DNSSEC Debugger - uni-frankfurt.de

Domain Name:

Time: 2024-05-13 00:43:13 UTC

Analyzing DNSSEC problems for uni-frankfurt.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 15073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for uni-frankfurt.de/A
	Received 752 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 752 octets ;; HEADER SECTION ;; id = 56303 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS n.de.net. de. 172800 IN NS f.nic.de. de. 172800 IN NS z.nic.de. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS s.de.net. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a+e94Za7sj46I8phS6TvRx1q1fzfMceJ0l05uzoZGIB/Z4kIaooCgWODiWSopKWy5xjyEBYhaLHH kkN/yI/5dvym0MTrLxG8g3rROC6TuSYjlIZpeE4GBq7PpcjBjaONh2NKPxy8qLeJEM/d0Zj6Oxw3 QKanPrL0QtKXEASr4AfHwM9TccKCm/bhOX3+HHZheNAu8vje0qSddeXEwIWbW57BIf7JSR2HEC4x DE7GHOd5iegTQIYPP7j7Qj3QgeLZyWNP1tBgnh1r5AnFW0+FckIZzgk3YY+rSV8JJeB6Y09p/D7L 5D8L3qN0xVJTnXgNwde3QDgTXhXIzUA2ChOrxA== ) ;; ADDITIONAL SECTION (13 records) z.nic.de. 172800 IN A 194.246.96.1 s.de.net. 172800 IN A 195.243.137.26 n.de.net. 172800 IN A 194.146.107.6 l.de.net. 172800 IN A 77.67.63.105 f.nic.de. 172800 IN A 81.91.164.5 a.nic.de. 172800 IN A 194.0.0.53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 a.nic.de. 172800 IN AAAA 2001:678:2::53 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for de/DNSKEY
	Received 742 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 742 octets ;; HEADER SECTION ;; id = 25234 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a+e94Za7sj46I8phS6TvRx1q1fzfMceJ0l05uzoZGIB/Z4kIaooCgWODiWSopKWy5xjyEBYhaLHH kkN/yI/5dvym0MTrLxG8g3rROC6TuSYjlIZpeE4GBq7PpcjBjaONh2NKPxy8qLeJEM/d0Zj6Oxw3 QKanPrL0QtKXEASr4AfHwM9TccKCm/bhOX3+HHZheNAu8vje0qSddeXEwIWbW57BIf7JSR2HEC4x DE7GHOd5iegTQIYPP7j7Qj3QgeLZyWNP1tBgnh1r5AnFW0+FckIZzgk3YY+rSV8JJeB6Y09p/D7L 5D8L3qN0xVJTnXgNwde3QDgTXhXIzUA2ChOrxA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 ;; { "EDNS-VERSION": 0 }
	Found child zone de

	Checking DS between . and de
	Query to f.root-servers.net for de/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 366 octets ;; HEADER SECTION ;; id = 59610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a+e94Za7sj46I8phS6TvRx1q1fzfMceJ0l05uzoZGIB/Z4kIaooCgWODiWSopKWy5xjyEBYhaLHH kkN/yI/5dvym0MTrLxG8g3rROC6TuSYjlIZpeE4GBq7PpcjBjaONh2NKPxy8qLeJEM/d0Zj6Oxw3 QKanPrL0QtKXEASr4AfHwM9TccKCm/bhOX3+HHZheNAu8vje0qSddeXEwIWbW57BIf7JSR2HEC4x DE7GHOd5iegTQIYPP7j7Qj3QgeLZyWNP1tBgnh1r5AnFW0+FckIZzgk3YY+rSV8JJeB6Y09p/D7L 5D8L3qN0xVJTnXgNwde3QDgTXhXIzUA2ChOrxA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . a+e94Za7sj46I8phS6TvRx1q1fzfMceJ0l05uzoZGIB/Z4kIaooCgWODiWSopKWy5xjyEBYhaLHH kkN/yI/5dvym0MTrLxG8g3rROC6TuSYjlIZpeE4GBq7PpcjBjaONh2NKPxy8qLeJEM/d0Zj6Oxw3 QKanPrL0QtKXEASr4AfHwM9TccKCm/bhOX3+HHZheNAu8vje0qSddeXEwIWbW57BIf7JSR2HEC4x DE7GHOd5iegTQIYPP7j7Qj3QgeLZyWNP1tBgnh1r5AnFW0+FckIZzgk3YY+rSV8JJeB6Y09p/D7L 5D8L3qN0xVJTnXgNwde3QDgTXhXIzUA2ChOrxA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to a.nic.de for de/DNSKEY
	Received 893 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 893 octets ;; HEADER SECTION ;; id = 5924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445 de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240524190302 20240510173302 26755 de. RYfroAPxCCKE+kvvEUxoK8bNvCKlr+cp4BgHsLDWx8WWHPktPD7G5hMNPXGbpm0XOx5bGwDysxGd xdoBdj/LvuzdXVgbxehriNp2oz11r/eHTW6qVa4Vi2ZCHXipaATo5a2/Cq131NqIOIZZqG6sl7Jb xjBqulZLAdiHn1bzea70xKoqquqHwOxrUPhxG8c9rUsoDq6EPURWieQTGKjWYHyWv/0jw+4zFKjq 8DDlCpVuJdNLbg4nYvj4IPe65e6H5BgfTXCT5G0gfqlgVL9+ARD4s7NyLTGFQD0FGNYuYdNCbZ0g LTGJepwDX8av5OcCEIcJNfo+IkjPzkMuGnvYdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAax3Ypvoq186mHwCmhennWrBnDaIrsuSgFX0C5OiqBtcWybIST6EXfcS8h23GJPAv7Cv79xN Q50mt4m/caT/mgPEyRjWY2OONseXXdQmNjIcqKGvtsShrZPy++77KEHDd+hgwc8BrRCg+uGSLdcc 5vkLkdHH+UzR9OOD55MkrUU9 ) ; Key ID = 56445`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcUsGgW/A7T//JZ4rDvMAOqCTyIvJi0mybbwCKyQdq+4fQpOi513bHjgDE9jQwSCm1ArBw6Y s4QORCm05LgAT6K/7KIrvmz1GU94GySW5L0EbakoHX3S3MFxXImR2MzDpwTxERZ5hRilNVxTYcL+ TZmlkx/U8CYrCAn/WCV/L2a/ ) ; Key ID = 720`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20240524190302 20240510173302 26755 de. RYfroAPxCCKE+kvvEUxoK8bNvCKlr+cp4BgHsLDWx8WWHPktPD7G5hMNPXGbpm0XOx5bGwDysxGd xdoBdj/LvuzdXVgbxehriNp2oz11r/eHTW6qVa4Vi2ZCHXipaATo5a2/Cq131NqIOIZZqG6sl7Jb xjBqulZLAdiHn1bzea70xKoqquqHwOxrUPhxG8c9rUsoDq6EPURWieQTGKjWYHyWv/0jw+4zFKjq 8DDlCpVuJdNLbg4nYvj4IPe65e6H5BgfTXCT5G0gfqlgVL9+ARD4s7NyLTGFQD0FGNYuYdNCbZ0g LTGJepwDX8av5OcCEIcJNfo+IkjPzkMuGnvYdw== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56445 is now in the chain-of-trust
	DNSKEY=720 is now in the chain-of-trust
	Query to f.nic.de for uni-frankfurt.de/A
	Received 662 bytes from 81.91.164.5
	;; Response received from [81.91.164.5] 662 octets ;; HEADER SECTION ;; id = 50568 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uni-frankfurt.de. 86400 IN NS dns-2.dfn.de. uni-frankfurt.de. 86400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 86400 IN NS wattdenn.rz.uni-frankfurt.de. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a f02kef9bo5rabb4o2as10rv8dbtd2hp6 NS DS RRSIG ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. d0PiiFojURKSdIl6NysDUM8nqPg4N89dB1TAI6GEhGgFFXGXdSaABpvgp7Ng1nGwR0DXdrHnGskS hkL3ZLAxRw5Mxc+QbzjL/dziCPhFLLy8rEZnFvIUsDI5cn9dbF3yIEYch3NOe+LQ/lXw0XkmwRC5 rCcJWmB6tf6llcm/KFk= ) ;; ADDITIONAL SECTION (3 records) chaplin.rz.uni-frankfurt.de. 86400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 86400 IN A 141.2.149.10 ;; { "EDNS-VERSION": 0 }
	Query to a.nic.de for uni-frankfurt.de/DNSKEY
	Received 662 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 662 octets ;; HEADER SECTION ;; id = 51855 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uni-frankfurt.de. 86400 IN NS dns-2.dfn.de. uni-frankfurt.de. 86400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 86400 IN NS wattdenn.rz.uni-frankfurt.de. tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a f02kef9bo5rabb4o2as10rv8dbtd2hp6 NS DS RRSIG ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. d0PiiFojURKSdIl6NysDUM8nqPg4N89dB1TAI6GEhGgFFXGXdSaABpvgp7Ng1nGwR0DXdrHnGskS hkL3ZLAxRw5Mxc+QbzjL/dziCPhFLLy8rEZnFvIUsDI5cn9dbF3yIEYch3NOe+LQ/lXw0XkmwRC5 rCcJWmB6tf6llcm/KFk= ) ;; ADDITIONAL SECTION (3 records) chaplin.rz.uni-frankfurt.de. 86400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 86400 IN A 141.2.149.10 ;; { "EDNS-VERSION": 0 }
	Found child zone uni-frankfurt.de

uni-frankfurt.de

	Checking DS between de and uni-frankfurt.de
	Query to a.nic.de for uni-frankfurt.de/DS
	Received 773 bytes from 194.0.0.53
	;; Response received from [194.0.0.53] 773 octets ;; HEADER SECTION ;; id = 26188 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a tjlcsjat4ljtvo0tjncrrdf6kf6onefb NS SOA RRSIG DNSKEY NSEC3PARAM ) tjlb7qbojvmlf1s6gdriru7vsms1lg16.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240523222313 20240509205313 720 de. SfjXJcvNjPlayBC/KObbnp07ENa8/EkKA1J6Off/IDBmV06Xrpk8PdPK0EbUmcE+0UeV91cpD2jN eJn8ifVKpLsU9aJUcwf9wYJHxy6RCh7+LFRlCiojFXz0dAR5DAbSKCIBsHcnLhjvNBZs0OcVJUXd Hx0HbDA8PrkEeaijGuY= ) de. 7200 IN SOA ( f.nic.de. dns-operations.denic.de. 1715560946 ;serial 7200 ;refresh 7200 ;retry 3600000 ;expire 7200 ;minimum ) de. 7200 IN RRSIG ( SOA 8 1 86400 20240527004208 20240512231208 720 de. AhDAaHxLNJRk/Kpa44ZjhUnPUI0waFt+gHSHPD77pTqykOE5Os2+EN2cZvhEaiixI6fox/yxPY3d CYncgPUh6d8pRc4yHYwLIM9APzZDEVMpEZ4HmIM4CefvuRzsN9S9WcgKXV5tnon8WjNaFsYfq/Or JYJIm6GtS1I6hXIzyDo= ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN NSEC3 ( 1 1 15 ca12b74adb90591a f02kef9bo5rabb4o2as10rv8dbtd2hp6 NS DS RRSIG ) f02iltt7bodquu3gcenfp4l6npauc8dj.de. 7200 IN RRSIG ( NSEC3 8 2 7200 20240526054050 20240512041050 720 de. d0PiiFojURKSdIl6NysDUM8nqPg4N89dB1TAI6GEhGgFFXGXdSaABpvgp7Ng1nGwR0DXdrHnGskS hkL3ZLAxRw5Mxc+QbzjL/dziCPhFLLy8rEZnFvIUsDI5cn9dbF3yIEYch3NOe+LQ/lXw0XkmwRC5 rCcJWmB6tf6llcm/KFk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for uni-frankfurt.de in the de zone
	Query to dns-2.dfn.de for uni-frankfurt.de/DNSKEY
	Received 120 bytes from 193.174.75.54
	;; Response received from [193.174.75.54] 120 octets ;; HEADER SECTION ;; id = 47905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uni-frankfurt.de. 38400 IN SOA ( chaplin.rz.uni-frankfurt.de. nameservice.uni-frankfurt.de. 2024050701 ;serial 10000 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to dns-2.dfn.de for uni-frankfurt.de/A
	Received 151 bytes from 193.174.75.54
	;; Response received from [193.174.75.54] 151 octets ;; HEADER SECTION ;; id = 16640 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns-2.dfn.de is authoritative for uni-frankfurt.de
	Query to chaplin.rz.uni-frankfurt.de for uni-frankfurt.de/SOA
	Received 253 bytes from 141.2.22.74
	;; Response received from [141.2.22.74] 253 octets ;; HEADER SECTION ;; id = 45048 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN SOA ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN SOA ( chaplin.rz.uni-frankfurt.de. nameservice.uni-frankfurt.de. 2024050701 ;serial 10000 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	Query to wattdenn.rz.uni-frankfurt.de for uni-frankfurt.de/SOA
	Received 253 bytes from 141.2.149.10
	;; Response received from [141.2.149.10] 253 octets ;; HEADER SECTION ;; id = 4267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN SOA ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN SOA ( chaplin.rz.uni-frankfurt.de. nameservice.uni-frankfurt.de. 2024050701 ;serial 10000 ;refresh 3600 ;retry 2419200 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	Query to dns-2.dfn.de for uni-frankfurt.de/A
	Received 151 bytes from 193.174.75.54
	;; Response received from [193.174.75.54] 151 octets ;; HEADER SECTION ;; id = 21749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	uni-frankfurt.de A RR has value 141.2.37.41
	No RRSIGs found

uni-frankfurt.de

	Query to wattdenn.rz.uni-frankfurt.de for uni-frankfurt.de/A
	Received 221 bytes from 141.2.149.10
	;; Response received from [141.2.149.10] 221 octets ;; HEADER SECTION ;; id = 21581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	wattdenn.rz.uni-frankfurt.de is authoritative for uni-frankfurt.de
	Query to wattdenn.rz.uni-frankfurt.de for uni-frankfurt.de/A
	Received 221 bytes from 141.2.149.10
	;; Response received from [141.2.149.10] 221 octets ;; HEADER SECTION ;; id = 25076 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	uni-frankfurt.de A RR has value 141.2.37.41
	No RRSIGs found

uni-frankfurt.de

	Query to chaplin.rz.uni-frankfurt.de for uni-frankfurt.de/A
	Received 221 bytes from 141.2.22.74
	;; Response received from [141.2.22.74] 221 octets ;; HEADER SECTION ;; id = 849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	chaplin.rz.uni-frankfurt.de is authoritative for uni-frankfurt.de
	Query to chaplin.rz.uni-frankfurt.de for uni-frankfurt.de/A
	Received 221 bytes from 141.2.22.74
	;; Response received from [141.2.22.74] 221 octets ;; HEADER SECTION ;; id = 1322 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uni-frankfurt.de. IN A ;; ANSWER SECTION (1 record) uni-frankfurt.de. 38400 IN A 141.2.37.41 ;; AUTHORITY SECTION (3 records) uni-frankfurt.de. 38400 IN NS dns-2.dfn.de. uni-frankfurt.de. 38400 IN NS wattdenn.rz.uni-frankfurt.de. uni-frankfurt.de. 38400 IN NS chaplin.rz.uni-frankfurt.de. ;; ADDITIONAL SECTION (5 records) chaplin.rz.uni-frankfurt.de. 38400 IN A 141.2.22.74 wattdenn.rz.uni-frankfurt.de. 38400 IN A 141.2.149.10 chaplin.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3109::42 wattdenn.rz.uni-frankfurt.de. 38400 IN AAAA 2001:a38:1001:3110::42 ;; { "EDNS-VERSION": 0 }
	uni-frankfurt.de A RR has value 141.2.37.41
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uni-frankfurt.de at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: