DNSSEC Analyzer - freeshell.de

Domain Name:

Time: 2022-11-28 17:47:46 UTC, NTP stratum 16

Analyzing DNSSEC problems for freeshell.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 9944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to a.root-servers.net for freeshell.de/A
	Received 746 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (746 octets) ;; HEADER SECTION ;; id = 35274 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . aHT34OdNJaOtEZbxXIrVO3w1mjtK8ADarAUiuPVd/yrA2UlJTK8qoIcWLik5zOJndzEpg7otwZ3B bNQWYBroSXWWPomtvWKA5ky2Pmt+iYuzER9YPXVj5QhpRpDpvmD3TVq6Q6qD/AgqFtFABFDJzAh7 TdcIqykC26G6/e67hNnHj6R7q/gFq1bKY5BhLfGHyeC8j/zdlkPIPzfhjE+iNsTBvPyM9xkJigZ8 7XVrMSMhSoIu66PNH7ZKj8yNfyMD0tRcyiyQd4bl3ZUNWo6zWNz7ipyI5VfZ4BrRb1F3NbuDIp3s pHLL0FXMI1/cERq6nLFKtctZfbxgtZ+3zVFmvg== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to a.root-servers.net for de/DNSKEY
	Received 736 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (736 octets) ;; HEADER SECTION ;; id = 19546 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . aHT34OdNJaOtEZbxXIrVO3w1mjtK8ADarAUiuPVd/yrA2UlJTK8qoIcWLik5zOJndzEpg7otwZ3B bNQWYBroSXWWPomtvWKA5ky2Pmt+iYuzER9YPXVj5QhpRpDpvmD3TVq6Q6qD/AgqFtFABFDJzAh7 TdcIqykC26G6/e67hNnHj6R7q/gFq1bKY5BhLfGHyeC8j/zdlkPIPzfhjE+iNsTBvPyM9xkJigZ8 7XVrMSMhSoIu66PNH7ZKj8yNfyMD0tRcyiyQd4bl3ZUNWo6zWNz7ipyI5VfZ4BrRb1F3NbuDIp3s pHLL0FXMI1/cERq6nLFKtctZfbxgtZ+3zVFmvg== ) ;; ADDITIONAL SECTION (13 records) s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to e.root-servers.net for de/DS
	Received 366 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (366 octets) ;; HEADER SECTION ;; id = 52469 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . aHT34OdNJaOtEZbxXIrVO3w1mjtK8ADarAUiuPVd/yrA2UlJTK8qoIcWLik5zOJndzEpg7otwZ3B bNQWYBroSXWWPomtvWKA5ky2Pmt+iYuzER9YPXVj5QhpRpDpvmD3TVq6Q6qD/AgqFtFABFDJzAh7 TdcIqykC26G6/e67hNnHj6R7q/gFq1bKY5BhLfGHyeC8j/zdlkPIPzfhjE+iNsTBvPyM9xkJigZ8 7XVrMSMhSoIu66PNH7ZKj8yNfyMD0tRcyiyQd4bl3ZUNWo6zWNz7ipyI5VfZ4BrRb1F3NbuDIp3s pHLL0FXMI1/cERq6nLFKtctZfbxgtZ+3zVFmvg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . aHT34OdNJaOtEZbxXIrVO3w1mjtK8ADarAUiuPVd/yrA2UlJTK8qoIcWLik5zOJndzEpg7otwZ3B bNQWYBroSXWWPomtvWKA5ky2Pmt+iYuzER9YPXVj5QhpRpDpvmD3TVq6Q6qD/AgqFtFABFDJzAh7 TdcIqykC26G6/e67hNnHj6R7q/gFq1bKY5BhLfGHyeC8j/zdlkPIPzfhjE+iNsTBvPyM9xkJigZ8 7XVrMSMhSoIu66PNH7ZKj8yNfyMD0tRcyiyQd4bl3ZUNWo6zWNz7ipyI5VfZ4BrRb1F3NbuDIp3s pHLL0FXMI1/cERq6nLFKtctZfbxgtZ+3zVFmvg== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to a.nic.de for de/DNSKEY
	Received 745 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (745 octets) ;; HEADER SECTION ;; id = 62416 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 300 IN DNSKEY ( 256 3 8 AwEAAdiQ0UDuco+iP9JQpKAvpvH4f6kfeq/FO9djqzlgj73hcRKDYuPxgAHMNIGruUbfecdgOgfz rdGST/+3tXoKiG8Ol+DJ+epNmkqI6zkP1Lz33so6DyMjrH9ocQi7nxg2PJD1OJ56RWzwq+f+8S0J mSZ3DoT3yUHYQGudGmF6Hrid ) ; Key ID = 31116 de. 300 IN RRSIG ( DNSKEY 8 1 300 20221209163403 20221125150403 26755 de. sNspHWzWOQYbF3/OPI2sA88fa1kWXpemfGk/T+UT5S7AFARa9gmS4U0h+kA/a1lC7N7XBCA9i+p9 pGcHecW8MF1G48yVEUUzKe0wk4QMYUSLu/XgqfpVMv48bDOo/T5IYjJJ8MLoN1CDZGY+gfT1Nvbd 838m0F2lg884vTIJZB1XHATnuCCUtekVleBTiL8I+dNd6UHavN3dqI2akx5Eep8VGwxWseMTkB4n BU1ZRFfj9W36wUngO9pUSN8lfX3DUC/+Jiih1hI0JQl4yTE7Ms3TcWa57OwvwoN0vdz6bniHB/Wd 9QvGTR/FLqfopxOrJtkJUPN0SIywuZtNxdJ87A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for de
	`de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAdiQ0UDuco+iP9JQpKAvpvH4f6kfeq/FO9djqzlgj73hcRKDYuPxgAHMNIGruUbfecdgOgfz rdGST/+3tXoKiG8Ol+DJ+epNmkqI6zkP1Lz33so6DyMjrH9ocQi7nxg2PJD1OJ56RWzwq+f+8S0J mSZ3DoT3yUHYQGudGmF6Hrid ) ; Key ID = 31116`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 300 IN RRSIG ( DNSKEY 8 1 300 20221209163403 20221125150403 26755 de. sNspHWzWOQYbF3/OPI2sA88fa1kWXpemfGk/T+UT5S7AFARa9gmS4U0h+kA/a1lC7N7XBCA9i+p9 pGcHecW8MF1G48yVEUUzKe0wk4QMYUSLu/XgqfpVMv48bDOo/T5IYjJJ8MLoN1CDZGY+gfT1Nvbd 838m0F2lg884vTIJZB1XHATnuCCUtekVleBTiL8I+dNd6UHavN3dqI2akx5Eep8VGwxWseMTkB4n BU1ZRFfj9W36wUngO9pUSN8lfX3DUC/+Jiih1hI0JQl4yTE7Ms3TcWa57OwvwoN0vdz6bniHB/Wd 9QvGTR/FLqfopxOrJtkJUPN0SIywuZtNxdJ87A== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=31116 is now in the chain-of-trust
	Query to z.nic.de for freeshell.de/A
	Received 353 bytes from 194.246.96.1
	;; Response received from 194.246.96.1 (353 octets) ;; HEADER SECTION ;; id = 16572 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20221212050320 20221128033320 31116 de. o4BTAclfCSBw+/JZFevw1oyiv2r1xRcqF/KDBo1e+Mzc0jgsa685xISWhG+nqF/yqcgGFEivax4e pBMu6qcjuscHjoZ80/ljjqk2vRWZ1KjHnmJdIUA4tAtDgtD3Qo1UU2zHLWzWRGgjQx4arSS9uPAV Z58QQe3OBvxwzW2PAS8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Query to s.de.net for freeshell.de/DNSKEY
	Received 351 bytes from 195.243.137.26
	;; Response received from 195.243.137.26 (351 octets) ;; HEADER SECTION ;; id = 53193 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20221212050320 20221128033320 31116 de. o4BTAclfCSBw+/JZFevw1oyiv2r1xRcqF/KDBo1e+Mzc0jgsa685xISWhG+nqF/yqcgGFEivax4e pBMu6qcjuscHjoZ80/ljjqk2vRWZ1KjHnmJdIUA4tAtDgtD3Qo1UU2zHLWzWRGgjQx4arSS9uPAV Z58QQe3OBvxwzW2PAS8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone freeshell.de

freeshell.de

	Checking DS between de and freeshell.de
	Query to z.nic.de for freeshell.de/DS
	Received 299 bytes from 194.246.96.1
	;; Response received from 194.246.96.1 (299 octets) ;; HEADER SECTION ;; id = 48222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DS ;; ANSWER SECTION (3 records) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20221212050320 20221128033320 31116 de. o4BTAclfCSBw+/JZFevw1oyiv2r1xRcqF/KDBo1e+Mzc0jgsa685xISWhG+nqF/yqcgGFEivax4e pBMu6qcjuscHjoZ80/ljjqk2vRWZ1KjHnmJdIUA4tAtDgtD3Qo1UU2zHLWzWRGgjQx4arSS9uPAV Z58QQe3OBvxwzW2PAS8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DS records for freeshell.de in the de zone
	DS=40460/SHA-256 has algorithm RSASHA1
	DS=37158/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20221212050320 20221128033320 31116 de. o4BTAclfCSBw+/JZFevw1oyiv2r1xRcqF/KDBo1e+Mzc0jgsa685xISWhG+nqF/yqcgGFEivax4e pBMu6qcjuscHjoZ80/ljjqk2vRWZ1KjHnmJdIUA4tAtDgtD3Qo1UU2zHLWzWRGgjQx4arSS9uPAV Z58QQe3OBvxwzW2PAS8= )`
	RRSIG=31116 and DNSKEY=31116 verifies the DS RRset
	DS=40460/SHA-256 is now in the chain-of-trust
	DS=37158/SHA-256 is now in the chain-of-trust
	`freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf )`
	`freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 )`
	Query to ns1.nic-nac-project.de for freeshell.de/DNSKEY
	Received 685 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (685 octets) ;; HEADER SECTION ;; id = 10128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (4 records) freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158 freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460 freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20230127060701 20221128060701 37158 freeshell.de. Ep9hJoJ018HBqhwXXl8ixLJSRbPBwbBzBxD2X4NihcGP/HEv4x8qUemzIWhjFj5Co1TOoOJ0dgxX QBhJKZo36cz9rKEECpLDTFCXbUhG39qqcwx5fzoyfOBka11HNj/gUaZ7n5fTJwKYSEAMQsIMyFJK 3FQOFibu9hodU2oLBzQ= ) freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20230127060701 20221128060701 40460 freeshell.de. dIsfBkoSBXWDxRE/COaFndPpkredvzyJ+Rut+2ION6gFgSUVRo1d2Na89WI2ImvQXJw7yQo61Xf0 A1QalNjxKvMW6vXSHlpI0B815I3+5gCed0pUtFBj1HiMdMiIpEYrXtsKoPFKqIHt4oiVBYx8akJ8 w4ImARbd7X9xNxMHPlE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for freeshell.de
	`freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158`
	`freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460`
	DNSKEY=37158/SEP is now in the chain-of-trust
	DS=37158/SHA-256 verifies DNSKEY=37158/SEP
	DNSKEY=40460 is now in the chain-of-trust
	DS=40460/SHA-256 verifies DNSKEY=40460
	Found 2 RRSIGs over DNSKEY RRset
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20230127060701 20221128060701 37158 freeshell.de. Ep9hJoJ018HBqhwXXl8ixLJSRbPBwbBzBxD2X4NihcGP/HEv4x8qUemzIWhjFj5Co1TOoOJ0dgxX QBhJKZo36cz9rKEECpLDTFCXbUhG39qqcwx5fzoyfOBka11HNj/gUaZ7n5fTJwKYSEAMQsIMyFJK 3FQOFibu9hodU2oLBzQ= )`
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20230127060701 20221128060701 40460 freeshell.de. dIsfBkoSBXWDxRE/COaFndPpkredvzyJ+Rut+2ION6gFgSUVRo1d2Na89WI2ImvQXJw7yQo61Xf0 A1QalNjxKvMW6vXSHlpI0B815I3+5gCed0pUtFBj1HiMdMiIpEYrXtsKoPFKqIHt4oiVBYx8akJ8 w4ImARbd7X9xNxMHPlE= )`
	RRSIG=37158 and DNSKEY=37158/SEP verifies the DNSKEY RRset
	RRSIG=40460 and DNSKEY=40460 verifies the DNSKEY RRset
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 63902 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20230127060701 20221128060701 40460 freeshell.de. CPo/4WKfhw7l9RbZTLsEc8hDG+4Oew37BJenoFbydhsyrdZLQpu2695ZhcBuZvmI/xJvEQ4zKvNk DfRSMmLBo5MqP/DtzH/M2x3+7sgicnWF3HfXmzNXrFcMefrBLIwIDLbHTBLy5N9FapDAFeg1Aqva 61pTV0+Mq1htgeAhXvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/SOA
	Received 484 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (484 octets) ;; HEADER SECTION ;; id = 8145 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN SOA ;; ANSWER SECTION (2 records) freeshell.de. 600 IN SOA ( ns1.nic-nac-project.de. postmaster.nic-nac-project.de. 2022112802 ;serial 3600 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) freeshell.de. 600 IN RRSIG ( SOA 5 2 600 20230127060701 20221128060701 40460 freeshell.de. qDn6z1oCqh0dOM2eHIAe8dOHhOhR9lQ+VjoVd4usjJHe1kwg550o4oH3TM+YgsWTJhpVJt0wJjKQ J3+dypt81JlgctdGU47HJAkGj1pM904Y8a1XJzl6u+yDs6xFO8jbz57yyJoZOwai1KjZHdyGXS2s FKtTRlBAgEclS7/I4VY= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20230127060701 20221128060701 40460 freeshell.de. CPo/4WKfhw7l9RbZTLsEc8hDG+4Oew37BJenoFbydhsyrdZLQpu2695ZhcBuZvmI/xJvEQ4zKvNk DfRSMmLBo5MqP/DtzH/M2x3+7sgicnWF3HfXmzNXrFcMefrBLIwIDLbHTBLy5N9FapDAFeg1Aqva 61pTV0+Mq1htgeAhXvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 2003 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20230127060701 20221128060701 40460 freeshell.de. CPo/4WKfhw7l9RbZTLsEc8hDG+4Oew37BJenoFbydhsyrdZLQpu2695ZhcBuZvmI/xJvEQ4zKvNk DfRSMmLBo5MqP/DtzH/M2x3+7sgicnWF3HfXmzNXrFcMefrBLIwIDLbHTBLy5N9FapDAFeg1Aqva 61pTV0+Mq1htgeAhXvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

freeshell.de

	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 59716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20230127060701 20221128060701 40460 freeshell.de. CPo/4WKfhw7l9RbZTLsEc8hDG+4Oew37BJenoFbydhsyrdZLQpu2695ZhcBuZvmI/xJvEQ4zKvNk DfRSMmLBo5MqP/DtzH/M2x3+7sgicnWF3HfXmzNXrFcMefrBLIwIDLbHTBLy5N9FapDAFeg1Aqva 61pTV0+Mq1htgeAhXvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 53983 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20230127060701 20221128060701 40460 freeshell.de. CPo/4WKfhw7l9RbZTLsEc8hDG+4Oew37BJenoFbydhsyrdZLQpu2695ZhcBuZvmI/xJvEQ4zKvNk DfRSMmLBo5MqP/DtzH/M2x3+7sgicnWF3HfXmzNXrFcMefrBLIwIDLbHTBLy5N9FapDAFeg1Aqva 61pTV0+Mq1htgeAhXvM= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20230127060701 20221128060701 40460 freeshell.de. LW+sesP/heJO4YvovtqoRR2/KQ/Gpy5lx7yyAnQG9z/r9EeBt9JDEG9pp70Oao8GoOWXKXwrWDkC Pn9WYZTqllHSAZmVisNIzbQ7K3erDPFo+LRuO4HDWVvykWCgwIjmBpLgaqhndPtY32ri2TE/8Iwf 3E73Uyz93aAxVyXFjrc= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freeshell.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: