DNSSEC Debugger

Domain Name:

Time: 2024-05-18 22:20:08 UTC

Analyzing DNSSEC problems for who.int

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 864 octets ;; HEADER SECTION ;; id = 56494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to m.root-servers.net for who.int/A
	Received 797 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 797 octets ;; HEADER SECTION ;; id = 48566 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 14 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) int. 172800 IN NS y.iana-servers.net. int. 172800 IN NS ns.uu.net. int. 172800 IN NS sec2.authdns.ripe.net. int. 172800 IN NS ns0.ja.net. int. 172800 IN NS z.iana-servers.net. int. 172800 IN NS x.iana-servers.net. int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IV8kjzjfcKHp4eayQLnSQcwpt0KkzJoYS/EeSgbkdtJ+b58WH5rPCMOfUmvT+szxXiTnOyjpAV4q XXQXonr+KzS1mitgRwKANaIJhnlJyGSIjM5P3Ha2UlJJYMVOrN9slGJHnlDSCL84I1vDKrHNgSsK 4q1xOzL9yiW20PzQSNQoKRDK3fBLe+JVxCf1X2EU1VTv+wg1MLzhYGGRYmlNEq+OwLcO2fcuM1e4 wiWyrEuhb+2TDyXJcmqao7jfuZYaIQtcMoBw4CO7BRnaA5a4m7X/jrqjhmeSwqdtI9wJg+Id5pT0 FN9nKtGAJPjfFGdFcN4A7DOIR1EoxWktUS0VzQ== ) ;; ADDITIONAL SECTION (14 records) sec2.authdns.ripe.net. 172800 IN A 193.0.9.4 ns0.ja.net. 172800 IN A 128.86.1.20 ns0.ja.net. 172800 IN A 193.63.94.20 ns.uu.net. 172800 IN A 137.39.1.3 z.iana-servers.net. 172800 IN A 199.43.134.53 y.iana-servers.net. 172800 IN A 199.43.133.53 x.iana-servers.net. 172800 IN A 199.43.135.53 sec2.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::4 ns0.ja.net. 172800 IN AAAA 2001:630:0:8::14 ns0.ja.net. 172800 IN AAAA 2001:630:0:9::14 z.iana-servers.net. 172800 IN AAAA 2001:500:8e::53 y.iana-servers.net. 172800 IN AAAA 2001:500:8d::53 x.iana-servers.net. 172800 IN AAAA 2001:500:8f::53 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for int/DNSKEY
	Received 793 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 793 octets ;; HEADER SECTION ;; id = 8608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 14 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) int. 172800 IN NS ns.uu.net. int. 172800 IN NS z.iana-servers.net. int. 172800 IN NS sec2.authdns.ripe.net. int. 172800 IN NS x.iana-servers.net. int. 172800 IN NS y.iana-servers.net. int. 172800 IN NS ns0.ja.net. int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IV8kjzjfcKHp4eayQLnSQcwpt0KkzJoYS/EeSgbkdtJ+b58WH5rPCMOfUmvT+szxXiTnOyjpAV4q XXQXonr+KzS1mitgRwKANaIJhnlJyGSIjM5P3Ha2UlJJYMVOrN9slGJHnlDSCL84I1vDKrHNgSsK 4q1xOzL9yiW20PzQSNQoKRDK3fBLe+JVxCf1X2EU1VTv+wg1MLzhYGGRYmlNEq+OwLcO2fcuM1e4 wiWyrEuhb+2TDyXJcmqao7jfuZYaIQtcMoBw4CO7BRnaA5a4m7X/jrqjhmeSwqdtI9wJg+Id5pT0 FN9nKtGAJPjfFGdFcN4A7DOIR1EoxWktUS0VzQ== ) ;; ADDITIONAL SECTION (14 records) sec2.authdns.ripe.net. 172800 IN A 193.0.9.4 ns0.ja.net. 172800 IN A 128.86.1.20 ns0.ja.net. 172800 IN A 193.63.94.20 ns.uu.net. 172800 IN A 137.39.1.3 z.iana-servers.net. 172800 IN A 199.43.134.53 y.iana-servers.net. 172800 IN A 199.43.133.53 x.iana-servers.net. 172800 IN A 199.43.135.53 sec2.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::4 ns0.ja.net. 172800 IN AAAA 2001:630:0:8::14 ns0.ja.net. 172800 IN AAAA 2001:630:0:9::14 z.iana-servers.net. 172800 IN AAAA 2001:500:8e::53 y.iana-servers.net. 172800 IN AAAA 2001:500:8d::53 x.iana-servers.net. 172800 IN AAAA 2001:500:8f::53 ;; { "EDNS-VERSION": 0 }
	Found child zone int

int

	Checking DS between . and int
	Query to j.root-servers.net for int/DS
	Received 367 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 367 octets ;; HEADER SECTION ;; id = 24506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DS ;; ANSWER SECTION (2 records) int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f ) int. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IV8kjzjfcKHp4eayQLnSQcwpt0KkzJoYS/EeSgbkdtJ+b58WH5rPCMOfUmvT+szxXiTnOyjpAV4q XXQXonr+KzS1mitgRwKANaIJhnlJyGSIjM5P3Ha2UlJJYMVOrN9slGJHnlDSCL84I1vDKrHNgSsK 4q1xOzL9yiW20PzQSNQoKRDK3fBLe+JVxCf1X2EU1VTv+wg1MLzhYGGRYmlNEq+OwLcO2fcuM1e4 wiWyrEuhb+2TDyXJcmqao7jfuZYaIQtcMoBw4CO7BRnaA5a4m7X/jrqjhmeSwqdtI9wJg+Id5pT0 FN9nKtGAJPjfFGdFcN4A7DOIR1EoxWktUS0VzQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for int in the . zone
	DS=27433/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`int. 86400 IN RRSIG ( DS 8 1 86400 20240531170000 20240518160000 5613 . IV8kjzjfcKHp4eayQLnSQcwpt0KkzJoYS/EeSgbkdtJ+b58WH5rPCMOfUmvT+szxXiTnOyjpAV4q XXQXonr+KzS1mitgRwKANaIJhnlJyGSIjM5P3Ha2UlJJYMVOrN9slGJHnlDSCL84I1vDKrHNgSsK 4q1xOzL9yiW20PzQSNQoKRDK3fBLe+JVxCf1X2EU1VTv+wg1MLzhYGGRYmlNEq+OwLcO2fcuM1e4 wiWyrEuhb+2TDyXJcmqao7jfuZYaIQtcMoBw4CO7BRnaA5a4m7X/jrqjhmeSwqdtI9wJg+Id5pT0 FN9nKtGAJPjfFGdFcN4A7DOIR1EoxWktUS0VzQ== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=27433/SHA-256 is now in the chain-of-trust
	`int. 86400 IN DS ( 27433 7 2 5864812d4df2a4a455d905af311389f479afcd96fd369060941c7e170b40ca4f )`
	Query to ns.uu.net for int/DNSKEY
	Received 1154 bytes from 137.39.1.3
	;; Response received from [137.39.1.3] 1154 octets ;; HEADER SECTION ;; id = 57378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; int. IN DNSKEY ;; ANSWER SECTION (7 records) int. 3600 IN DNSKEY ( 256 3 13 1Ff3NE+9mpqboTZAKre6HAK51g0munT/TAx39QIHAgDzJ90lLpybLakNabkbsnG974I2YWT4ePCz 449jTnJ96Q== ) ; Key ID = 64238 int. 3600 IN DNSKEY ( 256 3 7 AwEAAbt0tWooaREwneMlzpfb0lKxR4jYN6hUtlexVaPPvnzczjzlU/XB4dCl6QExLSR/CGLwnZA4 3nDt5dgh6TN0hu3uRbDx2f60nJ/9/ZqPLDlKDQRSKk3xucY2zSo/yiTrV2D3enlmhOi+wKcXqdB0 Ckw/jdGTgCzQN0W+h9Le9NKR ) ; Key ID = 47712 int. 3600 IN DNSKEY ( 257 3 13 upbPRrU1nIboQ3yX6YJY/t7EaKzaOO4CBRDE6adcZ9GdZ1cQu0lrchTsYhgS2D1yalCZbN8Vo0Fs 1qUCHgLhqw== ) ; Key ID = 59895 int. 3600 IN DNSKEY ( 256 3 7 AwEAAcQmDBt8ZOQV0+TPwxJVBttg8dzmOh6pRjBsCUSzHUL2A/dnAr6/mff9TQ6TLMqAkpsyGc9D awMT4QZ9yhBmld+ckjVZ79H7/gkCAlYvj7nD136DXmKawlbQtnR59Tig4J0HW8abzaQ+ajOjEbSP tfBrn82ryJ22nCKBP7sx2fKJ ) ; Key ID = 49257 int. 3600 IN DNSKEY ( 257 3 7 AwEAAb8omPP2ctJgDcENW8k7C5HhrCv79Q3sASrugKzHwUxWpfyifwHFRWrRcXVcwG6AnJBQ1U6Z plnhjqdnXSphgH0/Y+CJfqsw2FpHA+sPbOzUO8DCKT3Ez2hEEoUXMr19zqR6a6I/lSt0pO/mg8NS QHVwbWuH35haZ4OEOXGW2T83TGvq19XhLZWu/z4GSEeIKN4XagyVol7HLfjOJpRg1EdPMYWDsWZT WmKd35fZFkLgn6YmzzBgDlLI6x2UfLKgnysIBeoh2h952WyL/EOiO3Lbl0bnVvrQl+VelkfTS1tp gYocWT2FvnU+50PWZnuLjLvnjqDBrbbknTBG7fReYa8= ) ; Key ID = 27433 int. 3600 IN RRSIG ( DNSKEY 7 1 3600 20240607002947 20240517022627 27433 int. Bo17WGw+/hpDFtuLPuYCbHBqfANLwtRBVkzibHkl4AmDoEL3C9rEkhUFejte7UeBKIgxCzT8zpE6 jUnW+h57VpUFUdWiLhzfFJG2ho+HS+/42uw6PrJFvoQFNqH449Hy1cdyNjxuWNUxSI8vF5N+qGs7 yDECPapQRX/Gj0VHAmXlJv6PY3X4q83s4qZuZOnImieFKrhH8JAvbWWEsRI3mj/NUSJgILCYE/Ck sNu8kteP2oJBTuQTaJwVpJ9SDfd0gMMS4HcWHE3nzp8oEUsQ7WKwnZpVZT94s59ZZSI8p3d+oDk0 PtoFQaolwlXdSfSrYLUW5Y68Ts08WUigfd0U5w== ) int. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240607002947 20240517022627 59895 int. cd48viNQTrtvyn8qCbe0YAnNOdQ7KNS8TYUjp3J5vPFQHtAot1voWt7iAMOce+MBMCVShdiSzNww vXawyKJQDw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 5 DNSKEY records for int
	`int. 3600 IN DNSKEY ( 256 3 13 1Ff3NE+9mpqboTZAKre6HAK51g0munT/TAx39QIHAgDzJ90lLpybLakNabkbsnG974I2YWT4ePCz 449jTnJ96Q== ) ; Key ID = 64238`
	`int. 3600 IN DNSKEY ( 256 3 7 AwEAAbt0tWooaREwneMlzpfb0lKxR4jYN6hUtlexVaPPvnzczjzlU/XB4dCl6QExLSR/CGLwnZA4 3nDt5dgh6TN0hu3uRbDx2f60nJ/9/ZqPLDlKDQRSKk3xucY2zSo/yiTrV2D3enlmhOi+wKcXqdB0 Ckw/jdGTgCzQN0W+h9Le9NKR ) ; Key ID = 47712`
	`int. 3600 IN DNSKEY ( 257 3 13 upbPRrU1nIboQ3yX6YJY/t7EaKzaOO4CBRDE6adcZ9GdZ1cQu0lrchTsYhgS2D1yalCZbN8Vo0Fs 1qUCHgLhqw== ) ; Key ID = 59895`
	`int. 3600 IN DNSKEY ( 256 3 7 AwEAAcQmDBt8ZOQV0+TPwxJVBttg8dzmOh6pRjBsCUSzHUL2A/dnAr6/mff9TQ6TLMqAkpsyGc9D awMT4QZ9yhBmld+ckjVZ79H7/gkCAlYvj7nD136DXmKawlbQtnR59Tig4J0HW8abzaQ+ajOjEbSP tfBrn82ryJ22nCKBP7sx2fKJ ) ; Key ID = 49257`
	`int. 3600 IN DNSKEY ( 257 3 7 AwEAAb8omPP2ctJgDcENW8k7C5HhrCv79Q3sASrugKzHwUxWpfyifwHFRWrRcXVcwG6AnJBQ1U6Z plnhjqdnXSphgH0/Y+CJfqsw2FpHA+sPbOzUO8DCKT3Ez2hEEoUXMr19zqR6a6I/lSt0pO/mg8NS QHVwbWuH35haZ4OEOXGW2T83TGvq19XhLZWu/z4GSEeIKN4XagyVol7HLfjOJpRg1EdPMYWDsWZT WmKd35fZFkLgn6YmzzBgDlLI6x2UfLKgnysIBeoh2h952WyL/EOiO3Lbl0bnVvrQl+VelkfTS1tp gYocWT2FvnU+50PWZnuLjLvnjqDBrbbknTBG7fReYa8= ) ; Key ID = 27433`
	DNSKEY=27433/SEP is now in the chain-of-trust
	DS=27433/SHA-256 verifies DNSKEY=27433/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`int. 3600 IN RRSIG ( DNSKEY 7 1 3600 20240607002947 20240517022627 27433 int. Bo17WGw+/hpDFtuLPuYCbHBqfANLwtRBVkzibHkl4AmDoEL3C9rEkhUFejte7UeBKIgxCzT8zpE6 jUnW+h57VpUFUdWiLhzfFJG2ho+HS+/42uw6PrJFvoQFNqH449Hy1cdyNjxuWNUxSI8vF5N+qGs7 yDECPapQRX/Gj0VHAmXlJv6PY3X4q83s4qZuZOnImieFKrhH8JAvbWWEsRI3mj/NUSJgILCYE/Ck sNu8kteP2oJBTuQTaJwVpJ9SDfd0gMMS4HcWHE3nzp8oEUsQ7WKwnZpVZT94s59ZZSI8p3d+oDk0 PtoFQaolwlXdSfSrYLUW5Y68Ts08WUigfd0U5w== )`
	`int. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240607002947 20240517022627 59895 int. cd48viNQTrtvyn8qCbe0YAnNOdQ7KNS8TYUjp3J5vPFQHtAot1voWt7iAMOce+MBMCVShdiSzNww vXawyKJQDw== )`
	RRSIG=27433 and DNSKEY=27433/SEP verifies the DNSKEY RRset
	RRSIG=59895 and DNSKEY=59895/SEP verifies the DNSKEY RRset
	DNSKEY=64238 is now in the chain-of-trust
	DNSKEY=47712 is now in the chain-of-trust
	DNSKEY=59895/SEP is now in the chain-of-trust
	DNSKEY=49257 is now in the chain-of-trust
	Query to sec2.authdns.ripe.net for who.int/A
	Received 564 bytes from 193.0.9.4
	;; Response received from [193.0.9.4] 564 octets ;; HEADER SECTION ;; id = 56567 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab 63dmjkdgvik8t9ol4ucr95cpcqa0614b NS ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605061600 20240515142628 49257 int. PNTC+Mg+nyeHoviFO5Mq+p6mXkS7ObDejNhyuNLhbllHajo+TzodHuDrZbZThTzb56M5qVGGv2u5 GTGwfYvAX5sCJfCgQxsQx4q1T5X5NEKDSGe5+zsI6w25cZwN5pPtsDw6BhouBGzvYr5CTdmLBbRG 2rq1cXGTZQMf3IpKWbo= ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605061600 20240515142628 64238 int. r09f33PND+nnKy7A7Ii7jfi/r1ZXG7U43BC7AdNKRtgwRmvrhzedFHWvyFuxjGDV5BIrT855ZHA3 7l2qVi7+jQ== ) ;; ADDITIONAL SECTION (5 records) ns1.wpro.who.int. 86400 IN A 123.176.64.11 whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 86400 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	Query to ns.uu.net for who.int/DNSKEY
	Received 571 bytes from 137.39.1.3
	;; Response received from [137.39.1.3] 571 octets ;; HEADER SECTION ;; id = 60202 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 5 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns3.who.int. 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab 63dmjkdgvik8t9ol4ucr95cpcqa0614b NS ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605061600 20240515142628 49257 int. PNTC+Mg+nyeHoviFO5Mq+p6mXkS7ObDejNhyuNLhbllHajo+TzodHuDrZbZThTzb56M5qVGGv2u5 GTGwfYvAX5sCJfCgQxsQx4q1T5X5NEKDSGe5+zsI6w25cZwN5pPtsDw6BhouBGzvYr5CTdmLBbRG 2rq1cXGTZQMf3IpKWbo= ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605061600 20240515142628 64238 int. r09f33PND+nnKy7A7Ii7jfi/r1ZXG7U43BC7AdNKRtgwRmvrhzedFHWvyFuxjGDV5BIrT855ZHA3 7l2qVi7+jQ== ) ;; ADDITIONAL SECTION (5 records) whqdns3.who.int. 86400 IN A 211.24.11.120 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns1.who.int. 86400 IN A 158.232.12.5 ns1.wpro.who.int. 86400 IN A 123.176.64.11 ;; { "EDNS-VERSION": 0 }
	Found child zone who.int

who.int

	Checking DS between int and who.int
	Query to z.iana-servers.net for who.int/DS
	Received 699 bytes from 199.43.134.53
	;; Response received from [199.43.134.53] 699 octets ;; HEADER SECTION ;; id = 37676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) int. 3600 IN SOA ( sns.dns.icann.org. noc.dns.icann.org. 2024042561 ;serial 3600 ;refresh 1800 ;retry 604800 ;expire 3600 ;minimum ) int. 3600 IN RRSIG ( SOA 7 1 3600 20240607175909 20240517162627 49257 int. PGqmYGZNrSGU4XkbCv1m2D8/BI1w9NmBgqZ5VZYtKHJ8zoQw06FI4x4WoKgBqBc5UqWYbZG5WT0F 8JtPQBzhAkjFU8cnQ7LkE8ZYspxzxA0XAkPjk8otxSOhoeyfJa1GXYJuOek3SaWWi3uTTlwNtFgk UmERThOnaCiv/gbCY3c= ) int. 3600 IN RRSIG ( SOA 13 1 3600 20240607175909 20240517162627 64238 int. 3nwWGeHy37u6vAH5s8F6q7TEXJswHAD9QJHt9wFeLitDXpTwBIL03+juGfk6llj3N9PQRTjxMLKd wnL/duLsIw== ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN NSEC3 ( 1 0 5 0eb369ac519deeab 63dmjkdgvik8t9ol4ucr95cpcqa0614b NS ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 7 2 3600 20240605061600 20240515142628 49257 int. PNTC+Mg+nyeHoviFO5Mq+p6mXkS7ObDejNhyuNLhbllHajo+TzodHuDrZbZThTzb56M5qVGGv2u5 GTGwfYvAX5sCJfCgQxsQx4q1T5X5NEKDSGe5+zsI6w25cZwN5pPtsDw6BhouBGzvYr5CTdmLBbRG 2rq1cXGTZQMf3IpKWbo= ) 5qe28cdbggvev3phhgfqgsh8r1l2g76b.int. 3600 IN RRSIG ( NSEC3 13 2 3600 20240605061600 20240515142628 64238 int. r09f33PND+nnKy7A7Ii7jfi/r1ZXG7U43BC7AdNKRtgwRmvrhzedFHWvyFuxjGDV5BIrT855ZHA3 7l2qVi7+jQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for who.int in the int zone
	Query to whqdns3.who.int for who.int/DNSKEY
	Received 91 bytes from 211.24.11.120
	;; Response received from [211.24.11.120] 91 octets ;; HEADER SECTION ;; id = 34457 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) who.int. 10800 IN SOA ( whqdns1.who.int. hostmaster.who.int. 2024051001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to whqdns3.who.int for who.int/A
	Received 227 bytes from 211.24.11.120
	;; Response received from [211.24.11.120] 227 octets ;; HEADER SECTION ;; id = 51863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns2.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	whqdns3.who.int is authoritative for who.int
	Query to ns1.wpro.who.int for who.int/SOA
	Received 107 bytes from 123.176.64.11
	;; Response received from [123.176.64.11] 107 octets ;; HEADER SECTION ;; id = 49321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN SOA ;; ANSWER SECTION (1 record) who.int. 86400 IN SOA ( whqdns1.who.int. hostmaster.who.int. 2024051001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (2 records) whqdns1.who.int. 86400 IN A 158.232.12.5 ;; { "EDNS-VERSION": 0 }
	Query to whqdns1.who.int for who.int/SOA
	Received 258 bytes from 158.232.12.5
	;; Response received from [158.232.12.5] 258 octets ;; HEADER SECTION ;; id = 11069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN SOA ;; ANSWER SECTION (1 record) who.int. 86400 IN SOA ( whqdns1.who.int. hostmaster.who.int. 2024051001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS whqdns2.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	Query to ext-dns-2.cern.ch for who.int/SOA
	Received 264 bytes from 192.91.245.85
	;; Response received from [192.91.245.85] 264 octets ;; HEADER SECTION ;; id = 12004 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN SOA ;; ANSWER SECTION (1 record) who.int. 86400 IN SOA ( whqdns1.who.int. hostmaster.who.int. 2024051001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	Query to whqdns2.who.int for who.int/SOA
	Received 258 bytes from 158.232.12.6
	;; Response received from [158.232.12.6] 258 octets ;; HEADER SECTION ;; id = 32094 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN SOA ;; ANSWER SECTION (1 record) who.int. 86400 IN SOA ( whqdns1.who.int. hostmaster.who.int. 2024051001 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	Query to whqdns3.who.int for who.int/A
	Received 227 bytes from 211.24.11.120
	;; Response received from [211.24.11.120] 227 octets ;; HEADER SECTION ;; id = 29067 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	who.int A RR has value 192.133.11.1
	No RRSIGs found

who.int

	Query to ext-dns-2.cern.ch for who.int/A
	Received 233 bytes from 192.91.245.85
	;; Response received from [192.91.245.85] 233 octets ;; HEADER SECTION ;; id = 32384 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	ext-dns-2.cern.ch is authoritative for who.int
	Query to ext-dns-2.cern.ch for who.int/A
	Received 233 bytes from 192.91.245.85
	;; Response received from [192.91.245.85] 233 octets ;; HEADER SECTION ;; id = 21796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns2.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	who.int A RR has value 192.133.11.1
	No RRSIGs found

who.int

	Query to whqdns2.who.int for who.int/A
	Received 227 bytes from 158.232.12.6
	;; Response received from [158.232.12.6] 227 octets ;; HEADER SECTION ;; id = 6252 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	whqdns2.who.int is authoritative for who.int
	Query to whqdns2.who.int for who.int/A
	Received 227 bytes from 158.232.12.6
	;; Response received from [158.232.12.6] 227 octets ;; HEADER SECTION ;; id = 24819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS whqdns2.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	who.int A RR has value 192.133.11.1
	No RRSIGs found

who.int

	Query to ns1.wpro.who.int for who.int/A
	Received 52 bytes from 123.176.64.11
	;; Response received from [123.176.64.11] 52 octets ;; HEADER SECTION ;; id = 55567 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.wpro.who.int is authoritative for who.int
	Query to ns1.wpro.who.int for who.int/A
	Received 52 bytes from 123.176.64.11
	;; Response received from [123.176.64.11] 52 octets ;; HEADER SECTION ;; id = 24935 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4000, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	who.int A RR has value 192.133.11.1
	No RRSIGs found

who.int

	Query to whqdns1.who.int for who.int/A
	Received 227 bytes from 158.232.12.5
	;; Response received from [158.232.12.5] 227 octets ;; HEADER SECTION ;; id = 39913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. who.int. 86400 IN NS whqdns1.who.int. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	whqdns1.who.int is authoritative for who.int
	Query to whqdns1.who.int for who.int/A
	Received 227 bytes from 158.232.12.5
	;; Response received from [158.232.12.5] 227 octets ;; HEADER SECTION ;; id = 32443 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; who.int. IN A ;; ANSWER SECTION (1 record) who.int. 900 IN A 192.133.11.1 ;; AUTHORITY SECTION (5 records) who.int. 86400 IN NS whqdns2.who.int. who.int. 86400 IN NS whqdns3.who.int. who.int. 86400 IN NS ns1.wpro.who.int. who.int. 86400 IN NS whqdns1.who.int. who.int. 86400 IN NS ext-dns-2.cern.ch. ;; ADDITIONAL SECTION (4 records) whqdns1.who.int. 86400 IN A 158.232.12.5 whqdns2.who.int. 86400 IN A 158.232.12.6 whqdns3.who.int. 120 IN A 211.24.11.120 ;; { "EDNS-VERSION": 0 }
	who.int A RR has value 192.133.11.1
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test who.int at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: