DNSSEC Analyzer - fifthhorseman.net

Domain Name:

Time: 2023-09-24 17:29:02 UTC, NTP stratum 4

Analyzing DNSSEC problems for fifthhorseman.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1141 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (1141 octets) ;; HEADER SECTION ;; id = 1088 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to j.root-servers.net for fifthhorseman.net/A
	Received 1174 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (1174 octets) ;; HEADER SECTION ;; id = 28606 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to h.root-servers.net for net/DNSKEY
	Received 1160 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1160 octets) ;; HEADER SECTION ;; id = 45266 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; ADDITIONAL SECTION (27 records) a.gtld-servers.net. 172800 IN A 192.5.6.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 m.gtld-servers.net. 172800 IN A 192.55.83.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to e.root-servers.net for net/DS
	Received 367 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (367 octets) ;; HEADER SECTION ;; id = 15958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . Zg602jZRIYrec5+0crOTsFwdfJt+g+cqx0vkcAwh2cBL3AbG4QutdSzyL1J+Be6xWN9TDD7HBYKc iCjhmX6einJRklUAtsRk0k8Lo1i8VM0ZtkDjEL7/+VEpljwx+AgGI0nt0L+r5hdX+FdhRTfVLZH/ +ElY5gHJLotKsP7MjHN9gM75SqfveuWbx54ej0puvb/WghyxWkuoU4Hw8LN6AZrE7DZErjR135mW hnXozdn0Wbrtp3FgQvGKlgCPIm5McOAym6d8nJvdQNGkD9aqumc+hBMT+deUNgFh+UmYpxZ84qPJ xGME52tCYNne+jBIWJULr25tOKCrA8ebRPoCtg== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to h.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.54.112.30
	;; Response received from 192.54.112.30 (775 octets) ;; HEADER SECTION ;; id = 30256 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231001162830 20230916162330 35886 net. C0+8AhpBvQh8g+1WCw0fqhf19LBWU6OQ6QR7orTH4USucZIVL1fF2zoRLEzpaUmIGQPMTnnXZKyM xuZmijyaUEzj59HYnciFY7HQw/wBPKgDmg1GIXOO8mWEzgaG3WZdxmg/m4taYtP8q4cZjzw0c8An vudWBHeJeoOU+RLnnspJhPWmTzonlb2v5YREnc77MEeSYrI+Cpjvh7W88gxI+XGHtSOc3SWYGUy6 gxwI15kIy1azkmWpKibE0/Z+JVwwsT1RZvRWUK6G+qFa4FzfuGfio4p4mhH+4Dp+Wvf6kpi7BKxd NjI2YASuLfEosbr9SHHv2O04lwCLwOABqfq+dw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQOstEm49K0FIgk1w6UGsbSAhErae1/r2RYzSpWvUe2ksZ/QcVpVx8GPnjJDb6hFhbU5sbpu89qb g4FmlAAqs9Bn+Lm2E1joNbeiCZ5HRC3/jK0m2D8+YCz6YcnV4EmpMoxxeQdwLAQ3XO6GAttKtApU 493b1XkjIS5sr4DR4uBMlw6rhxiSL7fnVShVzOS7jfPcdglU8qmatZFNMs///cS5 ) ; Key ID = 39455`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231001162830 20230916162330 35886 net. C0+8AhpBvQh8g+1WCw0fqhf19LBWU6OQ6QR7orTH4USucZIVL1fF2zoRLEzpaUmIGQPMTnnXZKyM xuZmijyaUEzj59HYnciFY7HQw/wBPKgDmg1GIXOO8mWEzgaG3WZdxmg/m4taYtP8q4cZjzw0c8An vudWBHeJeoOU+RLnnspJhPWmTzonlb2v5YREnc77MEeSYrI+Cpjvh7W88gxI+XGHtSOc3SWYGUy6 gxwI15kIy1azkmWpKibE0/Z+JVwwsT1RZvRWUK6G+qFa4FzfuGfio4p4mhH+4Dp+Wvf6kpi7BKxd NjI2YASuLfEosbr9SHHv2O04lwCLwOABqfq+dw== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=39455 is now in the chain-of-trust
	Query to k.gtld-servers.net for fifthhorseman.net/A
	Received 718 bytes from 192.52.178.30
	;; Response received from 192.52.178.30 (718 octets) ;; HEADER SECTION ;; id = 59858 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fifthhorseman.net. 172800 IN NS a.ns.fifthhorseman.net. fifthhorseman.net. 172800 IN NS b.ns.fifthhorseman.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231001070104 20230924055104 39455 net. PgYHIoQ75xjjl+p+MrelG49+FtP1XzCzwsVuU3y5cwFgJcWoMqD5YUb78SzX9IESh/BasNF6vZDw EZHHrdfqfHmKlRD+QVIeiDPKeeJXqSA6vG7J8jdpYKDDLKP2etcy4pQGhV5CYMN0ru5tAU//ZI5f MQvWA/I5B8HjWdQdbcgw+25/bkTA7VByC2YvbPzyBJRQfg7OhzPOPhzsI+LyHg== ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN NSEC3 ( 1 1 0 - ghr57ah6g1967ugrn1n2c5afiv9btui6 NS DS RRSIG ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230928070036 20230921055036 39455 net. IXmcbPyhtsoZl8LUA/6gseGTPgXOCPELdfekEyD7N1wW/ZxpNB+P+6/zeeamfE0PdBD8bsP9cIjv b3vI8msDNs8apiZV0QTTKIwcT2LbWyWzXQ6mL7AUHqeYVHPz+9godMDPMnf7h6UqARZJ+HTbmrFZ GODxbsWQUtv6yuL5Kcz4kFE8JWoPbsMy+898wrYLE5x9yFsJCIQeFXE28faqbA== ) ;; ADDITIONAL SECTION (5 records) a.ns.fifthhorseman.net. 172800 IN A 162.247.75.118 a.ns.fifthhorseman.net. 172800 IN AAAA 2001:470:1:116::a b.ns.fifthhorseman.net. 172800 IN A 108.58.6.98 b.ns.fifthhorseman.net. 172800 IN AAAA 2001:470:1f07:60d::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.gtld-servers.net for fifthhorseman.net/DNSKEY
	Received 718 bytes from 192.26.92.30
	;; Response received from 192.26.92.30 (718 octets) ;; HEADER SECTION ;; id = 4657 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) fifthhorseman.net. 172800 IN NS a.ns.fifthhorseman.net. fifthhorseman.net. 172800 IN NS b.ns.fifthhorseman.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231001070104 20230924055104 39455 net. PgYHIoQ75xjjl+p+MrelG49+FtP1XzCzwsVuU3y5cwFgJcWoMqD5YUb78SzX9IESh/BasNF6vZDw EZHHrdfqfHmKlRD+QVIeiDPKeeJXqSA6vG7J8jdpYKDDLKP2etcy4pQGhV5CYMN0ru5tAU//ZI5f MQvWA/I5B8HjWdQdbcgw+25/bkTA7VByC2YvbPzyBJRQfg7OhzPOPhzsI+LyHg== ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN NSEC3 ( 1 1 0 - ghr57ah6g1967ugrn1n2c5afiv9btui6 NS DS RRSIG ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230928070036 20230921055036 39455 net. IXmcbPyhtsoZl8LUA/6gseGTPgXOCPELdfekEyD7N1wW/ZxpNB+P+6/zeeamfE0PdBD8bsP9cIjv b3vI8msDNs8apiZV0QTTKIwcT2LbWyWzXQ6mL7AUHqeYVHPz+9godMDPMnf7h6UqARZJ+HTbmrFZ GODxbsWQUtv6yuL5Kcz4kFE8JWoPbsMy+898wrYLE5x9yFsJCIQeFXE28faqbA== ) ;; ADDITIONAL SECTION (5 records) a.ns.fifthhorseman.net. 172800 IN A 162.247.75.118 a.ns.fifthhorseman.net. 172800 IN AAAA 2001:470:1:116::a b.ns.fifthhorseman.net. 172800 IN A 108.58.6.98 b.ns.fifthhorseman.net. 172800 IN AAAA 2001:470:1f07:60d::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone fifthhorseman.net

fifthhorseman.net

	Checking DS between net and fifthhorseman.net
	Query to d.gtld-servers.net for fifthhorseman.net/DS
	Received 863 bytes from 192.31.80.30
	;; Response received from 192.31.80.30 (863 octets) ;; HEADER SECTION ;; id = 26469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20231001070104 20230924055104 39455 net. PgYHIoQ75xjjl+p+MrelG49+FtP1XzCzwsVuU3y5cwFgJcWoMqD5YUb78SzX9IESh/BasNF6vZDw EZHHrdfqfHmKlRD+QVIeiDPKeeJXqSA6vG7J8jdpYKDDLKP2etcy4pQGhV5CYMN0ru5tAU//ZI5f MQvWA/I5B8HjWdQdbcgw+25/bkTA7VByC2YvbPzyBJRQfg7OhzPOPhzsI+LyHg== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1695576507 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20231001172827 20230924161827 39455 net. IZF70H2WXuNxZwUiz+R9/bGsZhWSq0oBO7XREjqhVQBiu5UK5BDuXZwxl+ZtIjBSqcMnzAwZlTve RicbxUHEv8atHI6lIKE3fa6A/mm29q/4FQ+ppSPj68ZhJt3CdQVJgHlezlgC5OP73OmJAbTux4xh WSL7JrArp1jHb81rN43mEhdPQSkZ/Jd12kQB7hQ9Rv1BfHeIfhbFOEycOpKBsA== ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN NSEC3 ( 1 1 0 - ghr57ah6g1967ugrn1n2c5afiv9btui6 NS DS RRSIG ) GHR2BQMKTBMT0ES71R1H44B4DE0LO2JL.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20230928070036 20230921055036 39455 net. IXmcbPyhtsoZl8LUA/6gseGTPgXOCPELdfekEyD7N1wW/ZxpNB+P+6/zeeamfE0PdBD8bsP9cIjv b3vI8msDNs8apiZV0QTTKIwcT2LbWyWzXQ6mL7AUHqeYVHPz+9godMDPMnf7h6UqARZJ+HTbmrFZ GODxbsWQUtv6yuL5Kcz4kFE8JWoPbsMy+898wrYLE5x9yFsJCIQeFXE28faqbA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for fifthhorseman.net in the net zone
	Query to a.ns.fifthhorseman.net for fifthhorseman.net/DNSKEY
	Received 98 bytes from 162.247.75.118
	;; Response received from 162.247.75.118 (98 octets) ;; HEADER SECTION ;; id = 55559 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) fifthhorseman.net. 86400 IN SOA ( a.ns.fifthhorseman.net. hostmaster.fifthhorseman.net. 2020060500 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to a.ns.fifthhorseman.net for fifthhorseman.net/A
	Received 62 bytes from 162.247.75.118
	;; Response received from 162.247.75.118 (62 octets) ;; HEADER SECTION ;; id = 51902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (1 record) fifthhorseman.net. 3600 IN A 216.92.114.179 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	a.ns.fifthhorseman.net is authoritative for fifthhorseman.net
	Query to b.ns.fifthhorseman.net for fifthhorseman.net/SOA
	Received 98 bytes from 108.58.6.98
	;; Response received from 108.58.6.98 (98 octets) ;; HEADER SECTION ;; id = 45614 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN SOA ;; ANSWER SECTION (1 record) fifthhorseman.net. 86400 IN SOA ( a.ns.fifthhorseman.net. hostmaster.fifthhorseman.net. 2020060500 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.ns.fifthhorseman.net for fifthhorseman.net/A
	Received 62 bytes from 162.247.75.118
	;; Response received from 162.247.75.118 (62 octets) ;; HEADER SECTION ;; id = 23933 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (1 record) fifthhorseman.net. 3600 IN A 216.92.114.179 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fifthhorseman.net A RR has value 216.92.114.179
	No RRSIGs found

fifthhorseman.net

	Query to b.ns.fifthhorseman.net for fifthhorseman.net/A
	Received 62 bytes from 108.58.6.98
	;; Response received from 108.58.6.98 (62 octets) ;; HEADER SECTION ;; id = 67 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (1 record) fifthhorseman.net. 3600 IN A 216.92.114.179 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	b.ns.fifthhorseman.net is authoritative for fifthhorseman.net
	Query to b.ns.fifthhorseman.net for fifthhorseman.net/A
	Received 62 bytes from 108.58.6.98
	;; Response received from 108.58.6.98 (62 octets) ;; HEADER SECTION ;; id = 33161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fifthhorseman.net. IN A ;; ANSWER SECTION (1 record) fifthhorseman.net. 3600 IN A 216.92.114.179 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fifthhorseman.net A RR has value 216.92.114.179
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fifthhorseman.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: