DNSSEC Analyzer - splivalo.hr

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2018-01-06 08:20:56 UTC, NTP stratum 4

Analyzing DNSSEC problems for splivalo.hr

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. 0 IN DS 19036 8 2 ( 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. 0 IN DS 20326 8 2 ( e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1414 bytes from 2001:503:ba3e:0:0:0:2:30
	;; Answer received from 2001:503:ba3e:0:0:0:2:30 (1414 bytes) ;; HEADER SECTION ;; id = 4327 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY 256 3 8 ( AwEAAaDJd0KOMYGCEF0/cftC2hrFtz5GSn1HOiaxEp053AfbxQ3pT8BEtahPiUkCo1Qx4PECJ23Y waFhfWWjapr6AFxhD8klfZGp95ickoRlm91ZzXX/mcfn9vlUpZK2M8qjljNMzZJSopFY+cxRvib2 Irb6YeP2a0vppaLnvR4BeOyEkQolLqvVHW7UqDFiP/CM15BWBsAIdbyo8L1h3OeP63TaYIrWttjG BILeZinSaJ39amiVs8t00RjTaKVo3vY2k6dje1Rh1ELqjNj8+cKA8iWC3VU7ApkyuGDy631RDILa 6wCgcBVCzfFfOthQILxQra88tNWzCVoryQ89f1WjBJc= ) ; Key ID = 41824 . 172800 IN DNSKEY 256 3 8 ( AwEAAcRIZfxskdElMKgjwvWQO2bQe7EGAvX6zgIaqmbsaMqmMrIpd1+bP7nyULLuL8jWnKAqcaVf al2yJD50gg5zFl5yW/F9dKNXXEFI7VEcGrPyG6/OrA9RBU8pGWm0qxpsNm5UIgTU5IX7pb/0rBj6 7c/R7qln8sjH1ylsr4f1Y3R6p/druiEalKasEjGKA9L2w9jzUQusWxM7fQx/T8c/3x3bsjveD1dl eQ6MJaCx4bpPXYZpqXmSvGn+T2v5350cBVAFqVKhGbjxEyXAweem8cTU4L1p+DV7Ua11a1tMf0Tl u8pkpLwh7NQIggIEhJwEhPeXE3E4C6Q2/PFENcoFERc= ) ; Key ID = 46809 . 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036 . 172800 IN DNSKEY 257 3 8 ( AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG DNSKEY 8 0 172800 ( 20180122000000 20180101000000 19036 . mM30cv0ee5uJ11Fg68dWjwty/Oe0WoNpsIiQCro6fM3bEd0pjhZFmFRtUgSNobxW/aDx5nE5MrSM omMvLCEvDLB8gU3Gk64ItURtK0WDzWKLPHyCLAPA5IXEUBU+t8vCYMHiqjVLOMHy/CJLO0Y36B3W Lvkm/swFnegS1TepcknELqEGaVaaPNgqC3v7VtFpbRY0e4nOG69MZhieM2PsjoJcJKV59zF02ZVD 8potQsFoE6JWH75/WpzpP61o0KnSwUCEzotV0nGHI8Ji6EIm6jkwzU46lTldzn8PHRhnsEmOr/ux dGk57FNE2vrE4fUqx10FJ/xZS8D2K8/lfaG8/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY 256 3 8 ( AwEAAaDJd0KOMYGCEF0/cftC2hrFtz5GSn1HOiaxEp053AfbxQ3pT8BEtahPiUkCo1Qx4PECJ23Y waFhfWWjapr6AFxhD8klfZGp95ickoRlm91ZzXX/mcfn9vlUpZK2M8qjljNMzZJSopFY+cxRvib2 Irb6YeP2a0vppaLnvR4BeOyEkQolLqvVHW7UqDFiP/CM15BWBsAIdbyo8L1h3OeP63TaYIrWttjG BILeZinSaJ39amiVs8t00RjTaKVo3vY2k6dje1Rh1ELqjNj8+cKA8iWC3VU7ApkyuGDy631RDILa 6wCgcBVCzfFfOthQILxQra88tNWzCVoryQ89f1WjBJc= ) ; Key ID = 41824`
	`. 172800 IN DNSKEY 256 3 8 ( AwEAAcRIZfxskdElMKgjwvWQO2bQe7EGAvX6zgIaqmbsaMqmMrIpd1+bP7nyULLuL8jWnKAqcaVf al2yJD50gg5zFl5yW/F9dKNXXEFI7VEcGrPyG6/OrA9RBU8pGWm0qxpsNm5UIgTU5IX7pb/0rBj6 7c/R7qln8sjH1ylsr4f1Y3R6p/druiEalKasEjGKA9L2w9jzUQusWxM7fQx/T8c/3x3bsjveD1dl eQ6MJaCx4bpPXYZpqXmSvGn+T2v5350cBVAFqVKhGbjxEyXAweem8cTU4L1p+DV7Ua11a1tMf0Tl u8pkpLwh7NQIggIEhJwEhPeXE3E4C6Q2/PFENcoFERc= ) ; Key ID = 46809`
	`. 172800 IN DNSKEY 257 3 8 ( AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjFFVQUTf6v58fLjwBd0YI0 EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoXbfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/Q Zxkjf5/Efucp2gaDX6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpzW5hO A2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relSQageu+ipAdTTJ25AsRTAoub8 ONGcLmqrAmRLKBP1dfwhYB4N7knNnulqQxA+Uk1ihz0= ) ; Key ID = 19036`
	`. 172800 IN DNSKEY 257 3 8 ( AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=19036/SEP is now in the chain-of-trust
	DS=19036/SHA-256 verifies DNSKEY=19036/SEP
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG DNSKEY 8 0 172800 ( 20180122000000 20180101000000 19036 . mM30cv0ee5uJ11Fg68dWjwty/Oe0WoNpsIiQCro6fM3bEd0pjhZFmFRtUgSNobxW/aDx5nE5MrSM omMvLCEvDLB8gU3Gk64ItURtK0WDzWKLPHyCLAPA5IXEUBU+t8vCYMHiqjVLOMHy/CJLO0Y36B3W Lvkm/swFnegS1TepcknELqEGaVaaPNgqC3v7VtFpbRY0e4nOG69MZhieM2PsjoJcJKV59zF02ZVD 8potQsFoE6JWH75/WpzpP61o0KnSwUCEzotV0nGHI8Ji6EIm6jkwzU46lTldzn8PHRhnsEmOr/ux dGk57FNE2vrE4fUqx10FJ/xZS8D2K8/lfaG8/w== )`
	RRSIG=19036 and DNSKEY=19036/SEP verifies the DNSKEY RRset
	DNSKEY=41824 is now in the chain-of-trust
	DNSKEY=46809 is now in the chain-of-trust
	Query to a.root-servers.net for splivalo.hr/A
	Received 618 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (618 bytes) ;; HEADER SECTION ;; id = 3178 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hr. 172800 IN NS hr-ns-1.carnet.hr. hr. 172800 IN NS sns-pb.isc.org. hr. 172800 IN NS pch.carnet.hr. hr. 86400 IN DS 63025 8 1 d2e75cc74208f81b1ee50eff524259bda1f72ac1 hr. 86400 IN DS 63025 8 2 ( 1493b6f67a78f844e72953b29b7fee9f6301f41e998bed94427c79a5ab60bae6 ) hr. 86400 IN RRSIG DS 8 1 86400 ( 20180119050000 20180106040000 41824 . M2vBFoEwlddc0iEWHy/OID+qJMAyl6Jksd9krDtc2FQUfsVdVc6rok0lsERxsHRCDkZ3uOC5wB8A wULBNnC0D0271gJbZePMs10mVL9nI0YGWqvfBHrijl1dT/IQ7zrsytdUveLBM/7W3jbCAw7LDt4j fvsxzMokZtJ0P+IE20qxSnZHe7noe8Uxs1uunyfJxOn6zsWrw0hcRYwZ66Q2XrtzrlZnjuC4UvBS QvbQCgceRcUZiv49ePDXoFjV9U4NqDahpTWEUr0S1M+Uh/ss7wYu/yBgdFX44/7xdptxpOmroBir HfnNj4DRpkFNyiZuukmKRWLHcddp5XzWpeljSA== ) ;; ADDITIONAL SECTION (7 records) hr-ns-1.carnet.hr. 172800 IN A 161.53.160.100 hr-ns-1.carnet.hr. 172800 IN AAAA 2001:b68:ff:1::100 sns-pb.isc.org. 172800 IN A 192.5.4.1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 pch.carnet.hr. 172800 IN A 204.61.216.90 pch.carnet.hr. 172800 IN AAAA 2001:500:14:6090:ad::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for hr/DNSKEY
	Received 609 bytes from 2001:500:1::53
	;; Answer received from 2001:500:1::53 (609 bytes) ;; HEADER SECTION ;; id = 43511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) hr. 172800 IN NS pch.carnet.hr. hr. 172800 IN NS sns-pb.isc.org. hr. 172800 IN NS hr-ns-1.carnet.hr. hr. 86400 IN DS 63025 8 1 d2e75cc74208f81b1ee50eff524259bda1f72ac1 hr. 86400 IN DS 63025 8 2 ( 1493b6f67a78f844e72953b29b7fee9f6301f41e998bed94427c79a5ab60bae6 ) hr. 86400 IN RRSIG DS 8 1 86400 ( 20180119050000 20180106040000 41824 . M2vBFoEwlddc0iEWHy/OID+qJMAyl6Jksd9krDtc2FQUfsVdVc6rok0lsERxsHRCDkZ3uOC5wB8A wULBNnC0D0271gJbZePMs10mVL9nI0YGWqvfBHrijl1dT/IQ7zrsytdUveLBM/7W3jbCAw7LDt4j fvsxzMokZtJ0P+IE20qxSnZHe7noe8Uxs1uunyfJxOn6zsWrw0hcRYwZ66Q2XrtzrlZnjuC4UvBS QvbQCgceRcUZiv49ePDXoFjV9U4NqDahpTWEUr0S1M+Uh/ss7wYu/yBgdFX44/7xdptxpOmroBir HfnNj4DRpkFNyiZuukmKRWLHcddp5XzWpeljSA== ) ;; ADDITIONAL SECTION (7 records) pch.carnet.hr. 172800 IN AAAA 2001:500:14:6090:ad::1 sns-pb.isc.org. 172800 IN AAAA 2001:500:2e::1 hr-ns-1.carnet.hr. 172800 IN AAAA 2001:b68:ff:1::100 pch.carnet.hr. 172800 IN A 204.61.216.90 sns-pb.isc.org. 172800 IN A 192.5.4.1 hr-ns-1.carnet.hr. 172800 IN A 161.53.160.100 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone hr

	Checking DS between . and hr
	Query to l.root-servers.net for hr/DS
	Received 402 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (402 bytes) ;; HEADER SECTION ;; id = 20905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hr. IN DS ;; ANSWER SECTION (3 records) hr. 86400 IN DS 63025 8 1 d2e75cc74208f81b1ee50eff524259bda1f72ac1 hr. 86400 IN DS 63025 8 2 ( 1493b6f67a78f844e72953b29b7fee9f6301f41e998bed94427c79a5ab60bae6 ) hr. 86400 IN RRSIG DS 8 1 86400 ( 20180119050000 20180106040000 41824 . M2vBFoEwlddc0iEWHy/OID+qJMAyl6Jksd9krDtc2FQUfsVdVc6rok0lsERxsHRCDkZ3uOC5wB8A wULBNnC0D0271gJbZePMs10mVL9nI0YGWqvfBHrijl1dT/IQ7zrsytdUveLBM/7W3jbCAw7LDt4j fvsxzMokZtJ0P+IE20qxSnZHe7noe8Uxs1uunyfJxOn6zsWrw0hcRYwZ66Q2XrtzrlZnjuC4UvBS QvbQCgceRcUZiv49ePDXoFjV9U4NqDahpTWEUr0S1M+Uh/ss7wYu/yBgdFX44/7xdptxpOmroBir HfnNj4DRpkFNyiZuukmKRWLHcddp5XzWpeljSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for hr in the . zone
	DS=63025/SHA-1 has algorithm RSASHA256
	DS=63025/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`hr. 86400 IN RRSIG DS 8 1 86400 ( 20180119050000 20180106040000 41824 . M2vBFoEwlddc0iEWHy/OID+qJMAyl6Jksd9krDtc2FQUfsVdVc6rok0lsERxsHRCDkZ3uOC5wB8A wULBNnC0D0271gJbZePMs10mVL9nI0YGWqvfBHrijl1dT/IQ7zrsytdUveLBM/7W3jbCAw7LDt4j fvsxzMokZtJ0P+IE20qxSnZHe7noe8Uxs1uunyfJxOn6zsWrw0hcRYwZ66Q2XrtzrlZnjuC4UvBS QvbQCgceRcUZiv49ePDXoFjV9U4NqDahpTWEUr0S1M+Uh/ss7wYu/yBgdFX44/7xdptxpOmroBir HfnNj4DRpkFNyiZuukmKRWLHcddp5XzWpeljSA== )`
	RRSIG=41824 and DNSKEY=41824 verifies the DS RRset
	DS=63025/SHA-1 is now in the chain-of-trust
	`hr. 86400 IN DS 63025 8 1 d2e75cc74208f81b1ee50eff524259bda1f72ac1`
	`hr. 86400 IN DS 63025 8 2 ( 1493b6f67a78f844e72953b29b7fee9f6301f41e998bed94427c79a5ab60bae6 )`
	Query to sns-pb.isc.org for hr/DNSKEY
	Received 907 bytes from 192.5.4.1
	;; Answer received from 192.5.4.1 (907 bytes) ;; HEADER SECTION ;; id = 42297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; hr. IN DNSKEY ;; ANSWER SECTION (4 records) hr. 14400 IN DNSKEY 257 3 8 ( AwEAAbjpdAP0khiWvbe4vhpNY1MvLq07eIWLB778nHqlYSYJ+4tRaYzl/UIo/XH/TJBAR6bLWOPZ 24Htgj8BD6psRpiDykax287fuTPSnmk1f6Uya/Yz8y4oGAVarr66T51sODBcHFCPaSGo8ItinpfF 3tg/BmiZvMSEGSakG396fTMSBCg3Z6WKABOgZ0gGPItJEi4OSIOrsMA+HivsYXns1LP4vaR7QcXP KTU2Jy2Z8jHsMWkXkML8i2ql0EYBlszZbz6dO+G4fJt60TsYYkFN9DJdehYNiwDDgOf8uQuyM9WZ qEO/f9rXzIRm2QO1thesW7lLzArdvzMqDL5hKGrX5Q8= ) ; Key ID = 63025 hr. 14400 IN DNSKEY 256 3 8 ( AwEAAb6aOKbHaQ5PMT3FJr+Skm9IT4XWF5LhFbqRslgS/EDzjG/e/APsMvz7dkMmzF/G3Lq7jNuT YOia009zeNmZRysQb87Tq9+ykhgW/1wSixJg2zj3k8EmGgSxMySSnvxiGH8/CI8HHVLnLiej3JYC mt3JgEEjeH4jGwrNCOjW3HI5 ) ; Key ID = 10758 hr. 14400 IN RRSIG DNSKEY 8 1 14400 ( 20180205070144 20180106070144 10758 hr. F4aN2rEB4avRZbvh6EsM6sqLfPQPqtN6NflGCbNgMlmHZ8uSj1l4Obt8w+v17dgYwma/8IABY8OZ 341ZLlCFcA61Gn3lquCOsA5IsVX2eT5g7pqfRXv/d0CbjGKDqqE6eNrr29k2w4LbcX7rBT1sefUz EofRpEEc9AWKIO6NSLM= ) hr. 14400 IN RRSIG DNSKEY 8 1 14400 ( 20180205070144 20180106070144 63025 hr. XtjRCeu88pQ1sog/eWNNdmDUeANMOPE3bQtXFtun/8cvSKuG1fnLwXhA/g5J+dKcTNnwqCP9Y+M1 1ljGrm5wyejQRpvrrCoB1eGqXFVu3sL6wSQzST0yKcL+uKjmMNWePGiqAr1+O+uyz5A5fsTteFkd Q4GX1+lM4bqZnfjid4DUrN7Tu28pIrZoVSR8ULN4IomJ9P897RDRKaONNEtos5zgyu/fWJFjV09f mTtlvbLmfvPWoDlu+QyYaVEhVyeLizJj16d8lt8IkaPfdNjDAVzczh3L6+dHMlO08ppUFeSoM56N kCMxsYl49f1CunxPcBiSBUAOP3ms6Opu99WGgQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for hr
	`hr. 14400 IN DNSKEY 257 3 8 ( AwEAAbjpdAP0khiWvbe4vhpNY1MvLq07eIWLB778nHqlYSYJ+4tRaYzl/UIo/XH/TJBAR6bLWOPZ 24Htgj8BD6psRpiDykax287fuTPSnmk1f6Uya/Yz8y4oGAVarr66T51sODBcHFCPaSGo8ItinpfF 3tg/BmiZvMSEGSakG396fTMSBCg3Z6WKABOgZ0gGPItJEi4OSIOrsMA+HivsYXns1LP4vaR7QcXP KTU2Jy2Z8jHsMWkXkML8i2ql0EYBlszZbz6dO+G4fJt60TsYYkFN9DJdehYNiwDDgOf8uQuyM9WZ qEO/f9rXzIRm2QO1thesW7lLzArdvzMqDL5hKGrX5Q8= ) ; Key ID = 63025`
	`hr. 14400 IN DNSKEY 256 3 8 ( AwEAAb6aOKbHaQ5PMT3FJr+Skm9IT4XWF5LhFbqRslgS/EDzjG/e/APsMvz7dkMmzF/G3Lq7jNuT YOia009zeNmZRysQb87Tq9+ykhgW/1wSixJg2zj3k8EmGgSxMySSnvxiGH8/CI8HHVLnLiej3JYC mt3JgEEjeH4jGwrNCOjW3HI5 ) ; Key ID = 10758`
	DNSKEY=63025/SEP is now in the chain-of-trust
	DS=63025/SHA-1 verifies DNSKEY=63025/SEP
	DS=63025/SHA-256 verifies DNSKEY=63025/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`hr. 14400 IN RRSIG DNSKEY 8 1 14400 ( 20180205070144 20180106070144 10758 hr. F4aN2rEB4avRZbvh6EsM6sqLfPQPqtN6NflGCbNgMlmHZ8uSj1l4Obt8w+v17dgYwma/8IABY8OZ 341ZLlCFcA61Gn3lquCOsA5IsVX2eT5g7pqfRXv/d0CbjGKDqqE6eNrr29k2w4LbcX7rBT1sefUz EofRpEEc9AWKIO6NSLM= )`
	`hr. 14400 IN RRSIG DNSKEY 8 1 14400 ( 20180205070144 20180106070144 63025 hr. XtjRCeu88pQ1sog/eWNNdmDUeANMOPE3bQtXFtun/8cvSKuG1fnLwXhA/g5J+dKcTNnwqCP9Y+M1 1ljGrm5wyejQRpvrrCoB1eGqXFVu3sL6wSQzST0yKcL+uKjmMNWePGiqAr1+O+uyz5A5fsTteFkd Q4GX1+lM4bqZnfjid4DUrN7Tu28pIrZoVSR8ULN4IomJ9P897RDRKaONNEtos5zgyu/fWJFjV09f mTtlvbLmfvPWoDlu+QyYaVEhVyeLizJj16d8lt8IkaPfdNjDAVzczh3L6+dHMlO08ppUFeSoM56N kCMxsYl49f1CunxPcBiSBUAOP3ms6Opu99WGgQ== )`
	RRSIG=10758 and DNSKEY=10758 verifies the DNSKEY RRset
	RRSIG=63025 and DNSKEY=63025/SEP verifies the DNSKEY RRset
	DNSKEY=10758 is now in the chain-of-trust
	Query to pch.carnet.hr for splivalo.hr/A
	Received 607 bytes from 2001:500:14:6090:ad::1
	;; Answer received from 2001:500:14:6090:ad::1 (607 bytes) ;; HEADER SECTION ;; id = 2192 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) splivalo.hr. 14400 IN NS ns0.splivalo.hr. splivalo.hr. 14400 IN NS ns1.splivalo.hr. 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 4au2v4b5oqmsdo05pe995tr4mfq8n8a3 DNSKEY MX NS NSEC3PARAM RRSIG SOA 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. ig1tPlY+aPiVCfZMJPDGe/WfEhsPDZa8cqLoMefJtfdRVXG+gwZXsroW26CLsivTJmT3+zX8zYcc zuo+bLtV5dvf06xoktPnt0z/dAUHHpgCQryY2d7JsORlP++UD404RW6npao4Yg3/tTC5FsT81Ytd j3Gpjts0XwPvLgB+v6Y= ) KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 ki574p7d9tcga63m5o6o3euvi4510c3t A RRSIG KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. FYIj8uhSGHgWVbAHeRptBQJyZLAoE8IAfZ/y56B+aCOdkT3LnPrKbe0QPK3LF8pjhqU8s7NbT+tz HK/xRN4iZnXonZV4r9REMaGZtNL2Uosq0mksTvbFm8P1gqEFx7gk5BdB3HKcPNGwgm4zgcJrP/9Z r8P0McNo+tGyND4Afio= ) ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 14400 IN A 146.185.134.221 ns1.splivalo.hr. 14400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to pch.carnet.hr for splivalo.hr/DNSKEY
	Received 607 bytes from 2001:500:14:6090:ad::1
	;; Answer received from 2001:500:14:6090:ad::1 (607 bytes) ;; HEADER SECTION ;; id = 845 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) splivalo.hr. 14400 IN NS ns0.splivalo.hr. splivalo.hr. 14400 IN NS ns1.splivalo.hr. 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 4au2v4b5oqmsdo05pe995tr4mfq8n8a3 DNSKEY MX NS NSEC3PARAM RRSIG SOA 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. ig1tPlY+aPiVCfZMJPDGe/WfEhsPDZa8cqLoMefJtfdRVXG+gwZXsroW26CLsivTJmT3+zX8zYcc zuo+bLtV5dvf06xoktPnt0z/dAUHHpgCQryY2d7JsORlP++UD404RW6npao4Yg3/tTC5FsT81Ytd j3Gpjts0XwPvLgB+v6Y= ) KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 ki574p7d9tcga63m5o6o3euvi4510c3t A RRSIG KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. FYIj8uhSGHgWVbAHeRptBQJyZLAoE8IAfZ/y56B+aCOdkT3LnPrKbe0QPK3LF8pjhqU8s7NbT+tz HK/xRN4iZnXonZV4r9REMaGZtNL2Uosq0mksTvbFm8P1gqEFx7gk5BdB3HKcPNGwgm4zgcJrP/9Z r8P0McNo+tGyND4Afio= ) ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 14400 IN A 146.185.134.221 ns1.splivalo.hr. 14400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone splivalo.hr

splivalo.hr

	Checking DS between hr and splivalo.hr
	Query to hr-ns-1.carnet.hr for splivalo.hr/DS
	Received 765 bytes from 161.53.160.100
	;; Answer received from 161.53.160.100 (765 bytes) ;; HEADER SECTION ;; id = 64333 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 4au2v4b5oqmsdo05pe995tr4mfq8n8a3 DNSKEY MX NS NSEC3PARAM RRSIG SOA 3UL23FT7O406V14UR7M4DOT4OCUV5AT1.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. ig1tPlY+aPiVCfZMJPDGe/WfEhsPDZa8cqLoMefJtfdRVXG+gwZXsroW26CLsivTJmT3+zX8zYcc zuo+bLtV5dvf06xoktPnt0z/dAUHHpgCQryY2d7JsORlP++UD404RW6npao4Yg3/tTC5FsT81Ytd j3Gpjts0XwPvLgB+v6Y= ) hr. 3600 IN SOA registrar.carnet.hr. hostmaster.carnet.hr. ( 1515224882 ;serial 7200 ;refresh 3600 ;retry 604800 ;expire 3600 ) ;minimum hr. 3600 IN RRSIG SOA 8 1 14400 ( 20180205070144 20180106070144 10758 hr. CP5REI0ojquk+RoaXTHJt87a2pCJXslO3qm9mRYTlKLy3eo+20eoySY2hWAIfozWtw5p0WN+exM5 ptJ7ZU4Svp5DHMsig1niwDBlbg6zSy2mfQ6gGXphWJWJK9573Z+p59UZ0TvPlIsdtCrHjOn4HSmv 0BQFJmHA/WLmNbPf5tM= ) KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN NSEC3 1 1 10 86d354bfa3f9efc2 ki574p7d9tcga63m5o6o3euvi4510c3t A RRSIG KFJ3D0D8G4O2OGA43KTEKSFH3QE439TB.hr. 3600 IN RRSIG NSEC3 8 2 3600 ( 20180205070144 20180106070144 10758 hr. FYIj8uhSGHgWVbAHeRptBQJyZLAoE8IAfZ/y56B+aCOdkT3LnPrKbe0QPK3LF8pjhqU8s7NbT+tz HK/xRN4iZnXonZV4r9REMaGZtNL2Uosq0mksTvbFm8P1gqEFx7gk5BdB3HKcPNGwgm4zgcJrP/9Z r8P0McNo+tGyND4Afio= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for splivalo.hr in the hr zone
	Query to ns0.splivalo.hr for splivalo.hr/DNSKEY
	Received 85 bytes from 146.185.134.221
	;; Answer received from 146.185.134.221 (85 bytes) ;; HEADER SECTION ;; id = 29297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) splivalo.hr. 86400 IN SOA ns0.splivalo.hr. root.splivalo.hr. ( 2017121001 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ) ;minimum ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns1.splivalo.hr for splivalo.hr/A
	Received 124 bytes from 146.185.134.221
	;; Answer received from 146.185.134.221 (124 bytes) ;; HEADER SECTION ;; id = 7667 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN A ;; ANSWER SECTION (1 record) splivalo.hr. 86400 IN A 78.47.44.158 ;; AUTHORITY SECTION (2 records) splivalo.hr. 86400 IN NS ns0.splivalo.hr. splivalo.hr. 86400 IN NS ns1.splivalo.hr. ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 86400 IN A 146.185.134.221 ns1.splivalo.hr. 86400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	splivalo.hr is authoritative for splivalo.hr
	Query to ns0.splivalo.hr for splivalo.hr/SOA
	Received 149 bytes from 146.185.134.221
	;; Answer received from 146.185.134.221 (149 bytes) ;; HEADER SECTION ;; id = 19663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN SOA ;; ANSWER SECTION (1 record) splivalo.hr. 86400 IN SOA ns0.splivalo.hr. root.splivalo.hr. ( 2017121001 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ) ;minimum ;; AUTHORITY SECTION (2 records) splivalo.hr. 86400 IN NS ns1.splivalo.hr. splivalo.hr. 86400 IN NS ns0.splivalo.hr. ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 86400 IN A 146.185.134.221 ns1.splivalo.hr. 86400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.splivalo.hr for splivalo.hr/SOA
	Received 149 bytes from 146.185.134.221
	;; Answer received from 146.185.134.221 (149 bytes) ;; HEADER SECTION ;; id = 4414 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN SOA ;; ANSWER SECTION (1 record) splivalo.hr. 86400 IN SOA ns0.splivalo.hr. root.splivalo.hr. ( 2017121001 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ) ;minimum ;; AUTHORITY SECTION (2 records) splivalo.hr. 86400 IN NS ns1.splivalo.hr. splivalo.hr. 86400 IN NS ns0.splivalo.hr. ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 86400 IN A 146.185.134.221 ns1.splivalo.hr. 86400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.splivalo.hr for splivalo.hr/A
	Received 124 bytes from 146.185.134.221
	;; Answer received from 146.185.134.221 (124 bytes) ;; HEADER SECTION ;; id = 11718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; splivalo.hr. IN A ;; ANSWER SECTION (1 record) splivalo.hr. 86400 IN A 78.47.44.158 ;; AUTHORITY SECTION (2 records) splivalo.hr. 86400 IN NS ns0.splivalo.hr. splivalo.hr. 86400 IN NS ns1.splivalo.hr. ;; ADDITIONAL SECTION (3 records) ns0.splivalo.hr. 86400 IN A 146.185.134.221 ns1.splivalo.hr. 86400 IN A 146.185.134.221 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	splivalo.hr A RR has value 78.47.44.158
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test splivalo.hr at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: