DNSSEC Analyzer - aalto.fi

Domain Name:

Time: 2023-06-08 14:16:18 UTC, NTP stratum 4

Analyzing DNSSEC problems for aalto.fi

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (864 octets) ;; HEADER SECTION ;; id = 57316 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to m.root-servers.net for aalto.fi/A
	Received 972 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (972 octets) ;; HEADER SECTION ;; id = 63292 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) fi. 172800 IN NS a.fi. fi. 172800 IN NS h.fi. fi. 172800 IN NS b.fi. fi. 172800 IN NS j.fi. fi. 172800 IN NS c.fi. fi. 172800 IN NS g.fi. fi. 172800 IN NS e.fi. fi. 172800 IN NS k.fi. fi. 172800 IN NS d.fi. fi. 172800 IN NS i.fi. fi. 86400 IN DS ( 54049 8 2 924e552f60cbc5aa2517d0f59d658b119f211113e9a98f34402396ec8a96a2d1 ) fi. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . AWg/sIA/LoJ1I3doqs7rckpYFihaxkGp9V2viUHEmm+QVl+LBtXp32iBmUtA7ChBzdCKv0P73QbJ dG3S3SodS05ilvUlFxwh+U51HJQo5eqQkTbhgX+amD/pH/ltxdrYfu3ft2qiAZ3uBjePGmMuq9BE od+2w+uwBy9P6j5riND824H8YGAWSf/M6hEKWrrr+chly1PAKpraVVyjqnasQl/7l21pcu+ou/CB uFAXE8Ig1Oc4VALAMOP/lAcTelN/cso5o/fXyFcH6BL8JxsEAqPTmcKiJ2BIOysZx9/ej2lTGqyM 6/kQ5YS9mic9bsFlEySg3P/MPWZQhyp5VF/GTQ== ) ;; ADDITIONAL SECTION (21 records) k.fi. 172800 IN A 213.186.229.226 j.fi. 172800 IN A 185.159.199.190 i.fi. 172800 IN A 194.0.25.30 h.fi. 172800 IN A 87.239.120.11 g.fi. 172800 IN A 204.61.216.98 e.fi. 172800 IN A 194.0.1.14 d.fi. 172800 IN A 77.72.229.253 c.fi. 172800 IN A 194.0.11.104 b.fi. 172800 IN A 194.146.106.26 a.fi. 172800 IN A 193.166.4.1 k.fi. 172800 IN AAAA 2001:14b8:188d::53 j.fi. 172800 IN AAAA 2620:10a:80ac::190 i.fi. 172800 IN AAAA 2001:678:20::30 h.fi. 172800 IN AAAA 2001:678:a0::aaaa g.fi. 172800 IN AAAA 2001:500:14:6098:ad::1 e.fi. 172800 IN AAAA 2001:678:4::e d.fi. 172800 IN AAAA 2a01:3f0:0:302::53 c.fi. 172800 IN AAAA 2001:678:e:104::53 b.fi. 172800 IN AAAA 2001:67c:1010:6::53 a.fi. 172800 IN AAAA 2001:708:10:53::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for fi/DNSKEY
	Received 966 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (966 octets) ;; HEADER SECTION ;; id = 33890 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fi. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) fi. 172800 IN NS b.fi. fi. 172800 IN NS c.fi. fi. 172800 IN NS g.fi. fi. 172800 IN NS i.fi. fi. 172800 IN NS h.fi. fi. 172800 IN NS e.fi. fi. 172800 IN NS j.fi. fi. 172800 IN NS d.fi. fi. 172800 IN NS a.fi. fi. 172800 IN NS k.fi. fi. 86400 IN DS ( 54049 8 2 924e552f60cbc5aa2517d0f59d658b119f211113e9a98f34402396ec8a96a2d1 ) fi. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . AWg/sIA/LoJ1I3doqs7rckpYFihaxkGp9V2viUHEmm+QVl+LBtXp32iBmUtA7ChBzdCKv0P73QbJ dG3S3SodS05ilvUlFxwh+U51HJQo5eqQkTbhgX+amD/pH/ltxdrYfu3ft2qiAZ3uBjePGmMuq9BE od+2w+uwBy9P6j5riND824H8YGAWSf/M6hEKWrrr+chly1PAKpraVVyjqnasQl/7l21pcu+ou/CB uFAXE8Ig1Oc4VALAMOP/lAcTelN/cso5o/fXyFcH6BL8JxsEAqPTmcKiJ2BIOysZx9/ej2lTGqyM 6/kQ5YS9mic9bsFlEySg3P/MPWZQhyp5VF/GTQ== ) ;; ADDITIONAL SECTION (21 records) b.fi. 172800 IN A 194.146.106.26 b.fi. 172800 IN AAAA 2001:67c:1010:6::53 c.fi. 172800 IN A 194.0.11.104 c.fi. 172800 IN AAAA 2001:678:e:104::53 g.fi. 172800 IN A 204.61.216.98 g.fi. 172800 IN AAAA 2001:500:14:6098:ad::1 i.fi. 172800 IN A 194.0.25.30 i.fi. 172800 IN AAAA 2001:678:20::30 h.fi. 172800 IN A 87.239.120.11 h.fi. 172800 IN AAAA 2001:678:a0::aaaa e.fi. 172800 IN A 194.0.1.14 e.fi. 172800 IN AAAA 2001:678:4::e j.fi. 172800 IN A 185.159.199.190 j.fi. 172800 IN AAAA 2620:10a:80ac::190 d.fi. 172800 IN A 77.72.229.253 d.fi. 172800 IN AAAA 2a01:3f0:0:302::53 a.fi. 172800 IN A 193.166.4.1 a.fi. 172800 IN AAAA 2001:708:10:53::53 k.fi. 172800 IN A 213.186.229.226 k.fi. 172800 IN AAAA 2001:14b8:188d::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fi

	Checking DS between . and fi
	Query to g.root-servers.net for fi/DS
	Received 366 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (366 octets) ;; HEADER SECTION ;; id = 7431 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fi. IN DS ;; ANSWER SECTION (2 records) fi. 86400 IN DS ( 54049 8 2 924e552f60cbc5aa2517d0f59d658b119f211113e9a98f34402396ec8a96a2d1 ) fi. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . AWg/sIA/LoJ1I3doqs7rckpYFihaxkGp9V2viUHEmm+QVl+LBtXp32iBmUtA7ChBzdCKv0P73QbJ dG3S3SodS05ilvUlFxwh+U51HJQo5eqQkTbhgX+amD/pH/ltxdrYfu3ft2qiAZ3uBjePGmMuq9BE od+2w+uwBy9P6j5riND824H8YGAWSf/M6hEKWrrr+chly1PAKpraVVyjqnasQl/7l21pcu+ou/CB uFAXE8Ig1Oc4VALAMOP/lAcTelN/cso5o/fXyFcH6BL8JxsEAqPTmcKiJ2BIOysZx9/ej2lTGqyM 6/kQ5YS9mic9bsFlEySg3P/MPWZQhyp5VF/GTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for fi in the . zone
	DS=54049/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fi. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . AWg/sIA/LoJ1I3doqs7rckpYFihaxkGp9V2viUHEmm+QVl+LBtXp32iBmUtA7ChBzdCKv0P73QbJ dG3S3SodS05ilvUlFxwh+U51HJQo5eqQkTbhgX+amD/pH/ltxdrYfu3ft2qiAZ3uBjePGmMuq9BE od+2w+uwBy9P6j5riND824H8YGAWSf/M6hEKWrrr+chly1PAKpraVVyjqnasQl/7l21pcu+ou/CB uFAXE8Ig1Oc4VALAMOP/lAcTelN/cso5o/fXyFcH6BL8JxsEAqPTmcKiJ2BIOysZx9/ej2lTGqyM 6/kQ5YS9mic9bsFlEySg3P/MPWZQhyp5VF/GTQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=54049/SHA-256 is now in the chain-of-trust
	`fi. 86400 IN DS ( 54049 8 2 924e552f60cbc5aa2517d0f59d658b119f211113e9a98f34402396ec8a96a2d1 )`
	Query to j.fi for fi/DNSKEY
	Received 873 bytes from 185.159.199.190
	;; Response received from 185.159.199.190 (873 octets) ;; HEADER SECTION ;; id = 21963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fi. IN DNSKEY ;; ANSWER SECTION (3 records) fi. 900 IN DNSKEY ( 256 3 8 AwEAAavU1IAiO7z9ZRyJ4zjQhe5Og5P0LoR4Ano8IsCDPcr+W/dqIbDYcJvNRYBU8XVKI3Qx2IIL aMs7LbPuiiZrfgBIEi2/Zp+lReUe73Gkule6hCVMhue2WksltWBZKhcUU7YViEzm/NL2j50rBPej S5uMjDTblcdOjK5LqfLtBmGD7zeE53s2GCNx4osjaE3vKjPt0zS+O6K83T8UfAoTNH9PF+tLnlC7 WbXQct79hpoPuhp/y7xKliLIMP5P6XrubWKIb6mY6wiIwZbSvwfYsxKGiBycE/24LM070emvfu2p KAWswi00StqIu50GVaDImFDCfWM4BlEmhwvQMXdoGIM= ) ; Key ID = 64303 fi. 900 IN DNSKEY ( 257 3 8 AwEAAciMz/FpbpdTYvPhQOHNMLjEI9USPPKnTydWAt6Uw9rRK+d6+H3+W41hwO4Bm57VUIs6cIQO hnE/hMIAjS+ygcMkFbooF7/gUOOrZU/TE0q3+CKx+jkLXWWi7MWOjBM/58tJo9+loES1ZTm4mute Xny1OTij7ypPXi12GpsYd7Eo6S7eXnAwP9KfJB/e/hdY52ilm/4ezIKVk7pEcH4U1qkeD5mz6Cf/ 9Gcfbz0CY1zkmM29Ib9UmJWMP8iYyOqdycmPZ6xrQBi/AKMF8s+dovRPXBviNgMvEmUgKA1763m/ KA9mskOd5xgLEmCQzVzk38hiNie4XCJcq2TIPBGAyV0= ) ; Key ID = 54049 fi. 900 IN RRSIG ( DNSKEY 8 1 900 20230619082518 20230605142622 54049 fi. TXS4A4q+dfAt+ghR3BL8VWnWpiIW/I6nw3FzE2cG30J0C36tUjDQTKaVkvA7lcrKz03dy8KnHsPF 8me8Virof85BEABAMZI+OEUUwbxMOMgHhJDiBMYyUs7AlIqsZSpVv1VcWPwQqwWpL3MvQOxIl+yU 3WnSXvV9U4DNhhdeJhY3tKJBbPbOdU0zmXuWgm1TPASac1PfpocpQavNcFnfND99rahStkji8U++ ldweiwr/Rbj6u8CXUJ9Xel/9z8IWSqqU9PSbZ794RODlR+Ap0Q6LoTMGDmFx6O8yLTMptq+nnlJQ yaJubnx0qenc11ZLClRIQv90DgkLwYoKRA/kJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for fi
	`fi. 900 IN DNSKEY ( 256 3 8 AwEAAavU1IAiO7z9ZRyJ4zjQhe5Og5P0LoR4Ano8IsCDPcr+W/dqIbDYcJvNRYBU8XVKI3Qx2IIL aMs7LbPuiiZrfgBIEi2/Zp+lReUe73Gkule6hCVMhue2WksltWBZKhcUU7YViEzm/NL2j50rBPej S5uMjDTblcdOjK5LqfLtBmGD7zeE53s2GCNx4osjaE3vKjPt0zS+O6K83T8UfAoTNH9PF+tLnlC7 WbXQct79hpoPuhp/y7xKliLIMP5P6XrubWKIb6mY6wiIwZbSvwfYsxKGiBycE/24LM070emvfu2p KAWswi00StqIu50GVaDImFDCfWM4BlEmhwvQMXdoGIM= ) ; Key ID = 64303`
	`fi. 900 IN DNSKEY ( 257 3 8 AwEAAciMz/FpbpdTYvPhQOHNMLjEI9USPPKnTydWAt6Uw9rRK+d6+H3+W41hwO4Bm57VUIs6cIQO hnE/hMIAjS+ygcMkFbooF7/gUOOrZU/TE0q3+CKx+jkLXWWi7MWOjBM/58tJo9+loES1ZTm4mute Xny1OTij7ypPXi12GpsYd7Eo6S7eXnAwP9KfJB/e/hdY52ilm/4ezIKVk7pEcH4U1qkeD5mz6Cf/ 9Gcfbz0CY1zkmM29Ib9UmJWMP8iYyOqdycmPZ6xrQBi/AKMF8s+dovRPXBviNgMvEmUgKA1763m/ KA9mskOd5xgLEmCQzVzk38hiNie4XCJcq2TIPBGAyV0= ) ; Key ID = 54049`
	DNSKEY=54049/SEP is now in the chain-of-trust
	DS=54049/SHA-256 verifies DNSKEY=54049/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fi. 900 IN RRSIG ( DNSKEY 8 1 900 20230619082518 20230605142622 54049 fi. TXS4A4q+dfAt+ghR3BL8VWnWpiIW/I6nw3FzE2cG30J0C36tUjDQTKaVkvA7lcrKz03dy8KnHsPF 8me8Virof85BEABAMZI+OEUUwbxMOMgHhJDiBMYyUs7AlIqsZSpVv1VcWPwQqwWpL3MvQOxIl+yU 3WnSXvV9U4DNhhdeJhY3tKJBbPbOdU0zmXuWgm1TPASac1PfpocpQavNcFnfND99rahStkji8U++ ldweiwr/Rbj6u8CXUJ9Xel/9z8IWSqqU9PSbZ794RODlR+Ap0Q6LoTMGDmFx6O8yLTMptq+nnlJQ yaJubnx0qenc11ZLClRIQv90DgkLwYoKRA/kJw== )`
	RRSIG=54049 and DNSKEY=54049/SEP verifies the DNSKEY RRset
	DNSKEY=64303 is now in the chain-of-trust
	Query to k.fi for aalto.fi/A
	Received 1058 bytes from 213.186.229.226
	;; Response received from 213.186.229.226 (1058 octets) ;; HEADER SECTION ;; id = 60652 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) aalto.fi. 21600 IN NS ns-secondary.funet.fi. aalto.fi. 21600 IN NS ns01.aalto.fi. aalto.fi. 21600 IN NS ns02.aalto.fi. aalto.fi. 21600 IN NS ns03.aalto.fi. chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a chi7369jol4sg6kntav5is581eco15ro NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230622095345 20230608034637 64303 fi. VFpZv/FM0tELIsYGSDlxKDY9YY1FsSgNdu5qQKKZpYOcgSqzNyxHk3wZGtw88V2+J9JOQ/VLypf+ wNZgNFEy+XHZw0QUd6QDI3O9Vfpg95goxbwHycH5R/PJXfYQ/2tOjfkgIXJPIN9fxvrpxdukn1Ig rmiGbznb8gfcRdamGyYsUHgyLfaawbFuasAmwY2zJQQYd6lce8CUXSMs4X7CBnFvITy1RbrHXDKn LwWdieUanPVHBgTQ6BTYpvyKLMOit5d0JBVCUrVW6FnTD5qtP6CYjsSLoCbr66V7MoVGIxqBp5ZX Yy/4/IqRPTmmKe6ZWn6yPH0WSdJtbWe84IpC+Q== ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a 0sfumgqgrfgh7k9dkdujfvmo12lhcjmo NS DS RRSIG ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230620142713 20230606140622 64303 fi. Yqvo2LVyssS3naM8uAO2lk3YxktgMnY+kyHvN7v3040Oqx7YKQZtwjWj0nHIIZvo5BQrtNTwg1yG f3fCVO/0MXYTrQ9cho5v7d/gWfHUq359SAaFfomozJhEeby1VhlsFe4kqG8kYTpWlgswfTXwH1Mo 3Vg9Gw2s0nD/J+NJXIi5rJdBAI55ESeW6UVGXQB2UIWxGp7ISV4bvLHFamHozgdJLu1hNrG34Qsl f/BeUzAeGWc5Ccdkjga9ft6xG+6HbQGgMwLgXPA+8M1KNeer3Fr+kzgsHc0CqYRR+FqUuglTFDCN Bt1ViKkHn58d30xEqYSNbv2MDTX49nXKlVOjPg== ) ;; ADDITIONAL SECTION (9 records) ns-secondary.funet.fi. 21600 IN A 128.214.248.132 ns01.aalto.fi. 21600 IN A 130.233.224.132 ns02.aalto.fi. 21600 IN A 130.233.224.140 ns03.aalto.fi. 21600 IN A 130.233.224.141 ns-secondary.funet.fi. 21600 IN AAAA 2001:708:10:55::53 ns01.aalto.fi. 21600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 21600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 21600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.fi for aalto.fi/DNSKEY
	Received 1058 bytes from 185.159.199.190
	;; Response received from 185.159.199.190 (1058 octets) ;; HEADER SECTION ;; id = 37044 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) aalto.fi. 21600 IN NS ns01.aalto.fi. aalto.fi. 21600 IN NS ns02.aalto.fi. aalto.fi. 21600 IN NS ns03.aalto.fi. aalto.fi. 21600 IN NS ns-secondary.funet.fi. chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a chi7369jol4sg6kntav5is581eco15ro NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a 0sfumgqgrfgh7k9dkdujfvmo12lhcjmo NS DS RRSIG ) chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230622095345 20230608034637 64303 fi. VFpZv/FM0tELIsYGSDlxKDY9YY1FsSgNdu5qQKKZpYOcgSqzNyxHk3wZGtw88V2+J9JOQ/VLypf+ wNZgNFEy+XHZw0QUd6QDI3O9Vfpg95goxbwHycH5R/PJXfYQ/2tOjfkgIXJPIN9fxvrpxdukn1Ig rmiGbznb8gfcRdamGyYsUHgyLfaawbFuasAmwY2zJQQYd6lce8CUXSMs4X7CBnFvITy1RbrHXDKn LwWdieUanPVHBgTQ6BTYpvyKLMOit5d0JBVCUrVW6FnTD5qtP6CYjsSLoCbr66V7MoVGIxqBp5ZX Yy/4/IqRPTmmKe6ZWn6yPH0WSdJtbWe84IpC+Q== ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230620142713 20230606140622 64303 fi. Yqvo2LVyssS3naM8uAO2lk3YxktgMnY+kyHvN7v3040Oqx7YKQZtwjWj0nHIIZvo5BQrtNTwg1yG f3fCVO/0MXYTrQ9cho5v7d/gWfHUq359SAaFfomozJhEeby1VhlsFe4kqG8kYTpWlgswfTXwH1Mo 3Vg9Gw2s0nD/J+NJXIi5rJdBAI55ESeW6UVGXQB2UIWxGp7ISV4bvLHFamHozgdJLu1hNrG34Qsl f/BeUzAeGWc5Ccdkjga9ft6xG+6HbQGgMwLgXPA+8M1KNeer3Fr+kzgsHc0CqYRR+FqUuglTFDCN Bt1ViKkHn58d30xEqYSNbv2MDTX49nXKlVOjPg== ) ;; ADDITIONAL SECTION (9 records) ns01.aalto.fi. 21600 IN A 130.233.224.132 ns01.aalto.fi. 21600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 21600 IN A 130.233.224.140 ns02.aalto.fi. 21600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 21600 IN A 130.233.224.141 ns03.aalto.fi. 21600 IN AAAA 2001:708:20:53::3 ns-secondary.funet.fi. 21600 IN A 128.214.248.132 ns-secondary.funet.fi. 21600 IN AAAA 2001:708:10:55::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone aalto.fi

aalto.fi

	Checking DS between fi and aalto.fi
	Query to i.fi for aalto.fi/DS
	Received 1142 bytes from 194.0.25.30
	;; Response received from 194.0.25.30 (1142 octets) ;; HEADER SECTION ;; id = 62182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fi. 86400 IN SOA ( a.fi. fi-domain-tech.ficora.fi. 2023060852 ;serial 3605 ;refresh 1800 ;retry 2419200 ;expire 86400 ;minimum ) fi. 86400 IN RRSIG ( SOA 8 1 86400 20230622100820 20230608120624 64303 fi. KmLwQ+eOnjE2YZ1u7QcPMPc9yFw1cSjIE9b9+PppgSxKvMfvfAWlQkc8E90+C3BEWFBIdVi/OM2a +1YY7fNRwMsnfg1koiYDJOjNByqJ+bztt46lxSJfZOodCvYnqFIWSlV08Ne0YXkalMAo/poJdVvc VGZwl2Z4jBc3C8Urgvdjjvl+daMeeLFyWL3ZwFTEkFh6CGFAZdU5NrN4vMUqXRTcv1tigFCH3ALf N+nJ/a/Oee1izxs7fviUqpUHgOh+4JrXmdmc+xdY+cLehk/zMjHigIcmFSRx3SxqeLXZ5lEL+k0Y S2IqlYH8FOR/XjtWMA6vpXWmHNEzHdYYSzt0Og== ) chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a chi7369jol4sg6kntav5is581eco15ro NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) chi6upcrbq8caq0frfp92mdm0fmrca1l.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230622095345 20230608034637 64303 fi. VFpZv/FM0tELIsYGSDlxKDY9YY1FsSgNdu5qQKKZpYOcgSqzNyxHk3wZGtw88V2+J9JOQ/VLypf+ wNZgNFEy+XHZw0QUd6QDI3O9Vfpg95goxbwHycH5R/PJXfYQ/2tOjfkgIXJPIN9fxvrpxdukn1Ig rmiGbznb8gfcRdamGyYsUHgyLfaawbFuasAmwY2zJQQYd6lce8CUXSMs4X7CBnFvITy1RbrHXDKn LwWdieUanPVHBgTQ6BTYpvyKLMOit5d0JBVCUrVW6FnTD5qtP6CYjsSLoCbr66V7MoVGIxqBp5ZX Yy/4/IqRPTmmKe6ZWn6yPH0WSdJtbWe84IpC+Q== ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN NSEC3 ( 1 1 5 fd26a7fb6756e08a 0sfumgqgrfgh7k9dkdujfvmo12lhcjmo NS DS RRSIG ) 0sb76gtcmesq69p5l26tfuu5uc9doea6.fi. 86400 IN RRSIG ( NSEC3 8 2 86400 20230620142713 20230606140622 64303 fi. Yqvo2LVyssS3naM8uAO2lk3YxktgMnY+kyHvN7v3040Oqx7YKQZtwjWj0nHIIZvo5BQrtNTwg1yG f3fCVO/0MXYTrQ9cho5v7d/gWfHUq359SAaFfomozJhEeby1VhlsFe4kqG8kYTpWlgswfTXwH1Mo 3Vg9Gw2s0nD/J+NJXIi5rJdBAI55ESeW6UVGXQB2UIWxGp7ISV4bvLHFamHozgdJLu1hNrG34Qsl f/BeUzAeGWc5Ccdkjga9ft6xG+6HbQGgMwLgXPA+8M1KNeer3Fr+kzgsHc0CqYRR+FqUuglTFDCN Bt1ViKkHn58d30xEqYSNbv2MDTX49nXKlVOjPg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	No DS records found for aalto.fi in the fi zone
	Query to ns02.aalto.fi for aalto.fi/DNSKEY
	Received 89 bytes from 130.233.224.140
	;; Response received from 130.233.224.140 (89 octets) ;; HEADER SECTION ;; id = 27181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) aalto.fi. 3600 IN SOA ( ns01.aalto.fi. hostmaster.aalto.fi. 2023060815 ;serial 60 ;refresh 300 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns-secondary.funet.fi for aalto.fi/A
	Received 291 bytes from 128.214.248.132
	;; Response received from 128.214.248.132 (291 octets) ;; HEADER SECTION ;; id = 55069 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.221.22 aalto.fi. 3600 IN A 104.17.222.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns-secondary.funet.fi is authoritative for aalto.fi
	Query to ns02.aalto.fi for aalto.fi/SOA
	Received 306 bytes from 130.233.224.140
	;; Response received from 130.233.224.140 (306 octets) ;; HEADER SECTION ;; id = 33367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN SOA ;; ANSWER SECTION (1 record) aalto.fi. 3600 IN SOA ( ns01.aalto.fi. hostmaster.aalto.fi. 2023060815 ;serial 60 ;refresh 300 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns01.aalto.fi for aalto.fi/SOA
	Received 306 bytes from 130.233.224.132
	;; Response received from 130.233.224.132 (306 octets) ;; HEADER SECTION ;; id = 36558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN SOA ;; ANSWER SECTION (1 record) aalto.fi. 3600 IN SOA ( ns01.aalto.fi. hostmaster.aalto.fi. 2023060815 ;serial 60 ;refresh 300 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns03.aalto.fi for aalto.fi/SOA
	Received 306 bytes from 130.233.224.141
	;; Response received from 130.233.224.141 (306 octets) ;; HEADER SECTION ;; id = 11237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN SOA ;; ANSWER SECTION (1 record) aalto.fi. 3600 IN SOA ( ns01.aalto.fi. hostmaster.aalto.fi. 2023060815 ;serial 60 ;refresh 300 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns-secondary.funet.fi for aalto.fi/A
	Received 291 bytes from 128.214.248.132
	;; Response received from 128.214.248.132 (291 octets) ;; HEADER SECTION ;; id = 30216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.221.22 aalto.fi. 3600 IN A 104.17.222.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	aalto.fi A RR has value 104.17.221.22
	aalto.fi A RR has value 104.17.222.22
	No RRSIGs found

aalto.fi

	Query to ns03.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.141
	;; Response received from 130.233.224.141 (291 octets) ;; HEADER SECTION ;; id = 45275 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.221.22 aalto.fi. 3600 IN A 104.17.222.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns03.aalto.fi is authoritative for aalto.fi
	Query to ns03.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.141
	;; Response received from 130.233.224.141 (291 octets) ;; HEADER SECTION ;; id = 35863 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.222.22 aalto.fi. 3600 IN A 104.17.221.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	aalto.fi A RR has value 104.17.222.22
	aalto.fi A RR has value 104.17.221.22
	No RRSIGs found

aalto.fi

	Query to ns02.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.140
	;; Response received from 130.233.224.140 (291 octets) ;; HEADER SECTION ;; id = 31474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.222.22 aalto.fi. 3600 IN A 104.17.221.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns02.aalto.fi is authoritative for aalto.fi
	Query to ns02.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.140
	;; Response received from 130.233.224.140 (291 octets) ;; HEADER SECTION ;; id = 7010 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.221.22 aalto.fi. 3600 IN A 104.17.222.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	aalto.fi A RR has value 104.17.221.22
	aalto.fi A RR has value 104.17.222.22
	No RRSIGs found

aalto.fi

	Query to ns01.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.132
	;; Response received from 130.233.224.132 (291 octets) ;; HEADER SECTION ;; id = 18710 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.221.22 aalto.fi. 3600 IN A 104.17.222.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns02.aalto.fi. aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns01.aalto.fi is authoritative for aalto.fi
	Query to ns01.aalto.fi for aalto.fi/A
	Received 291 bytes from 130.233.224.132
	;; Response received from 130.233.224.132 (291 octets) ;; HEADER SECTION ;; id = 21924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; aalto.fi. IN A ;; ANSWER SECTION (2 records) aalto.fi. 3600 IN A 104.17.222.22 aalto.fi. 3600 IN A 104.17.221.22 ;; AUTHORITY SECTION (4 records) aalto.fi. 3600 IN NS ns-secondary.funet.fi. aalto.fi. 3600 IN NS ns03.aalto.fi. aalto.fi. 3600 IN NS ns01.aalto.fi. aalto.fi. 3600 IN NS ns02.aalto.fi. ;; ADDITIONAL SECTION (7 records) ns01.aalto.fi. 3600 IN A 130.233.224.132 ns01.aalto.fi. 3600 IN AAAA 2001:708:20:53::1 ns02.aalto.fi. 3600 IN A 130.233.224.140 ns02.aalto.fi. 3600 IN AAAA 2001:708:20:53::2 ns03.aalto.fi. 3600 IN A 130.233.224.141 ns03.aalto.fi. 3600 IN AAAA 2001:708:20:53::3 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	aalto.fi A RR has value 104.17.222.22
	aalto.fi A RR has value 104.17.221.22
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test aalto.fi at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: