DNSSEC Debugger

Domain Name:

Time: 2024-09-11 02:49:19 UTC

Analyzing DNSSEC problems for andy.pt

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 864 octets ;; HEADER SECTION ;; id = 21181 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240930000000 20240909000000 20326 . jZIAHsafL2dClPOKpy90cvgU37CJ/WHCgOp/ipODonJbD9u4v2yxuig6BrvpSMmTRXh5DpsqEEY7 DvgUAaHvIW1LbUK/NShsACs4oyZ9U4E7czeE8O8U4dwBzdeKDLohT3PqYICEZBLlQID+PXx338yI W60KtlcTwvVMwb59xw4iv+crJ1oRJrzPbjgY4iP4XEuAtja0c3g382twsEogre5R1X+TRlny4FwQ gkLbLLQEAwkEwsC2/0o/hTFes3AOrxx3BmpOcZYTHXJ17M+rGoJ8ztcYus8l/G5bWLSc4ghbrOoA Xwvs6ZNXoWmp6LfuEOiw/NDtmXe9i3BhYYgvAg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to a.root-servers.net for andy.pt/A
	Received 930 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 930 octets ;; HEADER SECTION ;; id = 34356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pt. 172800 IN NS a.dns.pt. pt. 172800 IN NS c.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS ns2.nic.fr. pt. 172800 IN NS h.dns.pt. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . QtjDuZsauE8JuWTuSGKihauqfZtFT5rKAlERINnkzbI+DMA5UfgvTdTvNFF6Cmas3X5+AfcRY09b 0KWe7QKEW0AulNoO5sQgO3nklw9KlsR3BXJBNm/ah04PQP1mNG9Mg2Qvycgv7Tu9K+OMHRqhYGAx AdFs+XNKNodXYoKwrMRpI9yfUZH4an7iriQdOwBged0Y9p9B2ddHy0Fx3zTDpMZhPd3Qvk4zLC+F tgHVe1LgI/bHH+SluJtJ84/SWif91pcvliDbhV+lykvdVem9hnQQmnrHrUv33U255nhwoEosYRpq Yg5+QblYCBNGpeQwPEMhfMxO9yX1KAmThl4V0A== ) ;; ADDITIONAL SECTION (19 records) a.dns.pt. 172800 IN A 185.39.208.1 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 c.dns.pt. 172800 IN A 204.61.216.105 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 e.dns.pt. 172800 IN A 193.136.192.64 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 ns2.nic.fr. 172800 IN A 192.93.0.4 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 h.dns.pt. 172800 IN A 194.146.106.138 h.dns.pt. 172800 IN AAAA 2001:67c:1010:35::53 d.dns.pt. 172800 IN A 185.39.210.1 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 b.dns.pt. 172800 IN A 194.0.25.23 b.dns.pt. 172800 IN AAAA 2001:678:20::23 g.dns.pt. 172800 IN A 193.136.2.226 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 ns.dns.br. 172800 IN A 200.160.0.5 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for pt/DNSKEY
	Received 927 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 927 octets ;; HEADER SECTION ;; id = 59191 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 11 arcount = 19 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (11 records) pt. 172800 IN NS c.dns.pt. pt. 172800 IN NS ns.dns.br. pt. 172800 IN NS g.dns.pt. pt. 172800 IN NS a.dns.pt. pt. 172800 IN NS ns2.nic.fr. pt. 172800 IN NS b.dns.pt. pt. 172800 IN NS e.dns.pt. pt. 172800 IN NS d.dns.pt. pt. 172800 IN NS h.dns.pt. pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . QtjDuZsauE8JuWTuSGKihauqfZtFT5rKAlERINnkzbI+DMA5UfgvTdTvNFF6Cmas3X5+AfcRY09b 0KWe7QKEW0AulNoO5sQgO3nklw9KlsR3BXJBNm/ah04PQP1mNG9Mg2Qvycgv7Tu9K+OMHRqhYGAx AdFs+XNKNodXYoKwrMRpI9yfUZH4an7iriQdOwBged0Y9p9B2ddHy0Fx3zTDpMZhPd3Qvk4zLC+F tgHVe1LgI/bHH+SluJtJ84/SWif91pcvliDbhV+lykvdVem9hnQQmnrHrUv33U255nhwoEosYRpq Yg5+QblYCBNGpeQwPEMhfMxO9yX1KAmThl4V0A== ) ;; ADDITIONAL SECTION (19 records) ns2.nic.fr. 172800 IN A 192.93.0.4 ns.dns.br. 172800 IN A 200.160.0.5 h.dns.pt. 172800 IN A 194.146.106.138 g.dns.pt. 172800 IN A 193.136.2.226 e.dns.pt. 172800 IN A 193.136.192.64 d.dns.pt. 172800 IN A 185.39.210.1 c.dns.pt. 172800 IN A 204.61.216.105 b.dns.pt. 172800 IN A 194.0.25.23 a.dns.pt. 172800 IN A 185.39.208.1 ns2.nic.fr. 172800 IN AAAA 2001:660:3005:1::1:2 ns.dns.br. 172800 IN AAAA 2001:12ff:0:a20::5 h.dns.pt. 172800 IN AAAA 2001:67c:1010:35::53 g.dns.pt. 172800 IN AAAA 2001:690:a80:4001::100 e.dns.pt. 172800 IN AAAA 2001:690:a00:4001::64 d.dns.pt. 172800 IN AAAA 2a04:6d82::1 c.dns.pt. 172800 IN AAAA 2001:500:14:6105:ad::1 b.dns.pt. 172800 IN AAAA 2001:678:20::23 a.dns.pt. 172800 IN AAAA 2a04:6d80::1 ;; { "EDNS-VERSION": 0 }
	Found child zone pt

	Checking DS between . and pt
	Query to k.root-servers.net for pt/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 366 octets ;; HEADER SECTION ;; id = 51599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pt. IN DS ;; ANSWER SECTION (2 records) pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 ) pt. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . QtjDuZsauE8JuWTuSGKihauqfZtFT5rKAlERINnkzbI+DMA5UfgvTdTvNFF6Cmas3X5+AfcRY09b 0KWe7QKEW0AulNoO5sQgO3nklw9KlsR3BXJBNm/ah04PQP1mNG9Mg2Qvycgv7Tu9K+OMHRqhYGAx AdFs+XNKNodXYoKwrMRpI9yfUZH4an7iriQdOwBged0Y9p9B2ddHy0Fx3zTDpMZhPd3Qvk4zLC+F tgHVe1LgI/bHH+SluJtJ84/SWif91pcvliDbhV+lykvdVem9hnQQmnrHrUv33U255nhwoEosYRpq Yg5+QblYCBNGpeQwPEMhfMxO9yX1KAmThl4V0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pt in the . zone
	DS=40155/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`pt. 86400 IN RRSIG ( DS 8 1 86400 20240923200000 20240910190000 20038 . QtjDuZsauE8JuWTuSGKihauqfZtFT5rKAlERINnkzbI+DMA5UfgvTdTvNFF6Cmas3X5+AfcRY09b 0KWe7QKEW0AulNoO5sQgO3nklw9KlsR3BXJBNm/ah04PQP1mNG9Mg2Qvycgv7Tu9K+OMHRqhYGAx AdFs+XNKNodXYoKwrMRpI9yfUZH4an7iriQdOwBged0Y9p9B2ddHy0Fx3zTDpMZhPd3Qvk4zLC+F tgHVe1LgI/bHH+SluJtJ84/SWif91pcvliDbhV+lykvdVem9hnQQmnrHrUv33U255nhwoEosYRpq Yg5+QblYCBNGpeQwPEMhfMxO9yX1KAmThl4V0A== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=40155/SHA-256 is now in the chain-of-trust
	`pt. 86400 IN DS ( 40155 13 2 b0ed28b7255e9880e7ce4665b75ae7271f7837899057f0d4b897ece2eb1eb494 )`
	Query to ns.dns.br for pt/DNSKEY
	Received 289 bytes from 200.160.0.5
	;; Response received from [200.160.0.5] 289 octets ;; HEADER SECTION ;; id = 49325 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pt. IN DNSKEY ;; ANSWER SECTION (3 records) pt. 7200 IN DNSKEY ( 256 3 13 0E6rLajHw7sAD01Eh/e1eo4e5O5JRnNiHdOTzDypmqPFKwInDIvpAH0BPCUOn9t3mlPdJ8/FxYyK Md9gqfHHzA== ) ; Key ID = 30640 pt. 7200 IN DNSKEY ( 257 3 13 nfSs5LNsGhi3e4qjgY6KJxLxNHJahuEmEq2H1gLJHF4+bGZAm7BQwAbqFT3WJCgNqGlV2rEnBJn5 DpQz4R4oAg== ) ; Key ID = 40155 pt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20241007000000 20240825000000 40155 pt. V8pDMMklU2LR8b3c0xsuH4MQec1Bzglo2Y+tquAIgimFRBUdTLnD2ccAEvtroyms7U7w5XHlXDsX 7szHW0Bgsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for pt
	`pt. 7200 IN DNSKEY ( 256 3 13 0E6rLajHw7sAD01Eh/e1eo4e5O5JRnNiHdOTzDypmqPFKwInDIvpAH0BPCUOn9t3mlPdJ8/FxYyK Md9gqfHHzA== ) ; Key ID = 30640`
	`pt. 7200 IN DNSKEY ( 257 3 13 nfSs5LNsGhi3e4qjgY6KJxLxNHJahuEmEq2H1gLJHF4+bGZAm7BQwAbqFT3WJCgNqGlV2rEnBJn5 DpQz4R4oAg== ) ; Key ID = 40155`
	DNSKEY=40155/SEP is now in the chain-of-trust
	DS=40155/SHA-256 verifies DNSKEY=40155/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pt. 7200 IN RRSIG ( DNSKEY 13 1 7200 20241007000000 20240825000000 40155 pt. V8pDMMklU2LR8b3c0xsuH4MQec1Bzglo2Y+tquAIgimFRBUdTLnD2ccAEvtroyms7U7w5XHlXDsX 7szHW0Bgsg== )`
	RRSIG=40155 and DNSKEY=40155/SEP verifies the DNSKEY RRset
	DNSKEY=30640 is now in the chain-of-trust
	Query to ns.dns.br for andy.pt/A
	Received 536 bytes from 200.160.0.5
	;; Response received from [200.160.0.5] 536 octets ;; HEADER SECTION ;; id = 34222 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) andy.PT. 7200 IN NS ns3.ptservidor.net. andy.PT. 7200 IN NS ns2.ptservidor.net. andy.PT. 7200 IN NS ns1.ptservidor.net. PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.PT. 300 IN NSEC3 ( 1 1 10 d115 pd4pt4jif9r2f9fma1i33s4v71m568la NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. /74c/S5H6GvEUU5TOwcMqvtVUCAFooYYTXy7jhxBAJe2jEUCeY/CqKcagocs53fxfo5hqEcntUku 8ga1yAgzUg== ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.PT. 300 IN NSEC3 ( 1 1 10 d115 7m7r4eurjmoa3qasq4do11vfgr2nmodc NS DS RRSIG ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. 6MAdZ7l5SEQbYPixCq+TaJ6DNMMqEFj5uHGkmvQK3vU46zw+Q2eKF4AgksZgH683DCvM2uJKFFyI vmI0/AdA8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to d.dns.pt for andy.pt/DNSKEY
	Received 463 bytes from 185.39.210.1
	;; Response received from [185.39.210.1] 463 octets ;; HEADER SECTION ;; id = 26688 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) andy.pt. 7200 IN NS ns3.ptservidor.net. andy.pt. 7200 IN NS ns1.ptservidor.net. andy.pt. 7200 IN NS ns2.ptservidor.net. PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN NSEC3 ( 1 1 10 d115 pd4pt4jif9r2f9fma1i33s4v71m568la NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. /74c/S5H6GvEUU5TOwcMqvtVUCAFooYYTXy7jhxBAJe2jEUCeY/CqKcagocs53fxfo5hqEcntUku 8ga1yAgzUg== ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.pt. 300 IN NSEC3 ( 1 1 10 d115 7m7r4eurjmoa3qasq4do11vfgr2nmodc NS DS RRSIG ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. 6MAdZ7l5SEQbYPixCq+TaJ6DNMMqEFj5uHGkmvQK3vU46zw+Q2eKF4AgksZgH683DCvM2uJKFFyI vmI0/AdA8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone andy.pt

andy.pt

	Checking DS between pt and andy.pt
	Query to c.dns.pt for andy.pt/DS
	Received 553 bytes from 204.61.216.105
	;; Response received from [204.61.216.105] 553 octets ;; HEADER SECTION ;; id = 32448 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN NSEC3 ( 1 1 10 d115 pd4pt4jif9r2f9fma1i33s4v71m568la NS SOA RRSIG DNSKEY NSEC3PARAM ) PCTPFDAMBNVNP7A29HJ4PLCNTIHBFKBK.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. /74c/S5H6GvEUU5TOwcMqvtVUCAFooYYTXy7jhxBAJe2jEUCeY/CqKcagocs53fxfo5hqEcntUku 8ga1yAgzUg== ) pt. 300 IN SOA ( curiosity.dns.pt. request.dns.pt. 2024091105 ;serial 21600 ;refresh 7200 ;retry 2592000 ;expire 300 ;minimum ) pt. 300 IN RRSIG ( SOA 13 1 7200 20240921005234 20240911005234 30640 pt. PzjZMNr/2mYJ+ydcqHAOWZ57u3ULsi4KwVagYM3zYxnqtinCS8u+1lQHa0RncNNz6zRB2nv3fTO7 AeAdkcuW9A== ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.pt. 300 IN NSEC3 ( 1 1 10 d115 7m7r4eurjmoa3qasq4do11vfgr2nmodc NS DS RRSIG ) 7M5K140FJA2SUE8PKS7M9M317U25S2DL.pt. 300 IN RRSIG ( NSEC3 13 2 300 20240921005234 20240911005234 30640 pt. 6MAdZ7l5SEQbYPixCq+TaJ6DNMMqEFj5uHGkmvQK3vU46zw+Q2eKF4AgksZgH683DCvM2uJKFFyI vmI0/AdA8g== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for andy.pt in the pt zone
	Query to ns2.ptservidor.net for andy.pt/DNSKEY
	Received 112 bytes from 46.105.37.1
	;; Response received from [46.105.37.1] 112 octets ;; HEADER SECTION ;; id = 64830 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.pt. 2024033006 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.ptservidor.net for andy.pt/A
	Received 52 bytes from 46.105.37.1
	;; Response received from [46.105.37.1] 52 octets ;; HEADER SECTION ;; id = 18954 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.ptservidor.net is authoritative for andy.pt
	Query to ns3.ptservidor.net for andy.pt/SOA
	Received 112 bytes from 78.47.99.136
	;; Response received from [78.47.99.136] 112 octets ;; HEADER SECTION ;; id = 57083 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.pt. 2024033006 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.ptservidor.net for andy.pt/SOA
	Received 112 bytes from 185.32.188.57
	;; Response received from [185.32.188.57] 112 octets ;; HEADER SECTION ;; id = 8516 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN SOA ;; ANSWER SECTION (1 record) andy.pt. 86400 IN SOA ( ns1.ptservidor.net. servidores.ptservidor.pt. 2024033006 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.ptservidor.net for andy.pt/A
	Received 52 bytes from 46.105.37.1
	;; Response received from [46.105.37.1] 52 octets ;; HEADER SECTION ;; id = 43406 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	andy.pt A RR has value 20.105.216.31
	No RRSIGs found

andy.pt

	Query to ns3.ptservidor.net for andy.pt/A
	Received 52 bytes from 78.47.99.136
	;; Response received from [78.47.99.136] 52 octets ;; HEADER SECTION ;; id = 35186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.ptservidor.net is authoritative for andy.pt
	Query to ns3.ptservidor.net for andy.pt/A
	Received 52 bytes from 78.47.99.136
	;; Response received from [78.47.99.136] 52 octets ;; HEADER SECTION ;; id = 46785 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	andy.pt A RR has value 20.105.216.31
	No RRSIGs found

andy.pt

	Query to ns1.ptservidor.net for andy.pt/A
	Received 52 bytes from 185.32.188.57
	;; Response received from [185.32.188.57] 52 octets ;; HEADER SECTION ;; id = 49438 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ptservidor.net is authoritative for andy.pt
	Query to ns1.ptservidor.net for andy.pt/A
	Received 52 bytes from 185.32.188.57
	;; Response received from [185.32.188.57] 52 octets ;; HEADER SECTION ;; id = 64229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; andy.pt. IN A ;; ANSWER SECTION (1 record) andy.pt. 14400 IN A 20.105.216.31 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	andy.pt A RR has value 20.105.216.31
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test andy.pt at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: