DNSSEC Analyzer - amolf.nl

Domain Name:

Time: 2022-01-21 08:20:06 UTC, NTP stratum 16

Analyzing DNSSEC problems for amolf.nl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 41700 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to h.root-servers.net for amolf.nl/A
	Received 562 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (562 octets) ;; HEADER SECTION ;; id = 55381 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 172800 IN NS ns3.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; ADDITIONAL SECTION (7 records) ns1.dns.nl. 172800 IN A 194.0.28.53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns3.dns.nl. 172800 IN A 194.0.25.24 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for nl/DNSKEY
	Received 556 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (556 octets) ;; HEADER SECTION ;; id = 37045 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) nl. 172800 IN NS ns3.dns.nl. nl. 172800 IN NS ns1.dns.nl. nl. 172800 IN NS ns2.dns.nl. nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; ADDITIONAL SECTION (7 records) ns3.dns.nl. 172800 IN A 194.0.25.24 ns3.dns.nl. 172800 IN AAAA 2001:678:20::24 ns1.dns.nl. 172800 IN A 194.0.28.53 ns1.dns.nl. 172800 IN AAAA 2001:678:2c:0:194:0:28:53 ns2.dns.nl. 172800 IN A 194.146.106.42 ns2.dns.nl. 172800 IN AAAA 2001:67c:1010:10::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone nl

	Checking DS between . and nl
	Query to k.root-servers.net for nl/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (366 octets) ;; HEADER SECTION ;; id = 50781 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DS ;; ANSWER SECTION (2 records) nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 ) nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nl in the . zone
	DS=34112/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`nl. 86400 IN RRSIG ( DS 8 1 86400 20220203050000 20220121040000 9799 . ee29pIaz7iYnruJ2LHAs5JUOQR5EkM6oS6qTiznpFiQ1dm71TiW4QKaKEiPRSYTt7fR0lgkqYVMY /mhTUZ3Tr+V8ZqRA5KWib6hbY156C9RWXVWP7ZmenVw+BYuHo0FGX374Zznl6Sp+i4DaOM80+j4y tU5aRGGus+AHypyyf4XnCEasdk/l8oLXJP5mIci5mSTJTt6j7URX7/3pJfe948eXXc0Kv+eZ39a/ +6pmrH4dl8R10Id0ZfBPolDRucdBjFS0hV4CSMtcQ6IL39bgWkom5+zRttMgjhP0gV9l9C7uE1fh hDTgzSs4xfFuSpTG89amtlKUExSu6pngiEBpzw== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=34112/SHA-256 is now in the chain-of-trust
	`nl. 86400 IN DS ( 34112 8 2 3c5b5f9b3557455c50751a9be9ebe9238c88e19f5f07f930976917b51b95cd22 )`
	Query to ns2.dns.nl for nl/DNSKEY
	Received 745 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (745 octets) ;; HEADER SECTION ;; id = 10727 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; nl. IN DNSKEY ;; ANSWER SECTION (3 records) nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112 nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851 nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220202122256 20220119000835 34112 nl. Xvn0bN9PjpuG9vdUIfAvzFsAewYwhHNTemLYqAkKwgHyRveh1a4eVPKYIuZl4rMHiPzTr8dLiKIJ YF7bqYHF9PKuMEuFEaXSkggjuE6AEkj72hsCePzwjBDKZnxW8kdMUJgd7HvnG1OVXibg5XxFhGOi /SjD7gdlE9bVepXtNUECj5C7o/rqDbgy90qMtCTTlyACqgb9RBh8iiZMBVoh0znh0ZCa54VmDeo0 9AkNbw6OqeP9t+9EpcQ7GVCtyOrsN38q4ZeY6EbfLbwCZmTIeqfqUafjRLi1yX7LiN1zkLpJYYPf HjzGqZL9HhKWig8ZQKzXzY8+OkONjh/IS22xdw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for nl
	`nl. 3600 IN DNSKEY ( 257 3 8 AwEAAcb+4kIsKoZM+3ZZpU9kzxrzw30e3b+L0KZeX+aAS3eM+Q+q27Jw0NZ3dqsPSif61GjRW6ap jDZ9Ciab3oyEu7IpihVrw94DTjWZTVViZAijAIHwKUzY0YjkT3RvN+xgpw4uZs1SnqCZxYko+15e steKXW/nJpde0d9OeFFBaS2WTCycK+A6gd9DsOw91Y7Z2vrR/2g9N9dMIVq9neB1/KXXm4MttLqJ yxRWZNAFTyLGQKzPpQDp9s3qowV2+pcHOh6lUTEeOWiAtotJ/5WyO91viZ5tBfClsyGpggBTaeUQ 7T5adhAtX6nRkhePyAtQgCCf63ZpHyoyxvbkDM7yuA0= ) ; Key ID = 34112`
	`nl. 3600 IN DNSKEY ( 256 3 8 AwEAAbJiAEyX+Q+DkXj2GL2YBiQybmPOo0byNMDam//t4O5k6mGRvUMti0VkUHAmcJnhk1MTAP6P gbLhB0ccsAdehLjhhKQnSIj9OStpQyX9FE/o6XTQXxqEU2eNtuyImcGGD55kK+c6Gl2XUjlRenKD vwXiyGP/rJa2S1dzw1+mP8iT ) ; Key ID = 31851`
	DNSKEY=34112/SEP is now in the chain-of-trust
	DS=34112/SHA-256 verifies DNSKEY=34112/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nl. 3600 IN RRSIG ( DNSKEY 8 1 3600 20220202122256 20220119000835 34112 nl. Xvn0bN9PjpuG9vdUIfAvzFsAewYwhHNTemLYqAkKwgHyRveh1a4eVPKYIuZl4rMHiPzTr8dLiKIJ YF7bqYHF9PKuMEuFEaXSkggjuE6AEkj72hsCePzwjBDKZnxW8kdMUJgd7HvnG1OVXibg5XxFhGOi /SjD7gdlE9bVepXtNUECj5C7o/rqDbgy90qMtCTTlyACqgb9RBh8iiZMBVoh0znh0ZCa54VmDeo0 9AkNbw6OqeP9t+9EpcQ7GVCtyOrsN38q4ZeY6EbfLbwCZmTIeqfqUafjRLi1yX7LiN1zkLpJYYPf HjzGqZL9HhKWig8ZQKzXzY8+OkONjh/IS22xdw== )`
	RRSIG=34112 and DNSKEY=34112/SEP verifies the DNSKEY RRset
	DNSKEY=31851 is now in the chain-of-trust
	Query to ns1.dns.nl for amolf.nl/A
	Received 399 bytes from 194.0.28.53
	;; Response received from 194.0.28.53 (399 octets) ;; HEADER SECTION ;; id = 18551 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) amolf.nl. 3600 IN NS ns2.surfnet.nl. amolf.nl. 3600 IN NS nsauth1.amolf.nl. amolf.nl. 3600 IN NS nsauth2.amolf.nl. amolf.nl. 3600 IN DS ( 42289 13 2 735e19b96706f448210e614ff7463c9d9e3fea9cfb075c9e9da57c29cf3d2297 ) amolf.nl. 3600 IN RRSIG ( DS 8 2 3600 20220202125618 20220119003855 31851 nl. f8vynTRJvTuBqisp3pJWYnWdRdPeYYwd7jR4d3dkWsq/6x4mDREpI79bfLbXijdPGfqoZQuB+/g2 gW5fKto8jIyZNKT4FbZDKA+u4wIck9YVSFgzZfbqsw84rjTtyy3dmQsNo+V2jfMKzh+vuu+jcMiN vQnvWIN0t4/jSglhY9k= ) ;; ADDITIONAL SECTION (5 records) nsauth1.amolf.nl. 3600 IN A 192.16.189.136 nsauth2.amolf.nl. 3600 IN A 192.16.189.236 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.dns.nl for amolf.nl/DNSKEY
	Received 395 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (395 octets) ;; HEADER SECTION ;; id = 8263 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) amolf.nl. 3600 IN NS ns2.surfnet.nl. amolf.nl. 3600 IN NS nsauth2.amolf.nl. amolf.nl. 3600 IN NS nsauth1.amolf.nl. amolf.nl. 3600 IN DS ( 42289 13 2 735e19b96706f448210e614ff7463c9d9e3fea9cfb075c9e9da57c29cf3d2297 ) amolf.nl. 3600 IN RRSIG ( DS 8 2 3600 20220202125618 20220119003855 31851 nl. f8vynTRJvTuBqisp3pJWYnWdRdPeYYwd7jR4d3dkWsq/6x4mDREpI79bfLbXijdPGfqoZQuB+/g2 gW5fKto8jIyZNKT4FbZDKA+u4wIck9YVSFgzZfbqsw84rjTtyy3dmQsNo+V2jfMKzh+vuu+jcMiN vQnvWIN0t4/jSglhY9k= ) ;; ADDITIONAL SECTION (5 records) nsauth2.amolf.nl. 3600 IN A 192.16.189.236 nsauth1.amolf.nl. 3600 IN A 192.16.189.136 ns2.surfnet.nl. 3600 IN A 192.87.36.2 ns2.surfnet.nl. 3600 IN AAAA 2001:610:3:200a:192:87:36:2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone amolf.nl

amolf.nl

	Checking DS between nl and amolf.nl
	Query to ns2.dns.nl for amolf.nl/DS
	Received 247 bytes from 194.146.106.42
	;; Response received from 194.146.106.42 (247 octets) ;; HEADER SECTION ;; id = 14930 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN DS ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN DS ( 42289 13 2 735e19b96706f448210e614ff7463c9d9e3fea9cfb075c9e9da57c29cf3d2297 ) amolf.nl. 3600 IN RRSIG ( DS 8 2 3600 20220202125618 20220119003855 31851 nl. f8vynTRJvTuBqisp3pJWYnWdRdPeYYwd7jR4d3dkWsq/6x4mDREpI79bfLbXijdPGfqoZQuB+/g2 gW5fKto8jIyZNKT4FbZDKA+u4wIck9YVSFgzZfbqsw84rjTtyy3dmQsNo+V2jfMKzh+vuu+jcMiN vQnvWIN0t4/jSglhY9k= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for amolf.nl in the nl zone
	DS=42289/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`amolf.nl. 3600 IN RRSIG ( DS 8 2 3600 20220202125618 20220119003855 31851 nl. f8vynTRJvTuBqisp3pJWYnWdRdPeYYwd7jR4d3dkWsq/6x4mDREpI79bfLbXijdPGfqoZQuB+/g2 gW5fKto8jIyZNKT4FbZDKA+u4wIck9YVSFgzZfbqsw84rjTtyy3dmQsNo+V2jfMKzh+vuu+jcMiN vQnvWIN0t4/jSglhY9k= )`
	RRSIG=31851 and DNSKEY=31851 verifies the DS RRset
	DS=42289/SHA-256 is now in the chain-of-trust
	`amolf.nl. 3600 IN DS ( 42289 13 2 735e19b96706f448210e614ff7463c9d9e3fea9cfb075c9e9da57c29cf3d2297 )`
	Query to nsauth2.amolf.nl for amolf.nl/DNSKEY
	Received 221 bytes from 192.16.189.236
	;; Response received from 192.16.189.236 (221 octets) ;; HEADER SECTION ;; id = 7898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN DNSKEY ;; ANSWER SECTION (2 records) amolf.nl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20220203000000 20220113000000 42289 amolf.nl. BB1kTWTk9pJzo31qGI9tUglxxJ2MNewpTQlZXiQfYD52Nree13+teGqFABwflSym3VDJXLdQRaSO M08/eNs6yA== ) amolf.nl. 86400 IN DNSKEY ( 257 3 13 WUdix8UrU6x5MeMdj1BgpxIc0e24YMK0dm9AsGY0oyJJyVmbA3buDAVTxEZGF44KbA+p6rBJriE8 eNYDRDNipw== ) ; Key ID = 42289 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for amolf.nl
	`amolf.nl. 86400 IN DNSKEY ( 257 3 13 WUdix8UrU6x5MeMdj1BgpxIc0e24YMK0dm9AsGY0oyJJyVmbA3buDAVTxEZGF44KbA+p6rBJriE8 eNYDRDNipw== ) ; Key ID = 42289`
	DNSKEY=42289/SEP is now in the chain-of-trust
	DS=42289/SHA-256 verifies DNSKEY=42289/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`amolf.nl. 86400 IN RRSIG ( DNSKEY 13 2 86400 20220203000000 20220113000000 42289 amolf.nl. BB1kTWTk9pJzo31qGI9tUglxxJ2MNewpTQlZXiQfYD52Nree13+teGqFABwflSym3VDJXLdQRaSO M08/eNs6yA== )`
	RRSIG=42289 and DNSKEY=42289/SEP verifies the DNSKEY RRset
	Query to nsauth2.amolf.nl for amolf.nl/A
	Received 157 bytes from 192.16.189.236
	;; Response received from 192.16.189.236 (157 octets) ;; HEADER SECTION ;; id = 39187 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN A 192.16.189.29 amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. bU7OeNMTf6k8z5ej3wDb4lszrTLEsknPoQPePisTefxwB0eH4zJKcQFQS3r9wlWB8IKM3iPvXGq3 pSeaUjzRkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsauth2.amolf.nl is authoritative for amolf.nl
	Found RRSIG signed by amolf.nl zone
	Query to nsauth1.amolf.nl for amolf.nl/SOA
	Received 196 bytes from 192.16.189.136
	;; Response received from 192.16.189.136 (196 octets) ;; HEADER SECTION ;; id = 18923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN SOA ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN RRSIG ( SOA 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. BL23EgqANin8tyyRe7WDvW98HJQ1kMUbnqjNtkHJ0/9IBiJI8dUJOERIbIv4zlKxui2GikeCCIs4 v3nDU6Nr4A== ) amolf.nl. 3600 IN SOA ( nsauth2.amolf.nl. dns-beheer.amolf.nl. 2021102713 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.surfnet.nl for amolf.nl/SOA
	Received 196 bytes from 192.87.36.2
	;; Response received from 192.87.36.2 (196 octets) ;; HEADER SECTION ;; id = 7382 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN SOA ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN SOA ( nsauth2.amolf.nl. dns-beheer.amolf.nl. 2021102713 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 86400 ;minimum ) amolf.nl. 3600 IN RRSIG ( SOA 13 2 3600 20220127000000 20220106000000 42289 amolf.nl. 2F1U1AvTkUOCwp1oGZ3ViX5i6N1ytiXSIzFpd1iSZq+/mrb1TTzh17iP9AMcS4VqaMNtP9nnuais y4WXl2At9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to nsauth2.amolf.nl for amolf.nl/A
	Received 157 bytes from 192.16.189.236
	;; Response received from 192.16.189.236 (157 octets) ;; HEADER SECTION ;; id = 45285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN A 192.16.189.29 amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. bU7OeNMTf6k8z5ej3wDb4lszrTLEsknPoQPePisTefxwB0eH4zJKcQFQS3r9wlWB8IKM3iPvXGq3 pSeaUjzRkw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	amolf.nl A RR has value 192.16.189.29
	Found 1 RRSIGs over A RRset
	`amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. bU7OeNMTf6k8z5ej3wDb4lszrTLEsknPoQPePisTefxwB0eH4zJKcQFQS3r9wlWB8IKM3iPvXGq3 pSeaUjzRkw== )`
	RRSIG=42289 and DNSKEY=42289/SEP verifies the A RRset

amolf.nl

	Query to nsauth1.amolf.nl for amolf.nl/A
	Received 157 bytes from 192.16.189.136
	;; Response received from 192.16.189.136 (157 octets) ;; HEADER SECTION ;; id = 53857 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. Ivw1xmhktPqoSKeFZgslUV3swxLSPK4d8cyxz6pPrgmHlPpTRM0SlVeCzIcS/mJgO5ZW8qPSYnd7 w6L4nhyCnw== ) amolf.nl. 3600 IN A 192.16.189.29 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nsauth1.amolf.nl is authoritative for amolf.nl
	Found RRSIG signed by amolf.nl zone
	Query to nsauth1.amolf.nl for amolf.nl/A
	Received 157 bytes from 192.16.189.136
	;; Response received from 192.16.189.136 (157 octets) ;; HEADER SECTION ;; id = 37519 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. Ivw1xmhktPqoSKeFZgslUV3swxLSPK4d8cyxz6pPrgmHlPpTRM0SlVeCzIcS/mJgO5ZW8qPSYnd7 w6L4nhyCnw== ) amolf.nl. 3600 IN A 192.16.189.29 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	amolf.nl A RR has value 192.16.189.29
	Found 1 RRSIGs over A RRset
	`amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220203000000 20220113000000 42289 amolf.nl. Ivw1xmhktPqoSKeFZgslUV3swxLSPK4d8cyxz6pPrgmHlPpTRM0SlVeCzIcS/mJgO5ZW8qPSYnd7 w6L4nhyCnw== )`
	RRSIG=42289 and DNSKEY=42289/SEP verifies the A RRset

amolf.nl

	Query to ns2.surfnet.nl for amolf.nl/A
	Received 157 bytes from 192.87.36.2
	;; Response received from 192.87.36.2 (157 octets) ;; HEADER SECTION ;; id = 12176 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN A 192.16.189.29 amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220127000000 20220106000000 42289 amolf.nl. B3opYm5SWsl7dPEgNJ7wrMVIDq22LI2Fti7erYHB6RUq6lSzgccGnkrwnsiEB/SbIijz79EmD/La H6alFxvx6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.surfnet.nl is authoritative for amolf.nl
	Found RRSIG signed by amolf.nl zone
	Query to ns2.surfnet.nl for amolf.nl/A
	Received 157 bytes from 192.87.36.2
	;; Response received from 192.87.36.2 (157 octets) ;; HEADER SECTION ;; id = 36559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; amolf.nl. IN A ;; ANSWER SECTION (2 records) amolf.nl. 3600 IN A 192.16.189.29 amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220127000000 20220106000000 42289 amolf.nl. B3opYm5SWsl7dPEgNJ7wrMVIDq22LI2Fti7erYHB6RUq6lSzgccGnkrwnsiEB/SbIijz79EmD/La H6alFxvx6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	amolf.nl A RR has value 192.16.189.29
	Found 1 RRSIGs over A RRset
	`amolf.nl. 3600 IN RRSIG ( A 13 2 3600 20220127000000 20220106000000 42289 amolf.nl. B3opYm5SWsl7dPEgNJ7wrMVIDq22LI2Fti7erYHB6RUq6lSzgccGnkrwnsiEB/SbIijz79EmD/La H6alFxvx6g== )`
	RRSIG=42289 and DNSKEY=42289/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test amolf.nl at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: