DNSSEC Debugger

Domain Name:

Time: 2024-10-18 07:10:03 UTC

Analyzing DNSSEC problems for eth.ar

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 864 octets ;; HEADER SECTION ;; id = 6377 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241101000000 20241011000000 20326 . aA+m3YA9Bcrh9TblnApamOx9eSL7dPcKbcFsVBvqD7UlHGz0GY8iHeR8OXvjIKg0Y9qw7mgN1N4v Ok0DXpMAxzbtPeUGEmnvIsGS0TJKF+mFELMOne5Qno7//GMWbaZ5fr7KlMPL514OXzFM+RgA7w5H s28QV/fLAOHsvp7yokvPhZ6wOCHsvkgox/gZ1KAhMJI7zW16NYgBXViFBsjKh6POQeLeT1iH2tYN L+QkVApGib3MN0F4VhcpCPhJp7bsEnCXrWiRxULzq5OyFljKHtbX/0W03PDBQSwSCHq/ute5mksE h3jmJFc/p7OX/zE2/3vluUYY6uR5XXf1I8hbvA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for eth.ar/A
	Received 769 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 769 octets ;; HEADER SECTION ;; id = 27501 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ar. 172800 IN NS f.dns.ar. ar. 172800 IN NS d.dns.ar. ar. 172800 IN NS a.lactld.org. ar. 172800 IN NS c.dns.ar. ar. 172800 IN NS e.dns.ar. ar. 172800 IN NS ar.cctld.authdns.ripe.net. ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20241031050000 20241018040000 61050 . vBOPHX/TQ0TpIQlrqdEbvnU/NJsJjfsN98iOT4Q1DiFXaApFxjXVXjhQC5zS98pQPwZD2bJ740w8 fNJI0ujMZAN8lZXvy8a4cATR8k8G1/xSYu38DDxouZvs8f85krRstT6V+dXeOqBM7lYH/y9CcUq8 sfl1Uh8c/j7u7cZFRaGE5KVF1taaXQMc9qL75rJK6YowhFbPokjfRinWcTy39a5u0Mx3pyB+y1Pi tVCGj9leDh2B8h4Mcpv+iXm9k4fFPN6cwL58R1G65BD+5LcHrWTdPT2WPyaNpT/tyWjNYr7lubd+ S71wn95i7rWzsgZK1GBb+eBe/Lc8tUwj9EGpqQ== ) ;; ADDITIONAL SECTION (13 records) ar.cctld.authdns.ripe.net. 172800 IN A 193.0.9.59 f.dns.ar. 172800 IN A 130.59.31.20 e.dns.ar. 172800 IN A 170.238.66.50 d.dns.ar. 172800 IN A 192.140.126.50 c.dns.ar. 172800 IN A 200.108.148.50 a.lactld.org. 172800 IN A 200.0.68.10 ar.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::59 f.dns.ar. 172800 IN AAAA 2001:620:0:ff::20 e.dns.ar. 172800 IN AAAA 2801:140:eeee::50 d.dns.ar. 172800 IN AAAA 2801:140:dddd::50 c.dns.ar. 172800 IN AAAA 2801:140:10::10 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 ;; { "EDNS-VERSION": 0 }
	Query to d.root-servers.net for ar/DNSKEY
	Received 763 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 763 octets ;; HEADER SECTION ;; id = 53910 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ar. 172800 IN NS a.lactld.org. ar. 172800 IN NS c.dns.ar. ar. 172800 IN NS d.dns.ar. ar. 172800 IN NS e.dns.ar. ar. 172800 IN NS f.dns.ar. ar. 172800 IN NS ar.cctld.authdns.ripe.net. ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20241031050000 20241018040000 61050 . vBOPHX/TQ0TpIQlrqdEbvnU/NJsJjfsN98iOT4Q1DiFXaApFxjXVXjhQC5zS98pQPwZD2bJ740w8 fNJI0ujMZAN8lZXvy8a4cATR8k8G1/xSYu38DDxouZvs8f85krRstT6V+dXeOqBM7lYH/y9CcUq8 sfl1Uh8c/j7u7cZFRaGE5KVF1taaXQMc9qL75rJK6YowhFbPokjfRinWcTy39a5u0Mx3pyB+y1Pi tVCGj9leDh2B8h4Mcpv+iXm9k4fFPN6cwL58R1G65BD+5LcHrWTdPT2WPyaNpT/tyWjNYr7lubd+ S71wn95i7rWzsgZK1GBb+eBe/Lc8tUwj9EGpqQ== ) ;; ADDITIONAL SECTION (13 records) a.lactld.org. 172800 IN A 200.0.68.10 c.dns.ar. 172800 IN A 200.108.148.50 d.dns.ar. 172800 IN A 192.140.126.50 e.dns.ar. 172800 IN A 170.238.66.50 f.dns.ar. 172800 IN A 130.59.31.20 ar.cctld.authdns.ripe.net. 172800 IN A 193.0.9.59 a.lactld.org. 172800 IN AAAA 2801:14:a000::10 c.dns.ar. 172800 IN AAAA 2801:140:10::10 d.dns.ar. 172800 IN AAAA 2801:140:dddd::50 e.dns.ar. 172800 IN AAAA 2801:140:eeee::50 f.dns.ar. 172800 IN AAAA 2001:620:0:ff::20 ar.cctld.authdns.ripe.net. 172800 IN AAAA 2001:67c:e0::59 ;; { "EDNS-VERSION": 0 }
	Found child zone ar

	Checking DS between . and ar
	Query to a.root-servers.net for ar/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 366 octets ;; HEADER SECTION ;; id = 25774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DS ;; ANSWER SECTION (2 records) ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c ) ar. 86400 IN RRSIG ( DS 8 1 86400 20241031050000 20241018040000 61050 . vBOPHX/TQ0TpIQlrqdEbvnU/NJsJjfsN98iOT4Q1DiFXaApFxjXVXjhQC5zS98pQPwZD2bJ740w8 fNJI0ujMZAN8lZXvy8a4cATR8k8G1/xSYu38DDxouZvs8f85krRstT6V+dXeOqBM7lYH/y9CcUq8 sfl1Uh8c/j7u7cZFRaGE5KVF1taaXQMc9qL75rJK6YowhFbPokjfRinWcTy39a5u0Mx3pyB+y1Pi tVCGj9leDh2B8h4Mcpv+iXm9k4fFPN6cwL58R1G65BD+5LcHrWTdPT2WPyaNpT/tyWjNYr7lubd+ S71wn95i7rWzsgZK1GBb+eBe/Lc8tUwj9EGpqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for ar in the . zone
	DS=19606/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`ar. 86400 IN RRSIG ( DS 8 1 86400 20241031050000 20241018040000 61050 . vBOPHX/TQ0TpIQlrqdEbvnU/NJsJjfsN98iOT4Q1DiFXaApFxjXVXjhQC5zS98pQPwZD2bJ740w8 fNJI0ujMZAN8lZXvy8a4cATR8k8G1/xSYu38DDxouZvs8f85krRstT6V+dXeOqBM7lYH/y9CcUq8 sfl1Uh8c/j7u7cZFRaGE5KVF1taaXQMc9qL75rJK6YowhFbPokjfRinWcTy39a5u0Mx3pyB+y1Pi tVCGj9leDh2B8h4Mcpv+iXm9k4fFPN6cwL58R1G65BD+5LcHrWTdPT2WPyaNpT/tyWjNYr7lubd+ S71wn95i7rWzsgZK1GBb+eBe/Lc8tUwj9EGpqQ== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=19606/SHA-256 is now in the chain-of-trust
	`ar. 86400 IN DS ( 19606 8 2 4415cf1a2cf10de94b92bc020f21d1bf4163b2e90f2a6f6a5d2a1740339d566c )`
	Query to e.dns.ar for ar/DNSKEY
	Received 1675 bytes from 170.238.66.50
	;; Response received from [170.238.66.50] 1675 octets ;; HEADER SECTION ;; id = 19411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; ar. IN DNSKEY ;; ANSWER SECTION (4 records) ar. 86400 IN DNSKEY ( 256 3 8 AwEAAb70605QGjdOGHWBEHl5FYBQ9EyhCYe6Jc79n0sN73sG8cJC9xVuRSvBdvNZmAsZHsyYYTEo htE+1/C9ORpmBM5pjdBXlDKT8ei428PI9llBHaIOJFWElehDzRRkpx9YtZ49wIU9olvhKLGR+FHs WmafR7N152wr5AGt+DmOzAWC2RG9vu7KVyggYN0sEJ968nyWr06keA35Pjjl6j1dWt6GP7Vs/BgS 12/AenK2O9WHRwYCYGCJ6SxBuPwxVaKJFyMRKojSkBxB76FvxYfptem0MOOVbUAUrOYVyGtjWm9a CDm8sxTa7CNRGDhsRciGteu4GrTde4B7agI1HurdsrE= ) ; Key ID = 14574 ar. 86400 IN DNSKEY ( 257 3 8 AwEAAeIkYXOlpUg2gb5EJCv3gt/142fRB3/7njw44ZZxWWIRc1xmrVR3NKYKO8XKo9J4Fg7dIICj /vECxLTc5zqD086nIAclezH63vBzHcAOb0HrkmIBSRqhH4BRo4fq51qWI/wrmC6tYoWUtPWuTWBO ZGjM6dyUUnwt9+Q2qz5NnRwAGeqNCjPHkyTI+NIQlokLpC1P9KwitHxXkjn03Us9tyoAMWo5KmSR bt/vrxd1OgFmfWecJZipWXYVkl2yMhIHKGUc0AGp1cr6RU10lv4d1P/IxqTiW4OQnwjX52Mw6SUJ n6frjIgYbPreBNaqHTDiMFQ2NGymge1/9bS8fFS9fbAgrnpMC7Vlv7Gu65KAUhNcSaV/lJUmXO8r VS2eQCQ1MUuIR8FaRJrPgWLWtafMYZODbnDon86CRY/rpxXtKcyb32Yu7zACOwgkgUTZtaKHyd1D 4sst4eub0tkXAZpPR7mHwZ4Ijhn9JGwrcP2mpskiyFhsM1RXXJLgVheZ6anIQ18B+CG+HZzsuH0j 5lE1LJbDZk/jNGNYl1ljdgwebJOVg5CqIdL0xomV1ejlPoSb4lQG1J/IxnCK6Im39kZh+hgrDMlM Z8osYrsyAOl868CG2muBOR/wNMfn00B/Pk7kwqQGUKzzOmNg8lOt+aCL3vHhtuuN/88oZvEnZlUs Ckt5 ) ; Key ID = 19606 ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241114045646 20241016040406 14574 ar. K4dIE5ixd4QoQXb8tzhMljdQBu+8XplASYy/DZzYJ5ZT8OZdkBKI1bzFvjwStBwDP1Macq/DOjpI tDN/oh8+Mgw9IbgaBClyUWN8O+YGxqhbNENF8uB2HHoXCmqWROwXupuD9upJaKEU54dCgi0L738k bZklT3YNnXZFBpT2ogXkVWAmzvRyJHefxZseitLC7BsVCWGAeJwceeshGI4fSY+hojYpm+6Ada9t +EwGGbQVUaKaA7bO3266o5U21SDxmGQmnH28OPlZJPR1dks+l6/ZORphVF1M133/7+PtBXqxu4oe /RcZoRM0oIG+2esQCvLfhLJ+XdcH2BWrZsK5ZQ== ) ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250215112233 20240808123456 19606 ar. tt7KrQ/YL5rug4j4PltRH4z5hD8TvRSAFu0Xv1VbRjvq7/QzoreFI737+MBJdnczK+ynM4E4L/v0 yUMnDf4oWCIagyqqGsubg+HjvbN5YRu795JEyIGiiRxYgi7K59arZ4OBl5VMx7TyJSFHD/xqkwQc 0RTiexZ8S6LT4/gF42T4jxSzZMCk0UItTcjN8fLQN7nzR4HhLKHzhbkbDIsEdt4kKxoVcWRlQh/W qoKcDcbC4yuKtcU8057dVPPWT7nWu2iEFYSZoXZllmDtEgsAs8RWjAKPx0PdpBcuu8Km0iGEZ8st VP60wBcPpqpEA2JTVOGTY47n457rZWLPP3skwdFYQGRKWfQvstszVWPd1MvXQpGWILfoUcG+ANlk R9UCz21rPeQcOYy7mUQ75lgs2ErUn7jo2RA9ofUNv7UamCWxRCXpX1oWantSjgan8ev5HF9HQiUX T5BX3JVR5O+I8m5lFpUS2MypSil8zR1HpGT/9RcVuA1JX6pXcZ/DzLXhPx6O7LEb2e36nP22kgrB XqZms7PNSnhK0IYjyO/ywujTBAnoahUtvzl4yowW7kY2PQQhrVRuIbzt6+JvSWHIIo+Gp38fwQKZ KD84a/o8mkpwGHkujzCbLWley/BbBsxiSZ8taPgR2ZJE08vDz11lEV4XEfGLCQCzBh9Fgagiz/U= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for ar
	`ar. 86400 IN DNSKEY ( 256 3 8 AwEAAb70605QGjdOGHWBEHl5FYBQ9EyhCYe6Jc79n0sN73sG8cJC9xVuRSvBdvNZmAsZHsyYYTEo htE+1/C9ORpmBM5pjdBXlDKT8ei428PI9llBHaIOJFWElehDzRRkpx9YtZ49wIU9olvhKLGR+FHs WmafR7N152wr5AGt+DmOzAWC2RG9vu7KVyggYN0sEJ968nyWr06keA35Pjjl6j1dWt6GP7Vs/BgS 12/AenK2O9WHRwYCYGCJ6SxBuPwxVaKJFyMRKojSkBxB76FvxYfptem0MOOVbUAUrOYVyGtjWm9a CDm8sxTa7CNRGDhsRciGteu4GrTde4B7agI1HurdsrE= ) ; Key ID = 14574`
	ar. 86400 IN DNSKEY ( 257 3 8 AwEAAeIkYXOlpUg2gb5EJCv3gt/142fRB3/7njw44ZZxWWIRc1xmrVR3NKYKO8XKo9J4Fg7dIICj /vECxLTc5zqD086nIAclezH63vBzHcAOb0HrkmIBSRqhH4BRo4fq51qWI/wrmC6tYoWUtPWuTWBO ZGjM6dyUUnwt9+Q2qz5NnRwAGeqNCjPHkyTI+NIQlokLpC1P9KwitHxXkjn03Us9tyoAMWo5KmSR bt/vrxd1OgFmfWecJZipWXYVkl2yMhIHKGUc0AGp1cr6RU10lv4d1P/IxqTiW4OQnwjX52Mw6SUJ n6frjIgYbPreBNaqHTDiMFQ2NGymge1/9bS8fFS9fbAgrnpMC7Vlv7Gu65KAUhNcSaV/lJUmXO8r VS2eQCQ1MUuIR8FaRJrPgWLWtafMYZODbnDon86CRY/rpxXtKcyb32Yu7zACOwgkgUTZtaKHyd1D 4sst4eub0tkXAZpPR7mHwZ4Ijhn9JGwrcP2mpskiyFhsM1RXXJLgVheZ6anIQ18B+CG+HZzsuH0j 5lE1LJbDZk/jNGNYl1ljdgwebJOVg5CqIdL0xomV1ejlPoSb4lQG1J/IxnCK6Im39kZh+hgrDMlM Z8osYrsyAOl868CG2muBOR/wNMfn00B/Pk7kwqQGUKzzOmNg8lOt+aCL3vHhtuuN/88oZvEnZlUs Ckt5 ) ; Key ID = 19606
	DNSKEY=19606/SEP is now in the chain-of-trust
	DS=19606/SHA-256 verifies DNSKEY=19606/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241114045646 20241016040406 14574 ar. K4dIE5ixd4QoQXb8tzhMljdQBu+8XplASYy/DZzYJ5ZT8OZdkBKI1bzFvjwStBwDP1Macq/DOjpI tDN/oh8+Mgw9IbgaBClyUWN8O+YGxqhbNENF8uB2HHoXCmqWROwXupuD9upJaKEU54dCgi0L738k bZklT3YNnXZFBpT2ogXkVWAmzvRyJHefxZseitLC7BsVCWGAeJwceeshGI4fSY+hojYpm+6Ada9t +EwGGbQVUaKaA7bO3266o5U21SDxmGQmnH28OPlZJPR1dks+l6/ZORphVF1M133/7+PtBXqxu4oe /RcZoRM0oIG+2esQCvLfhLJ+XdcH2BWrZsK5ZQ== )`
	ar. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250215112233 20240808123456 19606 ar. tt7KrQ/YL5rug4j4PltRH4z5hD8TvRSAFu0Xv1VbRjvq7/QzoreFI737+MBJdnczK+ynM4E4L/v0 yUMnDf4oWCIagyqqGsubg+HjvbN5YRu795JEyIGiiRxYgi7K59arZ4OBl5VMx7TyJSFHD/xqkwQc 0RTiexZ8S6LT4/gF42T4jxSzZMCk0UItTcjN8fLQN7nzR4HhLKHzhbkbDIsEdt4kKxoVcWRlQh/W qoKcDcbC4yuKtcU8057dVPPWT7nWu2iEFYSZoXZllmDtEgsAs8RWjAKPx0PdpBcuu8Km0iGEZ8st VP60wBcPpqpEA2JTVOGTY47n457rZWLPP3skwdFYQGRKWfQvstszVWPd1MvXQpGWILfoUcG+ANlk R9UCz21rPeQcOYy7mUQ75lgs2ErUn7jo2RA9ofUNv7UamCWxRCXpX1oWantSjgan8ev5HF9HQiUX T5BX3JVR5O+I8m5lFpUS2MypSil8zR1HpGT/9RcVuA1JX6pXcZ/DzLXhPx6O7LEb2e36nP22kgrB XqZms7PNSnhK0IYjyO/ywujTBAnoahUtvzl4yowW7kY2PQQhrVRuIbzt6+JvSWHIIo+Gp38fwQKZ KD84a/o8mkpwGHkujzCbLWley/BbBsxiSZ8taPgR2ZJE08vDz11lEV4XEfGLCQCzBh9Fgagiz/U= )
	RRSIG=14574 and DNSKEY=14574 verifies the DNSKEY RRset
	RRSIG=19606 and DNSKEY=19606/SEP verifies the DNSKEY RRset
	DNSKEY=14574 is now in the chain-of-trust
	Query to d.dns.ar for eth.ar/A
	Received 448 bytes from 192.140.126.50
	;; Response received from [192.140.126.50] 448 octets ;; HEADER SECTION ;; id = 44133 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) eth.ar. 7200 IN NS ns1.101domain.com. eth.ar. 7200 IN NS ns2.101domain.com. CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN NSEC3 ( 1 0 10 - cud9slp636jfgech9i6fhic1urmf90pf NS ) CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20241103211856 20241005170401 14574 ar. iiAdFkcgWTXzQmudHbaOp6aM7IJpAe33OAOZE5x/wLeIzEbN/RGIJ2uSNz9JolRyQgaobH744DXI 70+d7Yxg8hkXSA/ZK8POB173CaZSR760bmzMzUDqsTQOCAhlf9Tir0rm3kWcjJqJtAHy4H/TeK/U p7wvdVgxmwzWmJNREmU1K85QcoyGPtQvXsRQoJC9FVf+vS/aOL3StlWVPyX2ZHUDG1uA25FADhxQ bv6qEs4vdf5X1tWDcPpjH4M9yLu4e7eKtiBFc8RAiwfcFOVVYcubfh7NSNsPwVfMNkraamf2Lwgd aaFMWDPtV+tVtwOe0bMLh5SMigptZWDMj60fjQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.dns.ar for eth.ar/DNSKEY
	Received 448 bytes from 170.238.66.50
	;; Response received from [170.238.66.50] 448 octets ;; HEADER SECTION ;; id = 34580 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) eth.ar. 7200 IN NS ns2.101domain.com. eth.ar. 7200 IN NS ns1.101domain.com. CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN NSEC3 ( 1 0 10 - cud9slp636jfgech9i6fhic1urmf90pf NS ) CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20241103211856 20241005170401 14574 ar. iiAdFkcgWTXzQmudHbaOp6aM7IJpAe33OAOZE5x/wLeIzEbN/RGIJ2uSNz9JolRyQgaobH744DXI 70+d7Yxg8hkXSA/ZK8POB173CaZSR760bmzMzUDqsTQOCAhlf9Tir0rm3kWcjJqJtAHy4H/TeK/U p7wvdVgxmwzWmJNREmU1K85QcoyGPtQvXsRQoJC9FVf+vS/aOL3StlWVPyX2ZHUDG1uA25FADhxQ bv6qEs4vdf5X1tWDcPpjH4M9yLu4e7eKtiBFc8RAiwfcFOVVYcubfh7NSNsPwVfMNkraamf2Lwgd aaFMWDPtV+tVtwOe0bMLh5SMigptZWDMj60fjQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone eth.ar

eth.ar

	Checking DS between ar and eth.ar
	Query to f.dns.ar for eth.ar/DS
	Received 747 bytes from 130.59.31.20
	;; Response received from [130.59.31.20] 747 octets ;; HEADER SECTION ;; id = 29745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) ar. 7200 IN SOA ( e.dns.ar. noc.nic.gob.ar. 2024101804 ;serial 600 ;refresh 300 ;retry 1728000 ;expire 7200 ;minimum ) ar. 7200 IN RRSIG ( SOA 8 1 7200 20241117020325 20241018060351 14574 ar. SkfuxZzwaS01Nkg27xUYDIy47YmodJwFoKfWaVeesojsv53BFUpY9dmP9pvR/T4HAuB3p8u7YEXp HwKMgjaKR51Ok/oXDTeo9SLijMnAAtUFIPPolx//JOg6XQ1sUySm1j1tXKremtoazJVMPvz+KV3w UfyQz0HDIp6czlGC+lk6/v4IXNX/n2X1jncILqKYb7doTJe5pppbfSU9cja6/ZWATat7U7hDvohv BcbudaqnUupW/JV+GvBo3SyhTs86vvf24XrVNBd2owFnx538gqKxzFfS7vpSk5YBc/+N10jZ+21a pto6iNq2V8euiYPgvgv/ka5+uCvACt4DGSULXw== ) CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN NSEC3 ( 1 0 10 - cud9slp636jfgech9i6fhic1urmf90pf NS ) CUCM8BAD53HAOLN6ETSU9MELARCNJ965.ar. 7200 IN RRSIG ( NSEC3 8 2 7200 20241103211856 20241005170401 14574 ar. iiAdFkcgWTXzQmudHbaOp6aM7IJpAe33OAOZE5x/wLeIzEbN/RGIJ2uSNz9JolRyQgaobH744DXI 70+d7Yxg8hkXSA/ZK8POB173CaZSR760bmzMzUDqsTQOCAhlf9Tir0rm3kWcjJqJtAHy4H/TeK/U p7wvdVgxmwzWmJNREmU1K85QcoyGPtQvXsRQoJC9FVf+vS/aOL3StlWVPyX2ZHUDG1uA25FADhxQ bv6qEs4vdf5X1tWDcPpjH4M9yLu4e7eKtiBFc8RAiwfcFOVVYcubfh7NSNsPwVfMNkraamf2Lwgd aaFMWDPtV+tVtwOe0bMLh5SMigptZWDMj60fjQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for eth.ar in the ar zone
	Query to ns1.101domain.com for eth.ar/DNSKEY
	Received 94 bytes from 162.159.24.202
	;; Response received from [162.159.24.202] 94 octets ;; HEADER SECTION ;; id = 57244 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) eth.ar. 3600 IN SOA ( ns1.101domain.com. ADMIN.eth.ar. 2022011904 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns2.101domain.com for eth.ar/A
	Received 100 bytes from 162.159.25.156
	;; Response received from [162.159.25.156] 100 octets ;; HEADER SECTION ;; id = 35607 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (1 record) eth.ar. 86400 IN A 3.96.23.237 ;; AUTHORITY SECTION (2 records) eth.ar. 86400 IN NS ns1.101domain.com. eth.ar. 86400 IN NS ns2.101domain.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.101domain.com is authoritative for eth.ar
	Query to ns1.101domain.com for eth.ar/SOA
	Received 126 bytes from 162.159.24.202
	;; Response received from [162.159.24.202] 126 octets ;; HEADER SECTION ;; id = 56114 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN SOA ;; ANSWER SECTION (1 record) eth.ar. 14400 IN SOA ( ns1.101domain.com. ADMIN.eth.ar. 2022011904 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (2 records) eth.ar. 86400 IN NS ns1.101domain.com. eth.ar. 86400 IN NS ns2.101domain.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns2.101domain.com for eth.ar/A
	Received 100 bytes from 162.159.25.156
	;; Response received from [162.159.25.156] 100 octets ;; HEADER SECTION ;; id = 55396 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (1 record) eth.ar. 86400 IN A 3.96.23.237 ;; AUTHORITY SECTION (2 records) eth.ar. 86400 IN NS ns2.101domain.com. eth.ar. 86400 IN NS ns1.101domain.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eth.ar A RR has value 3.96.23.237
	No RRSIGs found

eth.ar

	Query to ns1.101domain.com for eth.ar/A
	Received 100 bytes from 162.159.24.202
	;; Response received from [162.159.24.202] 100 octets ;; HEADER SECTION ;; id = 64058 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (1 record) eth.ar. 86400 IN A 3.96.23.237 ;; AUTHORITY SECTION (2 records) eth.ar. 86400 IN NS ns2.101domain.com. eth.ar. 86400 IN NS ns1.101domain.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.101domain.com is authoritative for eth.ar
	Query to ns1.101domain.com for eth.ar/A
	Received 100 bytes from 162.159.24.202
	;; Response received from [162.159.24.202] 100 octets ;; HEADER SECTION ;; id = 51036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; eth.ar. IN A ;; ANSWER SECTION (1 record) eth.ar. 86400 IN A 3.96.23.237 ;; AUTHORITY SECTION (2 records) eth.ar. 86400 IN NS ns1.101domain.com. eth.ar. 86400 IN NS ns2.101domain.com. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	eth.ar A RR has value 3.96.23.237
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test eth.ar at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: