DNSSEC Debugger - boree.us

Domain Name:

Time: 2025-05-05 14:48:26 UTC

Analyzing DNSSEC problems for boree.us

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 1139 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 1139 octets ;; HEADER SECTION ;; id = 64626 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250522000000 20250501000000 20326 . WTJMlb+whz46fmQ9Vxp2cIbP7VOUWCR8FPv0FbUI2koD3mXCZew8oZOwe1atAHpblB9+kN7h8Mzz KTbhkleV88nU7BjvWcijKcKwtvC8vibe+FBwDIEevtMFimXPq4QOdu4W3Tt4LTzLbNBamrWFTLg+ 25lz4t65Oie6TxdDGNR4jA8k39Mof9L4c3YTOspVKrBjUkWmtExKyBxvQOs/Ym7wHYUZmX3SUaq9 1Ucs+EHR6caewSdIgkZobjiW+h5Abrgp4KHkvJdLa4MI6KB+mIHeffKO8FbBQA0rOdaSiaSgma54 DuqAKeB+aXUUPLJlt6bHOHVrU3VeGb4jahiRTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250522000000 20250501000000 20326 . WTJMlb+whz46fmQ9Vxp2cIbP7VOUWCR8FPv0FbUI2koD3mXCZew8oZOwe1atAHpblB9+kN7h8Mzz KTbhkleV88nU7BjvWcijKcKwtvC8vibe+FBwDIEevtMFimXPq4QOdu4W3Tt4LTzLbNBamrWFTLg+ 25lz4t65Oie6TxdDGNR4jA8k39Mof9L4c3YTOspVKrBjUkWmtExKyBxvQOs/Ym7wHYUZmX3SUaq9 1Ucs+EHR6caewSdIgkZobjiW+h5Abrgp4KHkvJdLa4MI6KB+mIHeffKO8FbBQA0rOdaSiaSgma54 DuqAKeB+aXUUPLJlt6bHOHVrU3VeGb4jahiRTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to j.root-servers.net for boree.us/A
	Received 858 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 858 octets ;; HEADER SECTION ;; id = 38672 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS b.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS m.cctld.us. us. 172800 IN NS n.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS y.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250518050000 20250505040000 53148 . e+VzGJl/WXlKE/7MOMF+bue5RjlWwfgLCf6Q2hxLoFJl4nVSo1DJTz40y1k09AKXk0vTDejJdavz LKyvzkphg+nWKGS2IwbNUndiyXB+4bUpm9EZO5qvcyoqNQhXutrftLZ7zhT7zr9a0zCM0o1PVZiA y6TNCSoAFckyLeQPkyq/g9Ts6Yj3P8BuNDCs3Y58v5mpNWumOWZjF9LHBs6AzuSDth2RvAMl4i5V 75gy+1KEAw8J1ZCyb0SEcQcs+UUgkt4ROggkjYogJTG8haYyMh70QSaUubhZB8/vSxKwemtOq4Ew xKeLXbuMYKdEuulcieIq4Hl7Gy2sfqRZZwRCkg== ) ;; ADDITIONAL SECTION (17 records) b.cctld.us. 172800 IN A 156.154.125.70 f.cctld.us. 172800 IN A 209.173.58.70 k.cctld.us. 172800 IN A 156.154.128.70 m.cctld.us. 172800 IN A 204.74.105.1 n.cctld.us. 172800 IN A 204.74.107.1 w.cctld.us. 172800 IN A 37.209.192.15 x.cctld.us. 172800 IN A 37.209.194.15 y.cctld.us. 172800 IN A 37.209.196.15 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for us/DNSKEY
	Received 854 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 854 octets ;; HEADER SECTION ;; id = 41009 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 17 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) us. 172800 IN NS n.cctld.us. us. 172800 IN NS f.cctld.us. us. 172800 IN NS x.cctld.us. us. 172800 IN NS k.cctld.us. us. 172800 IN NS b.cctld.us. us. 172800 IN NS m.cctld.us. us. 172800 IN NS w.cctld.us. us. 172800 IN NS y.cctld.us. us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250518050000 20250505040000 53148 . e+VzGJl/WXlKE/7MOMF+bue5RjlWwfgLCf6Q2hxLoFJl4nVSo1DJTz40y1k09AKXk0vTDejJdavz LKyvzkphg+nWKGS2IwbNUndiyXB+4bUpm9EZO5qvcyoqNQhXutrftLZ7zhT7zr9a0zCM0o1PVZiA y6TNCSoAFckyLeQPkyq/g9Ts6Yj3P8BuNDCs3Y58v5mpNWumOWZjF9LHBs6AzuSDth2RvAMl4i5V 75gy+1KEAw8J1ZCyb0SEcQcs+UUgkt4ROggkjYogJTG8haYyMh70QSaUubhZB8/vSxKwemtOq4Ew xKeLXbuMYKdEuulcieIq4Hl7Gy2sfqRZZwRCkg== ) ;; ADDITIONAL SECTION (17 records) y.cctld.us. 172800 IN A 37.209.196.15 x.cctld.us. 172800 IN A 37.209.194.15 w.cctld.us. 172800 IN A 37.209.192.15 n.cctld.us. 172800 IN A 204.74.107.1 m.cctld.us. 172800 IN A 204.74.105.1 k.cctld.us. 172800 IN A 156.154.128.70 f.cctld.us. 172800 IN A 209.173.58.70 b.cctld.us. 172800 IN A 156.154.125.70 y.cctld.us. 172800 IN AAAA 2001:dcd:3::15 x.cctld.us. 172800 IN AAAA 2001:dcd:2::15 w.cctld.us. 172800 IN AAAA 2001:dcd:1::15 n.cctld.us. 172800 IN AAAA 2610:a1:3280::53 m.cctld.us. 172800 IN AAAA 2610:a1:3180::53 k.cctld.us. 172800 IN AAAA 2001:503:e239::3:1 f.cctld.us. 172800 IN AAAA 2001:500:3682::11 b.cctld.us. 172800 IN AAAA 2001:502:ad09::29 ;; { "EDNS-VERSION": 0 }
	Found child zone us

	Checking DS between . and us
	Query to b.root-servers.net for us/DS
	Received 366 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 366 octets ;; HEADER SECTION ;; id = 19386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DS ;; ANSWER SECTION (2 records) us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 ) us. 86400 IN RRSIG ( DS 8 1 86400 20250518050000 20250505040000 53148 . e+VzGJl/WXlKE/7MOMF+bue5RjlWwfgLCf6Q2hxLoFJl4nVSo1DJTz40y1k09AKXk0vTDejJdavz LKyvzkphg+nWKGS2IwbNUndiyXB+4bUpm9EZO5qvcyoqNQhXutrftLZ7zhT7zr9a0zCM0o1PVZiA y6TNCSoAFckyLeQPkyq/g9Ts6Yj3P8BuNDCs3Y58v5mpNWumOWZjF9LHBs6AzuSDth2RvAMl4i5V 75gy+1KEAw8J1ZCyb0SEcQcs+UUgkt4ROggkjYogJTG8haYyMh70QSaUubhZB8/vSxKwemtOq4Ew xKeLXbuMYKdEuulcieIq4Hl7Gy2sfqRZZwRCkg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for us in the . zone
	DS=59017/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`us. 86400 IN RRSIG ( DS 8 1 86400 20250518050000 20250505040000 53148 . e+VzGJl/WXlKE/7MOMF+bue5RjlWwfgLCf6Q2hxLoFJl4nVSo1DJTz40y1k09AKXk0vTDejJdavz LKyvzkphg+nWKGS2IwbNUndiyXB+4bUpm9EZO5qvcyoqNQhXutrftLZ7zhT7zr9a0zCM0o1PVZiA y6TNCSoAFckyLeQPkyq/g9Ts6Yj3P8BuNDCs3Y58v5mpNWumOWZjF9LHBs6AzuSDth2RvAMl4i5V 75gy+1KEAw8J1ZCyb0SEcQcs+UUgkt4ROggkjYogJTG8haYyMh70QSaUubhZB8/vSxKwemtOq4Ew xKeLXbuMYKdEuulcieIq4Hl7Gy2sfqRZZwRCkg== )`
	RRSIG=53148 and DNSKEY=53148 verifies the DS RRset
	DS=59017/SHA-256 is now in the chain-of-trust
	`us. 86400 IN DS ( 59017 8 2 7daf469d42b5d8e5537fd4dd4b6057710e9a61f72c32eb7fb6526f52277ec2b0 )`
	Query to n.cctld.us for us/DNSKEY
	Received 777 bytes from 204.74.107.1
	;; Response received from [204.74.107.1] 777 octets ;; HEADER SECTION ;; id = 22799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; us. IN DNSKEY ;; ANSWER SECTION (3 records) us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017 us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159 us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250513220725 20250429212822 59017 us. DgGjVJnscshBR3xH652j1nKJuKlmM6ErXBV2x2xpW2ZAWc4aj7NzyKDekw6TpnS4rDCEWruCl5+I fhJUPFvLUj7XCjGNQOSiUM3E6qQsaDIgWCwO5xh7UVPclthaHygDeSTp4ZwiIKZUJfeW1LYsIRqH jbdlrg4WbJhzclJQJzYX+GT0iyPAo75oLm+f8Pr8nIj3griGnWMcV1S2cPxTtCjM5qGu+30An4kC 81zgiEET9nDpEftEj7WK4hHEwxXJPzszTm0kdmqwQSFyuo0iPWXb6BSm4j23Yomi4t1tUKjFx5HS qk0UyTtFUqlxhughqFLvSKyDX3njdLrK2ChN2Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for us
	`us. 7200 IN DNSKEY ( 257 3 8 AwEAAabgSGRWwpR24imYq+0K0s7OscAlXB1k7h6Tm3pFaSOKbbE5lSNQ6Cm2nIQbkQAJOyvq3P8a enAWH78rychEvtHBSqh0f9onF1Bnhsmd7YBfvzUMD56LS7Z8nIcbl48aq1XLL1WURV9TcHr6hi+d MFL2Sa//3Zoo7O0yMuaaV8J2g9bVu4deQK16au7GORazI6469rTUfXhWPFkJa6BvFi/DMcJNy+6J kbh45WuY0bxj/M5LBR+sCe6zH3+vpu205OtSQT4E4TXvUVSCOIlNn3lIw43twJO73exKmhphtjQ+ AhRwZtrgCqDXd1Brt/EEdzdmyyd/eE6pgxJK6bib8Hk= ) ; keytag 59017`
	`us. 7200 IN DNSKEY ( 256 3 8 AwEAAatbrQTiZd0FdSVbnkRFiU5jf9ACOPc4M0CK+G+Gla4gH3ClPunwqBJhvRtMkKdhGE93lMuz jNkGakBrkFvzwHtIw9pWLxum2Idysf+JxdhfSXNNYEzKcP0lCIjWf+iY2rtXoltVLxgT2skvDgmb wq+a3Cb/7CAB/SmFRCl8tQJ4YpJlkHiHPbWXljjiPWsj3/52hv45GHKQPi4vRzPeaw0= ) ; keytag 54159`
	DNSKEY=59017/SEP is now in the chain-of-trust
	DS=59017/SHA-256 verifies DNSKEY=59017/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`us. 7200 IN RRSIG ( DNSKEY 8 1 7200 20250513220725 20250429212822 59017 us. DgGjVJnscshBR3xH652j1nKJuKlmM6ErXBV2x2xpW2ZAWc4aj7NzyKDekw6TpnS4rDCEWruCl5+I fhJUPFvLUj7XCjGNQOSiUM3E6qQsaDIgWCwO5xh7UVPclthaHygDeSTp4ZwiIKZUJfeW1LYsIRqH jbdlrg4WbJhzclJQJzYX+GT0iyPAo75oLm+f8Pr8nIj3griGnWMcV1S2cPxTtCjM5qGu+30An4kC 81zgiEET9nDpEftEj7WK4hHEwxXJPzszTm0kdmqwQSFyuo0iPWXb6BSm4j23Yomi4t1tUKjFx5HS qk0UyTtFUqlxhughqFLvSKyDX3njdLrK2ChN2Q== )`
	RRSIG=59017 and DNSKEY=59017/SEP verifies the DNSKEY RRset
	DNSKEY=54159 is now in the chain-of-trust
	Query to w.cctld.us for boree.us/A
	Received 675 bytes from 37.209.192.15
	;; Response received from [37.209.192.15] 675 octets ;; HEADER SECTION ;; id = 8894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) boree.us. 3600 IN NS heidi.ns.cloudflare.com. boree.us. 3600 IN NS vern.ns.cloudflare.com. r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517064816 20250503062116 54159 us. FOHA0KOJgKk0aT1v39SmnAIsd5p6jPqkYTZOefll+73fDCPA1Il0Kx0M/7m3LyRTkyVYe4pyRRNI UU0YoziM3JLY02+H3SUCvLim213RAossUfU8Li/u5yLcgHuGC3zc0hThuJbegIakO2gWWyzktHwm wsqEd99IMx/K+8XiAGaOE9mYkpwhYX3041dMOysVRelvPN7184D9vMvxlvlA6g== ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN NSEC3 ( 1 1 0 - cut1qnsb6gtkdfug7cnmmubbac3njt5d NS DS RRSIG ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517090008 20250503081918 54159 us. oUKKbpUJpBiu0blKjwyygzHZxpJU6njkYgNfkZiIG0zzaS9/fOOq/hTcpYVjSJoWYr9epIxXCest ll0VnW/qyy9MxNlPMYkVUnLkpt2tN3pox06FycDLf/5WKMlQVa2b8tW6RFwENHcjghLA+a96yA1X gsaWeB8rtrtmI8E97zRZq/iCUbjlmDyWMNjWjL8lkLfYIUslkdjiS4rFiH/ydw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to k.cctld.us for boree.us/DNSKEY
	Received 675 bytes from 156.154.128.70
	;; Response received from [156.154.128.70] 675 octets ;; HEADER SECTION ;; id = 52528 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) boree.us. 3600 IN NS heidi.ns.cloudflare.com. boree.us. 3600 IN NS vern.ns.cloudflare.com. r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517064816 20250503062116 54159 us. FOHA0KOJgKk0aT1v39SmnAIsd5p6jPqkYTZOefll+73fDCPA1Il0Kx0M/7m3LyRTkyVYe4pyRRNI UU0YoziM3JLY02+H3SUCvLim213RAossUfU8Li/u5yLcgHuGC3zc0hThuJbegIakO2gWWyzktHwm wsqEd99IMx/K+8XiAGaOE9mYkpwhYX3041dMOysVRelvPN7184D9vMvxlvlA6g== ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN NSEC3 ( 1 1 0 - cut1qnsb6gtkdfug7cnmmubbac3njt5d NS DS RRSIG ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517090008 20250503081918 54159 us. oUKKbpUJpBiu0blKjwyygzHZxpJU6njkYgNfkZiIG0zzaS9/fOOq/hTcpYVjSJoWYr9epIxXCest ll0VnW/qyy9MxNlPMYkVUnLkpt2tN3pox06FycDLf/5WKMlQVa2b8tW6RFwENHcjghLA+a96yA1X gsaWeB8rtrtmI8E97zRZq/iCUbjlmDyWMNjWjL8lkLfYIUslkdjiS4rFiH/ydw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone boree.us

boree.us

	Checking DS between us and boree.us
	Query to x.cctld.us for boree.us/DS
	Received 878 bytes from 37.209.194.15
	;; Response received from [37.209.194.15] 878 octets ;; HEADER SECTION ;; id = 40164 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN NSEC3 ( 1 1 0 - r0men30o2a9cjn3tjp2meeou3fvpig9u NS SOA RRSIG DNSKEY NSEC3PARAM CDS CDNSKEY TYPE65534 ) r0lo40lj4j76eriqpo80i3insgcmv5ns.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517064816 20250503062116 54159 us. FOHA0KOJgKk0aT1v39SmnAIsd5p6jPqkYTZOefll+73fDCPA1Il0Kx0M/7m3LyRTkyVYe4pyRRNI UU0YoziM3JLY02+H3SUCvLim213RAossUfU8Li/u5yLcgHuGC3zc0hThuJbegIakO2gWWyzktHwm wsqEd99IMx/K+8XiAGaOE9mYkpwhYX3041dMOysVRelvPN7184D9vMvxlvlA6g== ) us. 900 IN SOA ( a.cctld.us. admin.tldns.godaddy. 1746455658 ;serial 1800 ;refresh 300 ;retry 604800 ;expire 1800 ;minimum ) us. 900 IN RRSIG ( SOA 8 1 900 20250519143530 20250505133530 54159 us. Kljl7aHq1Im3k/XHdj4lTDxnuEEMNW0wiPcnATbwCX7a5bZwk4lr9jiKNcP/fGq4/u51yEjRYPBZ jqErcI/iRRyaU/nMhUJZY6U4lQ7sw5vi6jpAgznA7etHpUigkXlQLOAOdBOqZ0GQiVkt5Q6XFbA2 5Tz7a+EnFGNOl0nzpihsy9QHXNmPAtcOxHsFqfkeHWrA/n0dYERMm7jsMy398w== ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN NSEC3 ( 1 1 0 - cut1qnsb6gtkdfug7cnmmubbac3njt5d NS DS RRSIG ) cusimf7akbesejqnl8013b5u03add8hp.us. 900 IN RRSIG ( NSEC3 8 2 900 20250517090008 20250503081918 54159 us. oUKKbpUJpBiu0blKjwyygzHZxpJU6njkYgNfkZiIG0zzaS9/fOOq/hTcpYVjSJoWYr9epIxXCest ll0VnW/qyy9MxNlPMYkVUnLkpt2tN3pox06FycDLf/5WKMlQVa2b8tW6RFwENHcjghLA+a96yA1X gsaWeB8rtrtmI8E97zRZq/iCUbjlmDyWMNjWjL8lkLfYIUslkdjiS4rFiH/ydw== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for boree.us in the us zone
	Query to vern.ns.cloudflare.com for boree.us/DNSKEY
	Received 100 bytes from 173.245.59.243
	;; Response received from [173.245.59.243] 100 octets ;; HEADER SECTION ;; id = 59987 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) boree.us. 1800 IN SOA ( heidi.ns.cloudflare.com. dns.cloudflare.com. 2370469875 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to heidi.ns.cloudflare.com for boree.us/A
	Received 69 bytes from 162.159.38.236
	;; Response received from [162.159.38.236] 69 octets ;; HEADER SECTION ;; id = 16955 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (2 records) boree.us. 300 IN A 104.21.19.150 boree.us. 300 IN A 172.67.186.198 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	heidi.ns.cloudflare.com is authoritative for boree.us
	Query to vern.ns.cloudflare.com for boree.us/SOA
	Received 100 bytes from 108.162.193.243
	;; Response received from [108.162.193.243] 100 octets ;; HEADER SECTION ;; id = 46324 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN SOA ;; ANSWER SECTION (1 record) boree.us. 1800 IN SOA ( heidi.ns.cloudflare.com. dns.cloudflare.com. 2370469875 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to heidi.ns.cloudflare.com for boree.us/A
	Received 69 bytes from 108.162.194.236
	;; Response received from [108.162.194.236] 69 octets ;; HEADER SECTION ;; id = 28969 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (2 records) boree.us. 300 IN A 172.67.186.198 boree.us. 300 IN A 104.21.19.150 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	boree.us A RR has value 172.67.186.198
	boree.us A RR has value 104.21.19.150
	No RRSIGs found

boree.us

	Query to vern.ns.cloudflare.com for boree.us/A
	Received 69 bytes from 108.162.193.243
	;; Response received from [108.162.193.243] 69 octets ;; HEADER SECTION ;; id = 40097 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (2 records) boree.us. 300 IN A 172.67.186.198 boree.us. 300 IN A 104.21.19.150 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	vern.ns.cloudflare.com is authoritative for boree.us
	Query to vern.ns.cloudflare.com for boree.us/A
	Received 69 bytes from 108.162.193.243
	;; Response received from [108.162.193.243] 69 octets ;; HEADER SECTION ;; id = 55757 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; boree.us. IN A ;; ANSWER SECTION (2 records) boree.us. 300 IN A 172.67.186.198 boree.us. 300 IN A 104.21.19.150 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	boree.us A RR has value 172.67.186.198
	boree.us A RR has value 104.21.19.150
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test boree.us at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: