DNSSEC Debugger - sigfail.verteiltesysteme.net

Domain Name:

Time: 2024-05-19 16:24:16 UTC

Analyzing DNSSEC problems for sigfail.verteiltesysteme.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 22025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for sigfail.verteiltesysteme.net/A
	Received 1185 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 1185 octets ;; HEADER SECTION ;; id = 49208 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . ZkfyiZkayMKQmttpy4xnjA2GvGZYhvNy2IuPn6pdjMSkaU2kdrSct+jvc0mbv/2pY8sIStuMshbN QyX3FFzafXHTXE2C+6iq4W94Pe3t0YHF8f/tyHqW669jBEAv39aP+rTwcRgJ6rr7VFNQyD/fKn+M ZkH0/VfJZ3LXbucXAeM/kkkXrVwCYcw+vphePvBEKeytiNYm7Z7VU93CSQGY3oPtJSsa5AZjEkOJ 6uxHbBhg5i4TGcMxoSalCfCH052HiM+wYDdM1QBtwWPj/ebgGO9VHchsw7j2o9Iejnt54hsmD3MA mfrQmJ3/lZnRTXNgKinq9BENERoYyB4jfe8H7g== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 1160 octets ;; HEADER SECTION ;; id = 11670 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . ZkfyiZkayMKQmttpy4xnjA2GvGZYhvNy2IuPn6pdjMSkaU2kdrSct+jvc0mbv/2pY8sIStuMshbN QyX3FFzafXHTXE2C+6iq4W94Pe3t0YHF8f/tyHqW669jBEAv39aP+rTwcRgJ6rr7VFNQyD/fKn+M ZkH0/VfJZ3LXbucXAeM/kkkXrVwCYcw+vphePvBEKeytiNYm7Z7VU93CSQGY3oPtJSsa5AZjEkOJ 6uxHbBhg5i4TGcMxoSalCfCH052HiM+wYDdM1QBtwWPj/ebgGO9VHchsw7j2o9Iejnt54hsmD3MA mfrQmJ3/lZnRTXNgKinq9BENERoYyB4jfe8H7g== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to f.root-servers.net for net/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 32268 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . ZkfyiZkayMKQmttpy4xnjA2GvGZYhvNy2IuPn6pdjMSkaU2kdrSct+jvc0mbv/2pY8sIStuMshbN QyX3FFzafXHTXE2C+6iq4W94Pe3t0YHF8f/tyHqW669jBEAv39aP+rTwcRgJ6rr7VFNQyD/fKn+M ZkH0/VfJZ3LXbucXAeM/kkkXrVwCYcw+vphePvBEKeytiNYm7Z7VU93CSQGY3oPtJSsa5AZjEkOJ 6uxHbBhg5i4TGcMxoSalCfCH052HiM+wYDdM1QBtwWPj/ebgGO9VHchsw7j2o9Iejnt54hsmD3MA mfrQmJ3/lZnRTXNgKinq9BENERoYyB4jfe8H7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . ZkfyiZkayMKQmttpy4xnjA2GvGZYhvNy2IuPn6pdjMSkaU2kdrSct+jvc0mbv/2pY8sIStuMshbN QyX3FFzafXHTXE2C+6iq4W94Pe3t0YHF8f/tyHqW669jBEAv39aP+rTwcRgJ6rr7VFNQyD/fKn+M ZkH0/VfJZ3LXbucXAeM/kkkXrVwCYcw+vphePvBEKeytiNYm7Z7VU93CSQGY3oPtJSsa5AZjEkOJ 6uxHbBhg5i4TGcMxoSalCfCH052HiM+wYDdM1QBtwWPj/ebgGO9VHchsw7j2o9Iejnt54hsmD3MA mfrQmJ3/lZnRTXNgKinq9BENERoYyB4jfe8H7g== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to d.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.31.80.30
	;; Response received from [192.31.80.30] 291 octets ;; HEADER SECTION ;; id = 2943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to i.gtld-servers.net for sigfail.verteiltesysteme.net/A
	Received 251 bytes from 192.43.172.30
	;; Response received from [192.43.172.30] 251 octets ;; HEADER SECTION ;; id = 10569 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) verteiltesysteme.net. 172800 IN NS dns1.registrar-servers.com. verteiltesysteme.net. 172800 IN NS dns2.registrar-servers.com. verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20240525065544 20240518054544 51809 net. +BrZGcWZsMxnRwBdXUdrZ7Zm87MUBfxRio18RxAB/zx4I3Wk7sShxqFJ3K6G7avT7hf4M958x0ur u9z4Xx1zCA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.gtld-servers.net for verteiltesysteme.net/DNSKEY
	Received 243 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 243 octets ;; HEADER SECTION ;; id = 37406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) verteiltesysteme.net. 172800 IN NS dns1.registrar-servers.com. verteiltesysteme.net. 172800 IN NS dns2.registrar-servers.com. verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20240525065544 20240518054544 51809 net. +BrZGcWZsMxnRwBdXUdrZ7Zm87MUBfxRio18RxAB/zx4I3Wk7sShxqFJ3K6G7avT7hf4M958x0ur u9z4Xx1zCA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone verteiltesysteme.net

verteiltesysteme.net

	Checking DS between net and verteiltesysteme.net
	Query to a.gtld-servers.net for verteiltesysteme.net/DS
	Received 1076 bytes from 192.5.6.30
	;; Response received from [192.5.6.30] 1076 octets ;; HEADER SECTION ;; id = 13472 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DS ;; ANSWER SECTION (2 records) verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 ) verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20240525065544 20240518054544 51809 net. +BrZGcWZsMxnRwBdXUdrZ7Zm87MUBfxRio18RxAB/zx4I3Wk7sShxqFJ3K6G7avT7hf4M958x0ur u9z4Xx1zCA== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20240526065220 20240519054220 51809 net. oHGT2Pc9/wZYLbjhnk6EVjhDpQqhkKfN0R8wEufjIVDVe3CGGWHZ6tQBNjIH5iVUw0yL8H94zPAg 0LqABQXZAQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for verteiltesysteme.net in the net zone
	DS=29912/SHA-1 uses a deprecated digest algorithm
	DS=29912/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`verteiltesysteme.net. 86400 IN RRSIG ( DS 13 2 86400 20240525065544 20240518054544 51809 net. +BrZGcWZsMxnRwBdXUdrZ7Zm87MUBfxRio18RxAB/zx4I3Wk7sShxqFJ3K6G7avT7hf4M958x0ur u9z4Xx1zCA== )`
	RRSIG=51809 and DNSKEY=51809 verifies the DS RRset
	DS=29912/SHA-1 is now in the chain-of-trust
	`verteiltesysteme.net. 86400 IN DS ( 29912 13 1 90fc415258ac1d58861d64cd8087aa1af09690c8 )`
	Query to dns2.registrar-servers.com for verteiltesysteme.net/DNSKEY
	Received 325 bytes from 156.154.133.200
	;; Response received from [156.154.133.200] 325 octets ;; HEADER SECTION ;; id = 41768 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (3 records) verteiltesysteme.net. 3601 IN DNSKEY ( 256 3 13 wsIQPqZ/0mHXLbNw1l/SYENOtqwmeqG6LiDw1VQa1eBjXixt1dSuZ1KdiFMhKL1t02NgCkifRRBx z7yAkHLcdA== ) ; Key ID = 47187 verteiltesysteme.net. 3601 IN DNSKEY ( 257 3 13 5MHd68dIEp3txhWN7M05DsdvRU5cUHIHsf7C4Zs44DrrAS+oBvPmoXOjAnPqBXUe9Vajt7UnI/y8 4kTEn+/uWQ== ) ; Key ID = 29912 verteiltesysteme.net. 3601 IN RRSIG ( DNSKEY 13 2 3601 20240530000000 20240509000000 29912 verteiltesysteme.net. 1hwZW3Tumr5ix9ybrmPLDIPoPcNNOJEiNXIcJ6vrs/VIhrXh0ZX6s3UTKh+NeFPTsl4WqJoRAoWZ q7CSbyb3rQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for verteiltesysteme.net
	`verteiltesysteme.net. 3601 IN DNSKEY ( 256 3 13 wsIQPqZ/0mHXLbNw1l/SYENOtqwmeqG6LiDw1VQa1eBjXixt1dSuZ1KdiFMhKL1t02NgCkifRRBx z7yAkHLcdA== ) ; Key ID = 47187`
	`verteiltesysteme.net. 3601 IN DNSKEY ( 257 3 13 5MHd68dIEp3txhWN7M05DsdvRU5cUHIHsf7C4Zs44DrrAS+oBvPmoXOjAnPqBXUe9Vajt7UnI/y8 4kTEn+/uWQ== ) ; Key ID = 29912`
	DNSKEY=29912/SEP is now in the chain-of-trust
	DS=29912/SHA-1 verifies DNSKEY=29912/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`verteiltesysteme.net. 3601 IN RRSIG ( DNSKEY 13 2 3601 20240530000000 20240509000000 29912 verteiltesysteme.net. 1hwZW3Tumr5ix9ybrmPLDIPoPcNNOJEiNXIcJ6vrs/VIhrXh0ZX6s3UTKh+NeFPTsl4WqJoRAoWZ q7CSbyb3rQ== )`
	RRSIG=29912 and DNSKEY=29912/SEP verifies the DNSKEY RRset
	DNSKEY=47187 is now in the chain-of-trust
	Query to dns2.registrar-servers.com for sigfail.verteiltesysteme.net/A
	Received 225 bytes from 156.154.133.200
	;; Response received from [156.154.133.200] 225 octets ;; HEADER SECTION ;; id = 34105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN A ;; ANSWER SECTION (2 records) sigfail.verteiltesysteme.net. 1799 IN CNAME ( sigfail.rsa2048-sha256.ippacket.stream. ) sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20240530000000 20240509000000 47187 verteiltesysteme.net. PYpK7DtqSkOh8T+3KI2w8t39ESGUbf0mbXBLuSnld8L/joDRPGFL2dbZivU67HeMGP1h/O+uPzrR fhSws/3Q5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.registrar-servers.com is authoritative for sigfail.verteiltesysteme.net
	Query to dns2.registrar-servers.com for sigfail.verteiltesysteme.net/DNSKEY
	Received 225 bytes from 156.154.133.200
	;; Response received from [156.154.133.200] 225 octets ;; HEADER SECTION ;; id = 20718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.verteiltesysteme.net. IN DNSKEY ;; ANSWER SECTION (2 records) sigfail.verteiltesysteme.net. 1799 IN CNAME ( sigfail.rsa2048-sha256.ippacket.stream. ) sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20240530000000 20240509000000 47187 verteiltesysteme.net. PYpK7DtqSkOh8T+3KI2w8t39ESGUbf0mbXBLuSnld8L/joDRPGFL2dbZivU67HeMGP1h/O+uPzrR fhSws/3Q5Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by verteiltesysteme.net zone
	sigfail.verteiltesysteme.net is a CNAME to sigfail.rsa2048-sha256.ippacket.stream
	Found 1 RRSIGs over CNAME RRset
	`sigfail.verteiltesysteme.net. 1799 IN RRSIG ( CNAME 13 3 1799 20240530000000 20240509000000 47187 verteiltesysteme.net. PYpK7DtqSkOh8T+3KI2w8t39ESGUbf0mbXBLuSnld8L/joDRPGFL2dbZivU67HeMGP1h/O+uPzrR fhSws/3Q5Q== )`
	RRSIG=47187 and DNSKEY=47187 verifies the CNAME RRset

	Query to e.root-servers.net for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 776 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 776 octets ;; HEADER SECTION ;; id = 28435 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stream. 172800 IN NS a.nic.stream. stream. 172800 IN NS b.nic.stream. stream. 172800 IN NS c.nic.stream. stream. 172800 IN NS ns1.dns.nic.stream. stream. 172800 IN NS ns2.dns.nic.stream. stream. 172800 IN NS ns3.dns.nic.stream. stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . WcKEFRknVpvt3zPeLIAJaULDrQIH+Qv5ftZ9LSI56beatr5WH9eLyvjBKqVUnd1zcopVLRD4Tj0t JaPL6Rb2pr3fhoxLAa4oJqun2N7pXGbuoOMsdG+wUTTCsvgl94yqyd8wyeowHXvSDQzeS3hr5dYn 24joc1ZDB4CFN4WhKwHCeiZLTLwkEn6yC4+nEhVWmuK8r4DhjBBqte7YWF+VB8ze28TzMxojPWq6 oSGZ2ayurnfU6f66CnoqKSf+hJh+1qHFtad2a8J2IogmcmlUNit0jdBXMMqjgMxc6V0qrQQUPtfk Oxm/8qBSdz6g/z2D1s0mGfkQu4MLkSToK0cKKA== ) ;; ADDITIONAL SECTION (13 records) a.nic.stream. 172800 IN A 37.209.192.10 b.nic.stream. 172800 IN A 37.209.194.10 c.nic.stream. 172800 IN A 37.209.196.10 ns1.dns.nic.stream. 172800 IN A 156.154.169.50 ns2.dns.nic.stream. 172800 IN A 156.154.170.50 ns3.dns.nic.stream. 172800 IN A 156.154.171.50 a.nic.stream. 172800 IN AAAA 2001:dcd:1::10 b.nic.stream. 172800 IN AAAA 2001:dcd:2::10 c.nic.stream. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.stream. 172800 IN AAAA 2610:a1:1071::1:32 ns2.dns.nic.stream. 172800 IN AAAA 2610:a1:1072::1:32 ns3.dns.nic.stream. 172800 IN AAAA 2610:a1:1073::1:32 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for stream/DNSKEY
	Received 760 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 760 octets ;; HEADER SECTION ;; id = 45863 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) stream. 172800 IN NS ns3.dns.nic.stream. stream. 172800 IN NS b.nic.stream. stream. 172800 IN NS ns1.dns.nic.stream. stream. 172800 IN NS a.nic.stream. stream. 172800 IN NS c.nic.stream. stream. 172800 IN NS ns2.dns.nic.stream. stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . WcKEFRknVpvt3zPeLIAJaULDrQIH+Qv5ftZ9LSI56beatr5WH9eLyvjBKqVUnd1zcopVLRD4Tj0t JaPL6Rb2pr3fhoxLAa4oJqun2N7pXGbuoOMsdG+wUTTCsvgl94yqyd8wyeowHXvSDQzeS3hr5dYn 24joc1ZDB4CFN4WhKwHCeiZLTLwkEn6yC4+nEhVWmuK8r4DhjBBqte7YWF+VB8ze28TzMxojPWq6 oSGZ2ayurnfU6f66CnoqKSf+hJh+1qHFtad2a8J2IogmcmlUNit0jdBXMMqjgMxc6V0qrQQUPtfk Oxm/8qBSdz6g/z2D1s0mGfkQu4MLkSToK0cKKA== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.stream. 172800 IN A 156.154.171.50 ns2.dns.nic.stream. 172800 IN A 156.154.170.50 ns1.dns.nic.stream. 172800 IN A 156.154.169.50 c.nic.stream. 172800 IN A 37.209.196.10 b.nic.stream. 172800 IN A 37.209.194.10 a.nic.stream. 172800 IN A 37.209.192.10 ns3.dns.nic.stream. 172800 IN AAAA 2610:a1:1073::1:32 ns2.dns.nic.stream. 172800 IN AAAA 2610:a1:1072::1:32 ns1.dns.nic.stream. 172800 IN AAAA 2610:a1:1071::1:32 c.nic.stream. 172800 IN AAAA 2001:dcd:3::10 b.nic.stream. 172800 IN AAAA 2001:dcd:2::10 a.nic.stream. 172800 IN AAAA 2001:dcd:1::10 ;; { "EDNS-VERSION": 0 }
	Found child zone stream

stream

	Checking DS between . and stream
	Query to f.root-servers.net for stream/DS
	Received 370 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 370 octets ;; HEADER SECTION ;; id = 59442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DS ;; ANSWER SECTION (2 records) stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 ) stream. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . WcKEFRknVpvt3zPeLIAJaULDrQIH+Qv5ftZ9LSI56beatr5WH9eLyvjBKqVUnd1zcopVLRD4Tj0t JaPL6Rb2pr3fhoxLAa4oJqun2N7pXGbuoOMsdG+wUTTCsvgl94yqyd8wyeowHXvSDQzeS3hr5dYn 24joc1ZDB4CFN4WhKwHCeiZLTLwkEn6yC4+nEhVWmuK8r4DhjBBqte7YWF+VB8ze28TzMxojPWq6 oSGZ2ayurnfU6f66CnoqKSf+hJh+1qHFtad2a8J2IogmcmlUNit0jdBXMMqjgMxc6V0qrQQUPtfk Oxm/8qBSdz6g/z2D1s0mGfkQu4MLkSToK0cKKA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for stream in the . zone
	DS=31735/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`stream. 86400 IN RRSIG ( DS 8 1 86400 20240601050000 20240519040000 5613 . WcKEFRknVpvt3zPeLIAJaULDrQIH+Qv5ftZ9LSI56beatr5WH9eLyvjBKqVUnd1zcopVLRD4Tj0t JaPL6Rb2pr3fhoxLAa4oJqun2N7pXGbuoOMsdG+wUTTCsvgl94yqyd8wyeowHXvSDQzeS3hr5dYn 24joc1ZDB4CFN4WhKwHCeiZLTLwkEn6yC4+nEhVWmuK8r4DhjBBqte7YWF+VB8ze28TzMxojPWq6 oSGZ2ayurnfU6f66CnoqKSf+hJh+1qHFtad2a8J2IogmcmlUNit0jdBXMMqjgMxc6V0qrQQUPtfk Oxm/8qBSdz6g/z2D1s0mGfkQu4MLkSToK0cKKA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=31735/SHA-256 is now in the chain-of-trust
	`stream. 86400 IN DS ( 31735 8 2 b6a0ac51c5711a40b336884ea349544e664814376c82cf270336799225a7fd99 )`
	Query to a.nic.stream for stream/DNSKEY
	Received 1259 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 1259 octets ;; HEADER SECTION ;; id = 5834 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; stream. IN DNSKEY ;; ANSWER SECTION (5 records) stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbliJq9L1EQIBX9XPeyf43eAOlCj+hmOBryO0hAT2MsaMPnWRmv1YajjltUaouaPIj+S2B+b YVJYWqgBAp6gr4lxYn8pNGwVZStSTGQh93gg3vCwFyR7pToxgfwktaDNAItCTiQnekSzPHuo6Gwa pDqrbU4dhI5tI+/tcOxX7rxlIkPOjRqFDHbfR5kEEXrnE+dr+snLOVES8eIo4/RQxtkEWwjZRC9K JiEq0CBbJyq06OATR6lwwkARl53otiiHrXjmWZ+H5imWHCODqgoyKfjUmGiO9QAK7Yb6TKuNfbbM wvUWRfok+HJ+YXWs2sLlIHf54JqgPqYegUv21/PbT2k= ) ; Key ID = 5689 stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbwsJ4j1GTprOt60ps+A+sRFSe3l87KdxP8BPny4LMLue9vWRGhwyM0OUI10l4qHaHQ3zQbA aVBR7k7ZCQc4o4BF6r/joBZHKwzWrzQGfZKWBb6BGVTU12o1D1uJOnNHV38Nl+FawsjnHu2RUFNi cp9QAKuU4j+llzoLaRDhsJkb84fSw7G0BekLAABAOPeViQBl+7FSRwoX2pe7ob5d6RLCh/qSTUIE PXTL4BNTIwMWHsdt/tH9K98skhIwVAF2RILKYuBdUAQhTHIZGNssisRGf5JwKCeBuyHzPhfmknp4 1Bm1RxJlihmVRPMpLy7Y5fFfU+7hD/zx9pYCnrwPrhE= ) ; Key ID = 31735 stream. 7200 IN DNSKEY ( 256 3 8 AwEAAd5gSCm4Pv7RFjviwb6SgxtBmXJ0rFZhPS+3eZU+uN2Os8gsd8ty0alWo0dDxr0xWmX4Iqj1 Shr0cWQxGsuVZ5/WgfNehJo5a5+t/GOfOStgb1FndsmjaTL55iaJv9l+rEn8IL7/iCFKy6acM2y5 rD6FdJ5OeWhHgwgR+3zn2vXkj/ilyRXBbA7VVRo/RvNjPvNsn529hUT9RHAthFt9dXc= ) ; Key ID = 31686 stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612052734 20240513044723 31686 stream. Oo8QKXJqnKAXywKSyN2zXSgjKTz2wC3KXMiAAQwRzMo78lyqbVklW94V7QakWWKblAHrNg4hTt4z U/5S9LxHzzndJ2MjfT+fFnCLYTPkhcq8BwdeJGsabLB/xNO++4Y0sqAC636ofRdBvVmjFS653hw1 /cDHCMpCzct+QsnAq7baAuYlN9ACpm8aTKH/U84nj6vinYrw+qjSmeAMeHD2+w== ) stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612052734 20240513044723 31735 stream. oO+4DMXeBy3ibpig7wERS7rvoAreCLpnnHWDQb72O1bKwOBZAS08cA066iRKml0Rke8dcT0/4KB/ St983ucGva+DpAzQxHZ/27GSgsGvrDkodxIu6EKRL5FsO4OQgbclOgSqgOd8vbPejPLCH1yE8wXG xs1VRkl3aTBBkpNiwEo3vmOZn0T2rs1pPIdygauzb0mgg+4INdIN4B89Tm4q31XtUiorYOBfXWj2 oqSu0bNOCjWOK3dFUcO5mNt1KlGSW3U8KGpDcwOsyXNzEwvLi0jUvQ4niG+pqlpYGKneCsczzo8D 4ga8UnUDmlanjtFdj81QaMPlImQCtxMM2LoNnQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for stream
	`stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbliJq9L1EQIBX9XPeyf43eAOlCj+hmOBryO0hAT2MsaMPnWRmv1YajjltUaouaPIj+S2B+b YVJYWqgBAp6gr4lxYn8pNGwVZStSTGQh93gg3vCwFyR7pToxgfwktaDNAItCTiQnekSzPHuo6Gwa pDqrbU4dhI5tI+/tcOxX7rxlIkPOjRqFDHbfR5kEEXrnE+dr+snLOVES8eIo4/RQxtkEWwjZRC9K JiEq0CBbJyq06OATR6lwwkARl53otiiHrXjmWZ+H5imWHCODqgoyKfjUmGiO9QAK7Yb6TKuNfbbM wvUWRfok+HJ+YXWs2sLlIHf54JqgPqYegUv21/PbT2k= ) ; Key ID = 5689`
	`stream. 7200 IN DNSKEY ( 257 3 8 AwEAAbwsJ4j1GTprOt60ps+A+sRFSe3l87KdxP8BPny4LMLue9vWRGhwyM0OUI10l4qHaHQ3zQbA aVBR7k7ZCQc4o4BF6r/joBZHKwzWrzQGfZKWBb6BGVTU12o1D1uJOnNHV38Nl+FawsjnHu2RUFNi cp9QAKuU4j+llzoLaRDhsJkb84fSw7G0BekLAABAOPeViQBl+7FSRwoX2pe7ob5d6RLCh/qSTUIE PXTL4BNTIwMWHsdt/tH9K98skhIwVAF2RILKYuBdUAQhTHIZGNssisRGf5JwKCeBuyHzPhfmknp4 1Bm1RxJlihmVRPMpLy7Y5fFfU+7hD/zx9pYCnrwPrhE= ) ; Key ID = 31735`
	`stream. 7200 IN DNSKEY ( 256 3 8 AwEAAd5gSCm4Pv7RFjviwb6SgxtBmXJ0rFZhPS+3eZU+uN2Os8gsd8ty0alWo0dDxr0xWmX4Iqj1 Shr0cWQxGsuVZ5/WgfNehJo5a5+t/GOfOStgb1FndsmjaTL55iaJv9l+rEn8IL7/iCFKy6acM2y5 rD6FdJ5OeWhHgwgR+3zn2vXkj/ilyRXBbA7VVRo/RvNjPvNsn529hUT9RHAthFt9dXc= ) ; Key ID = 31686`
	DNSKEY=31735/SEP is now in the chain-of-trust
	DS=31735/SHA-256 verifies DNSKEY=31735/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612052734 20240513044723 31686 stream. Oo8QKXJqnKAXywKSyN2zXSgjKTz2wC3KXMiAAQwRzMo78lyqbVklW94V7QakWWKblAHrNg4hTt4z U/5S9LxHzzndJ2MjfT+fFnCLYTPkhcq8BwdeJGsabLB/xNO++4Y0sqAC636ofRdBvVmjFS653hw1 /cDHCMpCzct+QsnAq7baAuYlN9ACpm8aTKH/U84nj6vinYrw+qjSmeAMeHD2+w== )`
	`stream. 7200 IN RRSIG ( DNSKEY 8 1 7200 20240612052734 20240513044723 31735 stream. oO+4DMXeBy3ibpig7wERS7rvoAreCLpnnHWDQb72O1bKwOBZAS08cA066iRKml0Rke8dcT0/4KB/ St983ucGva+DpAzQxHZ/27GSgsGvrDkodxIu6EKRL5FsO4OQgbclOgSqgOd8vbPejPLCH1yE8wXG xs1VRkl3aTBBkpNiwEo3vmOZn0T2rs1pPIdygauzb0mgg+4INdIN4B89Tm4q31XtUiorYOBfXWj2 oqSu0bNOCjWOK3dFUcO5mNt1KlGSW3U8KGpDcwOsyXNzEwvLi0jUvQ4niG+pqlpYGKneCsczzo8D 4ga8UnUDmlanjtFdj81QaMPlImQCtxMM2LoNnQ== )`
	RRSIG=31686 and DNSKEY=31686 verifies the DNSKEY RRset
	RRSIG=31735 and DNSKEY=31735/SEP verifies the DNSKEY RRset
	DNSKEY=5689/SEP is now in the chain-of-trust
	DNSKEY=31686 is now in the chain-of-trust
	Query to ns1.dns.nic.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 381 bytes from 156.154.169.50
	;; Response received from [156.154.169.50] 381 octets ;; HEADER SECTION ;; id = 1072 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ippacket.stream. 3600 IN NS ns1.ippacket.stream. ippacket.stream. 3600 IN NS ns2.ippacket.stream. ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20240617121856 20240518114300 31686 stream. aIZGT37/YU35tV5UV9vcWIc0N3U4TzbMLU96KE1QUY5QswPVQqHDcPzJbgbAzmdi4KOqx4sb4Jav UfV4uh4V3ridixsxFMEEeS86zIrjwA95qfl2cK3qt1W84lhCi+civU7Eh0M9LPcCxDrOgQNTC5WM TnJDZpB6+VaW4mUFEn8K2BZNB4BAHLebFE6i3pSRjW7AB5Mm/Rr8a3K0LgDG9Q== ) ;; ADDITIONAL SECTION (3 records) ns1.ippacket.stream. 3600 IN A 195.201.14.36 ns2.ippacket.stream. 3600 IN A 195.181.240.97 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.stream for ippacket.stream/DNSKEY
	Received 358 bytes from 37.209.192.10
	;; Response received from [37.209.192.10] 358 octets ;; HEADER SECTION ;; id = 64391 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ippacket.stream. 3600 IN NS ns1.ippacket.stream. ippacket.stream. 3600 IN NS ns2.ippacket.stream. ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20240617121856 20240518114300 31686 stream. aIZGT37/YU35tV5UV9vcWIc0N3U4TzbMLU96KE1QUY5QswPVQqHDcPzJbgbAzmdi4KOqx4sb4Jav UfV4uh4V3ridixsxFMEEeS86zIrjwA95qfl2cK3qt1W84lhCi+civU7Eh0M9LPcCxDrOgQNTC5WM TnJDZpB6+VaW4mUFEn8K2BZNB4BAHLebFE6i3pSRjW7AB5Mm/Rr8a3K0LgDG9Q== ) ;; ADDITIONAL SECTION (3 records) ns2.ippacket.stream. 3600 IN A 195.181.240.97 ns1.ippacket.stream. 3600 IN A 195.201.14.36 ;; { "EDNS-VERSION": 0 }
	Found child zone ippacket.stream

ippacket.stream

	Checking DS between stream and ippacket.stream
	Query to ns1.dns.nic.stream for ippacket.stream/DS
	Received 598 bytes from 156.154.169.50
	;; Response received from [156.154.169.50] 598 octets ;; HEADER SECTION ;; id = 23232 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DS ;; ANSWER SECTION (2 records) ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e ) ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20240617121856 20240518114300 31686 stream. aIZGT37/YU35tV5UV9vcWIc0N3U4TzbMLU96KE1QUY5QswPVQqHDcPzJbgbAzmdi4KOqx4sb4Jav UfV4uh4V3ridixsxFMEEeS86zIrjwA95qfl2cK3qt1W84lhCi+civU7Eh0M9LPcCxDrOgQNTC5WM TnJDZpB6+VaW4mUFEn8K2BZNB4BAHLebFE6i3pSRjW7AB5Mm/Rr8a3K0LgDG9Q== ) ;; AUTHORITY SECTION (7 records) stream. 86400 IN NS a.nic.stream. stream. 86400 IN NS b.nic.stream. stream. 86400 IN NS c.nic.stream. stream. 86400 IN NS ns1.dns.nic.stream. stream. 86400 IN NS ns2.dns.nic.stream. stream. 86400 IN NS ns3.dns.nic.stream. stream. 86400 IN RRSIG ( NS 8 1 86400 20240617073103 20240518070555 31686 stream. wAGBe4vhOhb08aPc2npij3hfK1QSlgSNunZn0jAvi+ROcaTLBqw/r4zCDNFKi9hErs+dxey8/kXW be2tGwH/wwQA7LKJAxqpNp+tshad9X9rGJfsBFgXVuL19b2tfckQh12zLzybh5D5D77kFVk85Sxb Ook1e4QBB5Uv0D2zK/5o+Fm/2HuTN5ZfG4l0o5IaDvbnlilc3r+l5191Bxr9XA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ippacket.stream in the stream zone
	DS=65045/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ippacket.stream. 3600 IN RRSIG ( DS 8 2 3600 20240617121856 20240518114300 31686 stream. aIZGT37/YU35tV5UV9vcWIc0N3U4TzbMLU96KE1QUY5QswPVQqHDcPzJbgbAzmdi4KOqx4sb4Jav UfV4uh4V3ridixsxFMEEeS86zIrjwA95qfl2cK3qt1W84lhCi+civU7Eh0M9LPcCxDrOgQNTC5WM TnJDZpB6+VaW4mUFEn8K2BZNB4BAHLebFE6i3pSRjW7AB5Mm/Rr8a3K0LgDG9Q== )`
	RRSIG=31686 and DNSKEY=31686 verifies the DS RRset
	DS=65045/SHA-256 is now in the chain-of-trust
	`ippacket.stream. 3600 IN DS ( 65045 8 2 840cc28171e145d97180b43f9c415897c9cddff6b9e9acc7e6ab9b096b0b474e )`
	Query to ns2.ippacket.stream for ippacket.stream/DNSKEY
	Received 623 bytes from 195.181.240.97
	;; Response received from [195.181.240.97] 623 octets ;; HEADER SECTION ;; id = 34375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ippacket.stream. IN DNSKEY ;; ANSWER SECTION (2 records) ippacket.stream. 3600 IN DNSKEY ( 257 3 8 AwEAAeWqZHk0Ia6+jrIdosxoyiF+vPidsMTf7epkOcWok4WpxFwNHe/5nlGuBV3UbMzGEaAQDzUD JSkt5OraRUyv8BlMetjsgmd7lgoZ3Q/j099+jR/i9qr2a6UrXrBe0M4RpFUd/ETek0MN4A5Eejfe yHQcUJlinO1OsCBQwJh75+Pw75Q+eu89zGgTfJFBCVXGOb7NbAS2Q9mUoh3FFfFpR5NpJNRgrJIg ln38gbS0WJPoZXFyqSclCasOM2IRFc2P2AuDqXWHKmVIP1wUMX8p+pQoVaqofhYH712lX8H4vKcE KJpoWqVVrqX3Y5r95puuET9VPRy0i2YgeNnkwys1rsk= ) ; Key ID = 65045 ippacket.stream. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240627001509 20240517235325 65045 ippacket.stream. o4YhU7IixhjExrCE5Usvc+AuUXP/AGc3aJlIePKeKt1W83mlBP5L6P/7bXyq1CVq+jJPqIp2fu1J x3rQ9a/MqvYbbioHIk+XOoHFs3FBTIPDCm3EPlGSH1YxbBGkPMq6CUtHFIaaTTVYMITPJp260skF k5hcDnCZlcoQYs4HET1SgXYHbspx1rV1aody3E59Wy03gryM12oP0rpgThgcXwmYfjjKUnPQ//ev dd2UMmveX6g4D5eQAQBdrX1iHz4ZckLC/0Q/Hucar4VOfDmvWMuKpZPJiC7cZj3GxJ5zi47Y8EvO Kt0GyfZ6kRWZtwDlafRG+46A7bAI5qDYNkug4w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for ippacket.stream
	`ippacket.stream. 3600 IN DNSKEY ( 257 3 8 AwEAAeWqZHk0Ia6+jrIdosxoyiF+vPidsMTf7epkOcWok4WpxFwNHe/5nlGuBV3UbMzGEaAQDzUD JSkt5OraRUyv8BlMetjsgmd7lgoZ3Q/j099+jR/i9qr2a6UrXrBe0M4RpFUd/ETek0MN4A5Eejfe yHQcUJlinO1OsCBQwJh75+Pw75Q+eu89zGgTfJFBCVXGOb7NbAS2Q9mUoh3FFfFpR5NpJNRgrJIg ln38gbS0WJPoZXFyqSclCasOM2IRFc2P2AuDqXWHKmVIP1wUMX8p+pQoVaqofhYH712lX8H4vKcE KJpoWqVVrqX3Y5r95puuET9VPRy0i2YgeNnkwys1rsk= ) ; Key ID = 65045`
	DNSKEY=65045/SEP is now in the chain-of-trust
	DS=65045/SHA-256 verifies DNSKEY=65045/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ippacket.stream. 3600 IN RRSIG ( DNSKEY 8 2 3600 20240627001509 20240517235325 65045 ippacket.stream. o4YhU7IixhjExrCE5Usvc+AuUXP/AGc3aJlIePKeKt1W83mlBP5L6P/7bXyq1CVq+jJPqIp2fu1J x3rQ9a/MqvYbbioHIk+XOoHFs3FBTIPDCm3EPlGSH1YxbBGkPMq6CUtHFIaaTTVYMITPJp260skF k5hcDnCZlcoQYs4HET1SgXYHbspx1rV1aody3E59Wy03gryM12oP0rpgThgcXwmYfjjKUnPQ//ev dd2UMmveX6g4D5eQAQBdrX1iHz4ZckLC/0Q/Hucar4VOfDmvWMuKpZPJiC7cZj3GxJ5zi47Y8EvO Kt0GyfZ6kRWZtwDlafRG+46A7bAI5qDYNkug4w== )`
	RRSIG=65045 and DNSKEY=65045/SEP verifies the DNSKEY RRset
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 10259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ippacket.stream is authoritative for sigfail.rsa2048-sha256.ippacket.stream
	Query to ns2.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY
	Received 1078 bytes from 195.181.240.97
	;; Response received from [195.181.240.97] 1078 octets ;; HEADER SECTION ;; id = 25266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) rsa2048-sha256.ippacket.stream. 3600 IN NS ns1.ippacket.stream. rsa2048-sha256.ippacket.stream. 3600 IN DS ( 46436 8 2 0d1fe6641408ca76f58ec02fd2647b7e4f8045ea792924e4df448b8630b3e5ad ) rsa2048-sha256.ippacket.stream. 3600 IN RRSIG ( DS 8 3 3600 20240623211756 20240514201937 65045 ippacket.stream. bPaYgt8IOKI4Y1QnKQ0HZI2E0xQe21U3pTSY/x+pnV/q62D7eANSqpk/Z5BZ2qQ6jYBfHli4b80u ALsQUd6aXelAaTdipcV21DE9SW6+rK9lfS8JGhJzG3IXRuwon+SFabiK2sWsFDMiMBpFRe0Vs6sb 3W793O9+BnbU97SgWQZniW1qajE7IosPEeVOAR4a9Ow5v5t1Rb8bAsn89caHIKbFJFWW3gD16JyE mZPe1XeOROUoVvT286j35TAx2Y0ENRppqwmlfw9m760CGGbyVTTe3kW2ITJt/KlxpPsyjGO6qlt8 KmIepLpX0UzikSfR4eVm4gnTymx/uoEWCt+idQ== ) ;; ADDITIONAL SECTION (5 records) ns1.ippacket.stream. 3600 IN A 195.201.14.36 ns1.ippacket.stream. 3600 IN AAAA 2a01:4f8:13b:2048::113 ns1.ippacket.stream. 3600 IN RRSIG ( A 8 3 3600 20240623211756 20240514201937 65045 ippacket.stream. iOY/Jhy9khmRRP+ZwnMoMCAlSkeDz2jNrFNTNbLO9KKjaEGqtAwBD3PYN12G9AJalUpYLAmJPGZo fumXML0xl2BRsZ5Qw4Imm6qBjgzh6WhdjigP8UATNKkTNqGp/HYy4CBvlUpelfsGBakKhpQbSPm7 sPi3t/3V6F8PDgU5yzo3BjiggSpZRv36lAQqKWNKbYejM2SFmWgNuB/sClRl7jcts+L+VGU9esEi krnJ4j8nB/H6/JrhiwJkSmk0L6RdjZR/BuV0HmOBinuJ+cQyYg/+qXiF8462ITM7OsdeapMJY9fb qcyQjV3/yksu0PHiaYwLZH2V5tZVcG7Urr6zqQ== ) ns1.ippacket.stream. 3600 IN RRSIG ( AAAA 8 3 3600 20240623211756 20240514201937 65045 ippacket.stream. qf5GByKP0QEkVBkUFaxvryyKuw9WM3rQgESv2LO4e4pr7aVc6JQhuleTdVU1JuE51Av3zTFKDOLl d0rRZEnfTUQH4FVO3fVgW5COi7qVQ8uKfYSWMHhHw+opYJO/bO83RC/NkS4oZMoyTjz8xkoe+f9m laNA6R4oAsiDYba2TlOdHfM9prTCFX/1xDcuZzLVCiUm06vV5P9crWnQOwDHh4k1jhKj/IoyoTsc oDSspvbNGgHQwg69L+XQurML3spv7qcyxiIVXganOKsY6S8LtlDUeLNCRcq7gIY+5faRuR2kYtBF /GQ6G+/6OvackY+PivIIMM+/Y2wuuFbeF+EVuQ== ) ;; { "EDNS-VERSION": 0 }
	Found child zone rsa2048-sha256.ippacket.stream

rsa2048-sha256.ippacket.stream

	Checking DS between ippacket.stream and rsa2048-sha256.ippacket.stream
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/DS
	Received 410 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 410 octets ;; HEADER SECTION ;; id = 23374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DS ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 3600 IN DS ( 46436 8 2 0d1fe6641408ca76f58ec02fd2647b7e4f8045ea792924e4df448b8630b3e5ad ) rsa2048-sha256.ippacket.stream. 3600 IN RRSIG ( DS 8 3 3600 20240623211756 20240514201937 65045 ippacket.stream. bPaYgt8IOKI4Y1QnKQ0HZI2E0xQe21U3pTSY/x+pnV/q62D7eANSqpk/Z5BZ2qQ6jYBfHli4b80u ALsQUd6aXelAaTdipcV21DE9SW6+rK9lfS8JGhJzG3IXRuwon+SFabiK2sWsFDMiMBpFRe0Vs6sb 3W793O9+BnbU97SgWQZniW1qajE7IosPEeVOAR4a9Ow5v5t1Rb8bAsn89caHIKbFJFWW3gD16JyE mZPe1XeOROUoVvT286j35TAx2Y0ENRppqwmlfw9m760CGGbyVTTe3kW2ITJt/KlxpPsyjGO6qlt8 KmIepLpX0UzikSfR4eVm4gnTymx/uoEWCt+idQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for rsa2048-sha256.ippacket.stream in the ippacket.stream zone
	DS=46436/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`rsa2048-sha256.ippacket.stream. 3600 IN RRSIG ( DS 8 3 3600 20240623211756 20240514201937 65045 ippacket.stream. bPaYgt8IOKI4Y1QnKQ0HZI2E0xQe21U3pTSY/x+pnV/q62D7eANSqpk/Z5BZ2qQ6jYBfHli4b80u ALsQUd6aXelAaTdipcV21DE9SW6+rK9lfS8JGhJzG3IXRuwon+SFabiK2sWsFDMiMBpFRe0Vs6sb 3W793O9+BnbU97SgWQZniW1qajE7IosPEeVOAR4a9Ow5v5t1Rb8bAsn89caHIKbFJFWW3gD16JyE mZPe1XeOROUoVvT286j35TAx2Y0ENRppqwmlfw9m760CGGbyVTTe3kW2ITJt/KlxpPsyjGO6qlt8 KmIepLpX0UzikSfR4eVm4gnTymx/uoEWCt+idQ== )`
	RRSIG=65045 and DNSKEY=65045/SEP verifies the DS RRset
	DS=46436/SHA-256 is now in the chain-of-trust
	`rsa2048-sha256.ippacket.stream. 3600 IN DS ( 46436 8 2 0d1fe6641408ca76f58ec02fd2647b7e4f8045ea792924e4df448b8630b3e5ad )`
	Query to ns1.ippacket.stream for rsa2048-sha256.ippacket.stream/DNSKEY
	Received 653 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 653 octets ;; HEADER SECTION ;; id = 13163 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (2 records) rsa2048-sha256.ippacket.stream. 60 IN DNSKEY ( 257 3 8 AwEAAbZkTB4JrsdrUE30DjiZpMPvYMZxuOTwXD05GU7JZtUB7UcYeXqnH5U+GneuJ437OGg8VEmm 3SzGI9jv1/RsMOnOofZdljsCtCYPuAbD4BkYhu2XCDrCJbtovibolUJH/r3cAZBBpnmy82mStoxf rsYP9Y4DbqxnJUyM10HnNiuzyofRmoXPFxM41ejA9Ef+4062+cu4kTynzkpWmR8zW8ERnhBdGpuk 7RBywdBGbaPHCjXPnQqzqCrTLx4c1hPCZ+XuvOXA6YNnwr3f9QDXHunnUlqVPB9sz4Y9y6pO4Hr9 xevSdKK7KDP4V2QhBWPeKn76F5QjqMn6ApMcxQNsXgk= ) ; Key ID = 46436 rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( DNSKEY 8 3 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. he9SRrICkY/XHD8QbCf/85qt6mvAt0CJw2EjayqesiZeLg6t+72q9m5IF5q/lxgnUODYzo8JVi64 zuk5L+mThPZUy50TC0TyNRJFxHnUHM0J4QVIYn/gICy/s72l2uV5L9tI6EGuyWpXVCv/k8on/D5v 2yOhKCZOwTwWQ8ZqT0MjmycdlxHaDq7ENW/LuTLoZ7XZHmdWXcVAqSUnTUpgkj6Y6ebOeLhMjAeC xHMgxKuQehZzmWt9ZWBqhLqnPQkTYqf/OcGopQbl/fkqkqeyvbO1RxQLGztiuLMiarfOwq/yZlPY Yiw7UGyVjPTgYlOzfapAjsczkbDccbtd3E4qPg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for rsa2048-sha256.ippacket.stream
	`rsa2048-sha256.ippacket.stream. 60 IN DNSKEY ( 257 3 8 AwEAAbZkTB4JrsdrUE30DjiZpMPvYMZxuOTwXD05GU7JZtUB7UcYeXqnH5U+GneuJ437OGg8VEmm 3SzGI9jv1/RsMOnOofZdljsCtCYPuAbD4BkYhu2XCDrCJbtovibolUJH/r3cAZBBpnmy82mStoxf rsYP9Y4DbqxnJUyM10HnNiuzyofRmoXPFxM41ejA9Ef+4062+cu4kTynzkpWmR8zW8ERnhBdGpuk 7RBywdBGbaPHCjXPnQqzqCrTLx4c1hPCZ+XuvOXA6YNnwr3f9QDXHunnUlqVPB9sz4Y9y6pO4Hr9 xevSdKK7KDP4V2QhBWPeKn76F5QjqMn6ApMcxQNsXgk= ) ; Key ID = 46436`
	DNSKEY=46436/SEP is now in the chain-of-trust
	DS=46436/SHA-256 verifies DNSKEY=46436/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( DNSKEY 8 3 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. he9SRrICkY/XHD8QbCf/85qt6mvAt0CJw2EjayqesiZeLg6t+72q9m5IF5q/lxgnUODYzo8JVi64 zuk5L+mThPZUy50TC0TyNRJFxHnUHM0J4QVIYn/gICy/s72l2uV5L9tI6EGuyWpXVCv/k8on/D5v 2yOhKCZOwTwWQ8ZqT0MjmycdlxHaDq7ENW/LuTLoZ7XZHmdWXcVAqSUnTUpgkj6Y6ebOeLhMjAeC xHMgxKuQehZzmWt9ZWBqhLqnPQkTYqf/OcGopQbl/fkqkqeyvbO1RxQLGztiuLMiarfOwq/yZlPY Yiw7UGyVjPTgYlOzfapAjsczkbDccbtd3E4qPg== )`
	RRSIG=46436 and DNSKEY=46436/SEP verifies the DNSKEY RRset
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 43605 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ippacket.stream is authoritative for sigfail.rsa2048-sha256.ippacket.stream
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/DNSKEY
	Received 830 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 830 octets ;; HEADER SECTION ;; id = 30115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) rsa2048-sha256.ippacket.stream. 60 IN SOA ( ns1.ippacket.stream. root.swznet.de. 20 ;serial 86400 ;refresh 7200 ;retry 2419200 ;expire 600 ;minimum ) rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( SOA 8 3 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. kdFsJKXIHfIn8+d4ycASvYvsZds+gsyyi7FD94YJPR3tj9Vn8m6pdtQ5wgYTwaKkZIgbMkQtNO0g jGhmomNHhKyUZJ/24a0X0UgsIjQy9j8GONXNmB/pIKbxIleOCcDnVPrLejK6OnTT9Vghgf41lqHe H1NIcbj61wHDCh/EJjcwoH9HJkhx/AVQf4Tg3xeOacwqm77XtUgqj0o+b7WsNfRTbvG/qvBPEMkx QVzghfEoLopg5n3k7W7GB1wZZb72l1Z66SvUAUPGSlwbLlIG4+6WvnvEIn9iSP2hh1NxUXd5dtJj BK5hBIfj/l3k2yWisNODlkSSQUpsgT7rNzBrAw== ) sigfail.rsa2048-sha256.ippacket.stream. 60 IN NSEC ( sigok.rsa2048-sha256.ippacket.stream. A AAAA RRSIG NSEC ) sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( NSEC 8 4 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. EMVFzjDHkz7J6ajcGzAkksJHCPBuLxBVKsQeSbddNk++H/9grbrMDnChdk9Tk33se2OFR9CdA1p6 N76xuhO1NBNztrnAiL9UnjgZkpQ+6avBHuRWay9q1AzaAhVKN0JP4fzYm/INWEb7M/4FKGeYwBmj RgsQa1XGCQLK3Qo5uztDGJfo5YnJzv1vdUJW2GrQIdZHIPirDnG725intP/HXGAqGRGmhk6bK0xK xjy1IVI5YF1DYGm3+GOvXLTLe/Wnem54FNQsZnEWoTHpLvn3HW6DeeDP9xUUOaaA47K40FRMrG2o ucgAneyptQcfyhflf1RIHCP4f3y+AazEeNtgaA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by rsa2048-sha256.ippacket.stream zone
	Query to ns1.ippacket.stream for sigfail.rsa2048-sha256.ippacket.stream/A
	Received 401 bytes from 195.201.14.36
	;; Response received from [195.201.14.36] 401 octets ;; HEADER SECTION ;; id = 1527 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; sigfail.rsa2048-sha256.ippacket.stream. IN A ;; ANSWER SECTION (2 records) sigfail.rsa2048-sha256.ippacket.stream. 60 IN A 195.201.14.36 sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	sigfail.rsa2048-sha256.ippacket.stream A RR has value 195.201.14.36
	Found 1 RRSIGs over A RRset
	`sigfail.rsa2048-sha256.ippacket.stream. 60 IN RRSIG ( A 8 4 60 20240610030002 20240430030002 46436 rsa2048-sha256.ippacket.stream. //This+RRSIG+is+deliberately+broken///For+more+information+please+go+to/http s+//wander+science/projects/dns/dnssecresolvertest////////////////////////// //////////////////////////////////////////////////////////////////////////// //////////////////////////////////////////////////////////////////////////// /////////////////////////////////////w== )`
	RRSIG=46436 and DNSKEY=46436/SEP does not verify the A RRset (signature verification failed)
	None of the 1 RRSIG and 1 DNSKEY records validate the A RRset
	The A RRset was not signed by any trusted keys

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sigfail.verteiltesysteme.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: