DNSSEC Analyzer - anonaddy.me

Domain Name:

Time: 2021-09-22 11:37:43 UTC, NTP stratum 16

Analyzing DNSSEC problems for anonaddy.me

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (1139 octets) ;; HEADER SECTION ;; id = 14641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	DNSKEY=14748 is now in the chain-of-trust
	Query to d.root-servers.net for anonaddy.me/A
	Received 684 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (684 octets) ;; HEADER SECTION ;; id = 38341 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . q9VOXtO1NeQ21YztRlQO3sDsdwmUgNo7p/tD5jTcEp+WfS8FOi3luXy8a0Li9az3w6ssqfV6fvhY ECsukfnGEZbdc2fHIJyJHTtVzc4uW+8LR0v0EdMgIDOisxzVu2bb4qqF+NwYAj39tirznbiZwp6o /purOmSINUISiZf2fN5FIhJfbuoT1+Oh6n/rBsq7B37ek6KgHRibBjVmTO+O7tP9du7MbYShKAoR 61+GpbrpMWf9i2gZKfTRSZTDKHvPlb3xWKC4K1D4YkBTZxBaEp7vU5H7R93nwr5TWeawL5keHIG0 mMfgN+FIdORW+OGYGDIHjocSnFreE7LcuCku7Q== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to j.root-servers.net for me/DNSKEY
	Received 675 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (675 octets) ;; HEADER SECTION ;; id = 32940 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) me. 172800 IN NS a0.nic.me. me. 172800 IN NS a2.nic.me. me. 172800 IN NS b0.nic.me. me. 172800 IN NS b2.nic.me. me. 172800 IN NS c0.nic.me. me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . q9VOXtO1NeQ21YztRlQO3sDsdwmUgNo7p/tD5jTcEp+WfS8FOi3luXy8a0Li9az3w6ssqfV6fvhY ECsukfnGEZbdc2fHIJyJHTtVzc4uW+8LR0v0EdMgIDOisxzVu2bb4qqF+NwYAj39tirznbiZwp6o /purOmSINUISiZf2fN5FIhJfbuoT1+Oh6n/rBsq7B37ek6KgHRibBjVmTO+O7tP9du7MbYShKAoR 61+GpbrpMWf9i2gZKfTRSZTDKHvPlb3xWKC4K1D4YkBTZxBaEp7vU5H7R93nwr5TWeawL5keHIG0 mMfgN+FIdORW+OGYGDIHjocSnFreE7LcuCku7Q== ) ;; ADDITIONAL SECTION (11 records) a0.nic.me. 172800 IN A 199.253.59.1 a2.nic.me. 172800 IN A 199.249.119.1 b0.nic.me. 172800 IN A 199.253.60.1 b2.nic.me. 172800 IN A 199.249.127.1 c0.nic.me. 172800 IN A 199.253.61.1 a0.nic.me. 172800 IN AAAA 2001:500:53::1 a2.nic.me. 172800 IN AAAA 2001:500:47::1 b0.nic.me. 172800 IN AAAA 2001:500:54::1 b2.nic.me. 172800 IN AAAA 2001:500:4f::1 c0.nic.me. 172800 IN AAAA 2001:500:55::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone me

	Checking DS between . and me
	Query to b.root-servers.net for me/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 24489 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DS ;; ANSWER SECTION (2 records) me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 ) me. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . q9VOXtO1NeQ21YztRlQO3sDsdwmUgNo7p/tD5jTcEp+WfS8FOi3luXy8a0Li9az3w6ssqfV6fvhY ECsukfnGEZbdc2fHIJyJHTtVzc4uW+8LR0v0EdMgIDOisxzVu2bb4qqF+NwYAj39tirznbiZwp6o /purOmSINUISiZf2fN5FIhJfbuoT1+Oh6n/rBsq7B37ek6KgHRibBjVmTO+O7tP9du7MbYShKAoR 61+GpbrpMWf9i2gZKfTRSZTDKHvPlb3xWKC4K1D4YkBTZxBaEp7vU5H7R93nwr5TWeawL5keHIG0 mMfgN+FIdORW+OGYGDIHjocSnFreE7LcuCku7Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for me in the . zone
	DS=45352/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`me. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . q9VOXtO1NeQ21YztRlQO3sDsdwmUgNo7p/tD5jTcEp+WfS8FOi3luXy8a0Li9az3w6ssqfV6fvhY ECsukfnGEZbdc2fHIJyJHTtVzc4uW+8LR0v0EdMgIDOisxzVu2bb4qqF+NwYAj39tirznbiZwp6o /purOmSINUISiZf2fN5FIhJfbuoT1+Oh6n/rBsq7B37ek6KgHRibBjVmTO+O7tP9du7MbYShKAoR 61+GpbrpMWf9i2gZKfTRSZTDKHvPlb3xWKC4K1D4YkBTZxBaEp7vU5H7R93nwr5TWeawL5keHIG0 mMfgN+FIdORW+OGYGDIHjocSnFreE7LcuCku7Q== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=45352/SHA-256 is now in the chain-of-trust
	`me. 86400 IN DS ( 45352 8 2 7708c8a6d5d72b63214bbff50cb54553f7e07a1fa5e9074bd8d63c43102d8559 )`
	Query to a0.nic.me for me/DNSKEY
	Received 893 bytes from 199.253.59.1
	;; Response received from 199.253.59.1 (893 octets) ;; HEADER SECTION ;; id = 63554 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; me. IN DNSKEY ;; ANSWER SECTION (4 records) me. 900 IN DNSKEY ( 256 3 8 AwEAAb/srlqnVcl0P62N4DTv+4BOi6q8KoNZB/mjtLqm4OA94JS5dk4dXYEFXGv4UD7Uu7CRc5rh 0jpmy4CZkZ+4mi5t1Rf5EbaEdxwQ6Ol0hH2s3kH7B7PjsNfgNGrEOS4hFlBKHrKZ/jqbo0wFgmFk 0fk8BrK0wlqz8JqgboDcyQw9 ) ; Key ID = 48924 me. 900 IN DNSKEY ( 256 3 8 AwEAAc062TClAQYC2Nv5sLJgIcb8nUEqXORtHD5CrysJJulyzc7MV2n4p6t1X6bOr+3uJ+dBvuAX QV+EAp33OoWiCrRCDpuSCTVK70XpT9ezqdmVungM1T9PAMadLWa6buO7laBEDOCF/cikZBk1N4R8 xEvLWBdILEbP3mWalI+LC0wV ) ; Key ID = 3228 me. 900 IN DNSKEY ( 257 3 8 AwEAAcEDvjoqpHaGqwG6GyN5n/EI0MBTDf41zr3TILeryFHRq/GRN40VUSfhf7ApYoOFSCs0rDsE IJPWCXV0s27id+MdIAAycocbx20XYtqzM5fqrpfYU5MtpalohqG3xhvFL80fHyPHAmpI+hsZDLi5 fUK0W0mUjEUYfv7Dx4Z4EmJ6AiDlSXw27k6SRS+1wb2i3Orr9xwOOQmmGl1kmN/EHHHNBBLbv0Qu Q8N4yftAQ6FSPP184yDOKfzmBttzqMeBULmAjbi7cYmIWNekjq2IcPNktuJxrGQv4xYN47xEtaic z54h4q5ah3JT20lfYRqKFqZX962a65BtW8nIbyiDte0= ) ; Key ID = 45352 me. 900 IN RRSIG ( DNSKEY 8 1 900 20211008151937 20210917141937 45352 me. LguWNBOR+shZm9mvTYaGiC2t4SG7dVYU4AZ5d3vZ26rwmcSt7YaKFlmPXbmLC56q2lEw7AxMtFLN S6Iik19bKx2AwI7ZbNoSTdOqlrIH7WSYltC5RpuCbMZnV9ltKRUCR8MW6PyJEIlcKWfNAclK/805 9AdLdZQiGcp3fLM5oofueIPNlAZNyB3tGFXFaVxZhBtGId+1XnLH8raPQuAGnYpHmZTS1NxqdGBW 6nqOnrQ+eBlcFQ4SU6WNMM3mV+F23uAzhMvsTMx2LrIVQZUJSrPFMm1SmCk21g+RprWUEGo5IU1r Makomjqi6c2+UXgVuAOwy+JOB6iuNhlm6/x6jQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for me
	`me. 900 IN DNSKEY ( 256 3 8 AwEAAb/srlqnVcl0P62N4DTv+4BOi6q8KoNZB/mjtLqm4OA94JS5dk4dXYEFXGv4UD7Uu7CRc5rh 0jpmy4CZkZ+4mi5t1Rf5EbaEdxwQ6Ol0hH2s3kH7B7PjsNfgNGrEOS4hFlBKHrKZ/jqbo0wFgmFk 0fk8BrK0wlqz8JqgboDcyQw9 ) ; Key ID = 48924`
	`me. 900 IN DNSKEY ( 256 3 8 AwEAAc062TClAQYC2Nv5sLJgIcb8nUEqXORtHD5CrysJJulyzc7MV2n4p6t1X6bOr+3uJ+dBvuAX QV+EAp33OoWiCrRCDpuSCTVK70XpT9ezqdmVungM1T9PAMadLWa6buO7laBEDOCF/cikZBk1N4R8 xEvLWBdILEbP3mWalI+LC0wV ) ; Key ID = 3228`
	`me. 900 IN DNSKEY ( 257 3 8 AwEAAcEDvjoqpHaGqwG6GyN5n/EI0MBTDf41zr3TILeryFHRq/GRN40VUSfhf7ApYoOFSCs0rDsE IJPWCXV0s27id+MdIAAycocbx20XYtqzM5fqrpfYU5MtpalohqG3xhvFL80fHyPHAmpI+hsZDLi5 fUK0W0mUjEUYfv7Dx4Z4EmJ6AiDlSXw27k6SRS+1wb2i3Orr9xwOOQmmGl1kmN/EHHHNBBLbv0Qu Q8N4yftAQ6FSPP184yDOKfzmBttzqMeBULmAjbi7cYmIWNekjq2IcPNktuJxrGQv4xYN47xEtaic z54h4q5ah3JT20lfYRqKFqZX962a65BtW8nIbyiDte0= ) ; Key ID = 45352`
	DNSKEY=45352/SEP is now in the chain-of-trust
	DS=45352/SHA-256 verifies DNSKEY=45352/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`me. 900 IN RRSIG ( DNSKEY 8 1 900 20211008151937 20210917141937 45352 me. LguWNBOR+shZm9mvTYaGiC2t4SG7dVYU4AZ5d3vZ26rwmcSt7YaKFlmPXbmLC56q2lEw7AxMtFLN S6Iik19bKx2AwI7ZbNoSTdOqlrIH7WSYltC5RpuCbMZnV9ltKRUCR8MW6PyJEIlcKWfNAclK/805 9AdLdZQiGcp3fLM5oofueIPNlAZNyB3tGFXFaVxZhBtGId+1XnLH8raPQuAGnYpHmZTS1NxqdGBW 6nqOnrQ+eBlcFQ4SU6WNMM3mV+F23uAzhMvsTMx2LrIVQZUJSrPFMm1SmCk21g+RprWUEGo5IU1r Makomjqi6c2+UXgVuAOwy+JOB6iuNhlm6/x6jQ== )`
	RRSIG=45352 and DNSKEY=45352/SEP verifies the DNSKEY RRset
	DNSKEY=48924 is now in the chain-of-trust
	DNSKEY=3228 is now in the chain-of-trust
	Query to a0.nic.me for anonaddy.me/A
	Received 403 bytes from 199.253.59.1
	;; Response received from 199.253.59.1 (403 octets) ;; HEADER SECTION ;; id = 56010 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) anonaddy.me. 86400 IN NS ns1.desec.io. anonaddy.me. 86400 IN NS ns2.desec.org. anonaddy.me. 86400 IN DS ( 41296 13 4 50ad6f3fb3a29f984527e37cbc48fa3d201e764ffdcc8c55fce210c2bb983ecd 5a23eab2a9b001cab6506a30d3ff834b ) anonaddy.me. 86400 IN DS ( 41296 13 1 c3c4f013314122dc8a3fe96b5bacc550b9136a29 ) anonaddy.me. 86400 IN DS ( 41296 13 2 f1e6cd42417dfe12a4e005b9f9c9b5f6ed4a939034ca621b06c935442b99a1b0 ) anonaddy.me. 86400 IN RRSIG ( DS 8 2 86400 20211008151937 20210917141937 3228 me. W3oncNJ1M1R4hbDE4WnNBqGIqxz0PQdxJH8Bt5Ne0i0bwcWtJFBUMQwrHBZKGGFQnx7nFNyTBZXK Ky30TsPWWBId1t31wI6xsG9lxWhDgOvvgFJQCYgG32Me/kzEen3DaeiOnKeJbBimHJwnJtB+BoOd b6S4REqf2RfItrJYgg4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b2.nic.me for anonaddy.me/DNSKEY
	Received 403 bytes from 199.249.127.1
	;; Response received from 199.249.127.1 (403 octets) ;; HEADER SECTION ;; id = 41284 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) anonaddy.me. 86400 IN NS ns1.desec.io. anonaddy.me. 86400 IN NS ns2.desec.org. anonaddy.me. 86400 IN DS ( 41296 13 1 c3c4f013314122dc8a3fe96b5bacc550b9136a29 ) anonaddy.me. 86400 IN DS ( 41296 13 2 f1e6cd42417dfe12a4e005b9f9c9b5f6ed4a939034ca621b06c935442b99a1b0 ) anonaddy.me. 86400 IN DS ( 41296 13 4 50ad6f3fb3a29f984527e37cbc48fa3d201e764ffdcc8c55fce210c2bb983ecd 5a23eab2a9b001cab6506a30d3ff834b ) anonaddy.me. 86400 IN RRSIG ( DS 8 2 86400 20211008151937 20210917141937 3228 me. W3oncNJ1M1R4hbDE4WnNBqGIqxz0PQdxJH8Bt5Ne0i0bwcWtJFBUMQwrHBZKGGFQnx7nFNyTBZXK Ky30TsPWWBId1t31wI6xsG9lxWhDgOvvgFJQCYgG32Me/kzEen3DaeiOnKeJbBimHJwnJtB+BoOd b6S4REqf2RfItrJYgg4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone anonaddy.me

anonaddy.me

	Checking DS between me and anonaddy.me
	Query to b2.nic.me for anonaddy.me/DS
	Received 350 bytes from 199.249.127.1
	;; Response received from 199.249.127.1 (350 octets) ;; HEADER SECTION ;; id = 28741 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN DS ;; ANSWER SECTION (4 records) anonaddy.me. 86400 IN DS ( 41296 13 1 c3c4f013314122dc8a3fe96b5bacc550b9136a29 ) anonaddy.me. 86400 IN DS ( 41296 13 2 f1e6cd42417dfe12a4e005b9f9c9b5f6ed4a939034ca621b06c935442b99a1b0 ) anonaddy.me. 86400 IN DS ( 41296 13 4 50ad6f3fb3a29f984527e37cbc48fa3d201e764ffdcc8c55fce210c2bb983ecd 5a23eab2a9b001cab6506a30d3ff834b ) anonaddy.me. 86400 IN RRSIG ( DS 8 2 86400 20211008151937 20210917141937 3228 me. W3oncNJ1M1R4hbDE4WnNBqGIqxz0PQdxJH8Bt5Ne0i0bwcWtJFBUMQwrHBZKGGFQnx7nFNyTBZXK Ky30TsPWWBId1t31wI6xsG9lxWhDgOvvgFJQCYgG32Me/kzEen3DaeiOnKeJbBimHJwnJtB+BoOd b6S4REqf2RfItrJYgg4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DS records for anonaddy.me in the me zone
	DS=41296/SHA-1 has algorithm ECDSAP256SHA256
	DS=41296/SHA-256 has algorithm ECDSAP256SHA256
	DS=41296/SHA-384 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`anonaddy.me. 86400 IN RRSIG ( DS 8 2 86400 20211008151937 20210917141937 3228 me. W3oncNJ1M1R4hbDE4WnNBqGIqxz0PQdxJH8Bt5Ne0i0bwcWtJFBUMQwrHBZKGGFQnx7nFNyTBZXK Ky30TsPWWBId1t31wI6xsG9lxWhDgOvvgFJQCYgG32Me/kzEen3DaeiOnKeJbBimHJwnJtB+BoOd b6S4REqf2RfItrJYgg4= )`
	RRSIG=3228 and DNSKEY=3228 verifies the DS RRset
	DS=41296/SHA-1 is now in the chain-of-trust
	`anonaddy.me. 86400 IN DS ( 41296 13 1 c3c4f013314122dc8a3fe96b5bacc550b9136a29 )`
	`anonaddy.me. 86400 IN DS ( 41296 13 2 f1e6cd42417dfe12a4e005b9f9c9b5f6ed4a939034ca621b06c935442b99a1b0 )`
	`anonaddy.me. 86400 IN DS ( 41296 13 4 50ad6f3fb3a29f984527e37cbc48fa3d201e764ffdcc8c55fce210c2bb983ecd 5a23eab2a9b001cab6506a30d3ff834b )`
	Query to ns1.desec.io for anonaddy.me/DNSKEY
	Received 227 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (227 octets) ;; HEADER SECTION ;; id = 61973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN DNSKEY ;; ANSWER SECTION (2 records) anonaddy.me. 3600 IN DNSKEY ( 257 3 13 Heb+ZaCYyjmR+iOG8SShjJKHrjyejNoX8UcQbGHij0D1yNuQ40fqZ2erhcSFKTXwGxtPQG6K3ih7 y9kuzXEApA== ) ; Key ID = 41296 anonaddy.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. sBW7sGJmOxLhUNHQ8XD18Ui7zcx/KTr/uiqaUZiSv9vlPw4jLYJSTlFgEccFte3f5q5G/otJwJS5 rFWDGfl+UQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for anonaddy.me
	`anonaddy.me. 3600 IN DNSKEY ( 257 3 13 Heb+ZaCYyjmR+iOG8SShjJKHrjyejNoX8UcQbGHij0D1yNuQ40fqZ2erhcSFKTXwGxtPQG6K3ih7 y9kuzXEApA== ) ; Key ID = 41296`
	DNSKEY=41296/SEP is now in the chain-of-trust
	DS=41296/SHA-1 verifies DNSKEY=41296/SEP
	DS=41296/SHA-256 verifies DNSKEY=41296/SEP
	DS=41296/SHA-384 verifies DNSKEY=41296/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`anonaddy.me. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. sBW7sGJmOxLhUNHQ8XD18Ui7zcx/KTr/uiqaUZiSv9vlPw4jLYJSTlFgEccFte3f5q5G/otJwJS5 rFWDGfl+UQ== )`
	RRSIG=41296 and DNSKEY=41296/SEP verifies the DNSKEY RRset
	Query to ns2.desec.org for anonaddy.me/A
	Received 163 bytes from 157.53.224.1
	;; Response received from 157.53.224.1 (163 octets) ;; HEADER SECTION ;; id = 29958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (2 records) anonaddy.me. 3600 IN A 213.108.105.57 anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.desec.org is authoritative for anonaddy.me
	Found RRSIG signed by anonaddy.me zone
	Query to ns1.desec.io for anonaddy.me/SOA
	Received 195 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (195 octets) ;; HEADER SECTION ;; id = 49995 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN SOA ;; ANSWER SECTION (2 records) anonaddy.me. 300 IN SOA ( get.desec.io. get.desec.io. 2021084902 ;serial 86400 ;refresh 86400 ;retry 2419200 ;expire 3600 ;minimum ) anonaddy.me. 300 IN RRSIG ( SOA 13 2 300 20210930000000 20210909000000 41296 anonaddy.me. Io6vGwqipcE7CqyZPNvFp9iMoKU2GKpywLuT8tHJBZhpBmEFQ9gLUnFxBj50Nr4von/RTzcQbRsd w5UDzS75Cg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.desec.org for anonaddy.me/A
	Received 163 bytes from 157.53.224.1
	;; Response received from 157.53.224.1 (163 octets) ;; HEADER SECTION ;; id = 41166 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (2 records) anonaddy.me. 3600 IN A 213.108.105.57 anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	anonaddy.me A RR has value 213.108.105.57
	Found 1 RRSIGs over A RRset
	`anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== )`
	RRSIG=41296 and DNSKEY=41296/SEP verifies the A RRset

anonaddy.me

	Query to ns1.desec.io for anonaddy.me/A
	Received 163 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (163 octets) ;; HEADER SECTION ;; id = 51057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (2 records) anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== ) anonaddy.me. 3600 IN A 213.108.105.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.desec.io is authoritative for anonaddy.me
	Found RRSIG signed by anonaddy.me zone
	Query to ns1.desec.io for anonaddy.me/A
	Received 163 bytes from 45.54.76.1
	;; Response received from 45.54.76.1 (163 octets) ;; HEADER SECTION ;; id = 4491 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; anonaddy.me. IN A ;; ANSWER SECTION (2 records) anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== ) anonaddy.me. 3600 IN A 213.108.105.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	anonaddy.me A RR has value 213.108.105.57
	Found 1 RRSIGs over A RRset
	`anonaddy.me. 3600 IN RRSIG ( A 13 2 3600 20210930000000 20210909000000 41296 anonaddy.me. TE1fUlnW2H/67AUVvw+A95HcveJmOJcfWixdDWdXt3WAsM6zYPRh6b2nMH7kDVDxNT3gA9ag8WWV tuSgvos1QQ== )`
	RRSIG=41296 and DNSKEY=41296/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test anonaddy.me at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: