DNSSEC Analyzer - freeshell.de

Domain Name:

Time: 2023-12-08 02:16:15 UTC, NTP stratum 16

Analyzing DNSSEC problems for freeshell.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (864 octets) ;; HEADER SECTION ;; id = 47647 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to a.root-servers.net for freeshell.de/A
	Received 746 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (746 octets) ;; HEADER SECTION ;; id = 18122 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . IMm24LL1+r9bGMv6bsKxlKAS0hnRx7xGpmezUMlaHfeldZgqbiYLVREjJy7jVhzdvcOn9w+Eaho0 JaVGjD1iEMUZTXxE0u5MwB1pZjKFp8IqLRFENLrdnMs5xJFkttOA7FCWduedWGYg8mHPkapnLW6G 2BYk0nZvFDznYbLVsRVJp8v39FkqQiIQl6ItTbAd8ksUd8nQHHNb2mEtYqhiWLpHPfF30ejjBL0c Pa4PxokaXmqMcLxicqmQXFAd9QRnoJADbnn05HrzWQRImRb0JM0uZbo7WWvaCV+q1+PIkEkctFcU o3RyNwmdmMl2535RVoH8KOVhnDp5rh6UQyL+Hw== ) ;; ADDITIONAL SECTION (13 records) s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.root-servers.net for de/DNSKEY
	Received 736 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (736 octets) ;; HEADER SECTION ;; id = 13939 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . IMm24LL1+r9bGMv6bsKxlKAS0hnRx7xGpmezUMlaHfeldZgqbiYLVREjJy7jVhzdvcOn9w+Eaho0 JaVGjD1iEMUZTXxE0u5MwB1pZjKFp8IqLRFENLrdnMs5xJFkttOA7FCWduedWGYg8mHPkapnLW6G 2BYk0nZvFDznYbLVsRVJp8v39FkqQiIQl6ItTbAd8ksUd8nQHHNb2mEtYqhiWLpHPfF30ejjBL0c Pa4PxokaXmqMcLxicqmQXFAd9QRnoJADbnn05HrzWQRImRb0JM0uZbo7WWvaCV+q1+PIkEkctFcU o3RyNwmdmMl2535RVoH8KOVhnDp5rh6UQyL+Hw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to i.root-servers.net for de/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (366 octets) ;; HEADER SECTION ;; id = 35897 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . IMm24LL1+r9bGMv6bsKxlKAS0hnRx7xGpmezUMlaHfeldZgqbiYLVREjJy7jVhzdvcOn9w+Eaho0 JaVGjD1iEMUZTXxE0u5MwB1pZjKFp8IqLRFENLrdnMs5xJFkttOA7FCWduedWGYg8mHPkapnLW6G 2BYk0nZvFDznYbLVsRVJp8v39FkqQiIQl6ItTbAd8ksUd8nQHHNb2mEtYqhiWLpHPfF30ejjBL0c Pa4PxokaXmqMcLxicqmQXFAd9QRnoJADbnn05HrzWQRImRb0JM0uZbo7WWvaCV+q1+PIkEkctFcU o3RyNwmdmMl2535RVoH8KOVhnDp5rh6UQyL+Hw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20231220220000 20231207210000 46780 . IMm24LL1+r9bGMv6bsKxlKAS0hnRx7xGpmezUMlaHfeldZgqbiYLVREjJy7jVhzdvcOn9w+Eaho0 JaVGjD1iEMUZTXxE0u5MwB1pZjKFp8IqLRFENLrdnMs5xJFkttOA7FCWduedWGYg8mHPkapnLW6G 2BYk0nZvFDznYbLVsRVJp8v39FkqQiIQl6ItTbAd8ksUd8nQHHNb2mEtYqhiWLpHPfF30ejjBL0c Pa4PxokaXmqMcLxicqmQXFAd9QRnoJADbnn05HrzWQRImRb0JM0uZbo7WWvaCV+q1+PIkEkctFcU o3RyNwmdmMl2535RVoH8KOVhnDp5rh6UQyL+Hw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to n.de.net for de/DNSKEY
	Received 893 bytes from 194.146.107.6
	;; Response received from 194.146.107.6 (893 octets) ;; HEADER SECTION ;; id = 37283 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (4 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAdtFvGxo3FahlXGMCZmFW1fgnO6nmxGJ3odI9anQmY46zOsZAyJGiQ66w56mDJvfXNhVXUjR JZJSRe3wwfcbm8CeAqqS2ufhg3CnDuEkrhcsRX6EzX/j8SpFaZEYwxbifYh4mF5480XUPowxEP8p h8SIlgtF1+7OVMxfplFRIF4b ) ; Key ID = 10209 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN DNSKEY ( 256 3 8 AwEAAcFanXcv50HCHtShAqqMSAKl+SkcIebCj6PJI3+MiOyEWp2BgWeTWomMPll7u99B1aHeMwfB YIZcsBNXVgHZy3sx27hnvsSPqn+ac7u7KlPzh9q0wh2yv7LbQI2qjawqRRvQyOFUlLc8whsQIdPc moQDDyFhFIf1IZydA4PK8v15 ) ; Key ID = 11943 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231221185811 20231207172811 26755 de. ICYjYFWUgHlISv7v+csz/Qevj1p+gQyl0p11hZIXISjgi4iHDafP8GXJPS8D0jE0wi/LKVxh1zjA zpy8XBslg/Guo0329MpkBr9dgUFDodJLFHr9VClADFA/L3dfMv2551ae0qXwFqFZEP7noX1HUzKV VU184J9c4rTM0+ofr2tGHXi4JaRx18ebH8KrxYeII7tjUJ4VaKSW/F+5y86/lvcctdmDshcQTkkO wncu950HjBs5euP0CG+HtNwbysL+aOwcMM/n5tzchGu1Cyu8ZyFTGpNokvhGvfriV0kGB3SwIzjJ qCapLoZB1KfFxD3pScIXVGjWTVR4/ObQLwXurA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAdtFvGxo3FahlXGMCZmFW1fgnO6nmxGJ3odI9anQmY46zOsZAyJGiQ66w56mDJvfXNhVXUjR JZJSRe3wwfcbm8CeAqqS2ufhg3CnDuEkrhcsRX6EzX/j8SpFaZEYwxbifYh4mF5480XUPowxEP8p h8SIlgtF1+7OVMxfplFRIF4b ) ; Key ID = 10209`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcFanXcv50HCHtShAqqMSAKl+SkcIebCj6PJI3+MiOyEWp2BgWeTWomMPll7u99B1aHeMwfB YIZcsBNXVgHZy3sx27hnvsSPqn+ac7u7KlPzh9q0wh2yv7LbQI2qjawqRRvQyOFUlLc8whsQIdPc moQDDyFhFIf1IZydA4PK8v15 ) ; Key ID = 11943`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231221185811 20231207172811 26755 de. ICYjYFWUgHlISv7v+csz/Qevj1p+gQyl0p11hZIXISjgi4iHDafP8GXJPS8D0jE0wi/LKVxh1zjA zpy8XBslg/Guo0329MpkBr9dgUFDodJLFHr9VClADFA/L3dfMv2551ae0qXwFqFZEP7noX1HUzKV VU184J9c4rTM0+ofr2tGHXi4JaRx18ebH8KrxYeII7tjUJ4VaKSW/F+5y86/lvcctdmDshcQTkkO wncu950HjBs5euP0CG+HtNwbysL+aOwcMM/n5tzchGu1Cyu8ZyFTGpNokvhGvfriV0kGB3SwIzjJ qCapLoZB1KfFxD3pScIXVGjWTVR4/ObQLwXurA== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=10209 is now in the chain-of-trust
	DNSKEY=11943 is now in the chain-of-trust
	Query to a.nic.de for freeshell.de/A
	Received 353 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (353 octets) ;; HEADER SECTION ;; id = 32831 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20231216060935 20231202043935 10209 de. Gt5lyz96Fgh+PlNBFMHJhQ8i6rJile235IU/jiRiQWVWF9Ht9KLBjJk0D31qYgqB6IUUkYQChabf Jgp/5CZiR7Ev94eN94sRN/eXPHcWbrNys2NWOZIInbtoIbefcYWenue9V8b9cnEgKNX9P6c+L7OW klpv7BJ1CVdEme40Ml0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Query to n.de.net for freeshell.de/DNSKEY
	Received 351 bytes from 194.146.107.6
	;; Response received from 194.146.107.6 (351 octets) ;; HEADER SECTION ;; id = 30612 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20231216060935 20231202043935 10209 de. Gt5lyz96Fgh+PlNBFMHJhQ8i6rJile235IU/jiRiQWVWF9Ht9KLBjJk0D31qYgqB6IUUkYQChabf Jgp/5CZiR7Ev94eN94sRN/eXPHcWbrNys2NWOZIInbtoIbefcYWenue9V8b9cnEgKNX9P6c+L7OW klpv7BJ1CVdEme40Ml0= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone freeshell.de

freeshell.de

	Checking DS between de and freeshell.de
	Query to s.de.net for freeshell.de/DS
	Received 299 bytes from 195.243.137.26
	;; Response received from 195.243.137.26 (299 octets) ;; HEADER SECTION ;; id = 60821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DS ;; ANSWER SECTION (3 records) freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20231216060935 20231202043935 10209 de. Gt5lyz96Fgh+PlNBFMHJhQ8i6rJile235IU/jiRiQWVWF9Ht9KLBjJk0D31qYgqB6IUUkYQChabf Jgp/5CZiR7Ev94eN94sRN/eXPHcWbrNys2NWOZIInbtoIbefcYWenue9V8b9cnEgKNX9P6c+L7OW klpv7BJ1CVdEme40Ml0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DS records for freeshell.de in the de zone
	DS=37158/SHA-256 has algorithm RSASHA1
	DS=40460/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20231216060935 20231202043935 10209 de. Gt5lyz96Fgh+PlNBFMHJhQ8i6rJile235IU/jiRiQWVWF9Ht9KLBjJk0D31qYgqB6IUUkYQChabf Jgp/5CZiR7Ev94eN94sRN/eXPHcWbrNys2NWOZIInbtoIbefcYWenue9V8b9cnEgKNX9P6c+L7OW klpv7BJ1CVdEme40Ml0= )`
	RRSIG=10209 and DNSKEY=10209 verifies the DS RRset
	DS=37158/SHA-256 is now in the chain-of-trust
	DS=40460/SHA-256 is now in the chain-of-trust
	`freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 )`
	`freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf )`
	Query to ns2.nic-nac-project.de for freeshell.de/DNSKEY
	Received 685 bytes from 128.140.50.188
	;; Response received from 128.140.50.188 (685 octets) ;; HEADER SECTION ;; id = 16730 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (4 records) freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158 freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460 freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20240205064156 20231207064156 37158 freeshell.de. SBZHEcdejRJNxxZMSv9SzXd3GJzSTTyagBXuX1NQp/0i79WvNrn65szNujJOGqHXssl0GrdgyDWo 7bIQHfvaDCzogL1nB3j9iznFw0XXv4oj4GLHX0z3GeDLQcxfHPlFa0vpgTrdvRP3gwAV0t/yGX37 95f6ipO+ZgWv2G4biXI= ) freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20240205064156 20231207064156 40460 freeshell.de. RPBSptWIQFwZ5fV02yfucPnkaggoIbFs8pHl3eQC9lgS6y7b6pxtZ9SXTl7xhZq7OU0maX82oDYt oiIQt0oCEuCdM30BzTKSJc3Zz+BSVrK3ISM5XTAXc02yYq4E6G/q5Rq6DpWpFi6rIwjwdrBNu/qR ugfcBEzNJTDsreOyDeg= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for freeshell.de
	`freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158`
	`freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460`
	DNSKEY=37158/SEP is now in the chain-of-trust
	DS=37158/SHA-256 verifies DNSKEY=37158/SEP
	DNSKEY=40460 is now in the chain-of-trust
	DS=40460/SHA-256 verifies DNSKEY=40460
	Found 2 RRSIGs over DNSKEY RRset
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20240205064156 20231207064156 37158 freeshell.de. SBZHEcdejRJNxxZMSv9SzXd3GJzSTTyagBXuX1NQp/0i79WvNrn65szNujJOGqHXssl0GrdgyDWo 7bIQHfvaDCzogL1nB3j9iznFw0XXv4oj4GLHX0z3GeDLQcxfHPlFa0vpgTrdvRP3gwAV0t/yGX37 95f6ipO+ZgWv2G4biXI= )`
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20240205064156 20231207064156 40460 freeshell.de. RPBSptWIQFwZ5fV02yfucPnkaggoIbFs8pHl3eQC9lgS6y7b6pxtZ9SXTl7xhZq7OU0maX82oDYt oiIQt0oCEuCdM30BzTKSJc3Zz+BSVrK3ISM5XTAXc02yYq4E6G/q5Rq6DpWpFi6rIwjwdrBNu/qR ugfcBEzNJTDsreOyDeg= )`
	RRSIG=37158 and DNSKEY=37158/SEP verifies the DNSKEY RRset
	RRSIG=40460 and DNSKEY=40460 verifies the DNSKEY RRset
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 63996 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20240205064156 20231207064156 40460 freeshell.de. M2ibXXUotBff2ECGEUhkAHCoe0QpnV06I8JD2hKMYAuEiOU/UwDLPoO8jUk21XrdOQTvo0JCXygS V14CaaEGMo6ajNm/tos7hnSs2ULHmp7VRJj2f2N/OcAephLJd2DqAKnjzqrgGCNBksJdDWkWYMYr P8iYSgyl5tVk51eoOSc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/SOA
	Received 492 bytes from 128.140.50.188
	;; Response received from 128.140.50.188 (492 octets) ;; HEADER SECTION ;; id = 45360 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; freeshell.de. IN SOA ;; ANSWER SECTION (2 records) freeshell.de. 600 IN SOA ( ns1.nic-nac-project.de. postmaster.nic-nac-project.de. 2023120704 ;serial 3600 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) freeshell.de. 600 IN RRSIG ( SOA 5 2 600 20240205064156 20231207064156 40460 freeshell.de. FjkmjF1gqxJQ4GBoYHnxpEdZVFba72DbnPfZnL680NACiDQsWs8guxVCLIGIiqLyPgY4cCo4im7W VoSnmSAp64vIluDfxwSrG/NFNGCNfqXxdIhFkJAmWyiy7hcxBHiT9n/pYSLCka+ozl2jlxjM8pkt gVhM54a27Ysjf/Bfxz0= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20240205064156 20231207064156 40460 freeshell.de. M2ibXXUotBff2ECGEUhkAHCoe0QpnV06I8JD2hKMYAuEiOU/UwDLPoO8jUk21XrdOQTvo0JCXygS V14CaaEGMo6ajNm/tos7hnSs2ULHmp7VRJj2f2N/OcAephLJd2DqAKnjzqrgGCNBksJdDWkWYMYr P8iYSgyl5tVk51eoOSc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 35652 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20240205064156 20231207064156 40460 freeshell.de. M2ibXXUotBff2ECGEUhkAHCoe0QpnV06I8JD2hKMYAuEiOU/UwDLPoO8jUk21XrdOQTvo0JCXygS V14CaaEGMo6ajNm/tos7hnSs2ULHmp7VRJj2f2N/OcAephLJd2DqAKnjzqrgGCNBksJdDWkWYMYr P8iYSgyl5tVk51eoOSc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

freeshell.de

	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 461 bytes from 128.140.50.188
	;; Response received from 128.140.50.188 (461 octets) ;; HEADER SECTION ;; id = 3734 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20240205064156 20231207064156 40460 freeshell.de. M2ibXXUotBff2ECGEUhkAHCoe0QpnV06I8JD2hKMYAuEiOU/UwDLPoO8jUk21XrdOQTvo0JCXygS V14CaaEGMo6ajNm/tos7hnSs2ULHmp7VRJj2f2N/OcAephLJd2DqAKnjzqrgGCNBksJdDWkWYMYr P8iYSgyl5tVk51eoOSc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	ns2.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 461 bytes from 128.140.50.188
	;; Response received from 128.140.50.188 (461 octets) ;; HEADER SECTION ;; id = 1628 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20240205064156 20231207064156 40460 freeshell.de. M2ibXXUotBff2ECGEUhkAHCoe0QpnV06I8JD2hKMYAuEiOU/UwDLPoO8jUk21XrdOQTvo0JCXygS V14CaaEGMo6ajNm/tos7hnSs2ULHmp7VRJj2f2N/OcAephLJd2DqAKnjzqrgGCNBksJdDWkWYMYr P8iYSgyl5tVk51eoOSc= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20240205064156 20231207064156 40460 freeshell.de. F00mgVjqdHe3sgqWUhx/R8uWQns8/wN1AQnk6wYELD+vYWRFXhN1EsfLlyBDrxR3OLFGHDrjLqsy jJh70XCwqejt5B/HEVgzGkafMxKdBIA+1hqul0AOz0z0n10hieep4KE+i/k8y7YA+tUSRxk0RyBa mSgu/bGwqcnaoLlUl9c= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freeshell.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: