DNSSEC Analyzer

Domain Name:

Time: 2023-10-02 21:04:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for fra.se

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (1139 octets) ;; HEADER SECTION ;; id = 2216 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to c.root-servers.net for fra.se/A
	Received 975 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (975 octets) ;; HEADER SECTION ;; id = 15198 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS b.ns.se. se. 172800 IN NS a.ns.se. se. 172800 IN NS z.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS f.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; ADDITIONAL SECTION (21 records) z.ns.se. 172800 IN A 185.159.198.150 y.ns.se. 172800 IN A 185.159.197.150 x.ns.se. 172800 IN A 213.108.25.4 m.ns.se. 172800 IN A 194.0.11.112 i.ns.se. 172800 IN A 194.146.106.22 g.ns.se. 172800 IN A 130.239.5.114 f.ns.se. 172800 IN A 192.71.53.53 c.ns.se. 172800 IN A 192.36.135.107 b.ns.se. 172800 IN A 192.36.133.107 a.ns.se. 172800 IN A 192.36.144.107 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to i.root-servers.net for se/DNSKEY
	Received 971 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (971 octets) ;; HEADER SECTION ;; id = 41269 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; ADDITIONAL SECTION (21 records) z.ns.se. 172800 IN A 185.159.198.150 y.ns.se. 172800 IN A 185.159.197.150 x.ns.se. 172800 IN A 213.108.25.4 m.ns.se. 172800 IN A 194.0.11.112 i.ns.se. 172800 IN A 194.146.106.22 g.ns.se. 172800 IN A 130.239.5.114 f.ns.se. 172800 IN A 192.71.53.53 c.ns.se. 172800 IN A 192.36.135.107 b.ns.se. 172800 IN A 192.36.133.107 a.ns.se. 172800 IN A 192.36.144.107 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone se

	Checking DS between . and se
	Query to m.root-servers.net for se/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (366 octets) ;; HEADER SECTION ;; id = 8697 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DS ;; ANSWER SECTION (2 records) se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for se in the . zone
	DS=59407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=59407/SHA-256 is now in the chain-of-trust
	`se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 )`
	Query to i.ns.se for se/DNSKEY
	Received 873 bytes from 194.146.106.22
	;; Response received from 194.146.106.22 (873 octets) ;; HEADER SECTION ;; id = 55077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (3 records) se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407 se. 3600 IN DNSKEY ( 256 3 8 AwEAAa1CCGgWPeOoYclpgyPGuauo2savH2qm6vOEp6nhVqA3ABZZelkAZBN1du3vFXLmvYILWfKD oiSwzQsylRiVk82RgCMfa5q0aF+0ZJhX658Kb6i0Z3HQ1dL8lb7mkDinsHRPPqXvOA63Rzcy9L42 jqOxUNAL1OjmO99tqjNectQqdxkmx2FDxSMlcDj4iGN6M0g6gKvB6/OYawyTlEkAWDxRn8opLYA7 4AfeET7nKmrBZscZWOAqhwAo2EjvW24y7nApfNTBYtdaA2nF6AvQB0v6ThJDuv9+xt/qhOmOnAlc ajWCzWgafPb1ket3uNhOl7sC7WKwq2IzqKTmzFJZTpk= ) ; Key ID = 7906 se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231016005838 20231002131100 59407 se. pcm0T7mr/fwAwWxFEDl8AWBYLuQ8TxblM9VnAVD4+qLnEEDvBmYB3DfOxU8l0MevbfYYRnyIxfGy cob2A7cqvG5XUco0hqSVqQHLSf9bkJEbgKwywSJuj0BSxlib0qMBo/IFf1ghvh41l/qb/rYal+50 ZXLnq+bftSmCHlE/IqlUljaxSIf+H+DRXN1/1TNbc31E++NffnyZ0YUrFD9+68wxaz1vs8lpSncK PPagxKIneXMxxpbwTNdJ/52sWCfr7oTNftIYOekI5MSnxxc7x7k+DVNxgFUAZRZ81P0nG8YKtAO/ JDF2VA4yMeSUxauer6zSPZR4n9ZqIbq9z7CP+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for se
	`se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407`
	`se. 3600 IN DNSKEY ( 256 3 8 AwEAAa1CCGgWPeOoYclpgyPGuauo2savH2qm6vOEp6nhVqA3ABZZelkAZBN1du3vFXLmvYILWfKD oiSwzQsylRiVk82RgCMfa5q0aF+0ZJhX658Kb6i0Z3HQ1dL8lb7mkDinsHRPPqXvOA63Rzcy9L42 jqOxUNAL1OjmO99tqjNectQqdxkmx2FDxSMlcDj4iGN6M0g6gKvB6/OYawyTlEkAWDxRn8opLYA7 4AfeET7nKmrBZscZWOAqhwAo2EjvW24y7nApfNTBYtdaA2nF6AvQB0v6ThJDuv9+xt/qhOmOnAlc ajWCzWgafPb1ket3uNhOl7sC7WKwq2IzqKTmzFJZTpk= ) ; Key ID = 7906`
	DNSKEY=59407/SEP is now in the chain-of-trust
	DS=59407/SHA-256 verifies DNSKEY=59407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231016005838 20231002131100 59407 se. pcm0T7mr/fwAwWxFEDl8AWBYLuQ8TxblM9VnAVD4+qLnEEDvBmYB3DfOxU8l0MevbfYYRnyIxfGy cob2A7cqvG5XUco0hqSVqQHLSf9bkJEbgKwywSJuj0BSxlib0qMBo/IFf1ghvh41l/qb/rYal+50 ZXLnq+bftSmCHlE/IqlUljaxSIf+H+DRXN1/1TNbc31E++NffnyZ0YUrFD9+68wxaz1vs8lpSncK PPagxKIneXMxxpbwTNdJ/52sWCfr7oTNftIYOekI5MSnxxc7x7k+DVNxgFUAZRZ81P0nG8YKtAO/ JDF2VA4yMeSUxauer6zSPZR4n9ZqIbq9z7CP+Q== )`
	RRSIG=59407 and DNSKEY=59407/SEP verifies the DNSKEY RRset
	DNSKEY=7906 is now in the chain-of-trust
	Query to a.ns.se for fra.se/A
	Received 437 bytes from 192.36.144.107
	;; Response received from 192.36.144.107 (437 octets) ;; HEADER SECTION ;; id = 54915 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) fra.se. 86400 IN NS dns5.telia.com. fra.se. 86400 IN NS ns-01.fra.se. fra.se. 3600 IN DS ( 42217 13 2 e8409ed093ed9146b097e700129a71c1cd9d403c0ae1b1913fddfa9599b68945 ) fra.se. 3600 IN RRSIG ( DS 8 2 3600 20231013072058 20230930181102 7906 se. Tl5v3xUKfwdqgvLMAYOGt4DdpHkPBpUQErzgpq8opil3Xj6nfdeEtwSGkI+mUE/Hqj70lG1Iw7dG 6IdEiJTHeP3jQiP7UFgKhfull+h/ODq/XDgcRRjHKlU6aBu97pdFD9GcsKsBLxwDLYEdCG7tW+bp NxKQUwaRuTwjYY+JA0abhHipPu6WSIzID5KkFuGAnIkgMgUI1uZYcYjoHyu/DSC4jkDH1myoF8jZ dyo6Eh6ZPzzOYIV3WU5F0ylheqkylIogCTB8SUFIs/3Mpn9MTY4RtkGbeo+seEcNz57PGJEG2s0r 8jioXW+2CcO7iMmFbggiN71dnhRoT5Ak0XesaA== ) ;; ADDITIONAL SECTION (2 records) ns-01.fra.se. 86400 IN A 194.18.169.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to z.ns.se for fra.se/DNSKEY
	Received 437 bytes from 185.159.198.150
	;; Response received from 185.159.198.150 (437 octets) ;; HEADER SECTION ;; id = 7660 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) fra.se. 86400 IN NS dns5.telia.com. fra.se. 86400 IN NS ns-01.fra.se. fra.se. 3600 IN DS ( 42217 13 2 e8409ed093ed9146b097e700129a71c1cd9d403c0ae1b1913fddfa9599b68945 ) fra.se. 3600 IN RRSIG ( DS 8 2 3600 20231013072058 20230930181102 7906 se. Tl5v3xUKfwdqgvLMAYOGt4DdpHkPBpUQErzgpq8opil3Xj6nfdeEtwSGkI+mUE/Hqj70lG1Iw7dG 6IdEiJTHeP3jQiP7UFgKhfull+h/ODq/XDgcRRjHKlU6aBu97pdFD9GcsKsBLxwDLYEdCG7tW+bp NxKQUwaRuTwjYY+JA0abhHipPu6WSIzID5KkFuGAnIkgMgUI1uZYcYjoHyu/DSC4jkDH1myoF8jZ dyo6Eh6ZPzzOYIV3WU5F0ylheqkylIogCTB8SUFIs/3Mpn9MTY4RtkGbeo+seEcNz57PGJEG2s0r 8jioXW+2CcO7iMmFbggiN71dnhRoT5Ak0XesaA== ) ;; ADDITIONAL SECTION (2 records) ns-01.fra.se. 86400 IN A 194.18.169.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone fra.se

fra.se

	Checking DS between se and fra.se
	Query to x.ns.se for fra.se/DS
	Received 373 bytes from 213.108.25.4
	;; Response received from 213.108.25.4 (373 octets) ;; HEADER SECTION ;; id = 22592 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN DS ;; ANSWER SECTION (2 records) fra.se. 3600 IN DS ( 42217 13 2 e8409ed093ed9146b097e700129a71c1cd9d403c0ae1b1913fddfa9599b68945 ) fra.se. 3600 IN RRSIG ( DS 8 2 3600 20231013072058 20230930181102 7906 se. Tl5v3xUKfwdqgvLMAYOGt4DdpHkPBpUQErzgpq8opil3Xj6nfdeEtwSGkI+mUE/Hqj70lG1Iw7dG 6IdEiJTHeP3jQiP7UFgKhfull+h/ODq/XDgcRRjHKlU6aBu97pdFD9GcsKsBLxwDLYEdCG7tW+bp NxKQUwaRuTwjYY+JA0abhHipPu6WSIzID5KkFuGAnIkgMgUI1uZYcYjoHyu/DSC4jkDH1myoF8jZ dyo6Eh6ZPzzOYIV3WU5F0ylheqkylIogCTB8SUFIs/3Mpn9MTY4RtkGbeo+seEcNz57PGJEG2s0r 8jioXW+2CcO7iMmFbggiN71dnhRoT5Ak0XesaA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for fra.se in the se zone
	DS=42217/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`fra.se. 3600 IN RRSIG ( DS 8 2 3600 20231013072058 20230930181102 7906 se. Tl5v3xUKfwdqgvLMAYOGt4DdpHkPBpUQErzgpq8opil3Xj6nfdeEtwSGkI+mUE/Hqj70lG1Iw7dG 6IdEiJTHeP3jQiP7UFgKhfull+h/ODq/XDgcRRjHKlU6aBu97pdFD9GcsKsBLxwDLYEdCG7tW+bp NxKQUwaRuTwjYY+JA0abhHipPu6WSIzID5KkFuGAnIkgMgUI1uZYcYjoHyu/DSC4jkDH1myoF8jZ dyo6Eh6ZPzzOYIV3WU5F0ylheqkylIogCTB8SUFIs/3Mpn9MTY4RtkGbeo+seEcNz57PGJEG2s0r 8jioXW+2CcO7iMmFbggiN71dnhRoT5Ak0XesaA== )`
	RRSIG=7906 and DNSKEY=7906 verifies the DS RRset
	DS=42217/SHA-256 is now in the chain-of-trust
	`fra.se. 3600 IN DS ( 42217 13 2 e8409ed093ed9146b097e700129a71c1cd9d403c0ae1b1913fddfa9599b68945 )`
	Query to ns-01.fra.se for fra.se/DNSKEY
	Received 297 bytes from 194.18.169.39
	;; Response received from 194.18.169.39 (297 octets) ;; HEADER SECTION ;; id = 53806 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN DNSKEY ;; ANSWER SECTION (3 records) fra.se. 3600 IN DNSKEY ( 256 3 13 e/JEWBXe3b1PPt4W4wwTrlNuT8ZNSCBR9P0DeR94ELDcnTjUl7z795UXJ6FZdBF9QbvY9c14tKvv CI5g/R9Vqg== ) ; Key ID = 21323 fra.se. 3600 IN DNSKEY ( 257 3 13 1PpiJ9XFsnvwcZMpqrMNoznzyOQfyskqXuu1bkcVe91j5ygEvo8GPnHtTVP/eouxHg2J7ZP4Iem3 EhCt/pcjEQ== ) ; Key ID = 42217 fra.se. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231012070432 20230928060432 42217 fra.se. mk83NchNApWBdU1zQuWjlZSR2FMPRRjHbfvgLq0O3qJCHVwiedE88vXjIT9QwmVnEjynZ/ifAb0k Y68Yp4N1lw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for fra.se
	`fra.se. 3600 IN DNSKEY ( 256 3 13 e/JEWBXe3b1PPt4W4wwTrlNuT8ZNSCBR9P0DeR94ELDcnTjUl7z795UXJ6FZdBF9QbvY9c14tKvv CI5g/R9Vqg== ) ; Key ID = 21323`
	`fra.se. 3600 IN DNSKEY ( 257 3 13 1PpiJ9XFsnvwcZMpqrMNoznzyOQfyskqXuu1bkcVe91j5ygEvo8GPnHtTVP/eouxHg2J7ZP4Iem3 EhCt/pcjEQ== ) ; Key ID = 42217`
	DNSKEY=42217/SEP is now in the chain-of-trust
	DS=42217/SHA-256 verifies DNSKEY=42217/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fra.se. 3600 IN RRSIG ( DNSKEY 13 2 3600 20231012070432 20230928060432 42217 fra.se. mk83NchNApWBdU1zQuWjlZSR2FMPRRjHbfvgLq0O3qJCHVwiedE88vXjIT9QwmVnEjynZ/ifAb0k Y68Yp4N1lw== )`
	RRSIG=42217 and DNSKEY=42217/SEP verifies the DNSKEY RRset
	DNSKEY=21323 is now in the chain-of-trust
	Query to ns-01.fra.se for fra.se/A
	Received 421 bytes from 194.18.169.39
	;; Response received from 194.18.169.39 (421 octets) ;; HEADER SECTION ;; id = 14178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (2 records) fra.se. 3600 IN A 194.18.169.38 fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== ) ;; AUTHORITY SECTION (3 records) fra.se. 3600 IN NS ns-01.fra.se. fra.se. 3600 IN NS dns5.telia.com. fra.se. 3600 IN RRSIG ( NS 13 2 3600 20231009194432 20230925192937 21323 fra.se. Jlekm5ZnWadrrMfnYHM49shikSm7UIpaAxmjfU1rXTW7wX4w4jyrjHLoouf2GVyYf9lcsmASCscZ gsIPtx3WAA== ) ;; ADDITIONAL SECTION (3 records) ns-01.fra.se. 3600 IN A 194.18.169.39 ns-01.fra.se. 3600 IN RRSIG ( A 13 3 3600 20231008062445 20230924054902 21323 fra.se. zYTUZEoHX8OZrh662MMfKAzCESUJNsO5TuMiF47kqqq2VhXcGHqUAcYTR/UbSbaaR9PD0HsZXhSA sBq8GP/qcQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns-01.fra.se is authoritative for fra.se
	Found RRSIG signed by fra.se zone
	Query to dns5.telia.com for fra.se/SOA
	Received 452 bytes from 81.228.11.68
	;; Response received from 81.228.11.68 (452 octets) ;; HEADER SECTION ;; id = 28749 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN SOA ;; ANSWER SECTION (2 records) fra.se. 3600 IN SOA ( ns-01.fra.se. hostmaster.fra.se. 2023092067 ;serial 120 ;refresh 60 ;retry 300 ;expire 120 ;minimum ) fra.se. 3600 IN RRSIG ( SOA 13 2 3600 20231016205354 20231002195354 21323 fra.se. XzPEdvbCi70IFKbv0Y9+KWdipaXLJkvW94y90QhjO3u73EjlvrK65y9Qpmz/zd2ETyDFfzzy0ngi MYfYlD6XWQ== ) ;; AUTHORITY SECTION (3 records) fra.se. 3600 IN NS dns5.telia.com. fra.se. 3600 IN NS ns-01.fra.se. fra.se. 3600 IN RRSIG ( NS 13 2 3600 20231009194432 20230925192937 21323 fra.se. Jlekm5ZnWadrrMfnYHM49shikSm7UIpaAxmjfU1rXTW7wX4w4jyrjHLoouf2GVyYf9lcsmASCscZ gsIPtx3WAA== ) ;; ADDITIONAL SECTION (3 records) ns-01.fra.se. 3600 IN A 194.18.169.39 ns-01.fra.se. 3600 IN RRSIG ( A 13 3 3600 20231008062445 20230924054902 21323 fra.se. zYTUZEoHX8OZrh662MMfKAzCESUJNsO5TuMiF47kqqq2VhXcGHqUAcYTR/UbSbaaR9PD0HsZXhSA sBq8GP/qcQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-01.fra.se for fra.se/A
	Received 421 bytes from 194.18.169.39
	;; Response received from 194.18.169.39 (421 octets) ;; HEADER SECTION ;; id = 2065 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (2 records) fra.se. 3600 IN A 194.18.169.38 fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== ) ;; AUTHORITY SECTION (3 records) fra.se. 3600 IN NS dns5.telia.com. fra.se. 3600 IN NS ns-01.fra.se. fra.se. 3600 IN RRSIG ( NS 13 2 3600 20231009194432 20230925192937 21323 fra.se. Jlekm5ZnWadrrMfnYHM49shikSm7UIpaAxmjfU1rXTW7wX4w4jyrjHLoouf2GVyYf9lcsmASCscZ gsIPtx3WAA== ) ;; ADDITIONAL SECTION (3 records) ns-01.fra.se. 3600 IN A 194.18.169.39 ns-01.fra.se. 3600 IN RRSIG ( A 13 3 3600 20231008062445 20230924054902 21323 fra.se. zYTUZEoHX8OZrh662MMfKAzCESUJNsO5TuMiF47kqqq2VhXcGHqUAcYTR/UbSbaaR9PD0HsZXhSA sBq8GP/qcQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fra.se A RR has value 194.18.169.38
	Found 1 RRSIGs over A RRset
	`fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== )`
	RRSIG=21323 and DNSKEY=21323 verifies the A RRset

fra.se

	Query to dns5.telia.com for fra.se/A
	Received 421 bytes from 81.228.11.68
	;; Response received from 81.228.11.68 (421 octets) ;; HEADER SECTION ;; id = 28339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (2 records) fra.se. 3600 IN A 194.18.169.38 fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== ) ;; AUTHORITY SECTION (3 records) fra.se. 3600 IN NS ns-01.fra.se. fra.se. 3600 IN NS dns5.telia.com. fra.se. 3600 IN RRSIG ( NS 13 2 3600 20231009194432 20230925192937 21323 fra.se. Jlekm5ZnWadrrMfnYHM49shikSm7UIpaAxmjfU1rXTW7wX4w4jyrjHLoouf2GVyYf9lcsmASCscZ gsIPtx3WAA== ) ;; ADDITIONAL SECTION (3 records) ns-01.fra.se. 3600 IN A 194.18.169.39 ns-01.fra.se. 3600 IN RRSIG ( A 13 3 3600 20231008062445 20230924054902 21323 fra.se. zYTUZEoHX8OZrh662MMfKAzCESUJNsO5TuMiF47kqqq2VhXcGHqUAcYTR/UbSbaaR9PD0HsZXhSA sBq8GP/qcQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dns5.telia.com is authoritative for fra.se
	Found RRSIG signed by fra.se zone
	Query to dns5.telia.com for fra.se/A
	Received 421 bytes from 81.228.11.68
	;; Response received from 81.228.11.68 (421 octets) ;; HEADER SECTION ;; id = 46910 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fra.se. IN A ;; ANSWER SECTION (2 records) fra.se. 3600 IN A 194.18.169.38 fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== ) ;; AUTHORITY SECTION (3 records) fra.se. 3600 IN NS dns5.telia.com. fra.se. 3600 IN NS ns-01.fra.se. fra.se. 3600 IN RRSIG ( NS 13 2 3600 20231009194432 20230925192937 21323 fra.se. Jlekm5ZnWadrrMfnYHM49shikSm7UIpaAxmjfU1rXTW7wX4w4jyrjHLoouf2GVyYf9lcsmASCscZ gsIPtx3WAA== ) ;; ADDITIONAL SECTION (3 records) ns-01.fra.se. 3600 IN A 194.18.169.39 ns-01.fra.se. 3600 IN RRSIG ( A 13 3 3600 20231008062445 20230924054902 21323 fra.se. zYTUZEoHX8OZrh662MMfKAzCESUJNsO5TuMiF47kqqq2VhXcGHqUAcYTR/UbSbaaR9PD0HsZXhSA sBq8GP/qcQ== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	fra.se A RR has value 194.18.169.38
	Found 1 RRSIGs over A RRset
	`fra.se. 3600 IN RRSIG ( A 13 2 3600 20231009194432 20230925192937 21323 fra.se. wC6m4pCds2Eatk6yX9r1x4LRJUA1t9nZNkJbNeYWFCTQw5qsubTibVRzZYd+iInubEzJXfG/nWvt 8HReJIQ1BQ== )`
	RRSIG=21323 and DNSKEY=21323 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test fra.se at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: