZY3jFzh9KwBBPNJsq1YTEW5TOYIGUXTlXBE2JW2+iK/yUMKMqLJsgt7sR6tRskt2dzD3 sKb8d30mgV4hU1UsyaXyAhpab/BOnf2f5fa+DUwpObZUCDNBbRIeyfRrE3O5bY5ySiL5vZWb3ly7 CIJQy5RWpugyj08fZT4rKrjFQmt1hvX+pzkLwRrRjxD+50qTf5B3QimWqt82EH7UOXdGQuHYENqE kO8aMTZtzJRsgAGPoX+q5GrFvoY9y14GvbiFvdxVkK4jJU/wtKB92MuPwDsZHt+NHB88K5JCX/U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for pl
	pl. 86400 IN DNSKEY ( 257 3 8 AwEAAd85/h24DHNy+oC5gZVLEZfG4AQaegUN8zwsVBFhe7rLGBhC/MaCax8ToGrU57vZqcva0VCV eF7TRP5+V2EZ3v67350fJxGxJXjrN9qXx7UF8VPDlcXIDg6RNmHJ2dbVNF8EzQMEg9fYU0NFmHpy y9FAxENw2I21FVbx6FGvCarXGSUqAsCw3gPkGJEZbIIyVxvNiMK4NYpvlQOoY08zoywTFS4/HscL DmUWWDh4iFP++o/vuTV94IxG2YNOPo1ja+GpcHulANsV5gH+uUDR/9Q+BuqD4Dp7Mn8Q53x7PAxm iFIW/ImFphyLw4XGQ5j8cDT+/3mPblJRgcKNind3bcuNT8VXGevV/wsjdwlZ0/sKMQdPZ6zWKccS Vd0qWRODafMY8AHAMT4PJNDMRUkJxDsayCEwvMIHUKk6ZufYQ+n58k1nFmRL1k1fW/TdznBatCU4 NgSZy6BpVhGUk9VDP8mnrdaLQ6GYGMk8fuQ3KR3eLMXhzauUmToF2PXd5Qw7j5sICokv75kAvF/S hGX+rXvB4g2oVs6qwkRXDJ2U3Wj58Sw0l86A9T90VZy/sGSJvtgMHxlEd0ULWWY0BVTgLT0IHTGG eIXbn/pdWTvXVUaHr5reCXa2wPpv6MoBUPfQJ2eszMDSebM5PEU+JNCm2wy7Cw+iZLZBBogZsoHG rZ8d ) ; Key ID = 48559
	`pl. 86400 IN DNSKEY ( 256 3 8 AwEAAfcYJNopyr6o03/R3fXFkayosO9/k5iEVuIn67nKXraKnKPNJ6kUc59FujfqDe3bZVB+9LIL 5wFgoN8WTnRiGaW1DuWbHZXDSBgpWC5ryJ/dZMLxlM9WCEgXk23jS3apYcSYaZEQRhE2cLY7g7/o yVYGMZGFPzcu3Ay3dTRTi74Ley86IKHm64t+tJVPtDlEC9NlD7XbZ2If30qfvqWZGI6h/JGYp/Rh j0asmEt/SaDDNYuHpENu7GMlaxtTaYGHA7d1wW7xN4spq/LhhRtpo1GxaXhu5QxVAFRrD5y92hTr 1yHFoW5m9nKIMKBJoJ3umr5CaNdF705RGIL8ISeil9c= ) ; Key ID = 42684`
	`pl. 86400 IN DNSKEY ( 256 3 8 AwEAAdKUVz9ZTrh7H4r2bRvurvKH0j/m7eIQpTYsfeedADxwICgHl62Pi1tsrPcWohQKMKlDiWPR Cj6LzrA2goxPe2cIqKONa2yOqCEpIBSKC0Ks9MJfGPX2M3q4rB3tno/wf/mwag7CDwX+t4cFGa4H YDuNuWdjbrkp4A8rbvc18WefGmP5X6Lf6fRT9MQ5nbFPj6AEmWnjGm9XuFWDnjeBhGRSKIqoUYy5 X77l2pg1Y3gNZ2Z2vyAKw4e2VXeiOkULtb22tVd4c6323Sh2Nd9p5OpFG3LdvnXFGAHu01zg/LIO ZBf3T0m/XdRHww+RvTyTo+Lzf18Ivks+CPOcOvsnPBM= ) ; Key ID = 36729`
	DNSKEY=48559/SEP is now in the chain-of-trust
	DS=48559/SHA-256 verifies DNSKEY=48559/SEP
	Found 1 RRSIGs over DNSKEY RRset
	pl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240604120000 20240505120000 48559 pl. 3drBQN7V4GrKdG27Lk012snKMQqu9AcSVPJ+kyAe+7YV9KmdR2iIkJPFJ6Z+CoseFksm8X698vCn nZFZLTxjL+lFTOBMXAhCbbgDrjCKHyYUWmBXxxah0SN3HkrQ3pbiNopDEt3aJ/Io5x3wVsYHae4v Ytba+G6csm0+CpPGr0ndCRDJnV3CfaJv9wu8gXgaWbCOPx/NWIip/xRHdrYVtA1ymw5ztqXRM56J 5oMOlRA5UWYHIZOFwamX2bOG0Pk9mmDrixNtdsg2D+aG071Uh9vu+U5zBcpxzWDwsiAuMi/Oaj2I ThnK0pPVK2VTe0cInwJi4X+38CrVrU58eFuvNjLVSSSGVz82Z7m0iwBqA9Wy+27SXzCecxAGJzMV GQZg7URzZY3jFzh9KwBBPNJsq1YTEW5TOYIGUXTlXBE2JW2+iK/yUMKMqLJsgt7sR6tRskt2dzD3 sKb8d30mgV4hU1UsyaXyAhpab/BOnf2f5fa+DUwpObZUCDNBbRIeyfRrE3O5bY5ySiL5vZWb3ly7 CIJQy5RWpugyj08fZT4rKrjFQmt1hvX+pzkLwRrRjxD+50qTf5B3QimWqt82EH7UOXdGQuHYENqE kO8aMTZtzJRsgAGPoX+q5GrFvoY9y14GvbiFvdxVkK4jJU/wtKB92MuPwDsZHt+NHB88K5JCX/U= )
	RRSIG=48559 and DNSKEY=48559/SEP verifies the DNSKEY RRset
	DNSKEY=42684 is now in the chain-of-trust
	DNSKEY=36729 is now in the chain-of-trust
	Query to f-dns.pl for rings.strn.pl/A
	Received 844 bytes from 194.0.25.29
	;; Response received from [194.0.25.29] 844 octets ;; HEADER SECTION ;; id = 21056 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) strn.pl. 86400 IN NS coco.bunny.net. strn.pl. 86400 IN NS kiki.bunny.net. nq5helhg3cgiihi3jrala2saot5jmr7t.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f nq5jshakr70tfmkgnc95u89at98528cn NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nq5helhg3cgiihi3jrala2saot5jmr7t.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. f+G1XNwPXCB2jQDfbOO4NbfOE+4dwYwAQs5Y5Jn0mH89Ysql4ZacEdCq8YOYmWhz7PHUr6aBoygM uDQ7evIMMcMH+oNGflKpiq3HIuqN0ndBzN6hUG+V74iFXWXV1GQnKkflKn+X6Dwq98ll7YEHcZCu SRnhfg/mDQNjf21KnPFAi1AIwsBA9fKOdAJ3K3TDa2ABCDEeJwX6iNk4VzaK1rSEPBBvlE96cXk7 JHmuMZRBizYSu604ZHHsXXKs5aLf70KiLQalIRx4ycGIdAo7Hv1UthvnX+GDUKk143viSA6UVSfs PoFtf0hnVXD1vI2BxWFdusnGN+Bf3qwAxSFbaw== ) 2a4gm3u9ftgsndlc85hia0ntc122tg32.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f 2a4m10biqtvq9s3rekl7462aetmhh0u4 NS DS RRSIG ) 2a4gm3u9ftgsndlc85hia0ntc122tg32.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. GhPLiltELW/ouJeNIt6RBijJTt9iTvvIm0/egQTFifhIcGEQ+SpwTPIxQIWKHn8S0KTAS11svgt9 MkZdPVcUAHkoLVUTO7jm/9J0RDeh+RcolAXsSXI6SIJ/iUMyI0XKVNLBJg6opSy+eDPJqM+BK//4 Nm6JNiQzGKdPGLluEtTeg+ka3eiKSOzjoaIrrhxsQ8fZjFJ6NFuWhsslvVU5jEkxV7SG0r/4Thu5 Gsi5QD7TU96kWL+INxkihc78zdeiYywT4VNJzD1M4ijb33adwBSOIkM+L4YAHJM15iVVq+k1LX/6 Dd2YODJdvDiXDzqNUKgnMx8bou0xL53j0v8UuA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d-dns.pl for strn.pl/DNSKEY
	Received 838 bytes from 185.159.197.48
	;; Response received from [185.159.197.48] 838 octets ;; HEADER SECTION ;; id = 41045 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) strn.pl. 86400 IN NS coco.bunny.net. strn.pl. 86400 IN NS kiki.bunny.net. nq5helhg3cgiihi3jrala2saot5jmr7t.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f nq5jshakr70tfmkgnc95u89at98528cn NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 2a4gm3u9ftgsndlc85hia0ntc122tg32.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f 2a4m10biqtvq9s3rekl7462aetmhh0u4 NS DS RRSIG ) nq5helhg3cgiihi3jrala2saot5jmr7t.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. f+G1XNwPXCB2jQDfbOO4NbfOE+4dwYwAQs5Y5Jn0mH89Ysql4ZacEdCq8YOYmWhz7PHUr6aBoygM uDQ7evIMMcMH+oNGflKpiq3HIuqN0ndBzN6hUG+V74iFXWXV1GQnKkflKn+X6Dwq98ll7YEHcZCu SRnhfg/mDQNjf21KnPFAi1AIwsBA9fKOdAJ3K3TDa2ABCDEeJwX6iNk4VzaK1rSEPBBvlE96cXk7 JHmuMZRBizYSu604ZHHsXXKs5aLf70KiLQalIRx4ycGIdAo7Hv1UthvnX+GDUKk143viSA6UVSfs PoFtf0hnVXD1vI2BxWFdusnGN+Bf3qwAxSFbaw== ) 2a4gm3u9ftgsndlc85hia0ntc122tg32.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. GhPLiltELW/ouJeNIt6RBijJTt9iTvvIm0/egQTFifhIcGEQ+SpwTPIxQIWKHn8S0KTAS11svgt9 MkZdPVcUAHkoLVUTO7jm/9J0RDeh+RcolAXsSXI6SIJ/iUMyI0XKVNLBJg6opSy+eDPJqM+BK//4 Nm6JNiQzGKdPGLluEtTeg+ka3eiKSOzjoaIrrhxsQ8fZjFJ6NFuWhsslvVU5jEkxV7SG0r/4Thu5 Gsi5QD7TU96kWL+INxkihc78zdeiYywT4VNJzD1M4ijb33adwBSOIkM+L4YAHJM15iVVq+k1LX/6 Dd2YODJdvDiXDzqNUKgnMx8bou0xL53j0v8UuA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone strn.pl

strn.pl

	Checking DS between pl and strn.pl
	Query to b-dns.pl for strn.pl/DS
	Received 1140 bytes from 192.195.72.53
	;; Response received from [192.195.72.53] 1140 octets ;; HEADER SECTION ;; id = 17568 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) NQ5HELHG3CGIIHI3JRALA2SAOT5JMR7T.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f nq5jshakr70tfmkgnc95u89at98528cn NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) NQ5HELHG3CGIIHI3JRALA2SAOT5JMR7T.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. f+G1XNwPXCB2jQDfbOO4NbfOE+4dwYwAQs5Y5Jn0mH89Ysql4ZacEdCq8YOYmWhz7PHUr6aBoygM uDQ7evIMMcMH+oNGflKpiq3HIuqN0ndBzN6hUG+V74iFXWXV1GQnKkflKn+X6Dwq98ll7YEHcZCu SRnhfg/mDQNjf21KnPFAi1AIwsBA9fKOdAJ3K3TDa2ABCDEeJwX6iNk4VzaK1rSEPBBvlE96cXk7 JHmuMZRBizYSu604ZHHsXXKs5aLf70KiLQalIRx4ycGIdAo7Hv1UthvnX+GDUKk143viSA6UVSfs PoFtf0hnVXD1vI2BxWFdusnGN+Bf3qwAxSFbaw== ) pl. 3600 IN SOA ( a-dns.pl. dnsmaster.nask.pl. 1715495712 ;serial 900 ;refresh 300 ;retry 2592000 ;expire 3600 ;minimum ) pl. 3600 IN RRSIG ( SOA 8 1 86400 20240612052504 20240513042504 42684 pl. kGTJfFHRCdexRU80XiD/31PdBNWf0TOcUNCq+xBv9oiamYccqGbje6zGwRaCC0Is0SHtwWfevTm9 NswNxfAhq5SWjkPbUqKY+FKk/AsKT5uCU/DuRakT7bKH/+hesyy9ifFG2pVnrDQ8HjtBQf9nBlDu ysYLmxbvtT0EH7+4UvPth7r5wv/jY5odZsVq7tN8ExXuCVnp6VVQjFkvJkGxHPCY03OAQx6jwyIZ S0ATKsLAB+3qElx2CsVmmVRfsWlVnbJ3UQJrHb2h9EA4tYrA7X2ZcboJTmY+7YrC4WHqjc+j/axl zYpwoIHTnEqz5OZNMK7CDYjiKR6vJCG1PQuclA== ) 2A4GM3U9FTGSNDLC85HIA0NTC122TG32.pl. 3600 IN NSEC3 ( 1 1 12 97bea7ec5ff1c61f 2a4m10biqtvq9s3rekl7462aetmhh0u4 NS DS RRSIG ) 2A4GM3U9FTGSNDLC85HIA0NTC122TG32.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20240604120000 20240505120000 42684 pl. GhPLiltELW/ouJeNIt6RBijJTt9iTvvIm0/egQTFifhIcGEQ+SpwTPIxQIWKHn8S0KTAS11svgt9 MkZdPVcUAHkoLVUTO7jm/9J0RDeh+RcolAXsSXI6SIJ/iUMyI0XKVNLBJg6opSy+eDPJqM+BK//4 Nm6JNiQzGKdPGLluEtTeg+ka3eiKSOzjoaIrrhxsQ8fZjFJ6NFuWhsslvVU5jEkxV7SG0r/4Thu5 Gsi5QD7TU96kWL+INxkihc78zdeiYywT4VNJzD1M4ijb33adwBSOIkM+L4YAHJM15iVVq+k1LX/6 Dd2YODJdvDiXDzqNUKgnMx8bou0xL53j0v8UuA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for strn.pl in the pl zone
	Query to coco.bunny.net for strn.pl/DNSKEY
	Received 106 bytes from 185.85.196.65
	;; Response received from [185.85.196.65] 106 octets ;; HEADER SECTION ;; id = 7123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to kiki.bunny.net for rings.strn.pl/A
	Received 112 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 112 octets ;; HEADER SECTION ;; id = 51808 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	kiki.bunny.net is authoritative for rings.strn.pl
	Query to coco.bunny.net for rings.strn.pl/DNSKEY
	Received 112 bytes from 185.85.196.65
	;; Response received from [185.85.196.65] 112 octets ;; HEADER SECTION ;; id = 28500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone rings.strn.pl
	Attempting to learn nameservers for rings.strn.pl
	Query to kiki.bunny.net for rings.strn.pl/NS
	Received 112 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 112 octets ;; HEADER SECTION ;; id = 18152 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found rings.strn.pl nameservers:

rings.strn.pl

	Checking DS between strn.pl and rings.strn.pl
	Query to coco.bunny.net for rings.strn.pl/DS
	Received 112 bytes from 185.85.196.65
	;; Response received from [185.85.196.65] 112 octets ;; HEADER SECTION ;; id = 58184 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for rings.strn.pl in the strn.pl zone
	No DNSKEY records found
	No known nameservers for rings.strn.pl

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rings.strn.pl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: