DNSSEC Analyzer

Domain Name:

Time: 2022-08-12 11:51:39 UTC, NTP stratum 16

Analyzing DNSSEC problems for dxdt.ru

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 29844 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to f.root-servers.net for dxdt.ru/A
	Received 683 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (683 octets) ;; HEADER SECTION ;; id = 31200 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . H1LJzbG6G7mp7conFz0LULqwfcPlxiKS0uPRVvVu2Ms3/yQNz7K3tUcU95+Z1mgOfNDky3NGXuwo /3ojE6AOHDkUzSmTVarksN9ntzqQXudjw5Xqi3ISdRFESBeGMTOa8WUj7tKzMI0gJ83UuHRB8tAp n6voXeqQJYd7iLzVcqiQNZro1WtEwcOcBNXLXbEmBDzeZIiBt3aYCTY1MYYBCLUn68V1Y1gCogaN zlK1Qb/D7KDurPeEGtMDBruyYFz6VOEmCPwnauRNUn1vRiY02IX648slUQQJqyxxrgefvnoE4lQY Yz2Ro1NMEDcr4pUi8f84dSpl4oMgqeHKbbiCcA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to k.root-servers.net for ru/DNSKEY
	Received 678 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (678 octets) ;; HEADER SECTION ;; id = 12986 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ru. 172800 IN NS a.dns.ripn.net. ru. 172800 IN NS b.dns.ripn.net. ru. 172800 IN NS d.dns.ripn.net. ru. 172800 IN NS e.dns.ripn.net. ru. 172800 IN NS f.dns.ripn.net. ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . H1LJzbG6G7mp7conFz0LULqwfcPlxiKS0uPRVvVu2Ms3/yQNz7K3tUcU95+Z1mgOfNDky3NGXuwo /3ojE6AOHDkUzSmTVarksN9ntzqQXudjw5Xqi3ISdRFESBeGMTOa8WUj7tKzMI0gJ83UuHRB8tAp n6voXeqQJYd7iLzVcqiQNZro1WtEwcOcBNXLXbEmBDzeZIiBt3aYCTY1MYYBCLUn68V1Y1gCogaN zlK1Qb/D7KDurPeEGtMDBruyYFz6VOEmCPwnauRNUn1vRiY02IX648slUQQJqyxxrgefvnoE4lQY Yz2Ro1NMEDcr4pUi8f84dSpl4oMgqeHKbbiCcA== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ru

	Checking DS between . and ru
	Query to f.root-servers.net for ru/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (366 octets) ;; HEADER SECTION ;; id = 65250 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DS ;; ANSWER SECTION (2 records) ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f ) ru. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . H1LJzbG6G7mp7conFz0LULqwfcPlxiKS0uPRVvVu2Ms3/yQNz7K3tUcU95+Z1mgOfNDky3NGXuwo /3ojE6AOHDkUzSmTVarksN9ntzqQXudjw5Xqi3ISdRFESBeGMTOa8WUj7tKzMI0gJ83UuHRB8tAp n6voXeqQJYd7iLzVcqiQNZro1WtEwcOcBNXLXbEmBDzeZIiBt3aYCTY1MYYBCLUn68V1Y1gCogaN zlK1Qb/D7KDurPeEGtMDBruyYFz6VOEmCPwnauRNUn1vRiY02IX648slUQQJqyxxrgefvnoE4lQY Yz2Ro1NMEDcr4pUi8f84dSpl4oMgqeHKbbiCcA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for ru in the . zone
	DS=33257/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ru. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . H1LJzbG6G7mp7conFz0LULqwfcPlxiKS0uPRVvVu2Ms3/yQNz7K3tUcU95+Z1mgOfNDky3NGXuwo /3ojE6AOHDkUzSmTVarksN9ntzqQXudjw5Xqi3ISdRFESBeGMTOa8WUj7tKzMI0gJ83UuHRB8tAp n6voXeqQJYd7iLzVcqiQNZro1WtEwcOcBNXLXbEmBDzeZIiBt3aYCTY1MYYBCLUn68V1Y1gCogaN zlK1Qb/D7KDurPeEGtMDBruyYFz6VOEmCPwnauRNUn1vRiY02IX648slUQQJqyxxrgefvnoE4lQY Yz2Ro1NMEDcr4pUi8f84dSpl4oMgqeHKbbiCcA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=33257/SHA-256 is now in the chain-of-trust
	`ru. 86400 IN DS ( 33257 8 2 641a0ba027a1027d2fd17b5743931804eebb329b8b514a357d1ef290f159d79f )`
	Query to d.dns.ripn.net for ru/DNSKEY
	Received 745 bytes from 194.190.124.17
	;; Response received from 194.190.124.17 (745 octets) ;; HEADER SECTION ;; id = 38359 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ru. IN DNSKEY ;; ANSWER SECTION (3 records) ru. 345600 IN DNSKEY ( 257 3 8 AwEAAa/EEOFpDs6lI4a/NWZ6JKoMW41yXIBpFfxbrYTyQX4esuzvxbF5LkCQGdQnSTbt5RXEZUJT WmnXp2f91ZV8BmDY5n9PpfMjdicp/u7h4V81AJ6tOnU/tDOTFJ42tioUgON7lID5Go1fVuMS2e+k /U3PhbC6pMvEr6OV5iL3Qf1ncBAk7ukxRwI+B80B/vDYMjVd5hXpFOf8TCf7cJgcbK/ZbpK5LbfM gWoSH7d3OPI6FLsX2XVyMCTR3Mr1gX6ErI+a904s2pnvx4NkqcWJxFT1RmTB4JyKdQFTR9lR4oxZ ZEU3/OkT3xEq5n/uXLBbCwQbQYN0h0DwTDC9d3GODfc= ) ; Key ID = 33257 ru. 345600 IN DNSKEY ( 256 3 8 AwEAAd1ASkE6yZ7YTyM0t5wAE+V9zog8x9nPxHQAR1/sXin5uMWjFqsDa/imJCKBC1DZYTaKuTDf ZzaWL4caXFtLnf/icV+j+2HbJCG7lpppS/wvvS2JdQAUVhjbBrcsXn4sd4WfwcwcHxGk6pimrqNQ ALTpTy1EIVXDTha4AQ1phqW/ ) ; Key ID = 53643 ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20220824000000 20220804000000 33257 ru. K7VpvmYWG1aksPq1Brj8lcBatfsqxZXY7/pKLJkY5nh3B2V+b7bvnf0/3LKBu4nAzVyaKEY+4n71 Y2WGmtMlynUVtesjDF26XXoKGzGyDWj9ANOUgFrru5WtP5rzSyyNonIkKqbpWvV6syjAFM/VM2Kq RnUQIGgzrKKLIzKMZAvpQR3sL6l5OcO9KdEusIT53CPGxAQAHRO3eFMoHnzhki1FzqGypMfE49Pp 15dNPkdQofjMPldpKaus0yI/T7S8E6j2/23a1W9rhTIskEjN+O21cuXFNFhc1Fbor4hjhaGFuFhJ Yni3jvkqCM3RrVC6MQdkBFh2spakANldANZmJg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for ru
	`ru. 345600 IN DNSKEY ( 257 3 8 AwEAAa/EEOFpDs6lI4a/NWZ6JKoMW41yXIBpFfxbrYTyQX4esuzvxbF5LkCQGdQnSTbt5RXEZUJT WmnXp2f91ZV8BmDY5n9PpfMjdicp/u7h4V81AJ6tOnU/tDOTFJ42tioUgON7lID5Go1fVuMS2e+k /U3PhbC6pMvEr6OV5iL3Qf1ncBAk7ukxRwI+B80B/vDYMjVd5hXpFOf8TCf7cJgcbK/ZbpK5LbfM gWoSH7d3OPI6FLsX2XVyMCTR3Mr1gX6ErI+a904s2pnvx4NkqcWJxFT1RmTB4JyKdQFTR9lR4oxZ ZEU3/OkT3xEq5n/uXLBbCwQbQYN0h0DwTDC9d3GODfc= ) ; Key ID = 33257`
	`ru. 345600 IN DNSKEY ( 256 3 8 AwEAAd1ASkE6yZ7YTyM0t5wAE+V9zog8x9nPxHQAR1/sXin5uMWjFqsDa/imJCKBC1DZYTaKuTDf ZzaWL4caXFtLnf/icV+j+2HbJCG7lpppS/wvvS2JdQAUVhjbBrcsXn4sd4WfwcwcHxGk6pimrqNQ ALTpTy1EIVXDTha4AQ1phqW/ ) ; Key ID = 53643`
	DNSKEY=33257/SEP is now in the chain-of-trust
	DS=33257/SHA-256 verifies DNSKEY=33257/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ru. 345600 IN RRSIG ( DNSKEY 8 1 345600 20220824000000 20220804000000 33257 ru. K7VpvmYWG1aksPq1Brj8lcBatfsqxZXY7/pKLJkY5nh3B2V+b7bvnf0/3LKBu4nAzVyaKEY+4n71 Y2WGmtMlynUVtesjDF26XXoKGzGyDWj9ANOUgFrru5WtP5rzSyyNonIkKqbpWvV6syjAFM/VM2Kq RnUQIGgzrKKLIzKMZAvpQR3sL6l5OcO9KdEusIT53CPGxAQAHRO3eFMoHnzhki1FzqGypMfE49Pp 15dNPkdQofjMPldpKaus0yI/T7S8E6j2/23a1W9rhTIskEjN+O21cuXFNFhc1Fbor4hjhaGFuFhJ Yni3jvkqCM3RrVC6MQdkBFh2spakANldANZmJg== )`
	RRSIG=33257 and DNSKEY=33257/SEP verifies the DNSKEY RRset
	DNSKEY=53643 is now in the chain-of-trust
	Query to f.dns.ripn.net for dxdt.ru/A
	Received 598 bytes from 193.232.156.17
	;; Response received from 193.232.156.17 (598 octets) ;; HEADER SECTION ;; id = 57705 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) DXDT.ru. 345600 IN NS ns-33.ion.pw. DXDT.ru. 345600 IN NS ns-151.velvik.ru. TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220919055202 20220805142004 53643 ru. g9ecz0nIXbBbVLQJ8jiDoxSLlvAPDCT8HtfuuxDP+7ZaoKSDC/mNt3CwL+q+9BShadEdVbTewEg3 CPQZIV5vKMoyhk/nc+AK3rBcXKs6s2lFv+4of17KTxY0aBYlJKIXS5+EmM4gy8jEVoSaKYNOIddF Iq3bzTnY6wEDvK5zRzk= ) 9T33CQ7OSJM5VULOLSODMCRLF3FK4AV9.ru. 3600 IN NSEC3 ( 1 1 3 00ff 9tcfjk7tcq7r7s6qm29i4obo391km81h NS DS RRSIG ) 9T33CQ7OSJM5VULOLSODMCRLF3FK4AV9.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220820214211 20220712081807 53643 ru. MJAvBp5jVCXrfx+83Y26LSOEYrSxxnQCJAehJi3qlytZVLTl6Z/W2C15p/KeAQqxMN6HzKUyB5K4 qqXKuyQLK1dJsVXSkBSNAW5a9Fzxq7LurCHYMXwoIj5dndqSlcwqtvRjqu3CpbEmpkb0T96Vh/Xk gJgOeIu0B9MRwWoaME4= ) ;; ADDITIONAL SECTION (2 records) ns-151.velvik.ru. 345600 IN A 194.135.20.151 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.dns.ripn.net for dxdt.ru/DNSKEY
	Received 593 bytes from 194.85.252.62
	;; Response received from 194.85.252.62 (593 octets) ;; HEADER SECTION ;; id = 17404 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) dxdt.ru. 345600 IN NS ns-33.ion.pw. dxdt.ru. 345600 IN NS ns-151.velvik.ru. tdui9d4jkuds8b9t86gj39pgflcnlgm5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) tdui9d4jkuds8b9t86gj39pgflcnlgm5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220919055202 20220805142004 53643 ru. g9ecz0nIXbBbVLQJ8jiDoxSLlvAPDCT8HtfuuxDP+7ZaoKSDC/mNt3CwL+q+9BShadEdVbTewEg3 CPQZIV5vKMoyhk/nc+AK3rBcXKs6s2lFv+4of17KTxY0aBYlJKIXS5+EmM4gy8jEVoSaKYNOIddF Iq3bzTnY6wEDvK5zRzk= ) 9t33cq7osjm5vulolsodmcrlf3fk4av9.ru. 3600 IN NSEC3 ( 1 1 3 00ff 9tcfjk7tcq7r7s6qm29i4obo391km81h NS DS RRSIG ) 9t33cq7osjm5vulolsodmcrlf3fk4av9.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220820214211 20220712081807 53643 ru. MJAvBp5jVCXrfx+83Y26LSOEYrSxxnQCJAehJi3qlytZVLTl6Z/W2C15p/KeAQqxMN6HzKUyB5K4 qqXKuyQLK1dJsVXSkBSNAW5a9Fzxq7LurCHYMXwoIj5dndqSlcwqtvRjqu3CpbEmpkb0T96Vh/Xk gJgOeIu0B9MRwWoaME4= ) ;; ADDITIONAL SECTION (2 records) ns-151.velvik.ru. 345600 IN A 194.135.20.151 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone dxdt.ru

dxdt.ru

	Checking DS between ru and dxdt.ru
	Query to b.dns.ripn.net for dxdt.ru/DS
	Received 746 bytes from 194.85.252.62
	;; Response received from 194.85.252.62 (746 octets) ;; HEADER SECTION ;; id = 10401 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN NSEC3 ( 1 1 3 00ff te33kgtaqu9m5crq3ibsilqu11gfgttt NS SOA RRSIG DNSKEY NSEC3PARAM ) TDUI9D4JKUDS8B9T86GJ39PGFLCNLGM5.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220919055202 20220805142004 53643 ru. g9ecz0nIXbBbVLQJ8jiDoxSLlvAPDCT8HtfuuxDP+7ZaoKSDC/mNt3CwL+q+9BShadEdVbTewEg3 CPQZIV5vKMoyhk/nc+AK3rBcXKs6s2lFv+4of17KTxY0aBYlJKIXS5+EmM4gy8jEVoSaKYNOIddF Iq3bzTnY6wEDvK5zRzk= ) ru. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 4052423 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) ru. 3600 IN RRSIG ( SOA 8 1 345600 20220913153850 20220812101910 53643 ru. x5+jDHSJlZPlB5/9aH3RmtsWBvGDP1UpQuKKjdmyao5AD0NxHv9naDK1501nY5DWk3Tc+6dgKqQv sO+ELlJdBolqhZhT92NWvgH4DezGyBUhUay8Kg+D8LULjNvfWpM8VgfTMattxHZhCyol2d8/q1eQ xM5K9aQj85txrhKxMHU= ) 9T33CQ7OSJM5VULOLSODMCRLF3FK4AV9.ru. 3600 IN NSEC3 ( 1 1 3 00ff 9tcfjk7tcq7r7s6qm29i4obo391km81h NS DS RRSIG ) 9T33CQ7OSJM5VULOLSODMCRLF3FK4AV9.ru. 3600 IN RRSIG ( NSEC3 8 2 3600 20220820214211 20220712081807 53643 ru. MJAvBp5jVCXrfx+83Y26LSOEYrSxxnQCJAehJi3qlytZVLTl6Z/W2C15p/KeAQqxMN6HzKUyB5K4 qqXKuyQLK1dJsVXSkBSNAW5a9Fzxq7LurCHYMXwoIj5dndqSlcwqtvRjqu3CpbEmpkb0T96Vh/Xk gJgOeIu0B9MRwWoaME4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for dxdt.ru in the ru zone
	Query to ns-151.velvik.ru for dxdt.ru/DNSKEY
	Received 98 bytes from 194.135.20.151
	;; Response received from 194.135.20.151 (98 octets) ;; HEADER SECTION ;; id = 6742 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dxdt.ru. 600 IN SOA ( ns-151.velvik.ru. dns.ion.pw. 2022081001 ;serial 7200 ;refresh 3600 ;retry 86400 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns-33.ion.pw for dxdt.ru/A
	Received 106 bytes from 195.24.66.33
	;; Response received from 195.24.66.33 (106 octets) ;; HEADER SECTION ;; id = 1964 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (1 record) dxdt.ru. 150 IN A 194.135.22.111 ;; AUTHORITY SECTION (2 records) dxdt.ru. 300 IN NS ns-151.velvik.ru. dxdt.ru. 300 IN NS ns-33.ion.pw. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns-33.ion.pw is authoritative for dxdt.ru
	Query to ns-151.velvik.ru for dxdt.ru/SOA
	Received 132 bytes from 194.135.20.151
	;; Response received from 194.135.20.151 (132 octets) ;; HEADER SECTION ;; id = 54596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN SOA ;; ANSWER SECTION (1 record) dxdt.ru. 600 IN SOA ( ns-151.velvik.ru. dns.ion.pw. 2022081001 ;serial 7200 ;refresh 3600 ;retry 86400 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (2 records) dxdt.ru. 300 IN NS ns-33.ion.pw. dxdt.ru. 300 IN NS ns-151.velvik.ru. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-33.ion.pw for dxdt.ru/A
	Received 106 bytes from 195.24.66.33
	;; Response received from 195.24.66.33 (106 octets) ;; HEADER SECTION ;; id = 28289 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (1 record) dxdt.ru. 150 IN A 194.135.22.111 ;; AUTHORITY SECTION (2 records) dxdt.ru. 300 IN NS ns-151.velvik.ru. dxdt.ru. 300 IN NS ns-33.ion.pw. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dxdt.ru A RR has value 194.135.22.111
	No RRSIGs found

dxdt.ru

	Query to ns-151.velvik.ru for dxdt.ru/A
	Received 108 bytes from 194.135.20.151
	;; Response received from 194.135.20.151 (108 octets) ;; HEADER SECTION ;; id = 57204 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (1 record) dxdt.ru. 150 IN A 194.135.22.111 ;; AUTHORITY SECTION (2 records) dxdt.ru. 300 IN NS ns-151.velvik.ru. dxdt.ru. 300 IN NS ns-33.ion.pw. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns-151.velvik.ru is authoritative for dxdt.ru
	Query to ns-151.velvik.ru for dxdt.ru/A
	Received 108 bytes from 194.135.20.151
	;; Response received from 194.135.20.151 (108 octets) ;; HEADER SECTION ;; id = 52478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; dxdt.ru. IN A ;; ANSWER SECTION (1 record) dxdt.ru. 150 IN A 194.135.22.111 ;; AUTHORITY SECTION (2 records) dxdt.ru. 300 IN NS ns-33.ion.pw. dxdt.ru. 300 IN NS ns-151.velvik.ru. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dxdt.ru A RR has value 194.135.22.111
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test dxdt.ru at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: