DNSSEC Analyzer - dnssec.pw

Domain Name:

Time: 2022-01-24 03:59:05 UTC, NTP stratum 16

Analyzing DNSSEC problems for dnssec.pw

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 16573 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZym4HCWiTAAl2Mv1izgTyn9sKwgi5eBxpG29bVlefq/r+TGCtmUElvFyBWHRjvf9mBglIlT BRse22dvzNOI+cYrkjD6LOHuxMoc/d4WtXWKdviNmrtWF2GpjmDOI98gLd4BZ0U/lY847mJP9Lyp FABZcEn3zM3vce4Ee1A3upSlFQ2TFyJSD9HvMnP4XneFexBxV96RpLcy2O+u2W6ChIiDCjlrowPC cU3zXfXxyWy/VKM6TOa8gNf+aKaVkcv/eIh5er8rrsqAi9KT8O5hmhzYLkUOQEXVSRORV0RMt9l3 JSwWxT1MebEDvtfBag3uo+mZwWSFlpc9kuzyWBd72Ec= ) ; Key ID = 9799`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220211000000 20220121000000 20326 . om3IP7/pygJB+wAMHkUGb9wieFct9IztEoinwqlY+w3h34cFTih1NRAjBpdu7y3xMpp4LMRfyUYE 3MGDFi58upW6qY0sM8TBFXzPhBZitqLJM2sB07UHe0rstrbSvdq+9IAbXFkK6mRhtREggvleuRYH X/SnVW9QPHv8jxrZJDkNRYmW9NiwJoRwvI53v2BklBBe9P8Q61edXydlX9KsHJYqw4DF8FdpfE3o ajN0vnIwMWFpTJYXbOnPjAwf/SntpUxYawFYDssksaLl56kP/440O2F/tdIjdtwnBS2lMGrLASSe IT4VJmQI8Gm2RCHzN49Nywct3SbcpUuWJoZCEQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=9799 is now in the chain-of-trust
	Query to l.root-servers.net for dnssec.pw/A
	Received 661 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (661 octets) ;; HEADER SECTION ;; id = 11340 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns2.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 172800 IN NS ns6.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20220205170000 20220123160000 9799 . X2RQ58wj+ORso8ekIXrjBlJeECQXxGUZ2+i2CMnEP7HZfBRfNTmmlp2omrPo5zKIa+YIeRiiCujJ qTmBSO4erB8ZubJxXrDZT8yIhlo16l9os51RF3o+zn0udlNv0leitmhe27ne8sOCeVf648crSTyZ NRcEf461E2dr9x+xV1ftu6S4LwwU5T+NpZiyN6bFYIuJj+lBwOpGWjf+WMe3xf4v0qpNGMoIwxT8 4NskwcNHC2zex87HO7uih8/bi3Zn3yhvOCbCJ2ZGRnqRYe+VmX8hz2zAT+P7AGX7K0dHkYVabEvv o+fNlms5HfnVzrAPvgEQUMwaNb5edzGVVQCifQ== ) ;; ADDITIONAL SECTION (9 records) ns1.nic.pw. 172800 IN A 194.169.218.12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns6.nic.pw. 172800 IN A 212.18.249.12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for pw/DNSKEY
	Received 654 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (654 octets) ;; HEADER SECTION ;; id = 25916 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) pw. 172800 IN NS ns1.nic.pw. pw. 172800 IN NS ns2.nic.pw. pw. 172800 IN NS ns5.nic.pw. pw. 172800 IN NS ns6.nic.pw. pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20220205170000 20220123160000 9799 . X2RQ58wj+ORso8ekIXrjBlJeECQXxGUZ2+i2CMnEP7HZfBRfNTmmlp2omrPo5zKIa+YIeRiiCujJ qTmBSO4erB8ZubJxXrDZT8yIhlo16l9os51RF3o+zn0udlNv0leitmhe27ne8sOCeVf648crSTyZ NRcEf461E2dr9x+xV1ftu6S4LwwU5T+NpZiyN6bFYIuJj+lBwOpGWjf+WMe3xf4v0qpNGMoIwxT8 4NskwcNHC2zex87HO7uih8/bi3Zn3yhvOCbCJ2ZGRnqRYe+VmX8hz2zAT+P7AGX7K0dHkYVabEvv o+fNlms5HfnVzrAPvgEQUMwaNb5edzGVVQCifQ== ) ;; ADDITIONAL SECTION (9 records) ns1.nic.pw. 172800 IN A 194.169.218.12 ns2.nic.pw. 172800 IN A 185.24.64.12 ns5.nic.pw. 172800 IN A 212.18.248.12 ns6.nic.pw. 172800 IN A 212.18.249.12 ns1.nic.pw. 172800 IN AAAA 2001:67c:13cc::1:12 ns2.nic.pw. 172800 IN AAAA 2a04:2b00:13cc::1:12 ns5.nic.pw. 172800 IN AAAA 2a04:2b00:13ee::12 ns6.nic.pw. 172800 IN AAAA 2a04:2b00:13ff::12 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone pw

	Checking DS between . and pw
	Query to i.root-servers.net for pw/DS
	Received 402 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (402 octets) ;; HEADER SECTION ;; id = 55111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DS ;; ANSWER SECTION (3 records) pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40 pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 ) pw. 86400 IN RRSIG ( DS 8 1 86400 20220205170000 20220123160000 9799 . X2RQ58wj+ORso8ekIXrjBlJeECQXxGUZ2+i2CMnEP7HZfBRfNTmmlp2omrPo5zKIa+YIeRiiCujJ qTmBSO4erB8ZubJxXrDZT8yIhlo16l9os51RF3o+zn0udlNv0leitmhe27ne8sOCeVf648crSTyZ NRcEf461E2dr9x+xV1ftu6S4LwwU5T+NpZiyN6bFYIuJj+lBwOpGWjf+WMe3xf4v0qpNGMoIwxT8 4NskwcNHC2zex87HO7uih8/bi3Zn3yhvOCbCJ2ZGRnqRYe+VmX8hz2zAT+P7AGX7K0dHkYVabEvv o+fNlms5HfnVzrAPvgEQUMwaNb5edzGVVQCifQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for pw in the . zone
	DS=26645/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=26645/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`pw. 86400 IN RRSIG ( DS 8 1 86400 20220205170000 20220123160000 9799 . X2RQ58wj+ORso8ekIXrjBlJeECQXxGUZ2+i2CMnEP7HZfBRfNTmmlp2omrPo5zKIa+YIeRiiCujJ qTmBSO4erB8ZubJxXrDZT8yIhlo16l9os51RF3o+zn0udlNv0leitmhe27ne8sOCeVf648crSTyZ NRcEf461E2dr9x+xV1ftu6S4LwwU5T+NpZiyN6bFYIuJj+lBwOpGWjf+WMe3xf4v0qpNGMoIwxT8 4NskwcNHC2zex87HO7uih8/bi3Zn3yhvOCbCJ2ZGRnqRYe+VmX8hz2zAT+P7AGX7K0dHkYVabEvv o+fNlms5HfnVzrAPvgEQUMwaNb5edzGVVQCifQ== )`
	RRSIG=9799 and DNSKEY=9799 verifies the DS RRset
	DS=26645/SHA-1 is now in the chain-of-trust
	`pw. 86400 IN DS 26645 7 1 58ee332d303e2a64b7449c43ab770daa1ca74c40`
	`pw. 86400 IN DS ( 26645 7 2 7ef397edf4d7ca228c0f5111f5e1696cdbf279c0b6afa48fc7e71a12e07e5880 )`
	Query to ns5.nic.pw for pw/DNSKEY
	Received 895 bytes from 212.18.248.12
	;; Response received from 212.18.248.12 (895 octets) ;; HEADER SECTION ;; id = 59698 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; pw. IN DNSKEY ;; ANSWER SECTION (4 records) pw. 3600 IN DNSKEY ( 256 3 7 AwEAAZnWmrBFV5bNY6Qx1A+ZtpPyYBQQkOrS0QqFGBPPhWVAkuntOQxbawRgmNRTq/RVZdc2Rxle uJEdOQTXc3k/zkAYIpXazWDzLrqn4zhuTvvCXwLmboEXlQ3gBbSv9wqiskqtkNSt5IUQndoMVpxE etS6O2IZ19UAr06SoBwjyDfj ) ; Key ID = 55370 pw. 3600 IN DNSKEY ( 256 3 7 AwEAAb+eNmZwy6wwS+op8OzwLpyfiPlDK3NwEYzXhfHgE9tqwN3+8hixbvqEKjpVZG8dNIOkFFqu FTBkVLEGoE+NNuBZBPvNMXbx05hVPpI3nWppyzWMaq8ao3g1NIwGpg17XJ1S9XuYW9QMe4BglS7T /gSpOoNMx2FFNkjrfOoDHGbr ) ; Key ID = 31974 pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645 pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20220221053802 20220121222248 26645 pw. Ni/AqXah4M6EExjMLJWbTYc44NLOa9jmbfrAbTqPgWAmQrR+0LS15jgRfuzm1XwFzK4+rs5g2I0A lxmFgSVo4s/jrjBIOh1WaD/elF9otoHXlXkVMPtozmu6tTTKO3X+C9RQzILwI24m5UlxDNeinYTJ NxaDjynd0bFwiaTvi9pvJzt8QKwQAbcyGXUj1bYIGe/BmkB7G2a8kca8NiaPQVUB9/79yudWv3Xw 4uq4WRcuSEEjCqM+m58w2y1tdJkZewRZqD4LmlsjidRLWpLw89nEHv+rd/KilKkMCySWOaZJkbBv tCCbL3QpUxyWq5a1oxrS9I3WTjJ93XDsUjnu3Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for pw
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAZnWmrBFV5bNY6Qx1A+ZtpPyYBQQkOrS0QqFGBPPhWVAkuntOQxbawRgmNRTq/RVZdc2Rxle uJEdOQTXc3k/zkAYIpXazWDzLrqn4zhuTvvCXwLmboEXlQ3gBbSv9wqiskqtkNSt5IUQndoMVpxE etS6O2IZ19UAr06SoBwjyDfj ) ; Key ID = 55370`
	`pw. 3600 IN DNSKEY ( 256 3 7 AwEAAb+eNmZwy6wwS+op8OzwLpyfiPlDK3NwEYzXhfHgE9tqwN3+8hixbvqEKjpVZG8dNIOkFFqu FTBkVLEGoE+NNuBZBPvNMXbx05hVPpI3nWppyzWMaq8ao3g1NIwGpg17XJ1S9XuYW9QMe4BglS7T /gSpOoNMx2FFNkjrfOoDHGbr ) ; Key ID = 31974`
	`pw. 3600 IN DNSKEY ( 257 3 7 BQEAAAABs98NLxDqJKJ/pdRfNcBSC3eetcuNII+nkbniYVYRrM2OWVfBV+WpHBhzgr0bqe8xE+Wg /aInWs4o+zmJCKzqGFwLo8k9bhQWYlACrzfj50oQ/FvRgTmUigGNW+nE1nRUXb7kr/YXPTG6pNf3 smCUDvBDzM7CV62IPsCfAtf/DQvi2+nQJYYODQG8yav8bvE38RrkjbmojGdkxcAZMYTJqvgNC4MA Iunj0s51VTIIVn3Pj5POnV0XNXSzSul4nvnFXH6Y4BrIvn7HyfCKyU7WqExtRZmCbC+/mi3W1L8h RN/4uFyMac4VN5BfajD7GyDGUIdR854a5LQzXFl1XnMxLQ== ) ; Key ID = 26645`
	DNSKEY=26645/SEP is now in the chain-of-trust
	DS=26645/SHA-1 verifies DNSKEY=26645/SEP
	DS=26645/SHA-256 verifies DNSKEY=26645/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`pw. 3600 IN RRSIG ( DNSKEY 7 1 3600 20220221053802 20220121222248 26645 pw. Ni/AqXah4M6EExjMLJWbTYc44NLOa9jmbfrAbTqPgWAmQrR+0LS15jgRfuzm1XwFzK4+rs5g2I0A lxmFgSVo4s/jrjBIOh1WaD/elF9otoHXlXkVMPtozmu6tTTKO3X+C9RQzILwI24m5UlxDNeinYTJ NxaDjynd0bFwiaTvi9pvJzt8QKwQAbcyGXUj1bYIGe/BmkB7G2a8kca8NiaPQVUB9/79yudWv3Xw 4uq4WRcuSEEjCqM+m58w2y1tdJkZewRZqD4LmlsjidRLWpLw89nEHv+rd/KilKkMCySWOaZJkbBv tCCbL3QpUxyWq5a1oxrS9I3WTjJ93XDsUjnu3Q== )`
	RRSIG=26645 and DNSKEY=26645/SEP verifies the DNSKEY RRset
	DNSKEY=55370 is now in the chain-of-trust
	DNSKEY=31974 is now in the chain-of-trust
	Query to ns5.nic.pw for dnssec.pw/A
	Received 324 bytes from 212.18.248.12
	;; Response received from 212.18.248.12 (324 octets) ;; HEADER SECTION ;; id = 32195 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20220202095545 20220103003058 55370 pw. S0WELI5xKUED4O8U/lMMtwzio4UzlhsLkHdS7YOTanxgjqVy4j8TOQLgH34g4k/rAmhhzFvFCD+g /eUs3rbRK1sAgifSv118HoWHGmflDyQf4oDmOZj130j5GPE1wIkVgRs7mGOlauP0TiwcOgdH4J5e LTOFPFrpuD0dr8jr/sM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.nic.pw for dnssec.pw/DNSKEY
	Received 324 bytes from 185.24.64.12
	;; Response received from 185.24.64.12 (324 octets) ;; HEADER SECTION ;; id = 28501 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) dnssec.pw. 3600 IN NS name.servers.arkanar.net. dnssec.pw. 3600 IN NS name.servers.arkanar.org. dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20220202095545 20220103003058 55370 pw. S0WELI5xKUED4O8U/lMMtwzio4UzlhsLkHdS7YOTanxgjqVy4j8TOQLgH34g4k/rAmhhzFvFCD+g /eUs3rbRK1sAgifSv118HoWHGmflDyQf4oDmOZj130j5GPE1wIkVgRs7mGOlauP0TiwcOgdH4J5e LTOFPFrpuD0dr8jr/sM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dnssec.pw

dnssec.pw

	Checking DS between pw and dnssec.pw
	Query to ns1.nic.pw for dnssec.pw/DS
	Received 248 bytes from 194.169.218.12
	;; Response received from 194.169.218.12 (248 octets) ;; HEADER SECTION ;; id = 37642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DS ;; ANSWER SECTION (2 records) dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 ) dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20220202095545 20220103003058 55370 pw. S0WELI5xKUED4O8U/lMMtwzio4UzlhsLkHdS7YOTanxgjqVy4j8TOQLgH34g4k/rAmhhzFvFCD+g /eUs3rbRK1sAgifSv118HoWHGmflDyQf4oDmOZj130j5GPE1wIkVgRs7mGOlauP0TiwcOgdH4J5e LTOFPFrpuD0dr8jr/sM= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for dnssec.pw in the pw zone
	DS=21795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`dnssec.pw. 3600 IN RRSIG ( DS 7 2 3600 20220202095545 20220103003058 55370 pw. S0WELI5xKUED4O8U/lMMtwzio4UzlhsLkHdS7YOTanxgjqVy4j8TOQLgH34g4k/rAmhhzFvFCD+g /eUs3rbRK1sAgifSv118HoWHGmflDyQf4oDmOZj130j5GPE1wIkVgRs7mGOlauP0TiwcOgdH4J5e LTOFPFrpuD0dr8jr/sM= )`
	RRSIG=55370 and DNSKEY=55370 verifies the DS RRset
	DS=21795/SHA-256 is now in the chain-of-trust
	`dnssec.pw. 3600 IN DS ( 21795 7 2 42fef80a6f9489bd47441c74a859bda0e8077dab26e0ae9bfbb6f3301711ff86 )`
	Query to name.servers.arkanar.net for dnssec.pw/DNSKEY
	Received 1184 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (1184 octets) ;; HEADER SECTION ;; id = 37934 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN DNSKEY ;; ANSWER SECTION (4 records) dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795 dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909 dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20220208114357 20220109104510 8909 dnssec.pw. BNLI+0XarauEbPfFWl6qBCNZgBkE1Ka9+TcgtEuLeStQmCh0Yxgg5C4lOg34INbyAmmBY9kmoikx o6UJO44hXSbyskceoJHyZ8WzRz6lzQ5YCf3+ZhFV6yu42YjOdPuZZVNsOAuI+m+QhO9ogKWo8VOf 6Ex5GR6+I+PvtXzGgX+xHafhbUvel8G3lxz0kb6DH5hIhbxmIGhOi2bNUA7DtIlcx/PhPfODjCge tEWGyJNdlx+rwBJmJuRHp+WHrguDbNgpSYZ7AzsCgKgngkdmjDKysDzgU2kd7UKXdeowL6Exyt1Z OqPVNtN+7wsuuYM1p82Nu83jqoTUKeARCC/5gw== ) dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20220208114357 20220109104510 21795 dnssec.pw. UWY8kcnzlxz3RvRDQQR/3Rb0pX97MBN1xzx9p4xQ8T33KEgajbQg208iyEMCtDGfoK7hmjFUNpZs HkGEf4TASbvBTILDFw9NJqwVqI9Z2blj6Mz5EHqppEpilIvdI+RokGw44rmjZ2k3req7LUSrTLMh 7ZZ2Sl4qWItzk3+XFUmD3BOZgfdB3U1pm16PW7SFuYKHopwshRXKYdsa4wMh7C5HeB+4SaBOCyHN F87NZrFHb2jX94npZY57/rAkYWbhyMdKRK/tGQz5LFjddZsY9h8LcDEdvLujfrKbyVXZIpVDU/tE TWBMPLiyzjejw/labyT+wi0Xx2xAE22l4Rzy8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for dnssec.pw
	`dnssec.pw. 900 IN DNSKEY ( 257 3 7 AwEAAdA5i8FeZ2q/BacjjdXu+tehHqM06Y14SUr1T1uS0oxsxwwguGbvqPvoZSkz7FwikbwC732L UKWY+5qhESRatjY4NYbvmmlZyoWOgh+o8f/nGg3CDkPtG5Bb2ceCjuAqCuKMsUfZo3MNAPm0iThP +Q6lmtNBzMr7CIroENiPnUwhbMTw53j31z9v0+8lcaH+MKfRki8bBfI3prp54LsNgZGB/icFSB8L LK3P1uuLuDvRo1afk6NcXQnFz1Vk2zX+POI4DOLBa48Jbwr9L4pu3gcLGRyKBd+VEFaFfwqW+ZHz TOZIN0JiYyyBpLYhMPXk6xqF5+g10Jw3ZxBdCotAROM= ) ; Key ID = 21795`
	`dnssec.pw. 900 IN DNSKEY ( 256 3 7 AwEAAcc2MzVIiSA27VJrfyAmxe5mvyUtUi7FXHOn6vnV/qC7Fm9gn7ZMzAXM+PiiavYxxXyC0kGl MM88OmRrArad1Jwim0uH8izlwkM6t5BLzkJY/Tl+L8ONIS368dJhUUHu9v4Rtez/+KNsFtPZsIm0 olFeMQib5r5koh61V4Tzy9n9fvziYRu64II6kJBU197Cyj9tiYzv9DHpkn9wwPgN29jMsRRMEPgw TNjd8/1i7gIvj9mUhuIH/3eh+Oa/GsNIQZrGlqhDKEvKRkVRYC1+AK+cTB9iRslmWGBYSi3WZJtV jR/OBa1m2acgXFgcWCo86vHBTv8li+BpcjiMwTukwyM= ) ; Key ID = 8909`
	DNSKEY=21795/SEP is now in the chain-of-trust
	DS=21795/SHA-256 verifies DNSKEY=21795/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20220208114357 20220109104510 8909 dnssec.pw. BNLI+0XarauEbPfFWl6qBCNZgBkE1Ka9+TcgtEuLeStQmCh0Yxgg5C4lOg34INbyAmmBY9kmoikx o6UJO44hXSbyskceoJHyZ8WzRz6lzQ5YCf3+ZhFV6yu42YjOdPuZZVNsOAuI+m+QhO9ogKWo8VOf 6Ex5GR6+I+PvtXzGgX+xHafhbUvel8G3lxz0kb6DH5hIhbxmIGhOi2bNUA7DtIlcx/PhPfODjCge tEWGyJNdlx+rwBJmJuRHp+WHrguDbNgpSYZ7AzsCgKgngkdmjDKysDzgU2kd7UKXdeowL6Exyt1Z OqPVNtN+7wsuuYM1p82Nu83jqoTUKeARCC/5gw== )`
	`dnssec.pw. 900 IN RRSIG ( DNSKEY 7 2 900 20220208114357 20220109104510 21795 dnssec.pw. UWY8kcnzlxz3RvRDQQR/3Rb0pX97MBN1xzx9p4xQ8T33KEgajbQg208iyEMCtDGfoK7hmjFUNpZs HkGEf4TASbvBTILDFw9NJqwVqI9Z2blj6Mz5EHqppEpilIvdI+RokGw44rmjZ2k3req7LUSrTLMh 7ZZ2Sl4qWItzk3+XFUmD3BOZgfdB3U1pm16PW7SFuYKHopwshRXKYdsa4wMh7C5HeB+4SaBOCyHN F87NZrFHb2jX94npZY57/rAkYWbhyMdKRK/tGQz5LFjddZsY9h8LcDEdvLujfrKbyVXZIpVDU/tE TWBMPLiyzjejw/labyT+wi0Xx2xAE22l4Rzy8A== )`
	RRSIG=8909 and DNSKEY=8909 verifies the DNSKEY RRset
	RRSIG=21795 and DNSKEY=21795/SEP verifies the DNSKEY RRset
	DNSKEY=8909 is now in the chain-of-trust
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Response received from 138.68.66.132 (724 octets) ;; HEADER SECTION ;; id = 42729 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20220211144826 20220112143052 8909 dnssec.pw. S9vx6xeVa/Bnr8ljDWGgTkC/vQD+MBkySqy/Ps3glh2WfR9GJiuFHnI/knxQszPEebXJ3ovPKCMP q4ClzD3fwMRy2e/2js5y4pIo4s9U7TrW6ZatT/d3VgaL9mCxHqEyuDOkcVUPWam/ar1xUkvhFQLN CLvm9nfGAo5F/LdvC3hOo+nsIXMOrvB7pS4Y5gUoZ0CwqTMpC+BHehm7fRijVDhXv5q3tJ3ghe+U sDfx+4kIkFZl33WD3aT9o35dQTcC+ySQXGWe5bvxwYlzwUdtn+wtqQHbCUa5iMPeMRactp7jhUuy JwAHuB3XN5PoDis8d2gJ/DYaprjO03Ekjm/Ifw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.org is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/SOA
	Received 754 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (754 octets) ;; HEADER SECTION ;; id = 14338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN SOA ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN SOA ( name.servers.arkanar.net. dns.io7.nl. 2013053524 ;serial 7200 ;refresh 3600 ;retry 86400 ;expire 900 ;minimum ) dnssec.pw. 600 IN RRSIG ( SOA 7 2 600 20220211153052 20220112143052 8909 dnssec.pw. MQe5CjRllVZb5gJWokIMD70DfCpI1sCSCgj0FtCniJyEsf/MLpf0l1hvvrKBuL5xzBOPHCnA60qQ cF4Vz36Zj1LNdhJmHTklPqf/rSIupTY2wqvEOqiiI2Gdr/6QclmhKC168uPYuwf/JSZvi9WJjIaT HuCyU4WPnq5NBdgHaWUYFVJYrFg8GPoRJRE+LTopnOG44UWyMn7SJnI1IeanhLzsblLcQiPuNY7c 3pS7Iftsp2WoTxAA2KqSxUBf+J43zR1TEpt+8Ug8qrak5YHA0kbvhP1AlGii5V1FgrI94i1n4han UmPUKGGjjOg0BVpe4PegTSIPO075zgzl7Khp3w== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20220211144826 20220112143052 8909 dnssec.pw. S9vx6xeVa/Bnr8ljDWGgTkC/vQD+MBkySqy/Ps3glh2WfR9GJiuFHnI/knxQszPEebXJ3ovPKCMP q4ClzD3fwMRy2e/2js5y4pIo4s9U7TrW6ZatT/d3VgaL9mCxHqEyuDOkcVUPWam/ar1xUkvhFQLN CLvm9nfGAo5F/LdvC3hOo+nsIXMOrvB7pS4Y5gUoZ0CwqTMpC+BHehm7fRijVDhXv5q3tJ3ghe+U sDfx+4kIkFZl33WD3aT9o35dQTcC+ySQXGWe5bvxwYlzwUdtn+wtqQHbCUa5iMPeMRactp7jhUuy JwAHuB3XN5PoDis8d2gJ/DYaprjO03Ekjm/Ifw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to name.servers.arkanar.org for dnssec.pw/A
	Received 724 bytes from 138.68.66.132
	;; Response received from 138.68.66.132 (724 octets) ;; HEADER SECTION ;; id = 36444 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20220211144826 20220112143052 8909 dnssec.pw. S9vx6xeVa/Bnr8ljDWGgTkC/vQD+MBkySqy/Ps3glh2WfR9GJiuFHnI/knxQszPEebXJ3ovPKCMP q4ClzD3fwMRy2e/2js5y4pIo4s9U7TrW6ZatT/d3VgaL9mCxHqEyuDOkcVUPWam/ar1xUkvhFQLN CLvm9nfGAo5F/LdvC3hOo+nsIXMOrvB7pS4Y5gUoZ0CwqTMpC+BHehm7fRijVDhXv5q3tJ3ghe+U sDfx+4kIkFZl33WD3aT9o35dQTcC+ySQXGWe5bvxwYlzwUdtn+wtqQHbCUa5iMPeMRactp7jhUuy JwAHuB3XN5PoDis8d2gJ/DYaprjO03Ekjm/Ifw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

dnssec.pw

	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (724 octets) ;; HEADER SECTION ;; id = 64456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20220211144826 20220112143052 8909 dnssec.pw. S9vx6xeVa/Bnr8ljDWGgTkC/vQD+MBkySqy/Ps3glh2WfR9GJiuFHnI/knxQszPEebXJ3ovPKCMP q4ClzD3fwMRy2e/2js5y4pIo4s9U7TrW6ZatT/d3VgaL9mCxHqEyuDOkcVUPWam/ar1xUkvhFQLN CLvm9nfGAo5F/LdvC3hOo+nsIXMOrvB7pS4Y5gUoZ0CwqTMpC+BHehm7fRijVDhXv5q3tJ3ghe+U sDfx+4kIkFZl33WD3aT9o35dQTcC+ySQXGWe5bvxwYlzwUdtn+wtqQHbCUa5iMPeMRactp7jhUuy JwAHuB3XN5PoDis8d2gJ/DYaprjO03Ekjm/Ifw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	name.servers.arkanar.net is authoritative for dnssec.pw
	Found RRSIG signed by dnssec.pw zone
	Query to name.servers.arkanar.net for dnssec.pw/A
	Received 724 bytes from 46.137.158.193
	;; Response received from 46.137.158.193 (724 octets) ;; HEADER SECTION ;; id = 23037 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dnssec.pw. IN A ;; ANSWER SECTION (2 records) dnssec.pw. 600 IN A 188.166.33.151 dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== ) ;; AUTHORITY SECTION (3 records) dnssec.pw. 600 IN NS name.servers.arkanar.org. dnssec.pw. 600 IN NS name.servers.arkanar.net. dnssec.pw. 600 IN RRSIG ( NS 7 2 600 20220211144826 20220112143052 8909 dnssec.pw. S9vx6xeVa/Bnr8ljDWGgTkC/vQD+MBkySqy/Ps3glh2WfR9GJiuFHnI/knxQszPEebXJ3ovPKCMP q4ClzD3fwMRy2e/2js5y4pIo4s9U7TrW6ZatT/d3VgaL9mCxHqEyuDOkcVUPWam/ar1xUkvhFQLN CLvm9nfGAo5F/LdvC3hOo+nsIXMOrvB7pS4Y5gUoZ0CwqTMpC+BHehm7fRijVDhXv5q3tJ3ghe+U sDfx+4kIkFZl33WD3aT9o35dQTcC+ySQXGWe5bvxwYlzwUdtn+wtqQHbCUa5iMPeMRactp7jhUuy JwAHuB3XN5PoDis8d2gJ/DYaprjO03Ekjm/Ifw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dnssec.pw A RR has value 188.166.33.151
	Found 1 RRSIGs over A RRset
	`dnssec.pw. 600 IN RRSIG ( A 7 2 600 20220203015908 20220104015109 8909 dnssec.pw. t/bn9KCueeh365xDMJrYrdZXWJYocuDWbPzV+UdD4nOJPmp3VBrsiL1uPnv31uQsm8DXV781rvvu 1CBazQQQUkzNmxTb8dqnBa/xkAc+UxiC+km2VMbPIGQbiPtzhuwab8QzvsQHccgIb1QB00h3PuzS Uw8wvR0BxrI7E8CBn+XfTbe11w2s357l1G5+rr8yLpMifueVxj1d1zH8gmtIqO986JThTLH9Z6QL omBNRyLzXBK7nYpolB9u12kSWpWTlUuGPYk3K2E5gA6fmG8bKgVa1QT5rq5r3IeimepHc3uylt2a 64bbaFcgdFsV4Dt3aD5i/Za+nW3KGyLL+I2d2g== )`
	RRSIG=8909 and DNSKEY=8909 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dnssec.pw at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: