DNSSEC Analyzer - 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl

Domain Name:

Time: 2022-01-21 07:43:20 UTC, NTP stratum 16

Analyzing DNSSEC problems for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (864 octets) ;; HEADER SECTION ;; id = 21752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to h.root-servers.net for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/A
	Received 624 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (624 octets) ;; HEADER SECTION ;; id = 30828 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to f.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (556 octets) ;; HEADER SECTION ;; id = 15459 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to m.root-servers.net for nl/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (366 octets) ;; HEADER SECTION ;; id = 553 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns1.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (745 octets) ;; HEADER SECTION ;; id = 43396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851 nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220202122256 20220119000835 34112 nl. Xvn0bN9PjpuG9vdUIfAvzFsAewYwhHNTemLYqAkKwgHyRveh1a4eVPKYIuZl4rMHiPzTr8dLiKIJ YF7bqYHF9PKuMEuFEaXSkggjuE6AEkj72hsCePzwjBDKZnxW8kdMUJgd7HvnG1OVXibg5XxFhGOi /SjD7gdlE9bVepXtNUECj5C7o/rqDbgy90qMtCTTlyACqgb9RBh8iiZMBVoh0znh0ZCa54VmDeo0 9AkNbw6OqeP9t+9EpcQ7GVCtyOrsN38q4ZeY6EbfLbwCZmTIeqfqUafjRLi1yX7LiN1zkLpJYYPf HjzGqZL9HhKWig8ZQKzXzY8+OkONjh/IS22xdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851`
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220202122256 20220119000835 34112 nl. Xvn0bN9PjpuG9vdUIfAvzFsAewYwhHNTemLYqAkKwgHyRveh1a4eVPKYIuZl4rMHiPzTr8dLiKIJ YF7bqYHF9PKuMEuFEaXSkggjuE6AEkj72hsCePzwjBDKZnxW8kdMUJgd7HvnG1OVXibg5XxFhGOi /SjD7gdlE9bVepXtNUECj5C7o/rqDbgy90qMtCTTlyACqgb9RBh8iiZMBVoh0znh0ZCa54VmDeo0 9AkNbw6OqeP9t+9EpcQ7GVCtyOrsN38q4ZeY6EbfLbwCZmTIeqfqUafjRLi1yX7LiN1zkLpJYYPf HjzGqZL9HhKWig8ZQKzXzY8+OkONjh/IS22xdw== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=31851 is now in the chain-of-trust
	Query to ns3.dns.nl for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/A
	Received 447 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (447 octets) ;; HEADER SECTION ;; id = 26453 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) internet.nl. 3600 IN NS ns1.sidnlabs.nl. internet.nl. 3600 IN NS ns3.sidn.nl. internet.nl. 3600 IN DS ( 22707 13 2 a69c3d2d414e4ef8ceaa66d39d90ed2b20ef36d9f4007d678cea0c0d803a0b7e ) internet.nl. 3600 IN RRSIG ( DS 8 2 3600 20220201134901 20220118220933 31851 nl. GMlNJVdjA321ZHuHdnBTEaFszn6ThxIz7jIoyZzmtBBNa/ffK2Lry6EpcmYfcF1ceQ31jgPOU0UZ XFAGws9XhjhaSBsGiTqmmsuzXPTydcVig6qlwC8ma9zIK5e894XUV6ktrcmiDz40Ja6aU+hnkba+ 1NCMF1+chq5Yk7hQBIM= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to ns3.dns.nl for internet.nl/DNSKEY
	Received 388 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (388 octets) ;; HEADER SECTION ;; id = 9720 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; internet.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) internet.nl. 3600 IN NS ns1.sidnlabs.nl. internet.nl. 3600 IN NS ns3.sidn.nl. internet.nl. 3600 IN DS ( 22707 13 2 a69c3d2d414e4ef8ceaa66d39d90ed2b20ef36d9f4007d678cea0c0d803a0b7e ) internet.nl. 3600 IN RRSIG ( DS 8 2 3600 20220201134901 20220118220933 31851 nl. GMlNJVdjA321ZHuHdnBTEaFszn6ThxIz7jIoyZzmtBBNa/ffK2Lry6EpcmYfcF1ceQ31jgPOU0UZ XFAGws9XhjhaSBsGiTqmmsuzXPTydcVig6qlwC8ma9zIK5e894XUV6ktrcmiDz40Ja6aU+hnkba+ 1NCMF1+chq5Yk7hQBIM= ) ;; ADDITIONAL SECTION (5 records) ns1.sidnlabs.nl. 3600 IN A 94.198.159.8 ns3.sidn.nl. 3600 IN A 194.0.30.2 ns1.sidnlabs.nl. 3600 IN AAAA 2a00:d78:0:712:94:198:159:8 ns3.sidn.nl. 3600 IN AAAA 2001:678:34:0:194:0:30:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone internet.nl

internet.nl

	Checking DS between nl and internet.nl
	Query to ns3.dns.nl for internet.nl/DS
	Received 250 bytes from 194.0.25.24
	;; Response received from 194.0.25.24 (250 octets) ;; HEADER SECTION ;; id = 25535 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; internet.nl. IN DS ;; ANSWER SECTION (2 records) internet.nl. 3600 IN DS ( 22707 13 2 a69c3d2d414e4ef8ceaa66d39d90ed2b20ef36d9f4007d678cea0c0d803a0b7e ) internet.nl. 3600 IN RRSIG ( DS 8 2 3600 20220201134901 20220118220933 31851 nl. GMlNJVdjA321ZHuHdnBTEaFszn6ThxIz7jIoyZzmtBBNa/ffK2Lry6EpcmYfcF1ceQ31jgPOU0UZ XFAGws9XhjhaSBsGiTqmmsuzXPTydcVig6qlwC8ma9zIK5e894XUV6ktrcmiDz40Ja6aU+hnkba+ 1NCMF1+chq5Yk7hQBIM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found 1 DS records for internet.nl in the nl zone
	DS=22707/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`internet.nl. 3600 IN RRSIG ( DS 8 2 3600 20220201134901 20220118220933 31851 nl. GMlNJVdjA321ZHuHdnBTEaFszn6ThxIz7jIoyZzmtBBNa/ffK2Lry6EpcmYfcF1ceQ31jgPOU0UZ XFAGws9XhjhaSBsGiTqmmsuzXPTydcVig6qlwC8ma9zIK5e894XUV6ktrcmiDz40Ja6aU+hnkba+ 1NCMF1+chq5Yk7hQBIM= )`
	RRSIG=31851 and DNSKEY=31851 verifies the DS RRset
	DS=22707/SHA-256 is now in the chain-of-trust
	`internet.nl. 3600 IN DS ( 22707 13 2 a69c3d2d414e4ef8ceaa66d39d90ed2b20ef36d9f4007d678cea0c0d803a0b7e )`
	Query to ns1.sidnlabs.nl for internet.nl/DNSKEY
	Received 307 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (307 octets) ;; HEADER SECTION ;; id = 9522 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; internet.nl. IN DNSKEY ;; ANSWER SECTION (3 records) internet.nl. 3600 IN DNSKEY ( 257 3 13 QA3dnKfJvTjvncs3FercMXITNIcpTwRA1aq+KaQF/VEbvWOBH90TZxgLuAwoh8/+s5/ayhkJiJ9V TY9BBciGJg== ) ; Key ID = 22707 internet.nl. 3600 IN DNSKEY ( 256 3 13 Q1S27/I3GmextgSE1e66VcIE8cFtfWV/ETPVpSCzN4sWGDsYZMuncvVXe1noHf9kLxKyfPHI4G7Q r4nBZpD+Aw== ) ; Key ID = 16313 internet.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220206101327 20220107091506 22707 internet.nl. vUjHS31j0kGVyykIiXgNklgBZ/NUVmPgxgMwuikYITo1xE9e0c/gPw5xkv6utTP+N06MMcENK1W0 nO0jw9lEmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for internet.nl
	`internet.nl. 3600 IN DNSKEY ( 257 3 13 QA3dnKfJvTjvncs3FercMXITNIcpTwRA1aq+KaQF/VEbvWOBH90TZxgLuAwoh8/+s5/ayhkJiJ9V TY9BBciGJg== ) ; Key ID = 22707`
	`internet.nl. 3600 IN DNSKEY ( 256 3 13 Q1S27/I3GmextgSE1e66VcIE8cFtfWV/ETPVpSCzN4sWGDsYZMuncvVXe1noHf9kLxKyfPHI4G7Q r4nBZpD+Aw== ) ; Key ID = 16313`
	DNSKEY=22707/SEP is now in the chain-of-trust
	DS=22707/SHA-256 verifies DNSKEY=22707/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`internet.nl. 3600 IN RRSIG ( DNSKEY 13 2 3600 20220206101327 20220107091506 22707 internet.nl. vUjHS31j0kGVyykIiXgNklgBZ/NUVmPgxgMwuikYITo1xE9e0c/gPw5xkv6utTP+N06MMcENK1W0 nO0jw9lEmA== )`
	RRSIG=22707 and DNSKEY=22707/SEP verifies the DNSKEY RRset
	DNSKEY=16313 is now in the chain-of-trust
	Query to ns1.sidnlabs.nl for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/A
	Received 341 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (341 octets) ;; HEADER SECTION ;; id = 14391 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) test-ns-signed.internet.nl. 3600 IN NS ns.test-ns-signed.internet.nl. test-ns-signed.internet.nl. 3600 IN DS ( 25189 8 2 3888263101073ebed8490c17ed1a6b2c72ac2fcf91e74581315f0f43fc008734 ) test-ns-signed.internet.nl. 3600 IN RRSIG ( DS 13 3 3600 20220214024253 20220115021607 16313 internet.nl. WiglqOiV0GDB4CRXnma51XJ+ZYTBGmVRBvANRTPhLDotHC3oSj5KpF0k0Q3cYNUpwGg2wPXnSfOa pCtvMMXwYA== ) ;; ADDITIONAL SECTION (3 records) ns.test-ns-signed.internet.nl. 3600 IN A 62.204.66.10 ns.test-ns-signed.internet.nl. 3600 IN AAAA 2a00:d00:ff:162:62:204:66:10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.sidnlabs.nl for test-ns-signed.internet.nl/DNSKEY
	Received 271 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (271 octets) ;; HEADER SECTION ;; id = 37711 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; test-ns-signed.internet.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (3 records) test-ns-signed.internet.nl. 3600 IN NS ns.test-ns-signed.internet.nl. test-ns-signed.internet.nl. 3600 IN DS ( 25189 8 2 3888263101073ebed8490c17ed1a6b2c72ac2fcf91e74581315f0f43fc008734 ) test-ns-signed.internet.nl. 3600 IN RRSIG ( DS 13 3 3600 20220214024253 20220115021607 16313 internet.nl. WiglqOiV0GDB4CRXnma51XJ+ZYTBGmVRBvANRTPhLDotHC3oSj5KpF0k0Q3cYNUpwGg2wPXnSfOa pCtvMMXwYA== ) ;; ADDITIONAL SECTION (3 records) ns.test-ns-signed.internet.nl. 3600 IN A 62.204.66.10 ns.test-ns-signed.internet.nl. 3600 IN AAAA 2a00:d00:ff:162:62:204:66:10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone test-ns-signed.internet.nl

test-ns-signed.internet.nl

	Checking DS between internet.nl and test-ns-signed.internet.nl
	Query to ns1.sidnlabs.nl for test-ns-signed.internet.nl/DS
	Received 210 bytes from 94.198.159.8
	;; Response received from 94.198.159.8 (210 octets) ;; HEADER SECTION ;; id = 46055 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; test-ns-signed.internet.nl. IN DS ;; ANSWER SECTION (2 records) test-ns-signed.internet.nl. 3600 IN DS ( 25189 8 2 3888263101073ebed8490c17ed1a6b2c72ac2fcf91e74581315f0f43fc008734 ) test-ns-signed.internet.nl. 3600 IN RRSIG ( DS 13 3 3600 20220214024253 20220115021607 16313 internet.nl. WiglqOiV0GDB4CRXnma51XJ+ZYTBGmVRBvANRTPhLDotHC3oSj5KpF0k0Q3cYNUpwGg2wPXnSfOa pCtvMMXwYA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for test-ns-signed.internet.nl in the internet.nl zone
	DS=25189/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`test-ns-signed.internet.nl. 3600 IN RRSIG ( DS 13 3 3600 20220214024253 20220115021607 16313 internet.nl. WiglqOiV0GDB4CRXnma51XJ+ZYTBGmVRBvANRTPhLDotHC3oSj5KpF0k0Q3cYNUpwGg2wPXnSfOa pCtvMMXwYA== )`
	RRSIG=16313 and DNSKEY=16313 verifies the DS RRset
	DS=25189/SHA-256 is now in the chain-of-trust
	`test-ns-signed.internet.nl. 3600 IN DS ( 25189 8 2 3888263101073ebed8490c17ed1a6b2c72ac2fcf91e74581315f0f43fc008734 )`
	Query to ns.test-ns-signed.internet.nl for test-ns-signed.internet.nl/DNSKEY
	Received 389 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (389 octets) ;; HEADER SECTION ;; id = 21586 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; test-ns-signed.internet.nl. IN DNSKEY ;; ANSWER SECTION (2 records) test-ns-signed.internet.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbuk+jb6rm6wKSBqZm//+/2OBqW/P1I0ZSjjZZdXCwAeEPuycqEJwR8EFF8kkB13ARfQGoKF pRIjJmAB+0UDaN/sVNaBtqdMYsb3eEnl2ZK2DRm5fqsTkD3cs01eC4DbwUSa1c27E9VfyLRVOkTF oG9DXxyzWOqh1r5mYhUN0Lcj ) ; Key ID = 25189 test-ns-signed.internet.nl. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. OnSZVBdFacM19I8Q5hbOtIL/NiuiISaa0MZFINJgoPqgZueK7cYS4DhMm6ZVOu01suzoQJ1vWvJb yBb3GHVQeKr8Y+nxh46uR/yf8IdK2iakzxg+oYmxflDH0Zpd0K8eqhgek9rVILs8+3hxntVU5oqC gK7h3gLqLEwpjQBxq0A= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DNSKEY records for test-ns-signed.internet.nl
	`test-ns-signed.internet.nl. 3600 IN DNSKEY ( 257 3 8 AwEAAbuk+jb6rm6wKSBqZm//+/2OBqW/P1I0ZSjjZZdXCwAeEPuycqEJwR8EFF8kkB13ARfQGoKF pRIjJmAB+0UDaN/sVNaBtqdMYsb3eEnl2ZK2DRm5fqsTkD3cs01eC4DbwUSa1c27E9VfyLRVOkTF oG9DXxyzWOqh1r5mYhUN0Lcj ) ; Key ID = 25189`
	DNSKEY=25189/SEP is now in the chain-of-trust
	DS=25189/SHA-256 verifies DNSKEY=25189/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`test-ns-signed.internet.nl. 3600 IN RRSIG ( DNSKEY 8 3 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. OnSZVBdFacM19I8Q5hbOtIL/NiuiISaa0MZFINJgoPqgZueK7cYS4DhMm6ZVOu01suzoQJ1vWvJb yBb3GHVQeKr8Y+nxh46uR/yf8IdK2iakzxg+oYmxflDH0Zpd0K8eqhgek9rVILs8+3hxntVU5oqC gK7h3gLqLEwpjQBxq0A= )`
	RRSIG=25189 and DNSKEY=25189/SEP verifies the DNSKEY RRset
	Query to ns.test-ns-signed.internet.nl for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/A
	Received 380 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (380 octets) ;; HEADER SECTION ;; id = 7917 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN A ;; ANSWER SECTION (1 record) 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. 3600 IN A ( 62.204.66.10 ) ;; AUTHORITY SECTION (2 records) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - 42o57g4cod9nno98gacnt1dh2akk4ljj A AAAA RRSIG ) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. V3ene04391KtjIAz9/GIIOmQiTHIRb3q4VOFoCyOS7oYv9zUHTHOTazZAdw3bWN0rcwuTOInSTrE PzfXA7K9z0DS4qD5USC3HxsJSMbCv6tKjjwmIKvXVIvdqHJd5TiW1QO0ofpP1rZvYsWdOM/b5LGH vYFrAUTJIFxYj42V6j0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.test-ns-signed.internet.nl is authoritative for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl
	Query to ns.test-ns-signed.internet.nl for conn.test-ns-signed.internet.nl/DNSKEY
	Received 558 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (558 octets) ;; HEADER SECTION ;; id = 36711 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; conn.test-ns-signed.internet.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) test-ns-signed.internet.nl. 3600 IN SOA ( ns.test-ns-signed.internet.nl. ralph.nlnetlabs.nl. 1642723201 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) test-ns-signed.internet.nl. 3600 IN RRSIG ( SOA 8 3 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. JqYboxULgBUKfUNSmzWY/2S9tPO1j2UbUSYWFbsXi1uO8MwZIcz61Q6oraCgwBH3R6+yTPfFBEDQ NhDFEnTbw5+pH2nCMGXdIKYaswexjodUqhwuQKmWylQkt8dIu85c+7JAeTovgDC7yPFWEsl441y6 ePqCz7AGL17hfiysduw= ) ack0pfna54gaii15ngtkvf1abd9a7sj8.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - b2ucbv91issah744t3hproeih6migoqm ) ack0pfna54gaii15ngtkvf1abd9a7sj8.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. rMZzRBWG3BdzoqNGwwR/xa0SfDXVQMMvv79E+PR7BL3/QUx3KW7CRgfKX16qpQDf/HV3PZPUXhr9 Optde9nxNrXijMDOvRgZhQsJh5+w6uIv0jjq/m/5IMKI5BB/rxfsLh0/Nhbgbky9Pt/1imWB0HdQ +1Wu2mVot92tCxwaZ4Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.test-ns-signed.internet.nl for bogus.conn.test-ns-signed.internet.nl/DNSKEY
	Received 564 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (564 octets) ;; HEADER SECTION ;; id = 25592 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; bogus.conn.test-ns-signed.internet.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) test-ns-signed.internet.nl. 3600 IN SOA ( ns.test-ns-signed.internet.nl. ralph.nlnetlabs.nl. 1642723201 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) test-ns-signed.internet.nl. 3600 IN RRSIG ( SOA 8 3 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. JqYboxULgBUKfUNSmzWY/2S9tPO1j2UbUSYWFbsXi1uO8MwZIcz61Q6oraCgwBH3R6+yTPfFBEDQ NhDFEnTbw5+pH2nCMGXdIKYaswexjodUqhwuQKmWylQkt8dIu85c+7JAeTovgDC7yPFWEsl441y6 ePqCz7AGL17hfiysduw= ) 9dms63nssl7of5ucg6kcm0i9lce36cpo.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - 9uau46037vftua3cdiuikbltur1def10 ) 9dms63nssl7of5ucg6kcm0i9lce36cpo.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. SOT33D0WJ8rN/wprJ8zD+/d12exVrGeozoq13F9YVGf1FcmyTK1F5hyWqs8Bu7ULzIP5Yi0i6XvF Ks3ILNBo85KsFwlFGIXdy0bFkcsOFhFJyBPeM1jabaj3d6bpicrL0Q8SZyb8kveLoNw07t5RkoxW XXfu5DA4fCB8EXHmqvo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.test-ns-signed.internet.nl for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/DNSKEY
	Received 862 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (862 octets) ;; HEADER SECTION ;; id = 52514 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) test-ns-signed.internet.nl. 3600 IN SOA ( ns.test-ns-signed.internet.nl. ralph.nlnetlabs.nl. 1642723201 ;serial 14400 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) test-ns-signed.internet.nl. 3600 IN RRSIG ( SOA 8 3 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. JqYboxULgBUKfUNSmzWY/2S9tPO1j2UbUSYWFbsXi1uO8MwZIcz61Q6oraCgwBH3R6+yTPfFBEDQ NhDFEnTbw5+pH2nCMGXdIKYaswexjodUqhwuQKmWylQkt8dIu85c+7JAeTovgDC7yPFWEsl441y6 ePqCz7AGL17hfiysduw= ) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - 42o57g4cod9nno98gacnt1dh2akk4ljj A AAAA RRSIG ) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. V3ene04391KtjIAz9/GIIOmQiTHIRb3q4VOFoCyOS7oYv9zUHTHOTazZAdw3bWN0rcwuTOInSTrE PzfXA7K9z0DS4qD5USC3HxsJSMbCv6tKjjwmIKvXVIvdqHJd5TiW1QO0ofpP1rZvYsWdOM/b5LGH vYFrAUTJIFxYj42V6j0= ) 9dms63nssl7of5ucg6kcm0i9lce36cpo.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - 9uau46037vftua3cdiuikbltur1def10 ) 9dms63nssl7of5ucg6kcm0i9lce36cpo.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. SOT33D0WJ8rN/wprJ8zD+/d12exVrGeozoq13F9YVGf1FcmyTK1F5hyWqs8Bu7ULzIP5Yi0i6XvF Ks3ILNBo85KsFwlFGIXdy0bFkcsOFhFJyBPeM1jabaj3d6bpicrL0Q8SZyb8kveLoNw07t5RkoxW XXfu5DA4fCB8EXHmqvo= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.test-ns-signed.internet.nl for 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl/A
	Received 380 bytes from 62.204.66.10
	;; Response received from 62.204.66.10 (380 octets) ;; HEADER SECTION ;; id = 65116 ;; qr = 1 aa = 1 tc = 0 rd = 1 opcode = QUERY ;; ra = 1 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. IN A ;; ANSWER SECTION (1 record) 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl. 3600 IN A ( 62.204.66.10 ) ;; AUTHORITY SECTION (2 records) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN NSEC3 ( 1 0 1 - 42o57g4cod9nno98gacnt1dh2akk4ljj A AAAA RRSIG ) jmrqc7p6bb13l80bp8d3me8n9i8u3nq1.test-ns-signed.internet.nl. 3600 IN RRSIG ( NSEC3 8 4 3600 20220218000001 20220121000001 25189 test-ns-signed.internet.nl. V3ene04391KtjIAz9/GIIOmQiTHIRb3q4VOFoCyOS7oYv9zUHTHOTazZAdw3bWN0rcwuTOInSTrE PzfXA7K9z0DS4qD5USC3HxsJSMbCv6tKjjwmIKvXVIvdqHJd5TiW1QO0ofpP1rZvYsWdOM/b5LGH vYFrAUTJIFxYj42V6j0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl A RR has value 62.204.66.10
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test 27a338a67ae442e3bfb1980ef98a2285.bogus.conn.test-ns-signed.internet.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: