DNSSEC Debugger - www.mastodon.at

Domain Name:

Time: 2024-05-12 19:00:57 UTC

Analyzing DNSSEC problems for www.mastodon.at

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 864 octets ;; HEADER SECTION ;; id = 15758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to j.root-servers.net for www.mastodon.at/A
	Received 926 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 926 octets ;; HEADER SECTION ;; id = 59969 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS d.ns.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS ns9.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . Sn0UoBgrHckk7efKb+yNpPGCEwEbGorBK+8CJKR/wmXSiKAi+0DwtumJ3flFqMSkP7eRj4ht7gop gDeJmF7SQMa6qG2PTDdX6rZ323YSMVpU2vsIQoorGqmlgJSCmiB542GO1GPTpTzkGBZpfMyXoXUl H1O9UDPFerR/RKI0ZDn/mCYHS2WFyRks2U60Wa5ZY8l2PPnNXWsYi5BRe6jOIRU1vYL492uIL4u5 wvDBZBXiXuwWC1XHK95+E3Vj3n79z0fh659iosMDHA6Za+lFT9VuFdT8XDaWGDNY9PejKYzKzXk4 MZ7yAYiPboWFfSYIHogQzg7NW1j05LZaultkAA== ) ;; ADDITIONAL SECTION (17 records) d.ns.at. 172800 IN A 81.91.161.98 j.ns.at. 172800 IN A 194.146.106.50 n.ns.at. 172800 IN A 81.91.173.130 r.ns.at. 172800 IN A 194.0.25.10 u.ns.at. 172800 IN A 185.102.12.2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns9.univie.ac.at. 172800 IN A 194.0.10.100 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for at/DNSKEY
	Received 913 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 913 octets ;; HEADER SECTION ;; id = 12214 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) at. 172800 IN NS d.ns.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS ns9.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . Sn0UoBgrHckk7efKb+yNpPGCEwEbGorBK+8CJKR/wmXSiKAi+0DwtumJ3flFqMSkP7eRj4ht7gop gDeJmF7SQMa6qG2PTDdX6rZ323YSMVpU2vsIQoorGqmlgJSCmiB542GO1GPTpTzkGBZpfMyXoXUl H1O9UDPFerR/RKI0ZDn/mCYHS2WFyRks2U60Wa5ZY8l2PPnNXWsYi5BRe6jOIRU1vYL492uIL4u5 wvDBZBXiXuwWC1XHK95+E3Vj3n79z0fh659iosMDHA6Za+lFT9VuFdT8XDaWGDNY9PejKYzKzXk4 MZ7yAYiPboWFfSYIHogQzg7NW1j05LZaultkAA== ) ;; ADDITIONAL SECTION (17 records) d.ns.at. 172800 IN A 81.91.161.98 j.ns.at. 172800 IN A 194.146.106.50 n.ns.at. 172800 IN A 81.91.173.130 r.ns.at. 172800 IN A 194.0.25.10 u.ns.at. 172800 IN A 185.102.12.2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns9.univie.ac.at. 172800 IN A 194.0.10.100 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns9.univie.ac.at. 172800 IN AAAA 2001:678:d::cafe ;; { "EDNS-VERSION": 0 }
	Found child zone at

	Checking DS between . and at
	Query to b.root-servers.net for at/DS
	Received 414 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 414 octets ;; HEADER SECTION ;; id = 65444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DS ;; ANSWER SECTION (3 records) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . Sn0UoBgrHckk7efKb+yNpPGCEwEbGorBK+8CJKR/wmXSiKAi+0DwtumJ3flFqMSkP7eRj4ht7gop gDeJmF7SQMa6qG2PTDdX6rZ323YSMVpU2vsIQoorGqmlgJSCmiB542GO1GPTpTzkGBZpfMyXoXUl H1O9UDPFerR/RKI0ZDn/mCYHS2WFyRks2U60Wa5ZY8l2PPnNXWsYi5BRe6jOIRU1vYL492uIL4u5 wvDBZBXiXuwWC1XHK95+E3Vj3n79z0fh659iosMDHA6Za+lFT9VuFdT8XDaWGDNY9PejKYzKzXk4 MZ7yAYiPboWFfSYIHogQzg7NW1j05LZaultkAA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for at in the . zone
	DS=1253/SHA-256 has algorithm ECDSAP256SHA256
	DS=18942/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`at. 86400 IN RRSIG ( DS 8 1 86400 20240525170000 20240512160000 5613 . Sn0UoBgrHckk7efKb+yNpPGCEwEbGorBK+8CJKR/wmXSiKAi+0DwtumJ3flFqMSkP7eRj4ht7gop gDeJmF7SQMa6qG2PTDdX6rZ323YSMVpU2vsIQoorGqmlgJSCmiB542GO1GPTpTzkGBZpfMyXoXUl H1O9UDPFerR/RKI0ZDn/mCYHS2WFyRks2U60Wa5ZY8l2PPnNXWsYi5BRe6jOIRU1vYL492uIL4u5 wvDBZBXiXuwWC1XHK95+E3Vj3n79z0fh659iosMDHA6Za+lFT9VuFdT8XDaWGDNY9PejKYzKzXk4 MZ7yAYiPboWFfSYIHogQzg7NW1j05LZaultkAA== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=1253/SHA-256 is now in the chain-of-trust
	DS=18942/SHA-256 is now in the chain-of-trust
	`at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e )`
	`at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f )`
	Query to u.ns.at for at/DNSKEY
	Received 449 bytes from 185.102.12.2
	;; Response received from [185.102.12.2] 449 octets ;; HEADER SECTION ;; id = 15750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (5 records) at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460 at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345 at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942 at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253 at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240520031520 20240505160155 18942 at. cXduBJuwjj1cCpQHUD8NVg1jmJFB4HQ2aj3ZfpcUC2SJu6XXiZI1S8C97XG0CfanxeMtrJbB1ysP G9ADGDSR/w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for at
	`at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; Key ID = 8460`
	`at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; Key ID = 6345`
	`at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; Key ID = 18942`
	`at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; Key ID = 1253`
	DNSKEY=18942/SEP is now in the chain-of-trust
	DS=18942/SHA-256 verifies DNSKEY=18942/SEP
	DNSKEY=1253/SEP is now in the chain-of-trust
	DS=1253/SHA-256 verifies DNSKEY=1253/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20240520031520 20240505160155 18942 at. cXduBJuwjj1cCpQHUD8NVg1jmJFB4HQ2aj3ZfpcUC2SJu6XXiZI1S8C97XG0CfanxeMtrJbB1ysP G9ADGDSR/w== )`
	RRSIG=18942 and DNSKEY=18942/SEP verifies the DNSKEY RRset
	DNSKEY=8460 is now in the chain-of-trust
	DNSKEY=6345 is now in the chain-of-trust
	Query to r.ns.at for www.mastodon.at/A
	Received 446 bytes from 194.0.25.10
	;; Response received from [194.0.25.10] 446 octets ;; HEADER SECTION ;; id = 48304 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mastodon.at. 10800 IN NS ns11.realtime.at. mastodon.at. 10800 IN NS ns12.realtime.at. fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsqil81fv8uamdcek2745nacv6c8f8q NS SOA RRSIG DNSKEY NSEC3PARAM ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240520002504 20240506020153 6345 at. HpPZbE9xEqHCQs+Wt/jSF4jDnBG4n9AUTAWBKZw3DrEciIDNSCyFoJ7kxZJgc8jhSe3Lk/w3jn19 SNB+Du/baQ== ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN NSEC3 ( 1 1 0 - ic4sg2q5275seq0t84emee0gcve64tvt NS DS RRSIG ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240525085313 20240511230154 6345 at. Inir9bJNeN0hamyxc0EWuyexqolG+W00Mp1/yfCRVS42hv7IfGwBOkln4YBxY9fvP26m2Whz1171 7jLi7beCBg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to u.ns.at for mastodon.at/DNSKEY
	Received 442 bytes from 185.102.12.2
	;; Response received from [185.102.12.2] 442 octets ;; HEADER SECTION ;; id = 64186 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mastodon.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) mastodon.at. 10800 IN NS ns11.realtime.at. mastodon.at. 10800 IN NS ns12.realtime.at. fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsqil81fv8uamdcek2745nacv6c8f8q NS SOA RRSIG DNSKEY NSEC3PARAM ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240520002504 20240506020153 6345 at. HpPZbE9xEqHCQs+Wt/jSF4jDnBG4n9AUTAWBKZw3DrEciIDNSCyFoJ7kxZJgc8jhSe3Lk/w3jn19 SNB+Du/baQ== ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN NSEC3 ( 1 1 0 - ic4sg2q5275seq0t84emee0gcve64tvt NS DS RRSIG ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240525085313 20240511230154 6345 at. Inir9bJNeN0hamyxc0EWuyexqolG+W00Mp1/yfCRVS42hv7IfGwBOkln4YBxY9fvP26m2Whz1171 7jLi7beCBg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone mastodon.at

mastodon.at

	Checking DS between at and mastodon.at
	Query to ns1.univie.ac.at for mastodon.at/DS
	Received 560 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 560 octets ;; HEADER SECTION ;; id = 9274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mastodon.at. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) at. 10800 IN SOA ( dns.nic.at. domain-admin.univie.ac.at. 1715536802 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) at. 10800 IN RRSIG ( SOA 13 1 172800 20240527165738 20240512170158 6345 at. M5YoYedTq3RrCDBkHPN+HSjw9Q564WIxi4P+9d0RtTizNUxRnqe5UGNU22afC2oUm+uzS/yNzkc3 NvEqVW9vbw== ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN NSEC3 ( 1 1 0 - fjsqil81fv8uamdcek2745nacv6c8f8q NS SOA RRSIG DNSKEY NSEC3PARAM ) fjscbioio98ccv4od6ka4d7oh5bgrn00.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240520002504 20240506020153 6345 at. HpPZbE9xEqHCQs+Wt/jSF4jDnBG4n9AUTAWBKZw3DrEciIDNSCyFoJ7kxZJgc8jhSe3Lk/w3jn19 SNB+Du/baQ== ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN NSEC3 ( 1 1 0 - ic4sg2q5275seq0t84emee0gcve64tvt NS DS RRSIG ) ic4p05rnc1gvn5m9pgjq90uiknf3jfhq.at. 10800 IN RRSIG ( NSEC3 13 2 10800 20240525085313 20240511230154 6345 at. Inir9bJNeN0hamyxc0EWuyexqolG+W00Mp1/yfCRVS42hv7IfGwBOkln4YBxY9fvP26m2Whz1171 7jLi7beCBg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for mastodon.at in the at zone
	Query to ns11.realtime.at for mastodon.at/DNSKEY
	Received 97 bytes from 5.9.10.75
	;; Response received from [5.9.10.75] 97 octets ;; HEADER SECTION ;; id = 5502 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mastodon.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mastodon.at. 3600 IN SOA ( ns11.realtime.at. office.realtime.at. 2023121212 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns12.realtime.at for www.mastodon.at/A
	Received 60 bytes from 46.4.10.130
	;; Response received from [46.4.10.130] 60 octets ;; HEADER SECTION ;; id = 43078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (1 record) www.mastodon.at. 3600 IN A 5.9.10.75 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns12.realtime.at is authoritative for www.mastodon.at
	Query to ns12.realtime.at for www.mastodon.at/DNSKEY
	Received 101 bytes from 46.4.10.130
	;; Response received from [46.4.10.130] 101 octets ;; HEADER SECTION ;; id = 24266 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mastodon.at. 3600 IN SOA ( ns11.realtime.at. office.realtime.at. 2023121212 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns11.realtime.at for mastodon.at/SOA
	Received 97 bytes from 5.9.10.75
	;; Response received from [5.9.10.75] 97 octets ;; HEADER SECTION ;; id = 1437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; mastodon.at. IN SOA ;; ANSWER SECTION (1 record) mastodon.at. 3600 IN SOA ( ns11.realtime.at. office.realtime.at. 2023121212 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns12.realtime.at for www.mastodon.at/A
	Received 60 bytes from 46.4.10.130
	;; Response received from [46.4.10.130] 60 octets ;; HEADER SECTION ;; id = 12830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (1 record) www.mastodon.at. 3600 IN A 5.9.10.75 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.mastodon.at A RR has value 5.9.10.75
	No RRSIGs found

mastodon.at

	Query to ns11.realtime.at for www.mastodon.at/A
	Received 60 bytes from 5.9.10.75
	;; Response received from [5.9.10.75] 60 octets ;; HEADER SECTION ;; id = 16593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (1 record) www.mastodon.at. 3600 IN A 5.9.10.75 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns11.realtime.at is authoritative for www.mastodon.at
	Query to ns11.realtime.at for www.mastodon.at/DNSKEY
	Received 101 bytes from 5.9.10.75
	;; Response received from [5.9.10.75] 101 octets ;; HEADER SECTION ;; id = 40739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) mastodon.at. 3600 IN SOA ( ns11.realtime.at. office.realtime.at. 2023121212 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns11.realtime.at for www.mastodon.at/A
	Received 60 bytes from 5.9.10.75
	;; Response received from [5.9.10.75] 60 octets ;; HEADER SECTION ;; id = 43684 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.mastodon.at. IN A ;; ANSWER SECTION (1 record) www.mastodon.at. 3600 IN A 5.9.10.75 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.mastodon.at A RR has value 5.9.10.75
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.mastodon.at at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: