DNSSEC Debugger - scolasti.co

Domain Name:

Time: 2024-05-18 22:43:50 UTC

Analyzing DNSSEC problems for scolasti.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 22721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for scolasti.co/A
	Received 755 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 755 octets ;; HEADER SECTION ;; id = 43354 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Rj3etRl/oQ76SqQr6umjaUy2T2D1t7NMPB2Wz4D2QaDi2acc21kmGT+4uQXVq4kIMnWHDq9Aovht 7lp8/pvCPRWNCkdLWI5angeOvXeGSeOdBniDR2bxy6hNrMqWmBI8WUgAYXH2D841rLWxQZC/dWkM Y5miP0tYpAhwZsCIJjgTB4yQLzVqK3ks3snk9LOl4kDeOL9T4A8oURpKwARUE2Pt84skjXOmMBsN WcGzk0Zu+aokGjElir0Oqg0A9WwKq2QzEoR5LKWw54+CKv4N6Z1mEhhilVi6XBVIPQr87e7aUnMw tEOVefpoT0TdmrP1b7KiE1/ajes/D3wz0ijU7Q== ) ;; ADDITIONAL SECTION (13 records) ns6.cctld.co. 172800 IN A 156.154.105.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns4.cctld.co. 172800 IN A 156.154.103.25 ns3.cctld.co. 172800 IN A 37.209.196.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns1.cctld.co. 172800 IN A 37.209.192.14 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for co/DNSKEY
	Received 746 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 746 octets ;; HEADER SECTION ;; id = 19435 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Rj3etRl/oQ76SqQr6umjaUy2T2D1t7NMPB2Wz4D2QaDi2acc21kmGT+4uQXVq4kIMnWHDq9Aovht 7lp8/pvCPRWNCkdLWI5angeOvXeGSeOdBniDR2bxy6hNrMqWmBI8WUgAYXH2D841rLWxQZC/dWkM Y5miP0tYpAhwZsCIJjgTB4yQLzVqK3ks3snk9LOl4kDeOL9T4A8oURpKwARUE2Pt84skjXOmMBsN WcGzk0Zu+aokGjElir0Oqg0A9WwKq2QzEoR5LKWw54+CKv4N6Z1mEhhilVi6XBVIPQr87e7aUnMw tEOVefpoT0TdmrP1b7KiE1/ajes/D3wz0ijU7Q== ) ;; ADDITIONAL SECTION (13 records) ns6.cctld.co. 172800 IN A 156.154.105.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns4.cctld.co. 172800 IN A 156.154.103.25 ns3.cctld.co. 172800 IN A 37.209.196.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns1.cctld.co. 172800 IN A 37.209.192.14 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ;; { "EDNS-VERSION": 0 }
	Found child zone co

	Checking DS between . and co
	Query to e.root-servers.net for co/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 40994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (2 records) co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 ) co. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Rj3etRl/oQ76SqQr6umjaUy2T2D1t7NMPB2Wz4D2QaDi2acc21kmGT+4uQXVq4kIMnWHDq9Aovht 7lp8/pvCPRWNCkdLWI5angeOvXeGSeOdBniDR2bxy6hNrMqWmBI8WUgAYXH2D841rLWxQZC/dWkM Y5miP0tYpAhwZsCIJjgTB4yQLzVqK3ks3snk9LOl4kDeOL9T4A8oURpKwARUE2Pt84skjXOmMBsN WcGzk0Zu+aokGjElir0Oqg0A9WwKq2QzEoR5LKWw54+CKv4N6Z1mEhhilVi6XBVIPQr87e7aUnMw tEOVefpoT0TdmrP1b7KiE1/ajes/D3wz0ijU7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for co in the . zone
	DS=62110/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Rj3etRl/oQ76SqQr6umjaUy2T2D1t7NMPB2Wz4D2QaDi2acc21kmGT+4uQXVq4kIMnWHDq9Aovht 7lp8/pvCPRWNCkdLWI5angeOvXeGSeOdBniDR2bxy6hNrMqWmBI8WUgAYXH2D841rLWxQZC/dWkM Y5miP0tYpAhwZsCIJjgTB4yQLzVqK3ks3snk9LOl4kDeOL9T4A8oURpKwARUE2Pt84skjXOmMBsN WcGzk0Zu+aokGjElir0Oqg0A9WwKq2QzEoR5LKWw54+CKv4N6Z1mEhhilVi6XBVIPQr87e7aUnMw tEOVefpoT0TdmrP1b7KiE1/ajes/D3wz0ijU7Q== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=62110/SHA-256 is now in the chain-of-trust
	`co. 86400 IN DS ( 62110 8 2 4857ee1a85e661c92156ad09b40139dae7d5be37d117a1223289f0e20cf9d654 )`
	Query to ns5.cctld.co for co/DNSKEY
	Received 1247 bytes from 156.154.104.25
	;; Response received from [156.154.104.25] 1247 octets ;; HEADER SECTION ;; id = 18332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (5 records) co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744 co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065 co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110 co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== ) co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for co
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAbqOTyOAPTNJaKCMaAS8sJf2He66c5BZ4drKGtizFna1xCCHdCEahtHkXcSQ+ZkDVCejqCEX ey28L/TOfQYSgJddVQpfp9I6zkQshabbJG2yuCx8h+6aIm8uXhGtCvfHxTbKu2InRauhM6yCuZld XzdZrjB+Qn7oowM/H2MIhPtXbpwARVhTz0Gw3DLP7ey212kHrNJ6xg4E3fL1lxbcCLQCL4kHa/VS wMUXHhBRn2JZ0XNoEiBmM+NKxN7LOjdztr7eEMZM3/UNamq1tvl4zLTeo2JjnjVAexkvSI6R1Qox eWrLyHczsbwr385yBhTzCNHP91GSbgETTNqwD7xU9C0= ) ; Key ID = 61744`
	`co. 7200 IN DNSKEY ( 256 3 8 AwEAAZ9IkkA4OQX34espp3qzk6eUqD+Lbw7CHXt7BqajPIueiEaIRrc6LpnGzxlTmYCMS9SOtw0w 3yNmzZF/F98x5Cbei+0I3t2Ud/4WCJ2ci5wLC+jJjcPPl4zOKVcvExk+s1wODT8yw8GGzraUuRT5 iXvRahAzWn6vT2+dvBwKn4oBfTBgBUtZFd2ONg1nBpvi8PafCSM3uSM1ribDw+wJaYs= ) ; Key ID = 19065`
	`co. 7200 IN DNSKEY ( 257 3 8 AwEAAfcLtnhhft+Iy4a0ZuiwuPXidKGkAVqVGKfnWFPbdgEFFsbF9DKZZmgrG2P6GKdeujg4YDOR h0AYBM/jMvxYLpHF8ShHF4LUM6ttss3RvJM9CXF5eYMOo5N6crAznZNhCzIEWYtpd2qnmJVxJ5Ee ed2MSVlcMAXyq4Rlk9A6PT7KltBO/3m62cWE2ZndkW71qe44wVO3QDkeht9r078O0Xc7NAh2UkXp pQ+N8avp3ok5Og649/ab24wmM2hoXKT7TvsUfp98ZkGvjAkugGBZdCTHJhT1XmntutAjLmL0jWuW PtdfGcax30k7nlQQf1r6da7AhViGaRUGtquh9Y2Yej8= ) ; Key ID = 62110`
	DNSKEY=62110/SEP is now in the chain-of-trust
	DS=62110/SHA-256 verifies DNSKEY=62110/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 19065 co. kL4r8mS/RzmZrtWIVLbYbPN9UWlvnvhqpzWClB+Zu/32nB74I5vzB3cWWXi+4D4elkiDisn1Mfry 5f5DNeDfewvBqhuwV9bnJ446z7jbF22s4D8dalw8M4S1p/5RoCdx8NcK0cvcBLip9BaFpcoUqZdZ phJQ2WpF48a1oNGRP+LndxU8VXgjoQi89Y/U2jtJQDhdPO7EWnpqEFO6wXRAaA== )`
	`co. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612064024 20240513061058 62110 co. 5IjtKKVwRAkKhQ6dF0kL64+sSm54nYOg4SuCLlnLji8adFiGQl+2N2dhCvutHdqajo/Nf4eFttoV oeJUl1vHAyvWRxWz6B7wIiHIoQ4zrCtXLl6ZLMdpc+UbaKDinLdLiXy6uC/Skker4NSV7DUrF1uK I+8ZxZlPHveCzkASNEF0snRj+NfzOQx9nF35SofdlPFi7sKpbV+vuKCHfASsCq5iT+6HDTqMTKAr g8fv4fQKEU/U5c9UaYgWiGIEehALnFjh2y+3TiiWOo8GH6bh8QKB1nSkhTRyThOCRMBap4MOrznB 4ui8we1FwKdCzKuXRsube2VuLSzkLHZccy7KmA== )`
	RRSIG=19065 and DNSKEY=19065 verifies the DNSKEY RRset
	RRSIG=62110 and DNSKEY=62110/SEP verifies the DNSKEY RRset
	DNSKEY=61744/SEP is now in the chain-of-trust
	DNSKEY=19065 is now in the chain-of-trust
	Query to ns1.cctld.co for scolasti.co/A
	Received 644 bytes from 37.209.192.14
	;; Response received from [37.209.192.14] 644 octets ;; HEADER SECTION ;; id = 17884 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) scolasti.co. 3600 IN NS elliot.ns.cloudflare.com. scolasti.co. 3600 IN NS mimi.ns.cloudflare.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN NSEC3 ( 1 1 0 - qgajqac6up6enrggpc32e2ovfpvq2c7m NS DS RRSIG ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN RRSIG ( NSEC3 8 2 900 20240612011805 20240513003022 19065 co. I1bM//GlK3slm1llypLwD/BeztVTCkDsUkahlmCfJM6/iV3kjJcysdGfMUduW1tsBKj7bnt2x7Dx eN5yJc6fHIlSekKxbIV1hbLH3NVjjGTs+j3zQe+SIDYUTqeb8sx5jOljITyzfZ1IabKrqQw9ZNgP CGuVOCfcaHRGDeiYRkVeg24f2RmhVUzZD4gGqZCQqoss+Iac8YxgrNzWuwZlxw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.cctld.co for scolasti.co/DNSKEY
	Received 644 bytes from 37.209.192.14
	;; Response received from [37.209.192.14] 644 octets ;; HEADER SECTION ;; id = 41478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) scolasti.co. 3600 IN NS elliot.ns.cloudflare.com. scolasti.co. 3600 IN NS mimi.ns.cloudflare.com. ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN NSEC3 ( 1 1 0 - qgajqac6up6enrggpc32e2ovfpvq2c7m NS DS RRSIG ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN RRSIG ( NSEC3 8 2 900 20240612011805 20240513003022 19065 co. I1bM//GlK3slm1llypLwD/BeztVTCkDsUkahlmCfJM6/iV3kjJcysdGfMUduW1tsBKj7bnt2x7Dx eN5yJc6fHIlSekKxbIV1hbLH3NVjjGTs+j3zQe+SIDYUTqeb8sx5jOljITyzfZ1IabKrqQw9ZNgP CGuVOCfcaHRGDeiYRkVeg24f2RmhVUzZD4gGqZCQqoss+Iac8YxgrNzWuwZlxw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone scolasti.co

scolasti.co

	Checking DS between co and scolasti.co
	Query to ns6.cctld.co for scolasti.co/DS
	Received 848 bytes from 156.154.105.25
	;; Response received from [156.154.105.25] 848 octets ;; HEADER SECTION ;; id = 16526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN NSEC3 ( 1 1 0 - ldc4j0skeamis1d5g3f6do9con7b145c NS SOA RRSIG DNSKEY NSEC3PARAM ) ldc0c7m112348qmhs09hokrvkepgubv6.co. 900 IN RRSIG ( NSEC3 8 2 900 20240611144510 20240512143252 19065 co. XcFI7I9EEOAxO+7YZQok4jLHZgwYtB0AkwEEb3pXiDxtbc7iJ+SmmWF7cyQlCxyd0StchDVKtBX2 E5ruRovpDC/i9IzjnBAy9r98ljVdoyQE/v0jc4HZ3twTxWeWndLYypwG/1zioPiqioY9d3ecCKjL dD8YGW7MIvmfGzInoWffBKzdl+4WwvAldEIzeSqRKZvNJZtIgcoNe3BYgOo0lg== ) co. 900 IN SOA ( ns1.cctld.co. admin.tldns.godaddy. 1716071505 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) co. 900 IN RRSIG ( SOA 8 1 900 20240617223219 20240518213219 19065 co. gI86+6lFy1lTgdT2j+RHAUEaaT3dlnsuuL1mtov/C6pCT1BgpRj+88WXIbwVApOqa8WHSLtn/+kK 9g1cVgXL1GppXYxU8CbcDFbPm/0DPH8ObYGeNFVxcHnWS3SlhMYLia3v8dN/VTxjvMy15cZZjXhG HdA6c5W6rYOIB38uX4sg9gCPsMj04Rmyquahb8gJYXbf9eBgoPbUmOZRrk2veA== ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN NSEC3 ( 1 1 0 - qgajqac6up6enrggpc32e2ovfpvq2c7m NS DS RRSIG ) qg8eqdkhuujna6spbvllmvu16oafqpcn.co. 900 IN RRSIG ( NSEC3 8 2 900 20240612011805 20240513003022 19065 co. I1bM//GlK3slm1llypLwD/BeztVTCkDsUkahlmCfJM6/iV3kjJcysdGfMUduW1tsBKj7bnt2x7Dx eN5yJc6fHIlSekKxbIV1hbLH3NVjjGTs+j3zQe+SIDYUTqeb8sx5jOljITyzfZ1IabKrqQw9ZNgP CGuVOCfcaHRGDeiYRkVeg24f2RmhVUzZD4gGqZCQqoss+Iac8YxgrNzWuwZlxw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for scolasti.co in the co zone
	Query to elliot.ns.cloudflare.com for scolasti.co/DNSKEY
	Received 307 bytes from 173.245.59.162
	;; Response received from [173.245.59.162] 307 octets ;; HEADER SECTION ;; id = 55392 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DNSKEY ;; ANSWER SECTION (3 records) scolasti.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 scolasti.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 scolasti.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240713144631 20240513144631 2371 scolasti.co. WwaX+CZUaGNQwnH4Jzo6P44R09mgfZtr0pH7LJWpWdylLcQZ+tXclOPwUt9aLsuPstCAT/bOypKA hlnFTDn3QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for scolasti.co
	`scolasti.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`scolasti.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	Found 1 RRSIGs over DNSKEY RRset
	`scolasti.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240713144631 20240513144631 2371 scolasti.co. WwaX+CZUaGNQwnH4Jzo6P44R09mgfZtr0pH7LJWpWdylLcQZ+tXclOPwUt9aLsuPstCAT/bOypKA hlnFTDn3QA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	Query to mimi.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 173.245.58.203
	;; Response received from [173.245.58.203] 179 octets ;; HEADER SECTION ;; id = 16691 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 172.67.176.235 scolasti.co. 300 IN A 104.21.67.136 scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. OIGFcA012jXy9IUjj9il5+mJTf7kqTuDxwr+ZTjBtr5nSDBHyqqs7gV38l/NdbSHbN2UcKTTIbzc scnhqDx6UQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	mimi.ns.cloudflare.com is authoritative for scolasti.co
	Found RRSIG signed by scolasti.co zone
	Query to elliot.ns.cloudflare.com for scolasti.co/SOA
	Received 211 bytes from 172.64.33.162
	;; Response received from [172.64.33.162] 211 octets ;; HEADER SECTION ;; id = 6386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN SOA ;; ANSWER SECTION (2 records) scolasti.co. 1800 IN SOA ( elliot.ns.cloudflare.com. dns.cloudflare.com. 2341183701 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) scolasti.co. 1800 IN RRSIG ( SOA 13 2 1800 20240519234351 20240517214351 34505 scolasti.co. q63lQ/CXOW3F4lo22uqDueQjJhCbNMBEL5aoM5/x71tvRde8juNSHXaayTn4nV8o1CUkyX5idtKV aywpxuY5tQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to mimi.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 108.162.192.203
	;; Response received from [108.162.192.203] 179 octets ;; HEADER SECTION ;; id = 53465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 172.67.176.235 scolasti.co. 300 IN A 104.21.67.136 scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. HQWWmBgSRDcWQFzklJ8TojyldfeUmCt6fl3pMFHtpK1DfYoIB7I4dgIyfJHCkHn7RzhwcgW8Unh7 0rho0AIWXQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scolasti.co A RR has value 172.67.176.235
	scolasti.co A RR has value 104.21.67.136
	Found 1 RRSIGs over A RRset
	`scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. HQWWmBgSRDcWQFzklJ8TojyldfeUmCt6fl3pMFHtpK1DfYoIB7I4dgIyfJHCkHn7RzhwcgW8Unh7 0rho0AIWXQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

scolasti.co

	Query to elliot.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 173.245.59.162
	;; Response received from [173.245.59.162] 179 octets ;; HEADER SECTION ;; id = 41611 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 172.67.176.235 scolasti.co. 300 IN A 104.21.67.136 scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. Ux08Q6nik9Rmjre6f8nvGAfm+SVqvW1NjpclEx4VgWYrTzZXrbIsah0Z8fTFMqnOh6yzpnuVHxFW k6JjK4lj0w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	elliot.ns.cloudflare.com is authoritative for scolasti.co
	Found RRSIG signed by scolasti.co zone
	Query to elliot.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 173.245.59.162
	;; Response received from [173.245.59.162] 179 octets ;; HEADER SECTION ;; id = 30855 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 104.21.67.136 scolasti.co. 300 IN A 172.67.176.235 scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. n7YuuFAXc5KGYK0j1fSdW3ExeQ/ov/H1d/++2xARXt0cLy94jbUYii5U9RnbQYUatNeRCPAhvUeV SU4eK+8HVQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	scolasti.co A RR has value 104.21.67.136
	scolasti.co A RR has value 172.67.176.235
	Found 1 RRSIGs over A RRset
	`scolasti.co. 300 IN RRSIG ( A 13 2 300 20240519234351 20240517214351 34505 scolasti.co. n7YuuFAXc5KGYK0j1fSdW3ExeQ/ov/H1d/++2xARXt0cLy94jbUYii5U9RnbQYUatNeRCPAhvUeV SU4eK+8HVQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test scolasti.co at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: