DNSSEC Analyzer - freeshell.de

Domain Name:

Time: 2021-07-31 14:43:11 UTC, NTP stratum 16

Analyzing DNSSEC problems for freeshell.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (864 octets) ;; HEADER SECTION ;; id = 33375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210821000000 20210731000000 20326 . MQCiL1+LRbTdEm3hyrUQOjMurN4QNmB7Up8ahSMS3vC+Waa7ywqKnClMNiZqPJKYuAn3wHZM0kj5 pTF/wASaLJ9duxmcL6Wyi7mugRZE1Pv3RDvp6o4RbroZND9HVnImDxg/GmaJbRxtPuA/dGSp/Iq7 AObJrtgNM81p19Z50Zn89POIr50/7SpuiRZ7xFYhfwIug9pgrHHdNQpQN7UVUJVXMDgtH/IT8ACg vGfoVLXCciPIpKJhwYZXq9nOGBgVxV7/h7aIGkrOryfm2ChvIei3MQANyjiq1QfckaXHpg+iHa4J 6kduZoTR5Pe+E0VFpf8q63kYBaJTshOVVMm3TQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=26838 is now in the chain-of-trust
	Query to j.root-servers.net for freeshell.de/A
	Received 746 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (746 octets) ;; HEADER SECTION ;; id = 63703 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS s.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . jeiaNDBEUJDIZyKSSBmZA0k4LUJHAd1FeLrQ6G6bgzn3i65xEeNi0bascZxWx0oaSyzDFZ9dN21/ HOpNBCg4D20d+M0RoLOLzYt6fiLyO1uFBLwHU7XndiHbWW69Wb3t0yzqk+37fprswlSDEC+neSg0 PekvyiKjNiLlnWcXvHR0IBEOD902AufZmaCOsQiQ6TFhzH6K/c8sEwW66Qo2UkL99yvIbF5V9iyi cHv7C32a/YPEQAtQyS8fFpewg1aExfxzOGEjNQoLhX40z+MDoMGHPDT7mfdWLm5hcniK3ziQi22w sWWn7A2eud1lkpzSKG+rhX+xVPh1wjOJQ8RLyw== ) ;; ADDITIONAL SECTION (13 records) s.de.net. 172800 IN A 195.243.137.26 s.de.net. 172800 IN AAAA 2003:8:14::53 n.de.net. 172800 IN A 194.146.107.6 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 a.nic.de. 172800 IN A 194.0.0.53 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN A 81.91.164.5 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN A 77.67.63.105 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 z.nic.de. 172800 IN A 194.246.96.1 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to d.root-servers.net for de/DNSKEY
	Received 736 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (736 octets) ;; HEADER SECTION ;; id = 56599 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . jeiaNDBEUJDIZyKSSBmZA0k4LUJHAd1FeLrQ6G6bgzn3i65xEeNi0bascZxWx0oaSyzDFZ9dN21/ HOpNBCg4D20d+M0RoLOLzYt6fiLyO1uFBLwHU7XndiHbWW69Wb3t0yzqk+37fprswlSDEC+neSg0 PekvyiKjNiLlnWcXvHR0IBEOD902AufZmaCOsQiQ6TFhzH6K/c8sEwW66Qo2UkL99yvIbF5V9iyi cHv7C32a/YPEQAtQyS8fFpewg1aExfxzOGEjNQoLhX40z+MDoMGHPDT7mfdWLm5hcniK3ziQi22w sWWn7A2eud1lkpzSKG+rhX+xVPh1wjOJQ8RLyw== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to j.root-servers.net for de/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (366 octets) ;; HEADER SECTION ;; id = 31557 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . jeiaNDBEUJDIZyKSSBmZA0k4LUJHAd1FeLrQ6G6bgzn3i65xEeNi0bascZxWx0oaSyzDFZ9dN21/ HOpNBCg4D20d+M0RoLOLzYt6fiLyO1uFBLwHU7XndiHbWW69Wb3t0yzqk+37fprswlSDEC+neSg0 PekvyiKjNiLlnWcXvHR0IBEOD902AufZmaCOsQiQ6TFhzH6K/c8sEwW66Qo2UkL99yvIbF5V9iyi cHv7C32a/YPEQAtQyS8fFpewg1aExfxzOGEjNQoLhX40z+MDoMGHPDT7mfdWLm5hcniK3ziQi22w sWWn7A2eud1lkpzSKG+rhX+xVPh1wjOJQ8RLyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20210813050000 20210731040000 26838 . jeiaNDBEUJDIZyKSSBmZA0k4LUJHAd1FeLrQ6G6bgzn3i65xEeNi0bascZxWx0oaSyzDFZ9dN21/ HOpNBCg4D20d+M0RoLOLzYt6fiLyO1uFBLwHU7XndiHbWW69Wb3t0yzqk+37fprswlSDEC+neSg0 PekvyiKjNiLlnWcXvHR0IBEOD902AufZmaCOsQiQ6TFhzH6K/c8sEwW66Qo2UkL99yvIbF5V9iyi cHv7C32a/YPEQAtQyS8fFpewg1aExfxzOGEjNQoLhX40z+MDoMGHPDT7mfdWLm5hcniK3ziQi22w sWWn7A2eud1lkpzSKG+rhX+xVPh1wjOJQ8RLyw== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to a.nic.de for de/DNSKEY
	Received 745 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (745 octets) ;; HEADER SECTION ;; id = 26321 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 300 IN DNSKEY ( 256 3 8 AwEAAezW/elZaMS+pb0indrUIV2IvRi+uNENpm8z/NOyfog8yOYo6VzOTNsB6QJH6BtNdIpNgRL3 HUhiXGtMLC5UPiwBEHf2ucAdm3NJNTTM7r3hQ3UG/DK2OKDhCscxoduVlXhhXlGtxxXDLzQ8SE0F tR1WNI8IHEezPRqakH2yj5I5 ) ; Key ID = 56844 de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 300 IN RRSIG ( DNSKEY 8 1 300 20210809160048 20210726143048 26755 de. GXqEDhWKoI6L16Pqu+/DSHpQQX0EyQJ8yxT+lpO6py4PyNQVsKzTj0mGeV9IpGGdSgy+2V1Jy5M/ sJGbZ/nQMi1gmxhRuxWvQmEtp7/MTUrz9saFpKHHk1fNJfd9s9zKX1Ui+AX7ZW9yn9wAn/uk3iLe cW3G+D7fKMv/BeeE6xxxy7wAZ3l22Y1v2EaQ8uQIE7XgTb3cusq5KEkRQ2Je/r0stdLOOED0zFE3 a920vOC7YE5aR0AX/6fQ70c1pay0jqSn6V3vfJfRoKeucyufiRMNCdab3DFdgQad38gWy+Vy9tCD wYQBReyJ6zn7LHtBpOSLLX4NHNj4B9Ml9XNtQA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for de
	`de. 300 IN DNSKEY ( 256 3 8 AwEAAezW/elZaMS+pb0indrUIV2IvRi+uNENpm8z/NOyfog8yOYo6VzOTNsB6QJH6BtNdIpNgRL3 HUhiXGtMLC5UPiwBEHf2ucAdm3NJNTTM7r3hQ3UG/DK2OKDhCscxoduVlXhhXlGtxxXDLzQ8SE0F tR1WNI8IHEezPRqakH2yj5I5 ) ; Key ID = 56844`
	`de. 300 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 300 IN RRSIG ( DNSKEY 8 1 300 20210809160048 20210726143048 26755 de. GXqEDhWKoI6L16Pqu+/DSHpQQX0EyQJ8yxT+lpO6py4PyNQVsKzTj0mGeV9IpGGdSgy+2V1Jy5M/ sJGbZ/nQMi1gmxhRuxWvQmEtp7/MTUrz9saFpKHHk1fNJfd9s9zKX1Ui+AX7ZW9yn9wAn/uk3iLe cW3G+D7fKMv/BeeE6xxxy7wAZ3l22Y1v2EaQ8uQIE7XgTb3cusq5KEkRQ2Je/r0stdLOOED0zFE3 a920vOC7YE5aR0AX/6fQ70c1pay0jqSn6V3vfJfRoKeucyufiRMNCdab3DFdgQad38gWy+Vy9tCD wYQBReyJ6zn7LHtBpOSLLX4NHNj4B9Ml9XNtQA== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=56844 is now in the chain-of-trust
	Query to s.de.net for freeshell.de/A
	Received 351 bytes from 195.243.137.26
	;; Response received from 195.243.137.26 (351 octets) ;; HEADER SECTION ;; id = 5562 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20210812043945 20210729030945 56844 de. oxYwuA/iVXaSDHFwtLU1jq2HYLku6HMoZzqdvhwkjo/FH4XTCsX6n68/9Dvt8HNJstURIfX9Vvi9 NkoN3ElSfYFCIp1QR3YhglcBY4L9LCgY0hgKbVlMKhi55XZPaEMdUOs9cohtJtfwqTsYSGxMHkVU j9RqpkWArNvHI3SVCLQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to n.de.net for freeshell.de/DNSKEY
	Received 351 bytes from 194.146.107.6
	;; Response received from 194.146.107.6 (351 octets) ;; HEADER SECTION ;; id = 38154 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) freeshell.de. 86400 IN NS ns1.nic-nac-project.de. freeshell.de. 86400 IN NS ns2.nic-nac-project.de. freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20210812043945 20210729030945 56844 de. oxYwuA/iVXaSDHFwtLU1jq2HYLku6HMoZzqdvhwkjo/FH4XTCsX6n68/9Dvt8HNJstURIfX9Vvi9 NkoN3ElSfYFCIp1QR3YhglcBY4L9LCgY0hgKbVlMKhi55XZPaEMdUOs9cohtJtfwqTsYSGxMHkVU j9RqpkWArNvHI3SVCLQ= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone freeshell.de

freeshell.de

	Checking DS between de and freeshell.de
	Query to n.de.net for freeshell.de/DS
	Received 299 bytes from 194.146.107.6
	;; Response received from 194.146.107.6 (299 octets) ;; HEADER SECTION ;; id = 26378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DS ;; ANSWER SECTION (3 records) freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf ) freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 ) freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20210812043945 20210729030945 56844 de. oxYwuA/iVXaSDHFwtLU1jq2HYLku6HMoZzqdvhwkjo/FH4XTCsX6n68/9Dvt8HNJstURIfX9Vvi9 NkoN3ElSfYFCIp1QR3YhglcBY4L9LCgY0hgKbVlMKhi55XZPaEMdUOs9cohtJtfwqTsYSGxMHkVU j9RqpkWArNvHI3SVCLQ= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for freeshell.de in the de zone
	DS=40460/SHA-256 has algorithm RSASHA1
	DS=37158/SHA-256 has algorithm RSASHA1
	Found 1 RRSIGs over DS RRset
	`freeshell.de. 86400 IN RRSIG ( DS 8 2 86400 20210812043945 20210729030945 56844 de. oxYwuA/iVXaSDHFwtLU1jq2HYLku6HMoZzqdvhwkjo/FH4XTCsX6n68/9Dvt8HNJstURIfX9Vvi9 NkoN3ElSfYFCIp1QR3YhglcBY4L9LCgY0hgKbVlMKhi55XZPaEMdUOs9cohtJtfwqTsYSGxMHkVU j9RqpkWArNvHI3SVCLQ= )`
	RRSIG=56844 and DNSKEY=56844 verifies the DS RRset
	DS=40460/SHA-256 is now in the chain-of-trust
	DS=37158/SHA-256 is now in the chain-of-trust
	`freeshell.de. 86400 IN DS ( 40460 5 2 3ba57e19bd9989c04f23a8a3ce3b15b0ee9506d680a63d81896bce45dab963cf )`
	`freeshell.de. 86400 IN DS ( 37158 5 2 e21fa88118fa1cd14014b1882265c7d1525a612f9d2f707330c55559e1d68e36 )`
	Query to ns1.nic-nac-project.de for freeshell.de/DNSKEY
	Received 685 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (685 octets) ;; HEADER SECTION ;; id = 18160 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN DNSKEY ;; ANSWER SECTION (4 records) freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158 freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460 freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20210807153458 20210608153458 37158 freeshell.de. NYDwle1RxPX7S2BA7jaQWpSnyyOcd5EIoDo/pgAEXoNwcuaA/azrIVeYF3umFTbxgJVX0y0HqzW4 bSB6tdjGg83eENjcunaCwokRBqZXU5w+bvc9VYXT8RFDS1VsLjRLZfMpuAi26OlqfAaGcsyLlQtG dzHxQCQhgW/CmC51pGU= ) freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20210807153458 20210608153458 40460 freeshell.de. Kte0XP1xKhExvdrgQz/BC+hJcdmLAN3w4+dtjt47UwWCzXWB7+gpisQFKoo8tleygOA6ViRByIdh VlYW+/IVg+d2dvHPPI2GSFdCiICAUOhf5PvRNp7IGgBKabm3fEd51yiAqY+v8vFQ2FrXhIjJepdV JH1LIB6zGMtL4RNMz9w= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for freeshell.de
	`freeshell.de. 600 IN DNSKEY ( 257 3 5 BQEAAAABomoWgzk+vCjmpTuF2xEWbpd9NTN39xylr77ruPc6b0Wj5mM553F2fGWM+Eu+o5OBnjLE Hly31NXBL9q+dBYoHxH6jaCRcHwepN/LMRM0Wdn70XisEEFctO/NPKhxLteda9mDSpAsZ5nRaGCG FNLUh1k86HCkEM7Lf5ybJ/Di3mc= ) ; Key ID = 37158`
	`freeshell.de. 600 IN DNSKEY ( 256 3 5 BQEAAAABwALocvsWavTuqwAZjjQp3D9Y5VaYieckYHasnps07DKmQC08cnbBeb7E81BPr8K31yzw T4dkY/roySmv6kw3SzfIjNwtxCiIf6YMqAMzDDD37dfpBv3YOmXIiRUxGiO/VoKnzoG4p1il1qZr aANtPA8jBx/MTHeeCJeTGA4v/aM= ) ; Key ID = 40460`
	DNSKEY=37158/SEP is now in the chain-of-trust
	DS=37158/SHA-256 verifies DNSKEY=37158/SEP
	DNSKEY=40460 is now in the chain-of-trust
	DS=40460/SHA-256 verifies DNSKEY=40460
	Found 2 RRSIGs over DNSKEY RRset
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20210807153458 20210608153458 37158 freeshell.de. NYDwle1RxPX7S2BA7jaQWpSnyyOcd5EIoDo/pgAEXoNwcuaA/azrIVeYF3umFTbxgJVX0y0HqzW4 bSB6tdjGg83eENjcunaCwokRBqZXU5w+bvc9VYXT8RFDS1VsLjRLZfMpuAi26OlqfAaGcsyLlQtG dzHxQCQhgW/CmC51pGU= )`
	`freeshell.de. 600 IN RRSIG ( DNSKEY 5 2 600 20210807153458 20210608153458 40460 freeshell.de. Kte0XP1xKhExvdrgQz/BC+hJcdmLAN3w4+dtjt47UwWCzXWB7+gpisQFKoo8tleygOA6ViRByIdh VlYW+/IVg+d2dvHPPI2GSFdCiICAUOhf5PvRNp7IGgBKabm3fEd51yiAqY+v8vFQ2FrXhIjJepdV JH1LIB6zGMtL4RNMz9w= )`
	RRSIG=37158 and DNSKEY=37158/SEP verifies the DNSKEY RRset
	RRSIG=40460 and DNSKEY=40460 verifies the DNSKEY RRset
	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 47108 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20210807153458 20210608153458 40460 freeshell.de. aIiD4NOKYH93WTUDrPJ0W10w+cW0SQ2QcTd5V4illHklsg/w0T3pkzNs3ccz/8KFAy5J2FON0v2L u51G8hhWAnoUfcAM87KKeyvAZTVEXftgkh4tHRPwFdrvdRddeAbnvTBd0jZBhp7XQUiMqB7mnMnZ g7oPhUBKMpFNe1xy8M8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns1.nic-nac-project.de for freeshell.de/SOA
	Received 486 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (486 octets) ;; HEADER SECTION ;; id = 58671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN SOA ;; ANSWER SECTION (2 records) freeshell.de. 600 IN SOA ( ns1.nic-nac-project.de. postmaster.nic-nac-project.de. 2021060804 ;serial 3600 ;refresh 3600 ;retry 604800 ;expire 60 ;minimum ) freeshell.de. 600 IN RRSIG ( SOA 5 2 600 20210807153458 20210608153458 40460 freeshell.de. irIzguHoOl5yIWcR1jIqh3BqOoenMSS2L6gkoxUDka+Y4Ii7F5PYgRXxb2D00t1KiqDGT1NZQa1t ZADKDfNi32bzEYYKIAq1vT62o24OQkz+mJ69UKJ5t0/tPeGqzymW9UvUskMHvshK/BeZQZbvWSs2 5f+DZA+ZHLmB7nSFuZo= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20210807153458 20210608153458 40460 freeshell.de. aIiD4NOKYH93WTUDrPJ0W10w+cW0SQ2QcTd5V4illHklsg/w0T3pkzNs3ccz/8KFAy5J2FON0v2L u51G8hhWAnoUfcAM87KKeyvAZTVEXftgkh4tHRPwFdrvdRddeAbnvTBd0jZBhp7XQUiMqB7mnMnZ g7oPhUBKMpFNe1xy8M8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.nic-nac-project.de for freeshell.de/A
	Received 453 bytes from 3.67.14.200
	;; Response received from 3.67.14.200 (453 octets) ;; HEADER SECTION ;; id = 3778 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20210807153458 20210608153458 40460 freeshell.de. aIiD4NOKYH93WTUDrPJ0W10w+cW0SQ2QcTd5V4illHklsg/w0T3pkzNs3ccz/8KFAy5J2FON0v2L u51G8hhWAnoUfcAM87KKeyvAZTVEXftgkh4tHRPwFdrvdRddeAbnvTBd0jZBhp7XQUiMqB7mnMnZ g7oPhUBKMpFNe1xy8M8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

freeshell.de

	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 42013 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20210807153458 20210608153458 40460 freeshell.de. aIiD4NOKYH93WTUDrPJ0W10w+cW0SQ2QcTd5V4illHklsg/w0T3pkzNs3ccz/8KFAy5J2FON0v2L u51G8hhWAnoUfcAM87KKeyvAZTVEXftgkh4tHRPwFdrvdRddeAbnvTBd0jZBhp7XQUiMqB7mnMnZ g7oPhUBKMpFNe1xy8M8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.nic-nac-project.de is authoritative for freeshell.de
	Found RRSIG signed by freeshell.de zone
	Query to ns1.nic-nac-project.de for freeshell.de/A
	Received 455 bytes from 116.202.128.144
	;; Response received from 116.202.128.144 (455 octets) ;; HEADER SECTION ;; id = 55045 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 3 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; freeshell.de. IN A ;; ANSWER SECTION (2 records) freeshell.de. 600 IN A 116.202.128.144 freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= ) ;; AUTHORITY SECTION (3 records) freeshell.de. 600 IN NS ns1.nic-nac-project.de. freeshell.de. 600 IN NS ns2.nic-nac-project.de. freeshell.de. 600 IN RRSIG ( NS 5 2 600 20210807153458 20210608153458 40460 freeshell.de. aIiD4NOKYH93WTUDrPJ0W10w+cW0SQ2QcTd5V4illHklsg/w0T3pkzNs3ccz/8KFAy5J2FON0v2L u51G8hhWAnoUfcAM87KKeyvAZTVEXftgkh4tHRPwFdrvdRddeAbnvTBd0jZBhp7XQUiMqB7mnMnZ g7oPhUBKMpFNe1xy8M8= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	freeshell.de A RR has value 116.202.128.144
	Found 1 RRSIGs over A RRset
	`freeshell.de. 600 IN RRSIG ( A 5 2 600 20210807153458 20210608153458 40460 freeshell.de. R4kTBvzraum1lhD48gfV7LUv28Ox+3K/pD0MwB8ehCw39KpXC9DvpAJgHDm9gYLM+EB4Bna9Fpd8 bSVfJWJiNuoc7dnew1pBgJsdyoDbnRiW3atjhIxZe2gT1HUM1hdnOIvllwzeC+syob/kCF7/5AXm kDD+GMApF2GdWm+5U08= )`
	RRSIG=40460 and DNSKEY=40460 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test freeshell.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: