DNSSEC Debugger - conti-mar.at

Domain Name:

Time: 2025-03-14 07:18:56 UTC

Analyzing DNSSEC problems for conti-mar.at

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 42772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250402000000 20250312000000 20326 . joWEhr7Z7AY96Kpp+ioymNlyKtdPDPkzEvGO1tLYsoR0huN6i7rOVBRYQd0HHWdA4RaXiXf7ME5U 1qEiuH3xFG3H7BRBwddweL4ubSNVeVo5sk+BSv74uTSpnPcCgUgCxppaY4c9Q6lXOASVGNiyLPG4 bMUSbBONXBKRT5vnJss1z30BF47JaFM/OdT+0Zu8oVr8f8KX1hjcm8pZfpoIAnHg2BLsbVCS5iBf mtahqttuyEnJdw0R2ExBXpYNrK6ZR5sSiF5S4lMf66ix4bBl2eecQFWNAsD4H3yksS95JEgXkq4J JduKbn7t7B1aFennfSjC9lT3WZ7O6xuPXb2QLw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26470 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to f.root-servers.net for conti-mar.at/A
	Received 861 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 861 octets ;; HEADER SECTION ;; id = 26372 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) at. 172800 IN NS d.ns.at. at. 172800 IN NS j.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS ns1.univie.ac.at. at. 172800 IN NS ns2.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20250327050000 20250314040000 26470 . aMtvgxEMeGC68unq/cbnKGpuHVimazbUOHVSlu6ukntQTmzcWU8JthxZwLtkwiEAASwt1qmXE2Ct wZv8uwm9a/S+fO5K9uNg80hbvUKstJ/KrttuF+tGhrv2Y4EHRnLYwzSFFMACzQgLgJOR176jI5K0 6be+oaBIsENIqqmSyoJIZltp1mZ8sjzyi3zvoScZXZQBRmeTn9bKf7EQuM47wyPsf3xrtjel0Mnv 1b8N/qLcrOwONIOSmnIPvsDe6nIztcWXXr+MPy64oZJ0NVugcoY1IRYmWNKkDnh9UOAfJu0y27zl SU0Y923EjlxLA4Hd5sBe+qPGAgqyFI/TvHTbWg== ) ;; ADDITIONAL SECTION (15 records) d.ns.at. 172800 IN A 81.91.161.98 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d j.ns.at. 172800 IN A 194.146.106.50 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 n.ns.at. 172800 IN A 81.91.173.130 n.ns.at. 172800 IN AAAA 2a02:568:281::130 r.ns.at. 172800 IN A 194.0.25.10 r.ns.at. 172800 IN AAAA 2001:678:20::10 u.ns.at. 172800 IN A 185.102.12.2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for at/DNSKEY
	Received 855 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 855 octets ;; HEADER SECTION ;; id = 17000 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 10 arcount = 15 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) at. 172800 IN NS j.ns.at. at. 172800 IN NS u.ns.at. at. 172800 IN NS n.ns.at. at. 172800 IN NS d.ns.at. at. 172800 IN NS r.ns.at. at. 172800 IN NS ns2.univie.ac.at. at. 172800 IN NS ns1.univie.ac.at. at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20250327050000 20250314040000 26470 . aMtvgxEMeGC68unq/cbnKGpuHVimazbUOHVSlu6ukntQTmzcWU8JthxZwLtkwiEAASwt1qmXE2Ct wZv8uwm9a/S+fO5K9uNg80hbvUKstJ/KrttuF+tGhrv2Y4EHRnLYwzSFFMACzQgLgJOR176jI5K0 6be+oaBIsENIqqmSyoJIZltp1mZ8sjzyi3zvoScZXZQBRmeTn9bKf7EQuM47wyPsf3xrtjel0Mnv 1b8N/qLcrOwONIOSmnIPvsDe6nIztcWXXr+MPy64oZJ0NVugcoY1IRYmWNKkDnh9UOAfJu0y27zl SU0Y923EjlxLA4Hd5sBe+qPGAgqyFI/TvHTbWg== ) ;; ADDITIONAL SECTION (15 records) ns2.univie.ac.at. 172800 IN A 192.92.125.2 ns1.univie.ac.at. 172800 IN A 78.104.144.2 u.ns.at. 172800 IN A 185.102.12.2 r.ns.at. 172800 IN A 194.0.25.10 n.ns.at. 172800 IN A 81.91.173.130 j.ns.at. 172800 IN A 194.146.106.50 d.ns.at. 172800 IN A 81.91.161.98 ns2.univie.ac.at. 172800 IN AAAA 2001:678:1c::2 ns1.univie.ac.at. 172800 IN AAAA 2001:628:2030:4301::2 u.ns.at. 172800 IN AAAA 2a02:850:ffff::2 r.ns.at. 172800 IN AAAA 2001:678:20::10 n.ns.at. 172800 IN AAAA 2a02:568:281::130 j.ns.at. 172800 IN AAAA 2001:67c:1010:12::53 d.ns.at. 172800 IN AAAA 2a02:568:20:1::d ;; { "EDNS-VERSION": 0 }
	Found child zone at

	Checking DS between . and at
	Query to a.root-servers.net for at/DS
	Received 414 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 414 octets ;; HEADER SECTION ;; id = 38483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DS ;; ANSWER SECTION (3 records) at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e ) at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f ) at. 86400 IN RRSIG ( DS 8 1 86400 20250327050000 20250314040000 26470 . aMtvgxEMeGC68unq/cbnKGpuHVimazbUOHVSlu6ukntQTmzcWU8JthxZwLtkwiEAASwt1qmXE2Ct wZv8uwm9a/S+fO5K9uNg80hbvUKstJ/KrttuF+tGhrv2Y4EHRnLYwzSFFMACzQgLgJOR176jI5K0 6be+oaBIsENIqqmSyoJIZltp1mZ8sjzyi3zvoScZXZQBRmeTn9bKf7EQuM47wyPsf3xrtjel0Mnv 1b8N/qLcrOwONIOSmnIPvsDe6nIztcWXXr+MPy64oZJ0NVugcoY1IRYmWNKkDnh9UOAfJu0y27zl SU0Y923EjlxLA4Hd5sBe+qPGAgqyFI/TvHTbWg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DS records for at in the . zone
	DS=1253/SHA-256 has algorithm ECDSAP256SHA256
	DS=18942/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`at. 86400 IN RRSIG ( DS 8 1 86400 20250327050000 20250314040000 26470 . aMtvgxEMeGC68unq/cbnKGpuHVimazbUOHVSlu6ukntQTmzcWU8JthxZwLtkwiEAASwt1qmXE2Ct wZv8uwm9a/S+fO5K9uNg80hbvUKstJ/KrttuF+tGhrv2Y4EHRnLYwzSFFMACzQgLgJOR176jI5K0 6be+oaBIsENIqqmSyoJIZltp1mZ8sjzyi3zvoScZXZQBRmeTn9bKf7EQuM47wyPsf3xrtjel0Mnv 1b8N/qLcrOwONIOSmnIPvsDe6nIztcWXXr+MPy64oZJ0NVugcoY1IRYmWNKkDnh9UOAfJu0y27zl SU0Y923EjlxLA4Hd5sBe+qPGAgqyFI/TvHTbWg== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=1253/SHA-256 is now in the chain-of-trust
	DS=18942/SHA-256 is now in the chain-of-trust
	`at. 86400 IN DS ( 1253 13 2 ba17c1bacb3fb49f7760ad1f7e71e17ab39ee0df3e9d3bf23fd3d70d6cf1719e )`
	`at. 86400 IN DS ( 18942 13 2 ae5f0bd73c8f48f3d55cdc4070f9407873176c364de4bc92bf96887685e6e55f )`
	Query to d.ns.at for at/DNSKEY
	Received 449 bytes from 81.91.161.98
	;; Response received from [81.91.161.98] 449 octets ;; HEADER SECTION ;; id = 3318 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; at. IN DNSKEY ;; ANSWER SECTION (5 records) at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; keytag 8460 at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; keytag 18942 at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; keytag 6345 at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; keytag 1253 at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250325162315 20250312100155 18942 at. 5zFylNsp5x/6dwmF8rjdaoM/FMCbmYSByCL7qxES6G3bPvQA9z4jdo6MkBKUbqdkb8qOxwLT8Kmr sQT0tD2qJw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for at
	`at. 3600 IN DNSKEY ( 256 3 13 Yye3yFQfyzze/CB9a+89JY/Zyf7L9gEXx9dI72oHyNU1mrMXdKU69LXiNAl9xnW+7BEFjO2NaxoI +h3F4tsF/A== ) ; keytag 8460`
	`at. 3600 IN DNSKEY ( 257 3 13 F4hxGBIycDfw7ZIeJ1bkOjeGibnoNdlJ9siahr/GPYh9sIftAPCNOSiypWUnNeKu9zHpFY+HtzzP gbZmLO1VRQ== ) ; keytag 18942`
	`at. 3600 IN DNSKEY ( 256 3 13 afqJ2CAlm26vL9vdgWZlvBp1BhCXAvXGPDf96ykT8cf7i7uir4QQA5mLi9wikE4WnvD6Y8S9mU4f 3SUgmaQOEA== ) ; keytag 6345`
	`at. 3600 IN DNSKEY ( 257 3 13 2JRF0JhWxU1FWmhF7eY9oPu4XkUdqPDVNi3tm6uXJ9DxltWjAS2JMBdAmm6ehsMdlsvsMV+cz+7D ZGMzNhbX1g== ) ; keytag 1253`
	DNSKEY=18942/SEP is now in the chain-of-trust
	DS=18942/SHA-256 verifies DNSKEY=18942/SEP
	DNSKEY=1253/SEP is now in the chain-of-trust
	DS=1253/SHA-256 verifies DNSKEY=1253/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`at. 3600 IN RRSIG ( DNSKEY 13 1 3600 20250325162315 20250312100155 18942 at. 5zFylNsp5x/6dwmF8rjdaoM/FMCbmYSByCL7qxES6G3bPvQA9z4jdo6MkBKUbqdkb8qOxwLT8Kmr sQT0tD2qJw== )`
	RRSIG=18942 and DNSKEY=18942/SEP verifies the DNSKEY RRset
	DNSKEY=8460 is now in the chain-of-trust
	DNSKEY=6345 is now in the chain-of-trust
	Query to ns1.univie.ac.at for conti-mar.at/A
	Received 239 bytes from 78.104.144.2
	;; Response received from [78.104.144.2] 239 octets ;; HEADER SECTION ;; id = 33892 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) conti-mar.at. 10800 IN NS dns1.skyweb.hosting. conti-mar.at. 10800 IN NS dns2.skyweb.hosting. conti-mar.at. 10800 IN DS ( 6646 13 2 957e7d1e4a5d59f18bfb474c9df7fef32d6cb0a5d8e1a8b49a0b2915dc1f4f4a ) conti-mar.at. 10800 IN RRSIG ( DS 13 2 10800 20250324081700 20250310180153 6345 at. 9CTrNKpkG3mrDZqnF9iMbVVJo1OcO/GNHGo2tXDkuyzDPfoKfx7D3o30RLj9eOQs2JUB3fdbLWKL /we74EYb5w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to j.ns.at for conti-mar.at/DNSKEY
	Received 239 bytes from 194.146.106.50
	;; Response received from [194.146.106.50] 239 octets ;; HEADER SECTION ;; id = 38894 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) conti-mar.at. 10800 IN NS dns1.skyweb.hosting. conti-mar.at. 10800 IN NS dns2.skyweb.hosting. conti-mar.at. 10800 IN DS ( 6646 13 2 957e7d1e4a5d59f18bfb474c9df7fef32d6cb0a5d8e1a8b49a0b2915dc1f4f4a ) conti-mar.at. 10800 IN RRSIG ( DS 13 2 10800 20250324081700 20250310180153 6345 at. 9CTrNKpkG3mrDZqnF9iMbVVJo1OcO/GNHGo2tXDkuyzDPfoKfx7D3o30RLj9eOQs2JUB3fdbLWKL /we74EYb5w== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone conti-mar.at

conti-mar.at

	Checking DS between at and conti-mar.at
	Query to r.ns.at for conti-mar.at/DS
	Received 187 bytes from 194.0.25.10
	;; Response received from [194.0.25.10] 187 octets ;; HEADER SECTION ;; id = 28281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN DS ;; ANSWER SECTION (2 records) conti-mar.at. 10800 IN DS ( 6646 13 2 957e7d1e4a5d59f18bfb474c9df7fef32d6cb0a5d8e1a8b49a0b2915dc1f4f4a ) conti-mar.at. 10800 IN RRSIG ( DS 13 2 10800 20250324081700 20250310180153 6345 at. 9CTrNKpkG3mrDZqnF9iMbVVJo1OcO/GNHGo2tXDkuyzDPfoKfx7D3o30RLj9eOQs2JUB3fdbLWKL /we74EYb5w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for conti-mar.at in the at zone
	DS=6646/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`conti-mar.at. 10800 IN RRSIG ( DS 13 2 10800 20250324081700 20250310180153 6345 at. 9CTrNKpkG3mrDZqnF9iMbVVJo1OcO/GNHGo2tXDkuyzDPfoKfx7D3o30RLj9eOQs2JUB3fdbLWKL /we74EYb5w== )`
	RRSIG=6345 and DNSKEY=6345 verifies the DS RRset
	DS=6646/SHA-256 is now in the chain-of-trust
	`conti-mar.at. 10800 IN DS ( 6646 13 2 957e7d1e4a5d59f18bfb474c9df7fef32d6cb0a5d8e1a8b49a0b2915dc1f4f4a )`
	Query to dns1.skyweb.hosting for conti-mar.at/DNSKEY
	Received 229 bytes from 188.245.252.175
	;; Response received from [188.245.252.175] 229 octets ;; HEADER SECTION ;; id = 51912 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN DNSKEY ;; ANSWER SECTION (2 records) conti-mar.at. 14400 IN RRSIG ( DNSKEY 13 2 14400 20250327000000 20250306000000 6646 conti-mar.at. cwx5kULRaQyoNfnJBc487TQ59E0TioOot39SMhTCrNfMHXVtTso/m7KhOr2IWF/FefCHna9k5AES pJMtVBww7A== ) conti-mar.at. 14400 IN DNSKEY ( 257 3 13 SlHp9XTaF/4iZ36f4CnHMJMebynP35hwSAuKJvKgYzTzfSoX6ayvgFqWg4KUCOo0tEpUdPxUlqAJ w/1ea4lYTg== ) ; keytag 6646 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DNSKEY records for conti-mar.at
	`conti-mar.at. 14400 IN DNSKEY ( 257 3 13 SlHp9XTaF/4iZ36f4CnHMJMebynP35hwSAuKJvKgYzTzfSoX6ayvgFqWg4KUCOo0tEpUdPxUlqAJ w/1ea4lYTg== ) ; keytag 6646`
	DNSKEY=6646/SEP is now in the chain-of-trust
	DS=6646/SHA-256 verifies DNSKEY=6646/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`conti-mar.at. 14400 IN RRSIG ( DNSKEY 13 2 14400 20250327000000 20250306000000 6646 conti-mar.at. cwx5kULRaQyoNfnJBc487TQ59E0TioOot39SMhTCrNfMHXVtTso/m7KhOr2IWF/FefCHna9k5AES pJMtVBww7A== )`
	RRSIG=6646 and DNSKEY=6646/SEP verifies the DNSKEY RRset
	Query to dns2.skyweb.hosting for conti-mar.at/A
	Received 165 bytes from 37.27.249.69
	;; Response received from [37.27.249.69] 165 octets ;; HEADER SECTION ;; id = 60401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (2 records) conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== ) conti-mar.at. 3600 IN A 85.13.147.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns2.skyweb.hosting is authoritative for conti-mar.at
	Found RRSIG signed by conti-mar.at zone
	Query to dns1.skyweb.hosting for conti-mar.at/SOA
	Received 209 bytes from 188.245.252.175
	;; Response received from [188.245.252.175] 209 octets ;; HEADER SECTION ;; id = 7500 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN SOA ;; ANSWER SECTION (2 records) conti-mar.at. 3600 IN RRSIG ( SOA 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. 6s56Z728Qv4c1kuTB6oKGTob2Wlcc7YPXUdxyYWuKeET6nJjy01PNVeLXtsHfYRG7xUtrRsLSUMX Rd9XB42ZMg== ) conti-mar.at. 3600 IN SOA ( dns1.skyweb.hosting. root.dns1.skyweb.hosting. 1732156432 ;serial 14400 ;refresh 1800 ;retry 604800 ;expire 14400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns2.skyweb.hosting for conti-mar.at/A
	Received 165 bytes from 37.27.249.69
	;; Response received from [37.27.249.69] 165 octets ;; HEADER SECTION ;; id = 49386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (2 records) conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== ) conti-mar.at. 3600 IN A 85.13.147.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	conti-mar.at A RR has value 85.13.147.159
	Found 1 RRSIGs over A RRset
	`conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== )`
	RRSIG=6646 and DNSKEY=6646/SEP verifies the A RRset

conti-mar.at

	Query to dns1.skyweb.hosting for conti-mar.at/A
	Received 165 bytes from 188.245.252.175
	;; Response received from [188.245.252.175] 165 octets ;; HEADER SECTION ;; id = 49550 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (2 records) conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== ) conti-mar.at. 3600 IN A 85.13.147.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.skyweb.hosting is authoritative for conti-mar.at
	Found RRSIG signed by conti-mar.at zone
	Query to dns1.skyweb.hosting for conti-mar.at/A
	Received 165 bytes from 188.245.252.175
	;; Response received from [188.245.252.175] 165 octets ;; HEADER SECTION ;; id = 33370 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; conti-mar.at. IN A ;; ANSWER SECTION (2 records) conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== ) conti-mar.at. 3600 IN A 85.13.147.159 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	conti-mar.at A RR has value 85.13.147.159
	Found 1 RRSIGs over A RRset
	`conti-mar.at. 3600 IN RRSIG ( A 13 2 3600 20250327000000 20250306000000 6646 conti-mar.at. rxI+L893JKng/WKWbJKLkfaI/VEGPemjPthKzuv9YH0noHq8EWerdax6NunncNaQCqu7+u/k+UFr b3iHeHk56Q== )`
	RRSIG=6646 and DNSKEY=6646/SEP verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test conti-mar.at at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: