DNSSEC Analyzer - diasporing.ch

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2019-03-25 05:23:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for diasporing.ch

DS=19036/SHA-256 is now in the chain-of-trust

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5 )`
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Error querying f.root-servers.net/2001:500:2f:0:0:0:0:f for ./DNSKEY: 'IPv6 transport disabled'
	Received 1139 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (1139 bytes) ;; HEADER SECTION ;; id = 54106 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749 . 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcH+axCdUOsTc9o+jmyVq5rsGTh1EcatSumPqEfsPBT+whyj0/UhD7cWeixV9Wqzj/cnqs8i WELqhdzGX41ZtaNQUfWNfOriASnWmX2D9m/EunplHu8nMSlDnDcT7+llE9tjk5HI1Sr7d9N16ZTI rbVALf65VB2ABbBG39dyAb7tz21PICJbSp2cd77UF7NFqEVkqohl/LkDw+7Apalmp0qAQT1Mgwi2 cVxZMKUiciA6EqS+KNajf0A6olO2oEhZnGGY6b1LTg34/YfHdiIIZQqAfqbieruCGHRiSscC2ZE7 iNreL/76f4JyIEUNkt6bQA29JsegxorLzQkpF7NKqZc= ) ; Key ID = 16749`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeVDC34GZILwsQJy97K2Fst4P3XYZrXLyrkausYzSqEjSUulgh+iLgHg0y7FIF890+sIjXsk 7KLJUmCOWfYWPorNKEOKLk5Zx/4M6D3IHZE3O3m/Eahrc28qQzmTLxiMZAW65MvR2UO3LxVtYOPB EBiDgAQD47x2JLsJYtavCzNL5WiUk59OgvHmDqmcC7VXYBhK8V8Tic089XJgExGeplKWUt9yyc31 ra1swJX51XsOaQz17+vyLVH8AZP26KvKFiZeoRbaq6vl+hc8HQnI2ug5rA2zoz3MsSQBvP1f/Hvq sWxLqwXXKyDD1QM639U+XzVB8CYigyscRP22QCnwKIU= ) ; Key ID = 25266`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DS=19036/SHA-256 is published, but a corresponding DNSKEY is not
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20190412000000 20190322000000 20326 . BI3MM0d7oqfNX6Tqgw5NwCZ2DfKtQXDHWE7VdIJK3HCmskguJQH8WDyRaR6leI5aprwtQyylYze2 FPtP8qWLSVSRMUPIEF4Sdw5y2KonV4zi5S22xMeu43Cgk+yFrCTkzi6IfCMlFf6dehwAFCYJZvYQ kT2twhZXVkPjuLB+VQlmvmpzfTFN3VcaDvvNJ6CSVCVbNKpRmPnUgscLEjWC0HydBlUSOhZSQEet IKnm/HN+biN9VptVyEwiKY/mzvuMcEPu/3+j/a3hgOlg2TVzI0NEadZy8zeXPHleDKgLA32NChTu WgIye+8HwftIwUOJQPczEqdgFSIZ5Ak0YdD3uw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=16749 is now in the chain-of-trust
	DNSKEY=25266 is now in the chain-of-trust
	Query to g.root-servers.net for diasporing.ch/A
	Received 861 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (861 bytes) ;; HEADER SECTION ;; id = 56203 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 86400 IN DS ( 11896 13 2 24ee6537b1c452d3aebf439dcf74024717054152da7f206d5fcba1a90f70711f ) ch. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . e4hFYi3nwwIMX3dqk7/sV5gbPB8l7d/bkihGi68hKtCtqqjX+oov+ZyYSDCaeCeQgbp0E8eSfZ5H EaIhiGSWr//G56DFLtzhtpVVhA++R/8IpZWhEy/bvLB+PfKWUz9M1XmPs36AGTTi4P57pqma9q4w hinQt7Bpv5hGJmJlSa5pYU9lq8eBj40xqNstpJFTy5g8v1DZueaOSIj1Qz2LbdjolXzLR3Zz+EPn Bg/I2KUxSNhiFoo3R4Pi6xxHFj/XAxcDHqhQovIOD5/RnVu1+MhEJ8zeG91bgbXAlJSho7PdtFXg mPVBmT18funWkzk+CJmLKkxDYRPOT6v08iNoIw== ) ;; ADDITIONAL SECTION (17 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 147.28.0.39 d.nic.ch. 172800 IN A 200.160.0.5 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 h.nic.ch. 172800 IN A 85.119.5.230 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2001:418:1::39 d.nic.ch. 172800 IN AAAA 2001:12ff:0:a20::5 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for ch/DNSKEY
	Error querying l.root-servers.net/2001:500:9f:0:0:0:0:42 for ch/DNSKEY: 'IPv6 transport disabled'
	Received 850 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (850 bytes) ;; HEADER SECTION ;; id = 52381 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 17 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 11896 13 2 24ee6537b1c452d3aebf439dcf74024717054152da7f206d5fcba1a90f70711f ) ch. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . e4hFYi3nwwIMX3dqk7/sV5gbPB8l7d/bkihGi68hKtCtqqjX+oov+ZyYSDCaeCeQgbp0E8eSfZ5H EaIhiGSWr//G56DFLtzhtpVVhA++R/8IpZWhEy/bvLB+PfKWUz9M1XmPs36AGTTi4P57pqma9q4w hinQt7Bpv5hGJmJlSa5pYU9lq8eBj40xqNstpJFTy5g8v1DZueaOSIj1Qz2LbdjolXzLR3Zz+EPn Bg/I2KUxSNhiFoo3R4Pi6xxHFj/XAxcDHqhQovIOD5/RnVu1+MhEJ8zeG91bgbXAlJSho7PdtFXg mPVBmT18funWkzk+CJmLKkxDYRPOT6v08iNoIw== ) ;; ADDITIONAL SECTION (17 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN A 147.28.0.39 c.nic.ch. 172800 IN AAAA 2001:418:1::39 d.nic.ch. 172800 IN A 200.160.0.5 d.nic.ch. 172800 IN AAAA 2001:12ff:0:a20::5 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN A 194.0.1.40 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN A 85.119.5.230 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to a.root-servers.net for ch/DS
	Error querying a.root-servers.net/2001:503:ba3e:0:0:0:2:30 for ch/DS: 'IPv6 transport disabled'
	Received 366 bytes from 198.41.0.4
	;; Answer received from 198.41.0.4 (366 bytes) ;; HEADER SECTION ;; id = 1989 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 11896 13 2 24ee6537b1c452d3aebf439dcf74024717054152da7f206d5fcba1a90f70711f ) ch. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . e4hFYi3nwwIMX3dqk7/sV5gbPB8l7d/bkihGi68hKtCtqqjX+oov+ZyYSDCaeCeQgbp0E8eSfZ5H EaIhiGSWr//G56DFLtzhtpVVhA++R/8IpZWhEy/bvLB+PfKWUz9M1XmPs36AGTTi4P57pqma9q4w hinQt7Bpv5hGJmJlSa5pYU9lq8eBj40xqNstpJFTy5g8v1DZueaOSIj1Qz2LbdjolXzLR3Zz+EPn Bg/I2KUxSNhiFoo3R4Pi6xxHFj/XAxcDHqhQovIOD5/RnVu1+MhEJ8zeG91bgbXAlJSho7PdtFXg mPVBmT18funWkzk+CJmLKkxDYRPOT6v08iNoIw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for ch in the . zone
	DS=11896/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20190407050000 20190325040000 16749 . e4hFYi3nwwIMX3dqk7/sV5gbPB8l7d/bkihGi68hKtCtqqjX+oov+ZyYSDCaeCeQgbp0E8eSfZ5H EaIhiGSWr//G56DFLtzhtpVVhA++R/8IpZWhEy/bvLB+PfKWUz9M1XmPs36AGTTi4P57pqma9q4w hinQt7Bpv5hGJmJlSa5pYU9lq8eBj40xqNstpJFTy5g8v1DZueaOSIj1Qz2LbdjolXzLR3Zz+EPn Bg/I2KUxSNhiFoo3R4Pi6xxHFj/XAxcDHqhQovIOD5/RnVu1+MhEJ8zeG91bgbXAlJSho7PdtFXg mPVBmT18funWkzk+CJmLKkxDYRPOT6v08iNoIw== )`
	RRSIG=16749 and DNSKEY=16749 verifies the DS RRset
	DS=11896/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 11896 13 2 24ee6537b1c452d3aebf439dcf74024717054152da7f206d5fcba1a90f70711f )`
	Query to b.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.43
	;; Answer received from 130.59.31.43 (369 bytes) ;; HEADER SECTION ;; id = 44223 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 QLj+CbJjrNiqnCGDcVCcJw5Dk3SQa3L6y27BvJfH5HCC2fGDTc7z7yfABnU6sjwbPpsyz2uETqBL GM1kROxX9Q== ) ; Key ID = 26161 ch. 86400 IN DNSKEY ( 256 3 13 X3QcqLxVYVbURFb/DtcOHl7qC5u8IqL1cLoVr/6PL+RNp4JrcKI4lAc/noKRHCD13GVkrBuaH1Q8 ume5AvaxWg== ) ; Key ID = 2668 ch. 86400 IN DNSKEY ( 257 3 13 Cm86XmSSO2FbG/3i9I++7HrRGNa1hNBZ1P7Y38Rg8uUz4YsKWSahAifoyaNMFWUu32VFj5xJQOEj qkrwD3Decw== ) ; Key ID = 11896 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20190506100909 20190321090909 11896 ch. dhwOvx3mzORnr6n8hYv7/8CkXdDnBCwS3uiWy1Ckf1Jsrlrk5Nn+s3vwCi9kFqlnmMErkviv+Lzn pM1+0hTWTA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 QLj+CbJjrNiqnCGDcVCcJw5Dk3SQa3L6y27BvJfH5HCC2fGDTc7z7yfABnU6sjwbPpsyz2uETqBL GM1kROxX9Q== ) ; Key ID = 26161`
	`ch. 86400 IN DNSKEY ( 256 3 13 X3QcqLxVYVbURFb/DtcOHl7qC5u8IqL1cLoVr/6PL+RNp4JrcKI4lAc/noKRHCD13GVkrBuaH1Q8 ume5AvaxWg== ) ; Key ID = 2668`
	`ch. 86400 IN DNSKEY ( 257 3 13 Cm86XmSSO2FbG/3i9I++7HrRGNa1hNBZ1P7Y38Rg8uUz4YsKWSahAifoyaNMFWUu32VFj5xJQOEj qkrwD3Decw== ) ; Key ID = 11896`
	DNSKEY=11896/SEP is now in the chain-of-trust
	DS=11896/SHA-256 verifies DNSKEY=11896/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20190506100909 20190321090909 11896 ch. dhwOvx3mzORnr6n8hYv7/8CkXdDnBCwS3uiWy1Ckf1Jsrlrk5Nn+s3vwCi9kFqlnmMErkviv+Lzn pM1+0hTWTA== )`
	RRSIG=11896 and DNSKEY=11896/SEP verifies the DNSKEY RRset
	DNSKEY=26161 is now in the chain-of-trust
	DNSKEY=2668 is now in the chain-of-trust
	Query to e.nic.ch for diasporing.ch/A
	Received 280 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (280 bytes) ;; HEADER SECTION ;; id = 19800 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) diasporing.ch. 3600 IN NS nsany2.infomaniak.com. diasporing.ch. 3600 IN NS nsany1.infomaniak.com. diasporing.ch. 3600 IN DS ( 25180 13 2 7442327eede67dea9ff448ffe2115ed1ae0fbdba46f7b8d695ec33aef446a1f9 ) diasporing.ch. 3600 IN DS ( 25180 13 1 16547d9fe68b2c135d7d7925f63e842536dff207 ) diasporing.ch. 3600 IN RRSIG ( DS 13 2 3600 20190415064545 20190316060142 26161 ch. avtYSVK3eX5unPyuAN4eSwISTrObClTgD6IcbXE4TZ1zQz2lUKy+dnYN5rwoN7/5e4BHFFYphXD0 fnXZFl9tXg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.nic.ch for diasporing.ch/DNSKEY
	Received 280 bytes from 85.119.5.230
	;; Answer received from 85.119.5.230 (280 bytes) ;; HEADER SECTION ;; id = 56800 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) diasporing.ch. 3600 IN NS nsany1.infomaniak.com. diasporing.ch. 3600 IN NS nsany2.infomaniak.com. diasporing.ch. 3600 IN DS ( 25180 13 1 16547d9fe68b2c135d7d7925f63e842536dff207 ) diasporing.ch. 3600 IN DS ( 25180 13 2 7442327eede67dea9ff448ffe2115ed1ae0fbdba46f7b8d695ec33aef446a1f9 ) diasporing.ch. 3600 IN RRSIG ( DS 13 2 3600 20190415064545 20190316060142 26161 ch. avtYSVK3eX5unPyuAN4eSwISTrObClTgD6IcbXE4TZ1zQz2lUKy+dnYN5rwoN7/5e4BHFFYphXD0 fnXZFl9tXg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone diasporing.ch

diasporing.ch

	Checking DS between ch and diasporing.ch
	Query to c.nic.ch for diasporing.ch/DS
	Received 224 bytes from 147.28.0.39
	;; Answer received from 147.28.0.39 (224 bytes) ;; HEADER SECTION ;; id = 37541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN DS ;; ANSWER SECTION (3 records) diasporing.ch. 3600 IN DS ( 25180 13 2 7442327eede67dea9ff448ffe2115ed1ae0fbdba46f7b8d695ec33aef446a1f9 ) diasporing.ch. 3600 IN DS ( 25180 13 1 16547d9fe68b2c135d7d7925f63e842536dff207 ) diasporing.ch. 3600 IN RRSIG ( DS 13 2 3600 20190415064545 20190316060142 26161 ch. avtYSVK3eX5unPyuAN4eSwISTrObClTgD6IcbXE4TZ1zQz2lUKy+dnYN5rwoN7/5e4BHFFYphXD0 fnXZFl9tXg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for diasporing.ch in the ch zone
	DS=25180/SHA-256 has algorithm ECDSAP256SHA256
	DS=25180/SHA-1 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`diasporing.ch. 3600 IN RRSIG ( DS 13 2 3600 20190415064545 20190316060142 26161 ch. avtYSVK3eX5unPyuAN4eSwISTrObClTgD6IcbXE4TZ1zQz2lUKy+dnYN5rwoN7/5e4BHFFYphXD0 fnXZFl9tXg== )`
	RRSIG=26161 and DNSKEY=26161 verifies the DS RRset
	DS=25180/SHA-256 is now in the chain-of-trust
	`diasporing.ch. 3600 IN DS ( 25180 13 2 7442327eede67dea9ff448ffe2115ed1ae0fbdba46f7b8d695ec33aef446a1f9 )`
	`diasporing.ch. 3600 IN DS ( 25180 13 1 16547d9fe68b2c135d7d7925f63e842536dff207 )`
	Query to nsany1.infomaniak.com for diasporing.ch/DNSKEY
	Received 420 bytes from 192.174.68.100
	;; Answer received from 192.174.68.100 (420 bytes) ;; HEADER SECTION ;; id = 44394 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN DNSKEY ;; ANSWER SECTION (4 records) diasporing.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190413114158 20190323111202 25180 diasporing.ch. y10MCFwbf+oXcQQYmEuav5tOV2L1tQDO2f465FxAwOZJq2tJpsWd6cLeRcZy7KBy30hVWgrJjoaL 1lhsh03kCg== ) diasporing.ch. 3600 IN DNSKEY ( 257 3 13 i3b4p7IDqFyKWXHPpbifBd29fq6TmzZKLPJ+DkC/wzePV3beJCslEjc1LxEiCd9cVN7UqCtCvIcx WaB1x98Hfw== ) ; Key ID = 25180 diasporing.ch. 3600 IN DNSKEY ( 256 3 13 NM+SvyHtM0h5DXL9K1ulrZJRbXGJ/CpXl3+VGE1RhmYzsKWJR260LuYmLdqP5YximY13U70K6zfx 6zJ4hNDztA== ) ; Key ID = 60792 diasporing.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190413114158 20190323111202 60792 diasporing.ch. IHoNKUfOXz+EJWKx+g8ig0XAlKD58LjRaUyQ1jaHPjACFa8JCxVopf8Q8I4jCCu/SSZfid63Bp+B EfkUSYFYMQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Found 2 DNSKEY records for diasporing.ch
	`diasporing.ch. 3600 IN DNSKEY ( 257 3 13 i3b4p7IDqFyKWXHPpbifBd29fq6TmzZKLPJ+DkC/wzePV3beJCslEjc1LxEiCd9cVN7UqCtCvIcx WaB1x98Hfw== ) ; Key ID = 25180`
	`diasporing.ch. 3600 IN DNSKEY ( 256 3 13 NM+SvyHtM0h5DXL9K1ulrZJRbXGJ/CpXl3+VGE1RhmYzsKWJR260LuYmLdqP5YximY13U70K6zfx 6zJ4hNDztA== ) ; Key ID = 60792`
	DNSKEY=25180/SEP is now in the chain-of-trust
	DS=25180/SHA-256 verifies DNSKEY=25180/SEP
	DS=25180/SHA-1 verifies DNSKEY=25180/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`diasporing.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190413114158 20190323111202 25180 diasporing.ch. y10MCFwbf+oXcQQYmEuav5tOV2L1tQDO2f465FxAwOZJq2tJpsWd6cLeRcZy7KBy30hVWgrJjoaL 1lhsh03kCg== )`
	`diasporing.ch. 3600 IN RRSIG ( DNSKEY 13 2 3600 20190413114158 20190323111202 60792 diasporing.ch. IHoNKUfOXz+EJWKx+g8ig0XAlKD58LjRaUyQ1jaHPjACFa8JCxVopf8Q8I4jCCu/SSZfid63Bp+B EfkUSYFYMQ== )`
	RRSIG=25180 and DNSKEY=25180/SEP verifies the DNSKEY RRset
	RRSIG=60792 and DNSKEY=60792 verifies the DNSKEY RRset
	DNSKEY=60792 is now in the chain-of-trust
	Query to nsany1.infomaniak.com for diasporing.ch/A
	Received 167 bytes from 192.174.68.100
	;; Answer received from 192.174.68.100 (167 bytes) ;; HEADER SECTION ;; id = 33040 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN A ;; ANSWER SECTION (2 records) diasporing.ch. 3600 IN RRSIG ( A 13 2 3600 20190412140614 20190322132434 60792 diasporing.ch. iI2xg9LLmJ41b+dFhP4AxeQTYtlXK6b60vcEMV5jRYZVYh+uuH/UhGg9xqdcO67crUTfv+CYKUHG TfwuioL/ug== ) diasporing.ch. 3600 IN A 83.166.154.244 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	diasporing.ch is authoritative for diasporing.ch
	Found RRSIG signed by diasporing.ch zone
	Query to nsany1.infomaniak.com for diasporing.ch/SOA
	Received 230 bytes from 192.174.68.100
	;; Answer received from 192.174.68.100 (230 bytes) ;; HEADER SECTION ;; id = 52080 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN SOA ;; ANSWER SECTION (2 records) diasporing.ch. 3600 IN RRSIG ( SOA 13 2 3600 20190413141519 20190323131519 60792 diasporing.ch. NjOwz6p+ph0IZPqpXEIdyMa1GwvxDvJCirbFlMZt6S1g4Ij/Zo36kRzokp0IdzcXEYgLWHMWBGNo YRl8/GcJHQ== ) diasporing.ch. 3600 IN SOA ( nsany1.infomaniak.com. hostmaster.infomaniak.ch. 2019021105 ;serial 10800 ;refresh 3600 ;retry 605800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nsany2.infomaniak.com for diasporing.ch/SOA
	Error querying nsany2.infomaniak.com/2001:67c:10b8:0:0:0:0:100 for diasporing.ch/SOA: 'IPv6 transport disabled'
	Received 230 bytes from 176.97.158.100
	;; Answer received from 176.97.158.100 (230 bytes) ;; HEADER SECTION ;; id = 62148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN SOA ;; ANSWER SECTION (2 records) diasporing.ch. 3600 IN RRSIG ( SOA 13 2 3600 20190413141519 20190323131519 60792 diasporing.ch. NjOwz6p+ph0IZPqpXEIdyMa1GwvxDvJCirbFlMZt6S1g4Ij/Zo36kRzokp0IdzcXEYgLWHMWBGNo YRl8/GcJHQ== ) diasporing.ch. 3600 IN SOA ( nsany1.infomaniak.com. hostmaster.infomaniak.ch. 2019021105 ;serial 10800 ;refresh 3600 ;retry 605800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	Query to nsany1.infomaniak.com for diasporing.ch/A
	Received 167 bytes from 192.174.68.100
	;; Answer received from 192.174.68.100 (167 bytes) ;; HEADER SECTION ;; id = 947 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option: ;; QUESTION SECTION (1 record) ;; diasporing.ch. IN A ;; ANSWER SECTION (2 records) diasporing.ch. 3600 IN RRSIG ( A 13 2 3600 20190412140614 20190322132434 60792 diasporing.ch. iI2xg9LLmJ41b+dFhP4AxeQTYtlXK6b60vcEMV5jRYZVYh+uuH/UhGg9xqdcO67crUTfv+CYKUHG TfwuioL/ug== ) diasporing.ch. 3600 IN A 83.166.154.244 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1680 ;; option:
	diasporing.ch A RR has value 83.166.154.244
	Found 1 RRSIGs over A RRset
	`diasporing.ch. 3600 IN RRSIG ( A 13 2 3600 20190412140614 20190322132434 60792 diasporing.ch. iI2xg9LLmJ41b+dFhP4AxeQTYtlXK6b60vcEMV5jRYZVYh+uuH/UhGg9xqdcO67crUTfv+CYKUHG TfwuioL/ug== )`
	RRSIG=60792 and DNSKEY=60792 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test diasporing.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: