DNSSEC Debugger

Domain Name:

Time: 2024-05-21 23:48:30 UTC

Analyzing DNSSEC problems for upu.int

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 864 octets ;; HEADER SECTION ;; id = 48263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240611000000 20240521000000 20326 . W/Hsuxwei6HE8IzojCIwmIP/lrqd6TZmm1cv7VEm7bjqgUyc5FBDUSNxWfIQiwLTn+Xqk8ZVG/68 0XZptzkT2ZxyXwK7AGFAvGrKiFBertupXxU7I5uYs27GPOnnKwlA5ZrUJW0AK66XIKMb+qVMHa7C 2agO1VOsAUSDeZtR8XJmJbzIMZN2GBlSowjWe90CX0jU+ncr58MOYEiI6N2JsWJi4gU546OrmhJd hEnPGDX/gPF5OjrgDZER2+PyjSEGdxdP0nbqlBcC39aLm3lfHNNJDzC+dxgL04qt1RiTTPhDbuMp hE2l6WxjC9N8wWzM+h0IKgDMc2oVSc4B+U5Kjw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to l.root-servers.net for upu.int/A
	Received 836 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 836 octets ;; HEADER SECTION ;; id = 26574 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 14 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) int. 172800 IN NS x.iana-servers.net. int. 172800 IN NS y.iana-servers.net. int. 172800 IN NS z.iana-servers.net. int. 172800 IN NS ns.uu.net. int. 172800 IN NS ns0.ja.net. int. 172800 IN NS sec2.authdns.ripe.net. int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN DS ( 59895 13 2 10c789f286599316d3a74c2c513434c3f8a33b9238976d5de2a178e54da353f3 ) int. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . RGggMw1bWEoohZiL3kH1rRcjh9r+YI2rmh2BpVGayjaZ2+eQutKkzLjUnMu4+oLNDwTtFzBC/DKK ULMrZOuz9zOrT93tHYqXF3dOqepIGFHKmXPOh+aQ9u12kBcL7tHd+AalupKIjzRyFVVsILCT41lW 8CLtg82W4O08jUzehB8DPrWoAr/+81m4/u0q72hDkTJa/K238dgoPlPbkqfZqasrW3PFvvWzxIgU jk9Dj2CzGTuEMSYZrbiSrBEpF+TTmT11b3J/dnYOIIkSqsCnV8NzUYg9n++T1CIAb7qA8un6kVNV 3koqWQwWXwGnw1MwgBhy472g4zJLvOTHeZm9Qg== ) ;; ADDITIONAL SECTION (14 records) x.iana-servers.net. 172800 IN A 199.43.135.53 y.iana-servers.net. 172800 IN A 199.43.133.53 z.iana-servers.net. 172800 IN A 199.43.134.53 ns.uu.net. 172800 IN A 137.39.1.3 ns0.ja.net. 172800 IN A 128.86.1.20 ns0.ja.net. 172800 IN A 193.63.94.20 sec2.authdns.ripe.net. 172800 IN A 193.0.9.4 x.iana-servers.net. 172800 IN AAAA 2001:500:8f::53 y.iana-servers.net. 172800 IN AAAA 2001:500:8d::53 z.iana-servers.net. 172800 IN AAAA 2001:500:8e::53 ns0.ja.net. 172800 IN AAAA 2001:630:0:8::14 ns0.ja.net. 172800 IN AAAA 2001:630:0:9::14 sec2.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::4 ;; { "EDNS-VERSION": 0 }
	Query to j.root-servers.net for int/DNSKEY
	Received 832 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 832 octets ;; HEADER SECTION ;; id = 2637 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 14 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) int. 172800 IN NS x.iana-servers.net. int. 172800 IN NS y.iana-servers.net. int. 172800 IN NS z.iana-servers.net. int. 172800 IN NS ns.uu.net. int. 172800 IN NS ns0.ja.net. int. 172800 IN NS sec2.authdns.ripe.net. int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN DS ( 59895 13 2 10c789f286599316d3a74c2c513434c3f8a33b9238976d5de2a178e54da353f3 ) int. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . RGggMw1bWEoohZiL3kH1rRcjh9r+YI2rmh2BpVGayjaZ2+eQutKkzLjUnMu4+oLNDwTtFzBC/DKK ULMrZOuz9zOrT93tHYqXF3dOqepIGFHKmXPOh+aQ9u12kBcL7tHd+AalupKIjzRyFVVsILCT41lW 8CLtg82W4O08jUzehB8DPrWoAr/+81m4/u0q72hDkTJa/K238dgoPlPbkqfZqasrW3PFvvWzxIgU jk9Dj2CzGTuEMSYZrbiSrBEpF+TTmT11b3J/dnYOIIkSqsCnV8NzUYg9n++T1CIAb7qA8un6kVNV 3koqWQwWXwGnw1MwgBhy472g4zJLvOTHeZm9Qg== ) ;; ADDITIONAL SECTION (14 records) x.iana-servers.net. 172800 IN A 199.43.135.53 y.iana-servers.net. 172800 IN A 199.43.133.53 z.iana-servers.net. 172800 IN A 199.43.134.53 ns.uu.net. 172800 IN A 137.39.1.3 ns0.ja.net. 172800 IN A 128.86.1.20 ns0.ja.net. 172800 IN A 193.63.94.20 sec2.authdns.ripe.net. 172800 IN A 193.0.9.4 x.iana-servers.net. 172800 IN AAAA 2001:500:8f::53 y.iana-servers.net. 172800 IN AAAA 2001:500:8d::53 z.iana-servers.net. 172800 IN AAAA 2001:500:8e::53 ns0.ja.net. 172800 IN AAAA 2001:630:0:8::14 ns0.ja.net. 172800 IN AAAA 2001:630:0:9::14 sec2.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::4 ;; { "EDNS-VERSION": 0 }
	Found child zone int

int

	Checking DS between . and int
	Query to k.root-servers.net for int/DS
	Received 415 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 415 octets ;; HEADER SECTION ;; id = 1189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DS ;; ANSWER SECTION (3 records) int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN DS ( 59895 13 2 10c789f286599316d3a74c2c513434c3f8a33b9238976d5de2a178e54da353f3 ) int. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . RGggMw1bWEoohZiL3kH1rRcjh9r+YI2rmh2BpVGayjaZ2+eQutKkzLjUnMu4+oLNDwTtFzBC/DKK ULMrZOuz9zOrT93tHYqXF3dOqepIGFHKmXPOh+aQ9u12kBcL7tHd+AalupKIjzRyFVVsILCT41lW 8CLtg82W4O08jUzehB8DPrWoAr/+81m4/u0q72hDkTJa/K238dgoPlPbkqfZqasrW3PFvvWzxIgU jk9Dj2CzGTuEMSYZrbiSrBEpF+TTmT11b3J/dnYOIIkSqsCnV8NzUYg9n++T1CIAb7qA8un6kVNV 3koqWQwWXwGnw1MwgBhy472g4zJLvOTHeZm9Qg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for int in the . zone
	DS=27433/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	DS=59895/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`int. 86400 IN RRSIG ( DS 8 1 86400 20240603210000 20240521200000 5613 . RGggMw1bWEoohZiL3kH1rRcjh9r+YI2rmh2BpVGayjaZ2+eQutKkzLjUnMu4+oLNDwTtFzBC/DKK ULMrZOuz9zOrT93tHYqXF3dOqepIGFHKmXPOh+aQ9u12kBcL7tHd+AalupKIjzRyFVVsILCT41lW 8CLtg82W4O08jUzehB8DPrWoAr/+81m4/u0q72hDkTJa/K238dgoPlPbkqfZqasrW3PFvvWzxIgU jk9Dj2CzGTuEMSYZrbiSrBEpF+TTmT11b3J/dnYOIIkSqsCnV8NzUYg9n++T1CIAb7qA8un6kVNV 3koqWQwWXwGnw1MwgBhy472g4zJLvOTHeZm9Qg== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=27433/SHA-256 is now in the chain-of-trust
	DS=59895/SHA-256 is now in the chain-of-trust
	`int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f )`
	`int. 86400 IN DS ( 59895 13 2 10c789f286599316d3a74c2c513434c3f8a33b9238976d5de2a178e54da353f3 )`
	Query to sec2.authdns.ripe.net for int/DNSKEY
	Received 1154 bytes from 193.0.9.4
	;; Response received from [193.0.9.4] 1154 octets ;; HEADER SECTION ;; id = 28917 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DNSKEY ;; ANSWER SECTION (7 records) int. 3600 IN DNSKEY ( 256 3 7 AwEAAbt0tWooaREwneMlzpfb0lKxR4jYN6hUtlexVaPPvnzczjzlU/XB4dCl6QExLSR/CGLwnZA4 3nDt5dgh6TN0hu3uRbDx2f60nJ/9/ZqPLDlKDQRSKk3xucY2zSo/yiTrV2D3enlmhOi+wKcXqdB0 Ckw/jdGTgCzQN0W+h9Le9NKR ) ; Key ID = 47712 int. 3600 IN DNSKEY ( 256 3 7 AwEAAcQmDBt8ZOQV0+TPwxJVBttg8dzmOh6pRjBsCUSzHUL2A/dnAr6/mff9TQ6TLMqAkpsyGc9D awMT4QZ9yhBmld+ckjVZ79H7/gkCAlYvj7nD136DXmKawlbQtnR59Tig4J0HW8abzaQ+ajOjEbSP tfBrn82ryJ22nCKBP7sx2fKJ ) ; Key ID = 49257 int. 3600 IN DNSKEY ( 256 3 13 1Ff3NE+9mpqboTZAKre6HAK51g0munT/TAx39QIHAgDzJ90lLpybLakNabkbsnG974I2YWT4ePCz 449jTnJ96Q== ) ; Key ID = 64238 int. 3600 IN DNSKEY ( 257 3 13 upbPRrU1nIboQ3yX6YJY/t7EaKzaOO4CBRDE6adcZ9GdZ1cQu0lrchTsYhgS2D1yalCZbN8Vo0Fs 1qUCHgLhqw== ) ; Key ID = 59895 int. 3600 IN DNSKEY ( 257 3 7 AwEAAb8omPP2ctJgDcENW8k7C5HhrCv79Q3sASrugKzHwUxWpfyifwHFRWrRcXVcwG6AnJBQ1U6Z plnhjqdnXSphgH0/Y+CJfqsw2FpHA+sPbOzUO8DCKT3Ez2hEEoUXMr19zqR6a6I/lSt0pO/mg8NS QHVwbWuH35haZ4OEOXGW2T83TGvq19XhLZWu/z4GSEeIKN4XagyVol7HLfjOJpRg1EdPMYWDsWZT WmKd35fZFkLgn6YmzzBgDlLI6x2UfLKgnysIBeoh2h952WyL/EOiO3Lbl0bnVvrQl+VelkfTS1tp gYocWT2FvnU+50PWZnuLjLvnjqDBrbbknTBG7fReYa8= ) ; Key ID = 27433 int. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240607002947 20240517022627 59895 int. cd48viNQTrtvyn8qCbe0YAnNOdQ7KNS8TYUjp3J5vPFQHtAot1voWt7iAMOce+MBMCVShdiSzNww vXawyKJQDw== ) int. 3600 IN RRSIG ( DNSKEY 7 1 3600 20240607002947 20240517022627 27433 int. Bo17WGw+/hpDFtuLPuYCbHBqfANLwtRBVkzibHkl4AmDoEL3C9rEkhUFejte7UeBKIgxCzT8zpE6 jUnW+h57VpUFUdWiLhzfFJG2ho+HS+/42uw6PrJFvoQFNqH449Hy1cdyNjxuWNUxSI8vF5N+qGs7 yDECPapQRX/Gj0VHAmXlJv6PY3X4q83s4qZuZOnImieFKrhH8JAvbWWEsRI3mj/NUSJgILCYE/Ck sNu8kteP2oJBTuQTaJwVpJ9SDfd0gMMS4HcWHE3nzp8oEUsQ7WKwnZpVZT94s59ZZSI8p3d+oDk0 PtoFQaolwlXdSfSrYLUW5Y68Ts08WUigfd0U5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for int
	`int. 3600 IN DNSKEY ( 256 3 7 AwEAAbt0tWooaREwneMlzpfb0lKxR4jYN6hUtlexVaPPvnzczjzlU/XB4dCl6QExLSR/CGLwnZA4 3nDt5dgh6TN0hu3uRbDx2f60nJ/9/ZqPLDlKDQRSKk3xucY2zSo/yiTrV2D3enlmhOi+wKcXqdB0 Ckw/jdGTgCzQN0W+h9Le9NKR ) ; Key ID = 47712`
	`int. 3600 IN DNSKEY ( 256 3 7 AwEAAcQmDBt8ZOQV0+TPwxJVBttg8dzmOh6pRjBsCUSzHUL2A/dnAr6/mff9TQ6TLMqAkpsyGc9D awMT4QZ9yhBmld+ckjVZ79H7/gkCAlYvj7nD136DXmKawlbQtnR59Tig4J0HW8abzaQ+ajOjEbSP tfBrn82ryJ22nCKBP7sx2fKJ ) ; Key ID = 49257`
	`int. 3600 IN DNSKEY ( 256 3 13 1Ff3NE+9mpqboTZAKre6HAK51g0munT/TAx39QIHAgDzJ90lLpybLakNabkbsnG974I2YWT4ePCz 449jTnJ96Q== ) ; Key ID = 64238`
	`int. 3600 IN DNSKEY ( 257 3 13 upbPRrU1nIboQ3yX6YJY/t7EaKzaOO4CBRDE6adcZ9GdZ1cQu0lrchTsYhgS2D1yalCZbN8Vo0Fs 1qUCHgLhqw== ) ; Key ID = 59895`
	`int. 3600 IN DNSKEY ( 257 3 7 AwEAAb8omPP2ctJgDcENW8k7C5HhrCv79Q3sASrugKzHwUxWpfyifwHFRWrRcXVcwG6AnJBQ1U6Z plnhjqdnXSphgH0/Y+CJfqsw2FpHA+sPbOzUO8DCKT3Ez2hEEoUXMr19zqR6a6I/lSt0pO/mg8NS QHVwbWuH35haZ4OEOXGW2T83TGvq19XhLZWu/z4GSEeIKN4XagyVol7HLfjOJpRg1EdPMYWDsWZT WmKd35fZFkLgn6YmzzBgDlLI6x2UfLKgnysIBeoh2h952WyL/EOiO3Lbl0bnVvrQl+VelkfTS1tp gYocWT2FvnU+50PWZnuLjLvnjqDBrbbknTBG7fReYa8= ) ; Key ID = 27433`
	DNSKEY=59895/SEP is now in the chain-of-trust
	DS=59895/SHA-256 verifies DNSKEY=59895/SEP
	DNSKEY=27433/SEP is now in the chain-of-trust
	DS=27433/SHA-256 verifies DNSKEY=27433/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`int. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240607002947 20240517022627 59895 int. cd48viNQTrtvyn8qCbe0YAnNOdQ7KNS8TYUjp3J5vPFQHtAot1voWt7iAMOce+MBMCVShdiSzNww vXawyKJQDw== )`
	`int. 3600 IN RRSIG ( DNSKEY 7 1 3600 20240607002947 20240517022627 27433 int. Bo17WGw+/hpDFtuLPuYCbHBqfANLwtRBVkzibHkl4AmDoEL3C9rEkhUFejte7UeBKIgxCzT8zpE6 jUnW+h57VpUFUdWiLhzfFJG2ho+HS+/42uw6PrJFvoQFNqH449Hy1cdyNjxuWNUxSI8vF5N+qGs7 yDECPapQRX/Gj0VHAmXlJv6PY3X4q83s4qZuZOnImieFKrhH8JAvbWWEsRI3mj/NUSJgILCYE/Ck sNu8kteP2oJBTuQTaJwVpJ9SDfd0gMMS4HcWHE3nzp8oEUsQ7WKwnZpVZT94s59ZZSI8p3d+oDk0 PtoFQaolwlXdSfSrYLUW5Y68Ts08WUigfd0U5w== )`
	RRSIG=59895 and DNSKEY=59895/SEP verifies the DNSKEY RRset
	RRSIG=27433 and DNSKEY=27433/SEP verifies the DNSKEY RRset
	DNSKEY=47712 is now in the chain-of-trust
	DNSKEY=49257 is now in the chain-of-trust
	DNSKEY=64238 is now in the chain-of-trust
	Query to y.iana-servers.net for upu.int/A
	Received 481 bytes from 199.43.133.53
	;; Response received from [199.43.133.53] 481 octets ;; HEADER SECTION ;; id = 23263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) upu.int. 86400 IN NS ns1.ip-plus.net. upu.int. 86400 IN NS isis.upu.int. upu.int. 86400 IN NS osiris.upu.int. j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab j8666cr2t4vjd2jnnm3rltc431orfj2m NS ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605150726 20240515142628 49257 int. Qndb/XCHr/AouMLUmKWdyhNCMYd5mAwebOMNE1/Ap5OkgcDzjVR2ps1GdFHbrYAVC7JcNhTLSD/m eQqhvVHksBr1LuseaMyoihm/Akt22Wi0WD7bH2nBDfuCnOvDPzRCa1BE8TH7e6jLkLSxbDs/nFwn E0bwdpu37oGTkIbz34g= ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605150726 20240515142628 64238 int. bGlNDoqq5EihfvcYjYINgOXUSpT6ivudXWYXhmgPMYWl/jClPuw9/UzXSzfrbtL20Pt+pde33jvy ryFUe+ZvIw== ) ;; ADDITIONAL SECTION (3 records) isis.upu.int. 86400 IN A 193.247.49.1 osiris.upu.int. 86400 IN A 193.247.49.2 ;; { "EDNS-VERSION": 0 }
	Query to z.iana-servers.net for upu.int/DNSKEY
	Received 481 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 481 octets ;; HEADER SECTION ;; id = 27608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) upu.int. 86400 IN NS isis.upu.int. upu.int. 86400 IN NS osiris.upu.int. upu.int. 86400 IN NS ns1.ip-plus.net. j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab j8666cr2t4vjd2jnnm3rltc431orfj2m NS ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605150726 20240515142628 49257 int. Qndb/XCHr/AouMLUmKWdyhNCMYd5mAwebOMNE1/Ap5OkgcDzjVR2ps1GdFHbrYAVC7JcNhTLSD/m eQqhvVHksBr1LuseaMyoihm/Akt22Wi0WD7bH2nBDfuCnOvDPzRCa1BE8TH7e6jLkLSxbDs/nFwn E0bwdpu37oGTkIbz34g= ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605150726 20240515142628 64238 int. bGlNDoqq5EihfvcYjYINgOXUSpT6ivudXWYXhmgPMYWl/jClPuw9/UzXSzfrbtL20Pt+pde33jvy ryFUe+ZvIw== ) ;; ADDITIONAL SECTION (3 records) isis.upu.int. 86400 IN A 193.247.49.1 osiris.upu.int. 86400 IN A 193.247.49.2 ;; { "EDNS-VERSION": 0 }
	Found child zone upu.int

upu.int

	Checking DS between int and upu.int
	Query to ns.uu.net for upu.int/DS
	Received 699 bytes from 137.39.1.3
	;; Response received from [137.39.1.3] 699 octets ;; HEADER SECTION ;; id = 5255 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) int. 3600 IN SOA ( sns.dns.icann.org. noc.dns.icann.org. 2024042563 ;serial 3600 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) int. 3600 IN RRSIG ( SOA 7 1 3600 20240610190816 20240521002055 49257 int. vJKmWnvk1+Ki9SH1xaygQcZgf5Jff1SO1i1x/Z5xPVUYVL11TT+BpvMUoGX4f6zZZmpYnprEYyPB htH+vgAnyOwYqJKpz/3Zsmw2vRsVOatxNEvsuZJ/u7VN7I4zygh32Vc4MVjx51acN121VUCuiZpo cbnr2WT/nMlI6Kmt7sc= ) int. 3600 IN RRSIG ( SOA 13 1 3600 20240610190816 20240521002055 64238 int. EOray1Ks2T7WNVjalddnMwHWwJlHV1NzJ77uFXOL/4pvSkuwSafHVqZFReY0WpOow3/huZpdPETw ByKbXYSEmQ== ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab j8666cr2t4vjd2jnnm3rltc431orfj2m NS ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605150726 20240515142628 49257 int. Qndb/XCHr/AouMLUmKWdyhNCMYd5mAwebOMNE1/Ap5OkgcDzjVR2ps1GdFHbrYAVC7JcNhTLSD/m eQqhvVHksBr1LuseaMyoihm/Akt22Wi0WD7bH2nBDfuCnOvDPzRCa1BE8TH7e6jLkLSxbDs/nFwn E0bwdpu37oGTkIbz34g= ) j76nig0g76o4sv83ag4ukh92o9u3omvj.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605150726 20240515142628 64238 int. bGlNDoqq5EihfvcYjYINgOXUSpT6ivudXWYXhmgPMYWl/jClPuw9/UzXSzfrbtL20Pt+pde33jvy ryFUe+ZvIw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for upu.int in the int zone
	Query to ns1.ip-plus.net for upu.int/DNSKEY
	Received 91 bytes from 194.209.158.67
	;; Response received from [194.209.158.67] 91 octets ;; HEADER SECTION ;; id = 51118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) upu.int. 900 IN SOA ( isis.upu.int. administrator.upu.int. 2010072887 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.ip-plus.net for upu.int/A
	Received 153 bytes from 194.209.158.67
	;; Response received from [194.209.158.67] 153 octets ;; HEADER SECTION ;; id = 64203 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (3 records) upu.int. 86400 IN NS osiris.upu.int. upu.int. 86400 IN NS ns1.ip-plus.net. upu.int. 86400 IN NS isis.upu.int. ;; ADDITIONAL SECTION (3 records) isis.upu.int. 86400 IN A 193.247.49.1 osiris.upu.int. 86400 IN A 193.247.49.2 ;; { "EDNS-VERSION": 0 }
	ns1.ip-plus.net is authoritative for upu.int
	Query to isis.upu.int for upu.int/SOA
	Received 91 bytes from 193.247.49.1
	;; Response received from [193.247.49.1] 91 octets ;; HEADER SECTION ;; id = 29866 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN SOA ;; ANSWER SECTION (1 record) upu.int. 86400 IN SOA ( isis.upu.int. administrator.upu.int. 2010072887 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to osiris.upu.int for upu.int/SOA
	Received 91 bytes from 193.247.49.2
	;; Response received from [193.247.49.2] 91 octets ;; HEADER SECTION ;; id = 24175 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN SOA ;; ANSWER SECTION (1 record) upu.int. 86400 IN SOA ( isis.upu.int. administrator.upu.int. 2010072887 ;serial 14400 ;refresh 1800 ;retry 1209600 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.ip-plus.net for upu.int/A
	Received 153 bytes from 194.209.158.67
	;; Response received from [194.209.158.67] 153 octets ;; HEADER SECTION ;; id = 45857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (3 records) upu.int. 86400 IN NS osiris.upu.int. upu.int. 86400 IN NS isis.upu.int. upu.int. 86400 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) isis.upu.int. 86400 IN A 193.247.49.1 osiris.upu.int. 86400 IN A 193.247.49.2 ;; { "EDNS-VERSION": 0 }
	upu.int A RR has value 193.247.49.33
	No RRSIGs found

upu.int

	Query to isis.upu.int for upu.int/A
	Received 52 bytes from 193.247.49.1
	;; Response received from [193.247.49.1] 52 octets ;; HEADER SECTION ;; id = 10871 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	isis.upu.int is authoritative for upu.int
	Query to isis.upu.int for upu.int/A
	Received 52 bytes from 193.247.49.1
	;; Response received from [193.247.49.1] 52 octets ;; HEADER SECTION ;; id = 22602 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upu.int A RR has value 193.247.49.33
	No RRSIGs found

upu.int

	Query to osiris.upu.int for upu.int/A
	Received 52 bytes from 193.247.49.2
	;; Response received from [193.247.49.2] 52 octets ;; HEADER SECTION ;; id = 36202 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	osiris.upu.int is authoritative for upu.int
	Query to osiris.upu.int for upu.int/A
	Received 52 bytes from 193.247.49.2
	;; Response received from [193.247.49.2] 52 octets ;; HEADER SECTION ;; id = 29425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 1220, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; upu.int. IN A ;; ANSWER SECTION (1 record) upu.int. 86400 IN A 193.247.49.33 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	upu.int A RR has value 193.247.49.33
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test upu.int at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: