DNSSEC Debugger - un3.dna.uba.ar

Domain Name:

Time: 2024-05-19 02:11:41 UTC

Analyzing DNSSEC problems for un3.dna.uba.ar

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 60355 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for un3.dna.uba.ar/A
	Received 775 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 775 octets ;; HEADER SECTION ;; id = 1490 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; un3.dna.uba.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ar. 172800 IN NS a.lactld.org. ar. 172800 IN NS c.dns.ar. ar. 172800 IN NS d.dns.ar. ar. 172800 IN NS e.dns.ar. ar. 172800 IN NS f.dns.ar. ar. 172800 IN NS ar.cctld.authdns.ripe.net. ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Kgr6Sz2WQADjilXCjr5OgcvpArqZrYSh8rVU+bHZth9ek3VJWK2MF5Ve0WEWNhoDkR4zXSbllFFV Im3KTpUil89D7huZHunlfgPKRxydrYT2hTxqS8fCEB7ib+d3lS7+npCQXFvgVRqnSXl/sUJBgOwb YhB3h7415w6iYhda1OZOXsuQPAghiS9oiHtivvXjm1/8BXApqIwQTgihrksCd/kyIL84QdZcVmDa sZKCpuDCWD28UJR3kfdy49wuhIFot02I0X8t1exafibArJM3Y6WP5AJmvGipvOlUPqEx86NgTAYZ NUwqPUD4GqhptsU+pngfjqhlCeaZ+OUjktNiXg== ) ;; ADDITIONAL SECTION (13 records) a.lactld.org. 172800 IN A 200.0.68.10 c.dns.ar. 172800 IN A 200.108.148.50 d.dns.ar. 172800 IN A 192.140.126.50 e.dns.ar. 172800 IN A 170.238.66.50 f.dns.ar. 172800 IN A 130.59.31.20 ar.cctld.authdns.ripe.net. 172800 IN A 193.0.9.59 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 c.dns.ar. 172800 IN AAAA 2801:140:10::10 d.dns.ar. 172800 IN AAAA 2801:140:dddd::50 e.dns.ar. 172800 IN AAAA 2801:140:eeee::50 f.dns.ar. 172800 IN AAAA 2001:620:0:ff::20 ar.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::59 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for ar/DNSKEY
	Received 763 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 763 octets ;; HEADER SECTION ;; id = 19891 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ar. 172800 IN NS a.lactld.org. ar. 172800 IN NS c.dns.ar. ar. 172800 IN NS d.dns.ar. ar. 172800 IN NS e.dns.ar. ar. 172800 IN NS f.dns.ar. ar. 172800 IN NS ar.cctld.authdns.ripe.net. ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Kgr6Sz2WQADjilXCjr5OgcvpArqZrYSh8rVU+bHZth9ek3VJWK2MF5Ve0WEWNhoDkR4zXSbllFFV Im3KTpUil89D7huZHunlfgPKRxydrYT2hTxqS8fCEB7ib+d3lS7+npCQXFvgVRqnSXl/sUJBgOwb YhB3h7415w6iYhda1OZOXsuQPAghiS9oiHtivvXjm1/8BXApqIwQTgihrksCd/kyIL84QdZcVmDa sZKCpuDCWD28UJR3kfdy49wuhIFot02I0X8t1exafibArJM3Y6WP5AJmvGipvOlUPqEx86NgTAYZ NUwqPUD4GqhptsU+pngfjqhlCeaZ+OUjktNiXg== ) ;; ADDITIONAL SECTION (13 records) a.lactld.org. 172800 IN A 200.0.68.10 c.dns.ar. 172800 IN A 200.108.148.50 d.dns.ar. 172800 IN A 192.140.126.50 e.dns.ar. 172800 IN A 170.238.66.50 f.dns.ar. 172800 IN A 130.59.31.20 ar.cctld.authdns.ripe.net. 172800 IN A 193.0.9.59 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 c.dns.ar. 172800 IN AAAA 2801:140:10::10 d.dns.ar. 172800 IN AAAA 2801:140:dddd::50 e.dns.ar. 172800 IN AAAA 2801:140:eeee::50 f.dns.ar. 172800 IN AAAA 2001:620:0:ff::20 ar.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::59 ;; { "EDNS-VERSION": 0 }
	Found child zone ar

	Checking DS between . and ar
	Query to e.root-servers.net for ar/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 366 octets ;; HEADER SECTION ;; id = 44248 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DS ;; ANSWER SECTION (2 records) ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Kgr6Sz2WQADjilXCjr5OgcvpArqZrYSh8rVU+bHZth9ek3VJWK2MF5Ve0WEWNhoDkR4zXSbllFFV Im3KTpUil89D7huZHunlfgPKRxydrYT2hTxqS8fCEB7ib+d3lS7+npCQXFvgVRqnSXl/sUJBgOwb YhB3h7415w6iYhda1OZOXsuQPAghiS9oiHtivvXjm1/8BXApqIwQTgihrksCd/kyIL84QdZcVmDa sZKCpuDCWD28UJR3kfdy49wuhIFot02I0X8t1exafibArJM3Y6WP5AJmvGipvOlUPqEx86NgTAYZ NUwqPUD4GqhptsU+pngfjqhlCeaZ+OUjktNiXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ar in the . zone
	DS=19606/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ar. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . Kgr6Sz2WQADjilXCjr5OgcvpArqZrYSh8rVU+bHZth9ek3VJWK2MF5Ve0WEWNhoDkR4zXSbllFFV Im3KTpUil89D7huZHunlfgPKRxydrYT2hTxqS8fCEB7ib+d3lS7+npCQXFvgVRqnSXl/sUJBgOwb YhB3h7415w6iYhda1OZOXsuQPAghiS9oiHtivvXjm1/8BXApqIwQTgihrksCd/kyIL84QdZcVmDa sZKCpuDCWD28UJR3kfdy49wuhIFot02I0X8t1exafibArJM3Y6WP5AJmvGipvOlUPqEx86NgTAYZ NUwqPUD4GqhptsU+pngfjqhlCeaZ+OUjktNiXg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=19606/SHA-256 is now in the chain-of-trust
	`ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c )`
	Query to f.dns.ar for ar/DNSKEY
	Received 1675 bytes from 130.59.31.20
	;; Response received from [130.59.31.20] 1675 octets ;; HEADER SECTION ;; id = 15722 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DNSKEY ;; ANSWER SECTION (4 records) ar. 86400 IN DNSKEY ( 257 3 8 AwEAAeIkYXOlpUg2gb5EJCv3gt/142fRB3/7njw44ZZxWWIRc1xmrVR3NKYKO8XKo9J4Fg7dIICj /vECxLTc5zqD086nIAclezH63vBzHcAOb0HrkmIBSRqhH4BRo4fq51qWI/wrmC6tYoWUtPWuTWBO ZGjM6dyUUnwt9+Q2qz5NnRwAGeqNCjPHkyTI+NIQlokLpC1P9KwitHxXkjn03Us9tyoAMWo5KmSR bt/vrxd1OgFmfWecJZipWXYVkl2yMhIHKGUc0AGp1cr6RU10lv4d1P/IxqTiW4OQnwjX52Mw6SUJ n6frjIgYbPreBNaqHTDiMFQ2NGymge1/9bS8fFS9fbAgrnpMC7Vlv7Gu65KAUhNcSaV/lJUmXO8r VS2eQCQ1MUuIR8FaRJrPgWLWtafMYZODbnDon86CRY/rpxXtKcyb32Yu7zACOwgkgUTZtaKHyd1D 4sst4eub0tkXAZpPR7mHwZ4Ijhn9JGwrcP2mpskiyFhsM1RXXJLgVheZ6anIQ18B+CG+HZzsuH0j 5lE1LJbDZk/jNGNYl1ljdgwebJOVg5CqIdL0xomV1ejlPoSb4lQG1J/IxnCK6Im39kZh+hgrDMlM Z8osYrsyAOl868CG2muBOR/wNMfn00B/Pk7kwqQGUKzzOmNg8lOt+aCL3vHhtuuN/88oZvEnZlUs Ckt5 ) ; Key ID = 19606 ar. 86400 IN DNSKEY ( 256 3 8 AwEAAb70605QGjdOGHWBEHl5FYBQ9EyhCYe6Jc79n0sN73sG8cJC9xVuRSvBdvNZmAsZHsyYYTEo htE+1/C9ORpmBM5pjdBXlDKT8ei428PI9llBHaIOJFWElehDzRRkpx9YtZ49wIU9olvhKLGR+FHs WmafR7N152wr5AGt+DmOzAWC2RG9vu7KVyggYN0sEJ968nyWr06keA35Pjjl6j1dWt6GP7Vs/BgS 12/AenK2O9WHRwYCYGCJ6SxBuPwxVaKJFyMRKojSkBxB76FvxYfptem0MOOVbUAUrOYVyGtjWm9a CDm8sxTa7CNRGDhsRciGteu4GrTde4B7agI1HurdsrE= ) ; Key ID = 14574 ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240610120754 20240512070652 14574 ar. I1HCGZ11r3ORlewVo4ZM5RULl2GjwqFeuEpsSoQgP5gfg2oorOcw8z4x0vOMBnvy4XXomh8RFFgB NpYAvd9gmzQ62HK7T6sbiunY8W2hF6L4zch1D8j4zSAFchTA/SdxBghogfSLrNjVI+mmgNHut1rO /iC7Y3nd4MMbrN2xul1qTsE6H0122CLRVhHo+GdAKqx+CSozzbmDEjhkj9blHDkwsPFwSGhZfQkH TC1ZYUnLdj3Phv+vczunziq2s4YY2CZNVgy7WFBr1uF2jjUlHNeAbQRq03fktLz9yhotTp4ASOzO oYUA4h2fvP/wGbCk8UTqUMrIrFNIknX6Uvrn3w== ) ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240815112233 20240123123456 19606 ar. qob78ckKFHPyr6GQDwFoKm1WI/RQRO2gZwdS/j8BFd4LpGI/flMyz2GOW9l/v2PcQZbvD9SJ/4Hd /b35GYqtFVX0YOgMZ7fhSdm2oLL/crUWgFYQGp3BVmJz2707Yfg5y5Tpxah/jaKNkvWwfUVQ4agy qp1ZzZshdp4VmyMb/QS+tweBw7X/46haIlivnqxSce1O3znR/FEAltXWYYmHfjiaRnQWyoxKdY77 dqM/b+fn4he8yTwynebu/ZGKldWi21t2ppnwiTKekWK3iayw4Z8uom8KzoR6NmRsLn3ORnwY3OGc hqnbjvFgNFGmz/F+IN8hCNVp6sowOEyl6wPIlvsSIBVi21j9Vgs5S70hpPeVYJau7u1K7of2khUg VpozTOkJeeQQZP0PXRPm8rfJncB1cfBPuPVMrA+er5epaemn5fhteL4aMLrKmfSjyBRSSZZgHVNG frYEElR3fjANgOm/v86yp1TpfWZIKh7nI0YSGe1za04jSq3p8wCLyRiiht8Dl9LkqrhtqnKV30vW nlHfZmv7dBthkcp3bOOqJXe5U/HUJTNd+SVi/jZ1gzLsnS/Xaj4LN6pN9ldn1pDy1RVFVXVMBIQe R4OxgA9QGcRq9vrA47jZy+xXzOO4j3/+qMU0fs1mMLQu5Bk4doEZwB9nN5YvF3UYgOcjZkmwrZE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ar
	ar. 86400 IN DNSKEY ( 257 3 8 AwEAAeIkYXOlpUg2gb5EJCv3gt/142fRB3/7njw44ZZxWWIRc1xmrVR3NKYKO8XKo9J4Fg7dIICj /vECxLTc5zqD086nIAclezH63vBzHcAOb0HrkmIBSRqhH4BRo4fq51qWI/wrmC6tYoWUtPWuTWBO ZGjM6dyUUnwt9+Q2qz5NnRwAGeqNCjPHkyTI+NIQlokLpC1P9KwitHxXkjn03Us9tyoAMWo5KmSR bt/vrxd1OgFmfWecJZipWXYVkl2yMhIHKGUc0AGp1cr6RU10lv4d1P/IxqTiW4OQnwjX52Mw6SUJ n6frjIgYbPreBNaqHTDiMFQ2NGymge1/9bS8fFS9fbAgrnpMC7Vlv7Gu65KAUhNcSaV/lJUmXO8r VS2eQCQ1MUuIR8FaRJrPgWLWtafMYZODbnDon86CRY/rpxXtKcyb32Yu7zACOwgkgUTZtaKHyd1D 4sst4eub0tkXAZpPR7mHwZ4Ijhn9JGwrcP2mpskiyFhsM1RXXJLgVheZ6anIQ18B+CG+HZzsuH0j 5lE1LJbDZk/jNGNYl1ljdgwebJOVg5CqIdL0xomV1ejlPoSb4lQG1J/IxnCK6Im39kZh+hgrDMlM Z8osYrsyAOl868CG2muBOR/wNMfn00B/Pk7kwqQGUKzzOmNg8lOt+aCL3vHhtuuN/88oZvEnZlUs Ckt5 ) ; Key ID = 19606
	`ar. 86400 IN DNSKEY ( 256 3 8 AwEAAb70605QGjdOGHWBEHl5FYBQ9EyhCYe6Jc79n0sN73sG8cJC9xVuRSvBdvNZmAsZHsyYYTEo htE+1/C9ORpmBM5pjdBXlDKT8ei428PI9llBHaIOJFWElehDzRRkpx9YtZ49wIU9olvhKLGR+FHs WmafR7N152wr5AGt+DmOzAWC2RG9vu7KVyggYN0sEJ968nyWr06keA35Pjjl6j1dWt6GP7Vs/BgS 12/AenK2O9WHRwYCYGCJ6SxBuPwxVaKJFyMRKojSkBxB76FvxYfptem0MOOVbUAUrOYVyGtjWm9a CDm8sxTa7CNRGDhsRciGteu4GrTde4B7agI1HurdsrE= ) ; Key ID = 14574`
	DNSKEY=19606/SEP is now in the chain-of-trust
	DS=19606/SHA-256 verifies DNSKEY=19606/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240610120754 20240512070652 14574 ar. I1HCGZ11r3ORlewVo4ZM5RULl2GjwqFeuEpsSoQgP5gfg2oorOcw8z4x0vOMBnvy4XXomh8RFFgB NpYAvd9gmzQ62HK7T6sbiunY8W2hF6L4zch1D8j4zSAFchTA/SdxBghogfSLrNjVI+mmgNHut1rO /iC7Y3nd4MMbrN2xul1qTsE6H0122CLRVhHo+GdAKqx+CSozzbmDEjhkj9blHDkwsPFwSGhZfQkH TC1ZYUnLdj3Phv+vczunziq2s4YY2CZNVgy7WFBr1uF2jjUlHNeAbQRq03fktLz9yhotTp4ASOzO oYUA4h2fvP/wGbCk8UTqUMrIrFNIknX6Uvrn3w== )`
	ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240815112233 20240123123456 19606 ar. qob78ckKFHPyr6GQDwFoKm1WI/RQRO2gZwdS/j8BFd4LpGI/flMyz2GOW9l/v2PcQZbvD9SJ/4Hd /b35GYqtFVX0YOgMZ7fhSdm2oLL/crUWgFYQGp3BVmJz2707Yfg5y5Tpxah/jaKNkvWwfUVQ4agy qp1ZzZshdp4VmyMb/QS+tweBw7X/46haIlivnqxSce1O3znR/FEAltXWYYmHfjiaRnQWyoxKdY77 dqM/b+fn4he8yTwynebu/ZGKldWi21t2ppnwiTKekWK3iayw4Z8uom8KzoR6NmRsLn3ORnwY3OGc hqnbjvFgNFGmz/F+IN8hCNVp6sowOEyl6wPIlvsSIBVi21j9Vgs5S70hpPeVYJau7u1K7of2khUg VpozTOkJeeQQZP0PXRPm8rfJncB1cfBPuPVMrA+er5epaemn5fhteL4aMLrKmfSjyBRSSZZgHVNG frYEElR3fjANgOm/v86yp1TpfWZIKh7nI0YSGe1za04jSq3p8wCLyRiiht8Dl9LkqrhtqnKV30vW nlHfZmv7dBthkcp3bOOqJXe5U/HUJTNd+SVi/jZ1gzLsnS/Xaj4LN6pN9ldn1pDy1RVFVXVMBIQe R4OxgA9QGcRq9vrA47jZy+xXzOO4j3/+qMU0fs1mMLQu5Bk4doEZwB9nN5YvF3UYgOcjZkmwrZE= )
	RRSIG=14574 and DNSKEY=14574 verifies the DNSKEY RRset
	RRSIG=19606 and DNSKEY=19606/SEP verifies the DNSKEY RRset
	DNSKEY=14574 is now in the chain-of-trust
	Query to ar.cctld.authdns.ripe.net for un3.dna.uba.ar/A
	Received 656 bytes from 193.0.9.59
	;; Response received from [193.0.9.59] 656 octets ;; HEADER SECTION ;; id = 33298 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; un3.dna.uba.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) uba.ar. 7200 IN NS ns1.uba.ar. uba.ar. 7200 IN NS ns2.uba.ar. uba.ar. 7200 IN NS ns3.uba.ar. uba.ar. 7200 IN NS dns31.cloudns.net. uba.ar. 7200 IN NS dns32.cloudns.net. uba.ar. 7200 IN NS dns33.cloudns.net. uba.ar. 7200 IN NS dns34.cloudns.net. b9hqc4jqnhcsgiae55qfi8o3chttag2l.ar. 7200 IN NSEC3 ( 1 0 10 - b9id70dgtiijoe1dcuk51jc63kt2pje2 NS ) b9hqc4jqnhcsgiae55qfi8o3chttag2l.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20240612222938 20240514180403 14574 ar. WnkGEpoSiajDSfiOHG4nunX0m6vEgEMheKiScLenC8VJPvkeYzqFZd+1obBTSOLc3eoWcSWVMfkt 6Rr5kPcAnAMU9U5cchpwAa7Ruoq17tz9BSl/A5M22g1w+J46C8hyi/tCJ2TlReAuR1bfvbdIKWZd QTjN4kiBN54pB9z9Uia9hIFrwqXqRMJmNDI8UaYPIua5QKo0xEjgts9iQeEWEP4sChYcudsKtJjX yXiNZAmvphev2dDdwZDniDeU4YNOev9lByk5WtVAJTJId+7gUIv+tHbrGFvVlmA/eUV5p0vkDqhz ur1/VNhVUJmMhQTK5WvDYdkbO2JHXBlnSwa+2w== ) ;; ADDITIONAL SECTION (6 records) ns1.uba.ar. 7200 IN A 157.92.1.1 ns2.uba.ar. 7200 IN A 157.92.4.1 ns3.uba.ar. 7200 IN A 157.92.6.1 ns1.uba.ar. 7200 IN AAAA 2001:1318:100c:1::1 ns2.uba.ar. 7200 IN AAAA 2001:1318:100c:4::1 ;; { "EDNS-VERSION": 0 }
	Query to d.dns.ar for uba.ar/DNSKEY
	Received 648 bytes from 192.140.126.50
	;; Response received from [192.140.126.50] 648 octets ;; HEADER SECTION ;; id = 38804 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 6 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uba.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) uba.ar. 7200 IN NS dns31.cloudns.net. uba.ar. 7200 IN NS ns2.uba.ar. uba.ar. 7200 IN NS dns32.cloudns.net. uba.ar. 7200 IN NS ns1.uba.ar. uba.ar. 7200 IN NS dns33.cloudns.net. uba.ar. 7200 IN NS dns34.cloudns.net. uba.ar. 7200 IN NS ns3.uba.ar. B9HQC4JQNHCSGIAE55QFI8O3CHTTAG2L.ar. 7200 IN NSEC3 ( 1 0 10 - b9id70dgtiijoe1dcuk51jc63kt2pje2 NS ) B9HQC4JQNHCSGIAE55QFI8O3CHTTAG2L.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20240612222938 20240514180403 14574 ar. WnkGEpoSiajDSfiOHG4nunX0m6vEgEMheKiScLenC8VJPvkeYzqFZd+1obBTSOLc3eoWcSWVMfkt 6Rr5kPcAnAMU9U5cchpwAa7Ruoq17tz9BSl/A5M22g1w+J46C8hyi/tCJ2TlReAuR1bfvbdIKWZd QTjN4kiBN54pB9z9Uia9hIFrwqXqRMJmNDI8UaYPIua5QKo0xEjgts9iQeEWEP4sChYcudsKtJjX yXiNZAmvphev2dDdwZDniDeU4YNOev9lByk5WtVAJTJId+7gUIv+tHbrGFvVlmA/eUV5p0vkDqhz ur1/VNhVUJmMhQTK5WvDYdkbO2JHXBlnSwa+2w== ) ;; ADDITIONAL SECTION (6 records) ns1.uba.ar. 7200 IN A 157.92.1.1 ns2.uba.ar. 7200 IN A 157.92.4.1 ns3.uba.ar. 7200 IN A 157.92.6.1 ns1.uba.ar. 7200 IN AAAA 2001:1318:100c:1::1 ns2.uba.ar. 7200 IN AAAA 2001:1318:100c:4::1 ;; { "EDNS-VERSION": 0 }
	Found child zone uba.ar

uba.ar

	Checking DS between ar and uba.ar
	Query to f.dns.ar for uba.ar/DS
	Received 747 bytes from 130.59.31.20
	;; Response received from [130.59.31.20] 747 octets ;; HEADER SECTION ;; id = 13915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uba.ar. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ar. 7200 IN SOA ( e.dns.ar. noc.nic.gob.ar. 2024051823 ;serial 600 ;refresh 300 ;retry 1728000 ;expire 7200 ;minimum ) ar. 7200 IN RRSIG ( SOA 8 1 7200 20240617220733 20240519010348 14574 ar. li4W3gXMeooPZb66hvxPQpoMWfNhW2aFrR4ZnDn5oT0Hn8HI3iGqjsYlBXN7EgGLrXvsBdmIY+vi M8/r/aBgaJqsJQhjbPf+/QqEtRcwANRCVfl7kWiukuAEHPl62OLO+iCeUM1BujspCUveayrugNoE eDJ+LpddfEDLwBUdDY6ds6kCm47GD9j9fbrCExVME7X0cDkaqOGhBKzh3aNBOc2XN6pCfXmywQWZ 3sL8VbfyZ8/WAAL9sSgFfb+sjO+AEXmrwa51fF+EPCrfJStObO8jmviy1vH+0TZjxmFoyHP3CJLf HwY1hPlRx+crT0SoLlPkCal48whvNcZ0D1h1hg== ) B9HQC4JQNHCSGIAE55QFI8O3CHTTAG2L.ar. 7200 IN NSEC3 ( 1 0 10 - b9id70dgtiijoe1dcuk51jc63kt2pje2 NS ) B9HQC4JQNHCSGIAE55QFI8O3CHTTAG2L.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20240612222938 20240514180403 14574 ar. WnkGEpoSiajDSfiOHG4nunX0m6vEgEMheKiScLenC8VJPvkeYzqFZd+1obBTSOLc3eoWcSWVMfkt 6Rr5kPcAnAMU9U5cchpwAa7Ruoq17tz9BSl/A5M22g1w+J46C8hyi/tCJ2TlReAuR1bfvbdIKWZd QTjN4kiBN54pB9z9Uia9hIFrwqXqRMJmNDI8UaYPIua5QKo0xEjgts9iQeEWEP4sChYcudsKtJjX yXiNZAmvphev2dDdwZDniDeU4YNOev9lByk5WtVAJTJId+7gUIv+tHbrGFvVlmA/eUV5p0vkDqhz ur1/VNhVUJmMhQTK5WvDYdkbO2JHXBlnSwa+2w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for uba.ar in the ar zone
	Query to ns1.uba.ar for uba.ar/DNSKEY
	Received 84 bytes from 157.92.1.1
	;; Response received from [157.92.1.1] 84 octets ;; HEADER SECTION ;; id = 4807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uba.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uba.ar. 7200 IN SOA ( ns1.uba.ar. oper.ccc.uba.ar. 2024051700 ;serial 600 ;refresh 1200 ;retry 1296000 ;expire 7200 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.uba.ar for un3.dna.uba.ar/A
	Timeout querying ns2.uba.ar/157.92.4.1 for un3.dna.uba.ar/A
	All Queries to ns2.uba.ar for un3.dna.uba.ar/A timed out or failed
	Query to dns31.cloudns.net for un3.dna.uba.ar/A
	Received 94 bytes from 185.136.96.100
	;; Response received from [185.136.96.100] 94 octets ;; HEADER SECTION ;; id = 55268 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; un3.dna.uba.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) dna.uba.ar. 7200 IN NS dns2.iplanisp.com.ar. dna.uba.ar. 7200 IN NS dns1.iplanisp.com.ar. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns34.cloudns.net for dna.uba.ar/DNSKEY
	Received 90 bytes from 185.136.99.100
	;; Response received from [185.136.99.100] 90 octets ;; HEADER SECTION ;; id = 38200 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dna.uba.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (2 records) dna.uba.ar. 7200 IN NS dns2.iplanisp.com.ar. dna.uba.ar. 7200 IN NS dns1.iplanisp.com.ar. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone dna.uba.ar

dna.uba.ar

	Checking DS between uba.ar and dna.uba.ar
	Query to dns33.cloudns.net for dna.uba.ar/DS
	Received 88 bytes from 185.136.98.100
	;; Response received from [185.136.98.100] 88 octets ;; HEADER SECTION ;; id = 14637 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dna.uba.ar. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uba.ar. 7200 IN SOA ( ns1.uba.ar. oper.ccc.uba.ar. 2024051700 ;serial 600 ;refresh 1200 ;retry 1296000 ;expire 7200 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dna.uba.ar in the uba.ar zone
	Query to dns1.iplanisp.com.ar for dna.uba.ar/DNSKEY
	Received 110 bytes from 162.159.26.103
	;; Response received from [162.159.26.103] 110 octets ;; HEADER SECTION ;; id = 39546 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dna.uba.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dna.uba.ar. 86400 IN SOA ( dns1.iplanisp.com.ar. hostmaster.iplan.com.ar. 2023032810 ;serial 3600 ;refresh 600 ;retry 1400000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to dns1.iplanisp.com.ar for un3.dna.uba.ar/A
	Received 114 bytes from 162.159.26.103
	;; Response received from [162.159.26.103] 114 octets ;; HEADER SECTION ;; id = 13173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; un3.dna.uba.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dna.uba.ar. 86400 IN SOA ( dns1.iplanisp.com.ar. hostmaster.iplan.com.ar. 2023032810 ;serial 3600 ;refresh 600 ;retry 1400000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Zone dna.uba.ar (162.159.26.103) returns NXDOMAIN for un3.dna.uba.ar
	No NSEC records in response

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test un3.dna.uba.ar at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: