DNSSEC Analyzer - freeshell.de

Domain Name:

Time: 2021-10-16 11:18:11 UTC, NTP stratum 16

Analyzing DNSSEC problems for freeshell.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 59032 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to h.root-servers.net for freeshell.de/A
	Received 746 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (746 octets) ;; HEADER SECTION ;; id = 1642 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . JIWAmJsHCE61bmIj1joSqxdpYhiMJi7K6pEGFbXhPabra994AogI1r6hSf4PTXaP8arl11ysbUgH uhA/jSqvohHobtFV1qinst+9b0+aqcVZG7CygSq9sousg9S7dRWF831DPlZoR/RoC44vciNKoeID XE7piKWnt2MlNczwSAVjmNisD5BB3QgKcZc54W/ypGo9of1/jPayYDXxRuoZW8hFQec2eYcKznEQ 35+Z+k5RJ6ZOZShokL7ErzGHuqgQjhJqMW+htGPlcbwxI2xCplXk4zJ1tEkSRJ85h5UHVB3M94ub w+XLjjVwK6DjwOBRn2HbrUbC8m5LKdYez4vxrQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for de/DNSKEY
	Received 736 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (736 octets) ;; HEADER SECTION ;; id = 866 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS z.nic.de. de. 172800 IN NS s.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS f.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . JIWAmJsHCE61bmIj1joSqxdpYhiMJi7K6pEGFbXhPabra994AogI1r6hSf4PTXaP8arl11ysbUgH uhA/jSqvohHobtFV1qinst+9b0+aqcVZG7CygSq9sousg9S7dRWF831DPlZoR/RoC44vciNKoeID XE7piKWnt2MlNczwSAVjmNisD5BB3QgKcZc54W/ypGo9of1/jPayYDXxRuoZW8hFQec2eYcKznEQ 35+Z+k5RJ6ZOZShokL7ErzGHuqgQjhJqMW+htGPlcbwxI2xCplXk4zJ1tEkSRJ85h5UHVB3M94ub w+XLjjVwK6DjwOBRn2HbrUbC8m5LKdYez4vxrQ== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to i.root-servers.net for de/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (366 octets) ;; HEADER SECTION ;; id = 45811 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . JIWAmJsHCE61bmIj1joSqxdpYhiMJi7K6pEGFbXhPabra994AogI1r6hSf4PTXaP8arl11ysbUgH uhA/jSqvohHobtFV1qinst+9b0+aqcVZG7CygSq9sousg9S7dRWF831DPlZoR/RoC44vciNKoeID XE7piKWnt2MlNczwSAVjmNisD5BB3QgKcZc54W/ypGo9of1/jPayYDXxRuoZW8hFQec2eYcKznEQ 35+Z+k5RJ6ZOZShokL7ErzGHuqgQjhJqMW+htGPlcbwxI2xCplXk4zJ1tEkSRJ85h5UHVB3M94ub w+XLjjVwK6DjwOBRn2HbrUbC8m5LKdYez4vxrQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . JIWAmJsHCE61bmIj1joSqxdpYhiMJi7K6pEGFbXhPabra994AogI1r6hSf4PTXaP8arl11ysbUgH uhA/jSqvohHobtFV1qinst+9b0+aqcVZG7CygSq9sousg9S7dRWF831DPlZoR/RoC44vciNKoeID XE7piKWnt2MlNczwSAVjmNisD5BB3QgKcZc54W/ypGo9of1/jPayYDXxRuoZW8hFQec2eYcKznEQ 35+Z+k5RJ6ZOZShokL7ErzGHuqgQjhJqMW+htGPlcbwxI2xCplXk4zJ1tEkSRJ85h5UHVB3M94ub w+XLjjVwK6DjwOBRn2HbrUbC8m5LKdYez4vxrQ== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to z.nic.de for de/DNSKEY
	Received 893 bytes from 194.246.96.1
	;; Response received from 194.246.96.1 (893 octets) ;; HEADER SECTION ;; id = 61978 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 300 IN DNSKEY ( 256 3 8 AwEAAcDA1BKGqBs+70soJLlN0jnldTFWDH01rL4blxOJBURGbaFBQIo4+/ToAEFdP4Wi8P0RHrce 5K/PoV7p6tdX0gtfpL1pCTTrU6IICcndQiRdvpygGg3pOutel08o3RzlnSg4jLTo0aF4sSU4uorK 9DR3/XBv3hKFqwxP2wOSQKzL ) ; Key ID = 44520 de. 300 IN DNSKEY ( 256 3 8 AwEAAeCLhXE/CgpAs+6sbFuoB4V1FqmIWlAX+728lJ3Y7x4p6PgtIxu3QpnSfcT7ppLgrqukO+gS aewPyAiedMEJ568fQ6+b8ppm1hCD077XR2EXqOX3cK7rzcVbvuNT9RwcCSmmktN6FbVE5AQKlHyh JqdVAV8O8AXAaTH4gGAm0oub ) ; Key ID = 54729 de. 300 IN RRSIG ( DNSKEY 8 1 300 20211023171243 20211009154243 26755 de. mHqRtX2FZRhsdaLOeKyxsUuenxJGX/9d+Yap+YINfuUyjzQdhQQ2DKlw+Hra7C8cu2i4hAvWu6ko 7oS9WMLF7SkDt6fVjceKxNV7SuGKAkfLEOxhqzuughB1+kfrQs2k1+Xw39c77r21tzGTJ6FKbtqT /gHPtkCocrMaAGJLvPnSLL6DZna5Hym8puMfRGB0bj6nPxMMXPfgCExz5TM0Q8mD4672DIXpnZpC ji/sreKFkUrEZrT4LaT8fcVjFVy3TIwp7FCebQlvXNovwc370/MYYjrjPnFSutlTOhdhO2DzNKFf 4xF3SYl/yYjStQD4ALcspBzbbBAyJOGz10bfKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 3 DNSKEY records for de
	`de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAcDA1BKGqBs+70soJLlN0jnldTFWDH01rL4blxOJBURGbaFBQIo4+/ToAEFdP4Wi8P0RHrce 5K/PoV7p6tdX0gtfpL1pCTTrU6IICcndQiRdvpygGg3pOutel08o3RzlnSg4jLTo0aF4sSU4uorK 9DR3/XBv3hKFqwxP2wOSQKzL ) ; Key ID = 44520`
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAeCLhXE/CgpAs+6sbFuoB4V1FqmIWlAX+728lJ3Y7x4p6PgtIxu3QpnSfcT7ppLgrqukO+gS aewPyAiedMEJ568fQ6+b8ppm1hCD077XR2EXqOX3cK7rzcVbvuNT9RwcCSmmktN6FbVE5AQKlHyh JqdVAV8O8AXAaTH4gGAm0oub ) ; Key ID = 54729`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 300 IN RRSIG ( DNSKEY 8 1 300 20211023171243 20211009154243 26755 de. mHqRtX2FZRhsdaLOeKyxsUuenxJGX/9d+Yap+YINfuUyjzQdhQQ2DKlw+Hra7C8cu2i4hAvWu6ko 7oS9WMLF7SkDt6fVjceKxNV7SuGKAkfLEOxhqzuughB1+kfrQs2k1+Xw39c77r21tzGTJ6FKbtqT /gHPtkCocrMaAGJLvPnSLL6DZna5Hym8puMfRGB0bj6nPxMMXPfgCExz5TM0Q8mD4672DIXpnZpC ji/sreKFkUrEZrT4LaT8fcVjFVy3TIwp7FCebQlvXNovwc370/MYYjrjPnFSutlTOhdhO2DzNKFf 4xF3SYl/yYjStQD4ALcspBzbbBAyJOGz10bfKQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=44520 is now in the chain-of-trust
	DNSKEY=54729 is now in the chain-of-trust
	Query to l.de.net for freeshell.de/A
	Received 351 bytes from 77.67.63.105
	;; Response received from 77.67.63.105 (351 octets) ;; HEADER SECTION ;; id = 21504 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20211027051816 20211013034816 44520 de. gNtAm68uzxeOVpZV0ZIjvr0CCQtp91CCBwrYqZ7xMMeV8f+LBUvmh6mu4mxgUcgvaENk9RMwNwgu HD9hVabSfh0chuefJMVYnPyc+9ldq5uOGK4oKMCOhnv92wkqAZPAIHa0tMkooMaLLxppYRbpIX/K tU/pb/38CuxAHvX/SZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.nic.de for freeshell.de/DNSKEY
	Received 351 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (351 octets) ;; HEADER SECTION ;; id = 32770 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20211027051816 20211013034816 44520 de. gNtAm68uzxeOVpZV0ZIjvr0CCQtp91CCBwrYqZ7xMMeV8f+LBUvmh6mu4mxgUcgvaENk9RMwNwgu HD9hVabSfh0chuefJMVYnPyc+9ldq5uOGK4oKMCOhnv92wkqAZPAIHa0tMkooMaLLxppYRbpIX/K tU/pb/38CuxAHvX/SZg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found child zone freeshell.de

freeshell.de

	Checking DS between de and freeshell.de
	Query to s.de.net for freeshell.de/DS
	Received 299 bytes from 195.243.137.26
	;; Response received from 195.243.137.26 (299 octets) ;; HEADER SECTION ;; id = 24225 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DS ;; ANSWER SECTION (3 records) freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20211027051816 20211013034816 44520 de. gNtAm68uzxeOVpZV0ZIjvr0CCQtp91CCBwrYqZ7xMMeV8f+LBUvmh6mu4mxgUcgvaENk9RMwNwgu HD9hVabSfh0chuefJMVYnPyc+9ldq5uOGK4oKMCOhnv92wkqAZPAIHa0tMkooMaLLxppYRbpIX/K tU/pb/38CuxAHvX/SZg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for freeshell.de in the de zone
	DS=37158/SHA-256 has algorithm RSASHA1
	DS=40460/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20211027051816 20211013034816 44520 de. gNtAm68uzxeOVpZV0ZIjvr0CCQtp91CCBwrYqZ7xMMeV8f+LBUvmh6mu4mxgUcgvaENk9RMwNwgu HD9hVabSfh0chuefJMVYnPyc+9ldq5uOGK4oKMCOhnv92wkqAZPAIHa0tMkooMaLLxppYRbpIX/K tU/pb/38CuxAHvX/SZg= )`
	RRSIG=44520 and DNSKEY=44520 verifies the DS RRset
	DS=37158/SHA-256 is now in the chain-of-trust
	DS=40460/SHA-256 is now in the chain-of-trust
	`freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 )`
	`freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf )`
	Query to ns1.nic-nac-project.de for freeshell.de/DNSKEY
	Received 685 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (685 octets) ;; HEADER SECTION ;; id = 22750 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (4 records) freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158 freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460 freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20211115153128 20210916153128 37158 freeshell.de. bNFO3epsN/M2Ew2cjNJDMWPFEKeczrvwg3y6tpQE8jnDcCCBMCP3nNL5KverT7NqFbVm1Pkttb07 PGtbPfDALZkN/rLq84KJR/DUaHp0Yv38mfjyDr2L4Y59Vs59gxus12+pSV2zK8G43lANZpf1e5QJ fMuiXs/46VUZRDhkya4= ) freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20211115153128 20210916153128 40460 freeshell.de. vSMOGpZU3aqmFXcrNvUGznfvUEWMisipIWO/wjOoGYhGgPzX8YauGS3SvdJ+bJvuO7pHYWowN644 MYi5s6UG9CRGGNwLOaCdRF0EvEM1+1sgtxDP7c0VnLySs1F94QlIBVjG/qFrQrDkVRVzEuAfqsZl 9BkvgngUOpKyYqwzeLc= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for freeshell.de
	`freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158`
	`freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460`
	DNSKEY=37158/SEP is now in the chain-of-trust
	DS=37158/SHA-256 verifies DNSKEY=37158/SEP
	DNSKEY=40460 is now in the chain-of-trust
	DS=40460/SHA-256 verifies DNSKEY=40460
	Found 2 RRSIGs over DNSKEY RRset
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20211115153128 20210916153128 37158 freeshell.de. bNFO3epsN/M2Ew2cjNJDMWPFEKeczrvwg3y6tpQE8jnDcCCBMCP3nNL5KverT7NqFbVm1Pkttb07 PGtbPfDALZkN/rLq84KJR/DUaHp0Yv38mfjyDr2L4Y59Vs59gxus12+pSV2zK8G43lANZpf1e5QJ fMuiXs/46VUZRDhkya4= )`
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20211115153128 20210916153128 40460 freeshell.de. vSMOGpZU3aqmFXcrNvUGznfvUEWMisipIWO/wjOoGYhGgPzX8YauGS3SvdJ+bJvuO7pHYWowN644 MYi5s6UG9CRGGNwLOaCdRF0EvEM1+1sgtxDP7c0VnLySs1F94QlIBVjG/qFrQrDkVRVzEuAfqsZl 9BkvgngUOpKyYqwzeLc= )`
	RRSIG=37158 and DNSKEY=37158/SEP verifies the DNSKEY RRset
	RRSIG=40460 and DNSKEY=40460 verifies the DNSKEY RRset
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 15115 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20211115153128 20210916153128 40460 freeshell.de. AW0dCsMtyT6cazTSJ2alGgT9DEhF7oN7U6KdXN++pXuULSbzfbuA2Pyw52QPGcWNZicTvCGvhcGi G0tRLabB9WO9HWGAAnN6J8te4HunyjbOWeI6SxXqBxW1q5oCqwazfnKz9kudQLSzaZtAj8ne6Itc 2+u03PFs9QZXlMEIXEQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/SOA
	Received 484 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (484 octets) ;; HEADER SECTION ;; id = 3124 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN SOA ;; ANSWER SECTION (2 records) freeshell.de. 600 IN SOA ( ns1.nic-nac-project.de. postmaster.nic-nac-project.de. 2021091602 ;serial 3600 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) freeshell.de. 600 IN RRSIG ( SOA 5 2 600 20211115153128 20210916153128 40460 freeshell.de. Z9eALxAs1Cdsxy49u83Q3XZgjlKhixw6rf5x0DieJJTsQB2TnfpfoRdtoe638OCnFKRRlj7nrG5n TfrXMA827XhyRTp9c+lEChmDhSQWSLUK6Rojbwhh1Wik1090/uGalru5q0AUqidCzql5FRNP6JyO JGiWdH0QSdUfi0vStGY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20211115153128 20210916153128 40460 freeshell.de. AW0dCsMtyT6cazTSJ2alGgT9DEhF7oN7U6KdXN++pXuULSbzfbuA2Pyw52QPGcWNZicTvCGvhcGi G0tRLabB9WO9HWGAAnN6J8te4HunyjbOWeI6SxXqBxW1q5oCqwazfnKz9kudQLSzaZtAj8ne6Itc 2+u03PFs9QZXlMEIXEQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 57145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20211115153128 20210916153128 40460 freeshell.de. AW0dCsMtyT6cazTSJ2alGgT9DEhF7oN7U6KdXN++pXuULSbzfbuA2Pyw52QPGcWNZicTvCGvhcGi G0tRLabB9WO9HWGAAnN6J8te4HunyjbOWeI6SxXqBxW1q5oCqwazfnKz9kudQLSzaZtAj8ne6Itc 2+u03PFs9QZXlMEIXEQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

freeshell.de

	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 34847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20211115153128 20210916153128 40460 freeshell.de. AW0dCsMtyT6cazTSJ2alGgT9DEhF7oN7U6KdXN++pXuULSbzfbuA2Pyw52QPGcWNZicTvCGvhcGi G0tRLabB9WO9HWGAAnN6J8te4HunyjbOWeI6SxXqBxW1q5oCqwazfnKz9kudQLSzaZtAj8ne6Itc 2+u03PFs9QZXlMEIXEQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 36262 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20211115153128 20210916153128 40460 freeshell.de. AW0dCsMtyT6cazTSJ2alGgT9DEhF7oN7U6KdXN++pXuULSbzfbuA2Pyw52QPGcWNZicTvCGvhcGi G0tRLabB9WO9HWGAAnN6J8te4HunyjbOWeI6SxXqBxW1q5oCqwazfnKz9kudQLSzaZtAj8ne6Itc 2+u03PFs9QZXlMEIXEQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20211115153128 20210916153128 40460 freeshell.de. qi9469dqwt2qL//kEvPCMM9vngGkS4iT7Zs74QTcyt2/WQViRP+txrALz31Npvo+9ForD/FeTNKS TCmE1wXz0VPIme2Qqyjv0uBSDyHkm91qOVRp2eHqSVgpscV5xqp4/QZMeVbB5Vu6VkNjuMRb+zKH CfBq3lJ3r3oy03/IQlY= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freeshell.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: