DNSSEC Debugger - spambarrier.de

Domain Name:

Time: 2024-05-21 18:50:25 UTC

Analyzing DNSSEC problems for spambarrier.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 5085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to c.root-servers.net for spambarrier.de/A
	Received 750 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 750 octets ;; HEADER SECTION ;; id = 12330 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS n.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . cO+ry2bgf6tyXXv8bQFDvdJjuJs8fnlqukDxulyqTYtF5I5B+0Y/TD5rvxoPAbbh9w2tN6Y+ocDj ys9Z2ankUGx8/VoFpMA0+pr/yuk4uVSBfz3qpkfMGdQ2T45/zv0+2jQJ51kS55J1XiSBEmTmM5dJ w0so/vpKz1sXN5yMy5VKcUrj86eclmOycF3kAonJONT+YUcNM3EN8YwaGHtiGnsrG6iiabHtPEEb umd3InZfeWPnRyKSOo3rIRcJpiN3W4uod7rMalEemvjrvlvXaOAB2OqbSWDn1XPAhFr60a6QRx/z jd6hRzNb2cJMPfSfqb4rvm/WOYnlp5e5vHJhGg== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Query to m.root-servers.net for de/DNSKEY
	Received 738 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 738 octets ;; HEADER SECTION ;; id = 57725 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS z.nic.de. de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . R+I7Sf+rSedPnvdXb9WGL/6XViyXzMlLkPd2+0vI+v4m340rA3IpNIxRM1wpthjFcJaPk4ogkQZn TIM46TFgnnZ6VCdPgcz59/kmBh2AAVP8NTqJN5zLEsyAjjhFrv3Ng4WKlwnj+baYbrX4RefH3Hnf EFsqBUVZSfnKalj0g+on9QS2IuKcl69jS6aomua0cBQJa4F0F5FDtoXmy2tnto2jOYAFoFaFgK31 R3XcNo+6VbCy9DsEs/yanjVZx7AFzdvQa8/HXuaFhEzua9Mn7Bso2og41vyHacCZ1weWXEGK24tj jaVEwSTuCN5vgBzxHquTIGVyPCdWxfmawcEDtA== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to d.root-servers.net for de/DS
	Received 366 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 366 octets ;; HEADER SECTION ;; id = 8215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . R+I7Sf+rSedPnvdXb9WGL/6XViyXzMlLkPd2+0vI+v4m340rA3IpNIxRM1wpthjFcJaPk4ogkQZn TIM46TFgnnZ6VCdPgcz59/kmBh2AAVP8NTqJN5zLEsyAjjhFrv3Ng4WKlwnj+baYbrX4RefH3Hnf EFsqBUVZSfnKalj0g+on9QS2IuKcl69jS6aomua0cBQJa4F0F5FDtoXmy2tnto2jOYAFoFaFgK31 R3XcNo+6VbCy9DsEs/yanjVZx7AFzdvQa8/HXuaFhEzua9Mn7Bso2og41vyHacCZ1weWXEGK24tj jaVEwSTuCN5vgBzxHquTIGVyPCdWxfmawcEDtA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240603170000 20240521160000 5613 . R+I7Sf+rSedPnvdXb9WGL/6XViyXzMlLkPd2+0vI+v4m340rA3IpNIxRM1wpthjFcJaPk4ogkQZn TIM46TFgnnZ6VCdPgcz59/kmBh2AAVP8NTqJN5zLEsyAjjhFrv3Ng4WKlwnj+baYbrX4RefH3Hnf EFsqBUVZSfnKalj0g+on9QS2IuKcl69jS6aomua0cBQJa4F0F5FDtoXmy2tnto2jOYAFoFaFgK31 R3XcNo+6VbCy9DsEs/yanjVZx7AFzdvQa8/HXuaFhEzua9Mn7Bso2og41vyHacCZ1weWXEGK24tj jaVEwSTuCN5vgBzxHquTIGVyPCdWxfmawcEDtA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to a.nic.de for de/DNSKEY
	Received 745 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 745 octets ;; HEADER SECTION ;; id = 39573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240603235039 20240520222039 26755 de. gpx6NBrzNkOYXMngUY7KvpgiBMgB8/abQFtPRak68HHseNqv+3jLkCw1R6OaHu36ta50YW3IqxpW yon4xVnNiD1MAfb4d+5Jdis6EwHWGMjz2bu7cLPtscvKP/bTts7+cKbUgJeHu8j/3H8Z0129N11J jDwKw/GxWfhApP1FpZidWnmbKNgyZmgWaAU9Ojh6CRqPMFf4NoJYTq/4Nwss6ajTgJGiAkgmp5ox nY4tT1EYfbkf+nGrLoDNSj+sMF4QC2dZxDWYCMwkmPiQOUgZFjj3Is8C1X/aGb6Zqv2sCpuqlYNR Ov82a/moSrxBLq6sFyHRzoukjdYcOdwlFa84dg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240603235039 20240520222039 26755 de. gpx6NBrzNkOYXMngUY7KvpgiBMgB8/abQFtPRak68HHseNqv+3jLkCw1R6OaHu36ta50YW3IqxpW yon4xVnNiD1MAfb4d+5Jdis6EwHWGMjz2bu7cLPtscvKP/bTts7+cKbUgJeHu8j/3H8Z0129N11J jDwKw/GxWfhApP1FpZidWnmbKNgyZmgWaAU9Ojh6CRqPMFf4NoJYTq/4Nwss6ajTgJGiAkgmp5ox nY4tT1EYfbkf+nGrLoDNSj+sMF4QC2dZxDWYCMwkmPiQOUgZFjj3Is8C1X/aGb6Zqv2sCpuqlYNR Ov82a/moSrxBLq6sFyHRzoukjdYcOdwlFa84dg== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56445 is now in the chain-of-trust
	Query to s.de.net for spambarrier.de/A
	Received 318 bytes from 195.243.137.26
	;; Response received from [195.243.137.26] 318 octets ;; HEADER SECTION ;; id = 32346 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) spambarrier.de. 86400 IN NS ns.inwx.de. spambarrier.de. 86400 IN NS ns2.inwx.de. spambarrier.de. 86400 IN NS ns3.inwx.eu. spambarrier.de. 86400 IN DS ( 5965 13 2 9d52d8fd09edb88248acfa45301944a7f89406fa5fc3d8fa98eec8dbfbbf0452 ) spambarrier.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. SPbsY2aDYsEoUfiFFsdWxHrsF+inO5IG06mV1U89RzxrMaUGhlJdwPXCee94ldZa+oeeGmNY6Vym sN+UoZPJxuVu/o/U/tmWLwTiHO8fB4Xq2F1E5lWyGSRN2LJS5cWAE+ol9Twd8T81HuVQAl3TzTKX F1zGT4Jsom/gFs5yYoo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f.nic.de for spambarrier.de/DNSKEY
	Received 318 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 318 octets ;; HEADER SECTION ;; id = 64693 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) spambarrier.de. 86400 IN NS ns.inwx.de. spambarrier.de. 86400 IN NS ns2.inwx.de. spambarrier.de. 86400 IN NS ns3.inwx.eu. spambarrier.de. 86400 IN DS ( 5965 13 2 9d52d8fd09edb88248acfa45301944a7f89406fa5fc3d8fa98eec8dbfbbf0452 ) spambarrier.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. SPbsY2aDYsEoUfiFFsdWxHrsF+inO5IG06mV1U89RzxrMaUGhlJdwPXCee94ldZa+oeeGmNY6Vym sN+UoZPJxuVu/o/U/tmWLwTiHO8fB4Xq2F1E5lWyGSRN2LJS5cWAE+ol9Twd8T81HuVQAl3TzTKX F1zGT4Jsom/gFs5yYoo= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone spambarrier.de

spambarrier.de

	Checking DS between de and spambarrier.de
	Query to n.de.net for spambarrier.de/DS
	Received 253 bytes from 194.146.107.6
	;; Response received from [194.146.107.6] 253 octets ;; HEADER SECTION ;; id = 59313 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN DS ;; ANSWER SECTION (2 records) spambarrier.de. 86400 IN DS ( 5965 13 2 9d52d8fd09edb88248acfa45301944a7f89406fa5fc3d8fa98eec8dbfbbf0452 ) spambarrier.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. SPbsY2aDYsEoUfiFFsdWxHrsF+inO5IG06mV1U89RzxrMaUGhlJdwPXCee94ldZa+oeeGmNY6Vym sN+UoZPJxuVu/o/U/tmWLwTiHO8fB4Xq2F1E5lWyGSRN2LJS5cWAE+ol9Twd8T81HuVQAl3TzTKX F1zGT4Jsom/gFs5yYoo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for spambarrier.de in the de zone
	DS=5965/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`spambarrier.de. 86400 IN RRSIG ( DS 8 2 86400 20240529070341 20240515053341 56445 de. SPbsY2aDYsEoUfiFFsdWxHrsF+inO5IG06mV1U89RzxrMaUGhlJdwPXCee94ldZa+oeeGmNY6Vym sN+UoZPJxuVu/o/U/tmWLwTiHO8fB4Xq2F1E5lWyGSRN2LJS5cWAE+ol9Twd8T81HuVQAl3TzTKX F1zGT4Jsom/gFs5yYoo= )`
	RRSIG=56445 and DNSKEY=56445 verifies the DS RRset
	DS=5965/SHA-256 is now in the chain-of-trust
	`spambarrier.de. 86400 IN DS ( 5965 13 2 9d52d8fd09edb88248acfa45301944a7f89406fa5fc3d8fa98eec8dbfbbf0452 )`
	Query to ns2.inwx.de for spambarrier.de/DNSKEY
	Received 233 bytes from 176.97.158.104
	;; Response received from [176.97.158.104] 233 octets ;; HEADER SECTION ;; id = 20888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN DNSKEY ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. CmESCScCWNT5TQQSvE6qA+fhABDHaQYGB+Bq+MwMIRMj+/0w2g29NtX3IX6LlHCWg1UlsEb8CU1a YSX/wdQpXw== ) spambarrier.de. 3600 IN DNSKEY ( 257 3 13 +ONW+NKtPLWrx+BAviodXaYj8q0n6KTCb+D/SdDwBKPASP5ghYNWzWcnYQzJ5iHNfHFrWvMEsJZS N8XDhToqtQ== ) ; Key ID = 5965 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for spambarrier.de
	`spambarrier.de. 3600 IN DNSKEY ( 257 3 13 +ONW+NKtPLWrx+BAviodXaYj8q0n6KTCb+D/SdDwBKPASP5ghYNWzWcnYQzJ5iHNfHFrWvMEsJZS N8XDhToqtQ== ) ; Key ID = 5965`
	DNSKEY=5965/SEP is now in the chain-of-trust
	DS=5965/SHA-256 verifies DNSKEY=5965/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`spambarrier.de. 3600 IN RRSIG ( DNSKEY 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. CmESCScCWNT5TQQSvE6qA+fhABDHaQYGB+Bq+MwMIRMj+/0w2g29NtX3IX6LlHCWg1UlsEb8CU1a YSX/wdQpXw== )`
	RRSIG=5965 and DNSKEY=5965/SEP verifies the DNSKEY RRset
	Query to ns2.inwx.de for spambarrier.de/A
	Received 169 bytes from 176.97.158.104
	;; Response received from [176.97.158.104] 169 octets ;; HEADER SECTION ;; id = 934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN A 116.203.137.55 spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.inwx.de is authoritative for spambarrier.de
	Found RRSIG signed by spambarrier.de zone
	Query to ns.inwx.de for spambarrier.de/SOA
	Received 208 bytes from 192.174.68.104
	;; Response received from [192.174.68.104] 208 octets ;; HEADER SECTION ;; id = 46599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN SOA ;; ANSWER SECTION (2 records) spambarrier.de. 86400 IN SOA ( ns.inwx.de. hostmaster.inwx.de. 2024051401 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) spambarrier.de. 86400 IN RRSIG ( SOA 13 2 86400 20240530000000 20240509000000 5965 spambarrier.de. MAmwgYRY7NLj+G2uzSqV5eN1WZNQI30YwSngievIT8RvVWK+KoYQRTWLiMVgs2NA7B0IEUca3eFM oWEleudUuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.inwx.eu for spambarrier.de/SOA
	Received 208 bytes from 45.87.158.53
	;; Response received from [45.87.158.53] 208 octets ;; HEADER SECTION ;; id = 6142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN SOA ;; ANSWER SECTION (2 records) spambarrier.de. 86400 IN RRSIG ( SOA 13 2 86400 20240530000000 20240509000000 5965 spambarrier.de. +Z+d4RTNesHnMrirPeDmBnMx8wiczDMPFlHUbCESfXH1m6LIyCMzLOXEPfmsynaPdtHbI9JUovxv W+emJMDffw== ) spambarrier.de. 86400 IN SOA ( ns.inwx.de. hostmaster.inwx.de. 2024051401 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.inwx.de for spambarrier.de/A
	Received 169 bytes from 176.97.158.104
	;; Response received from [176.97.158.104] 169 octets ;; HEADER SECTION ;; id = 4133 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN A 116.203.137.55 spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	spambarrier.de A RR has value 116.203.137.55
	Found 1 RRSIGs over A RRset
	`spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== )`
	RRSIG=5965 and DNSKEY=5965/SEP verifies the A RRset

spambarrier.de

	Query to ns3.inwx.eu for spambarrier.de/A
	Received 169 bytes from 45.87.158.53
	;; Response received from [45.87.158.53] 169 octets ;; HEADER SECTION ;; id = 61057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN A 116.203.137.55 spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. 70RDFfnqBORg6f4spbmDUw5QdeC7GXTW99ut94rD+3Y4uIW5H93+YhUZXYERyLgHXBaH1+Ah3psh yBb6c1cYtw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.inwx.eu is authoritative for spambarrier.de
	Found RRSIG signed by spambarrier.de zone
	Query to ns3.inwx.eu for spambarrier.de/A
	Received 169 bytes from 45.87.158.53
	;; Response received from [45.87.158.53] 169 octets ;; HEADER SECTION ;; id = 29226 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN A 116.203.137.55 spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. 70RDFfnqBORg6f4spbmDUw5QdeC7GXTW99ut94rD+3Y4uIW5H93+YhUZXYERyLgHXBaH1+Ah3psh yBb6c1cYtw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	spambarrier.de A RR has value 116.203.137.55
	Found 1 RRSIGs over A RRset
	`spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. 70RDFfnqBORg6f4spbmDUw5QdeC7GXTW99ut94rD+3Y4uIW5H93+YhUZXYERyLgHXBaH1+Ah3psh yBb6c1cYtw== )`
	RRSIG=5965 and DNSKEY=5965/SEP verifies the A RRset

spambarrier.de

	Query to ns.inwx.de for spambarrier.de/A
	Received 169 bytes from 192.174.68.104
	;; Response received from [192.174.68.104] 169 octets ;; HEADER SECTION ;; id = 13264 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== ) spambarrier.de. 3600 IN A 116.203.137.55 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.inwx.de is authoritative for spambarrier.de
	Found RRSIG signed by spambarrier.de zone
	Query to ns.inwx.de for spambarrier.de/A
	Received 169 bytes from 192.174.68.104
	;; Response received from [192.174.68.104] 169 octets ;; HEADER SECTION ;; id = 16302 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; spambarrier.de. IN A ;; ANSWER SECTION (2 records) spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== ) spambarrier.de. 3600 IN A 116.203.137.55 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	spambarrier.de A RR has value 116.203.137.55
	Found 1 RRSIGs over A RRset
	`spambarrier.de. 3600 IN RRSIG ( A 13 2 3600 20240530000000 20240509000000 5965 spambarrier.de. OuVgMSEGJmKWRdgT1qcV5vGIQGokZ5kYy5TNQGxjiKDCE0rBTzxLf8W7/6csaWeTbI+dNaVSYjnf d3pVdHv7KA== )`
	RRSIG=5965 and DNSKEY=5965/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test spambarrier.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: