DNSSEC Debugger - goldenbaby.su

Domain Name:

Time: 2025-11-24 17:01:19 UTC

Analyzing DNSSEC problems for goldenbaby.su

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 30410 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20251211000000 20251120000000 20326 . d3kxIMpv2xgXK5TUmYg5AHnIBKNrbirqilN7AIl5DBkp6OxN6mqumEPeFhFyoujpaKs3/NgL6lOJ 3ckBhf15guUOWEilrJPJZMvfOnxn6YWlGgPaD6w7GtighSQFDMq0JWr3wnn9d0m4CIK7yheMEzwT 0niB7vmBsTHnAhBD5eRF/ummLg1PiY2XDpulzaf/OwMItVPQEsQsgwM/ssx4w/bucsp1sZYPPnE6 it09IxMkXVf0w2+5GXHACmbpO0wdZFNkFgMbVXAiHMKMiKs7ItZkCC/uUm+c3bDvL+3GQNSzUdet +AB0siHqUHU/frX6dkwz1qjYykHWjaGd5VJmqA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeuS7hMRZ7muj1c/ew2DoavxkBw3jUG5R79pKVDI39fxvlD1HfJYGJERnXuV4SrQfUPzWw/l t5Axb0EqXL/sQ2ZyntVmwQwoSXi2l9smlIKh2UrkTmmozRCPe7GS4fZTE4Ew7AV4YprTLgVmxiGP 4unRuXkYOgQJXCIBpVCmEdUli6X2sm0i5ZilU/Q+rX3RDw+eYPP7K0cJnJ+ZnvQDy14+BFtreWl9 enNQljgGpBp26lEp1z7AbvUfzkQNVCVGaM8jEaCSALXiROlwCQMOdj+tpLXFf99kdJnTQw2cpEr1 uGs/yENAJpoGhbjZAoIkXzDUBSlfFeYz7FWzH6gIe7M= ) ; keytag 61809`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20251211000000 20251120000000 20326 . d3kxIMpv2xgXK5TUmYg5AHnIBKNrbirqilN7AIl5DBkp6OxN6mqumEPeFhFyoujpaKs3/NgL6lOJ 3ckBhf15guUOWEilrJPJZMvfOnxn6YWlGgPaD6w7GtighSQFDMq0JWr3wnn9d0m4CIK7yheMEzwT 0niB7vmBsTHnAhBD5eRF/ummLg1PiY2XDpulzaf/OwMItVPQEsQsgwM/ssx4w/bucsp1sZYPPnE6 it09IxMkXVf0w2+5GXHACmbpO0wdZFNkFgMbVXAiHMKMiKs7ItZkCC/uUm+c3bDvL+3GQNSzUdet +AB0siHqUHU/frX6dkwz1qjYykHWjaGd5VJmqA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61809 is now in the chain-of-trust
	DNSKEY=38696/SEP is now in the chain-of-trust
	Query to k.root-servers.net for goldenbaby.su/A
	Received 689 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 689 octets ;; HEADER SECTION ;; id = 6875 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS a.dns.ripn.net. su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251207050000 20251124040000 61809 . 1VSMfSzrrMBNaSbAK7UESfJJ8fj2JSGyW5JcLPYQKRKcTVg6EMZhxRPjwXw214TevvBmMqUg47ko VnBPsBXz4AqnXr+VlfqDmubgEufiDAcZs4nP3pOGdoGXHIZi5OTS3I/+dpatDLAenuhxXw7ZP5ra nzcCrEAUwbjm7R6zWDhX41zUTwy3rzKazD17Dfq1vTAMQl48ZG7WvoEVNN+dz3H6Xy19AeC+CiGQ +Q5XydTNq4xQ9aZS6qxQ6JS7eEKb6FHbeWu+qtF1XqTVUyE65XBSjsPVwpcXPBiCWT1RP/4zdpdz 3OD6U/Qu/qJGYMEgovFDYfn9a1WD2puS95wH6A== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 b.dns.ripn.net. 172800 IN A 194.85.252.62 d.dns.ripn.net. 172800 IN A 194.190.124.17 e.dns.ripn.net. 172800 IN A 193.232.142.17 f.dns.ripn.net. 172800 IN A 193.232.156.17 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Query to b.root-servers.net for su/DNSKEY
	Received 678 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 678 octets ;; HEADER SECTION ;; id = 21375 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) su. 172800 IN NS a.dns.ripn.net. su. 172800 IN NS b.dns.ripn.net. su. 172800 IN NS d.dns.ripn.net. su. 172800 IN NS e.dns.ripn.net. su. 172800 IN NS f.dns.ripn.net. su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251207050000 20251124040000 61809 . 1VSMfSzrrMBNaSbAK7UESfJJ8fj2JSGyW5JcLPYQKRKcTVg6EMZhxRPjwXw214TevvBmMqUg47ko VnBPsBXz4AqnXr+VlfqDmubgEufiDAcZs4nP3pOGdoGXHIZi5OTS3I/+dpatDLAenuhxXw7ZP5ra nzcCrEAUwbjm7R6zWDhX41zUTwy3rzKazD17Dfq1vTAMQl48ZG7WvoEVNN+dz3H6Xy19AeC+CiGQ +Q5XydTNq4xQ9aZS6qxQ6JS7eEKb6FHbeWu+qtF1XqTVUyE65XBSjsPVwpcXPBiCWT1RP/4zdpdz 3OD6U/Qu/qJGYMEgovFDYfn9a1WD2puS95wH6A== ) ;; ADDITIONAL SECTION (11 records) a.dns.ripn.net. 172800 IN A 193.232.128.6 a.dns.ripn.net. 172800 IN AAAA 2001:678:17:0:193:232:128:6 b.dns.ripn.net. 172800 IN A 194.85.252.62 b.dns.ripn.net. 172800 IN AAAA 2001:678:16:0:194:85:252:62 d.dns.ripn.net. 172800 IN A 194.190.124.17 d.dns.ripn.net. 172800 IN AAAA 2001:678:18:0:194:190:124:17 e.dns.ripn.net. 172800 IN A 193.232.142.17 e.dns.ripn.net. 172800 IN AAAA 2001:678:15:0:193:232:142:17 f.dns.ripn.net. 172800 IN A 193.232.156.17 f.dns.ripn.net. 172800 IN AAAA 2001:678:14:0:193:232:156:17 ;; { "EDNS-VERSION": 0 }
	Found child zone su

	Checking DS between . and su
	Query to l.root-servers.net for su/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 366 octets ;; HEADER SECTION ;; id = 63720 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DS ;; ANSWER SECTION (2 records) su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 ) su. 86400 IN RRSIG ( DS 8 1 86400 20251207050000 20251124040000 61809 . 1VSMfSzrrMBNaSbAK7UESfJJ8fj2JSGyW5JcLPYQKRKcTVg6EMZhxRPjwXw214TevvBmMqUg47ko VnBPsBXz4AqnXr+VlfqDmubgEufiDAcZs4nP3pOGdoGXHIZi5OTS3I/+dpatDLAenuhxXw7ZP5ra nzcCrEAUwbjm7R6zWDhX41zUTwy3rzKazD17Dfq1vTAMQl48ZG7WvoEVNN+dz3H6Xy19AeC+CiGQ +Q5XydTNq4xQ9aZS6qxQ6JS7eEKb6FHbeWu+qtF1XqTVUyE65XBSjsPVwpcXPBiCWT1RP/4zdpdz 3OD6U/Qu/qJGYMEgovFDYfn9a1WD2puS95wH6A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for su in the . zone
	DS=31297/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`su. 86400 IN RRSIG ( DS 8 1 86400 20251207050000 20251124040000 61809 . 1VSMfSzrrMBNaSbAK7UESfJJ8fj2JSGyW5JcLPYQKRKcTVg6EMZhxRPjwXw214TevvBmMqUg47ko VnBPsBXz4AqnXr+VlfqDmubgEufiDAcZs4nP3pOGdoGXHIZi5OTS3I/+dpatDLAenuhxXw7ZP5ra nzcCrEAUwbjm7R6zWDhX41zUTwy3rzKazD17Dfq1vTAMQl48ZG7WvoEVNN+dz3H6Xy19AeC+CiGQ +Q5XydTNq4xQ9aZS6qxQ6JS7eEKb6FHbeWu+qtF1XqTVUyE65XBSjsPVwpcXPBiCWT1RP/4zdpdz 3OD6U/Qu/qJGYMEgovFDYfn9a1WD2puS95wH6A== )`
	RRSIG=61809 and DNSKEY=61809 verifies the DS RRset
	DS=31297/SHA-256 is now in the chain-of-trust
	`su. 86400 IN DS ( 31297 8 2 8e99a2b6a72a2b07f2accd5a51499f0cb02338aa42da32ac2617856a114c2154 )`
	Query to f.dns.ripn.net for su/DNSKEY
	Received 745 bytes from 193.232.156.17
	;; Response received from [193.232.156.17] 745 octets ;; HEADER SECTION ;; id = 10237 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; su. IN DNSKEY ;; ANSWER SECTION (3 records) su. 345600 IN DNSKEY ( 256 3 8 AwEAAeyFlyWSGpAWmeyYx5KE9EcR3Ntugb60YLDz/C7YUhc2li1AZUiKArqVSLorm68W6dg+IUCz xDF/scRduerzOT/SQI5iQFwhxX3rDlPeqp9GZV0/H0WNUuv6NFe1aikLXe/VOxa2VQ5mwr5pOA+3 aN8n7qB/nTUKxr/TcRdu2WZR ) ; keytag 14565 su. 345600 IN DNSKEY ( 257 3 8 AwEAAaiX7pBUfcVtTUTt0u9edarRAb9gjmAuZ0LK50S6C2LUnQs+7FeQ6GzoBcHu7JRg/u5pUUU8 Si3XHEK0vzeQZa0kq/Q/SACIwpL9zHm0mTnB6xRuQJh7+dqotySIICIfyj9sb5naA3DHSihj818E dsXZ+4eS0sIQG03gn0WdBL21u+PXoOMc8eB/NUG40jDsBop2VGllh2N0iLEKp8Rn8k7mLjJL/DKt 1m7uTQJR9CsFW2rD4W7rtNeOZbVc1tIOPvczv+Oo9xlD8MB5z60oXmbQHiMXQTA1n7HBpwVvbtBm ssJ8j8tRgJ+ZTjjCntlVq8ppRPFQZ8c42A06/GcpEgE= ) ; keytag 31297 su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20251214000000 20251124000000 31297 su. S/SG2Bnw6MyI8976BiAWe7fDo5kuh3GJcuFeb0uF5YLOIBQxcnN1/AjEya2RhBqKeezfKaFCwJq+ rGuAJdida/F+LRejpvURMc3y6nB4dPhfnj6rjjVe17HlKfWPHGtADdASdLfziQAjP0+37L+S3Rzw 2U9dgWea/QVwUm7gS7wkvhco+Ew3NgfX8fWy9xN+z1SpRRuzQs7WVoLuzGZVHQMuUQSA10OaJv7v mm8/MAiVSeqFwpEtgIlRkhK1RbUUQj3ESD1fMm4eWmUMqXki8yO+SBTUASPUJ4CSeih5lCetkMP6 nVy2ahF3k6ZwunqVIdTtvK5gAe2tdaWme9ZulA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for su
	`su. 345600 IN DNSKEY ( 256 3 8 AwEAAeyFlyWSGpAWmeyYx5KE9EcR3Ntugb60YLDz/C7YUhc2li1AZUiKArqVSLorm68W6dg+IUCz xDF/scRduerzOT/SQI5iQFwhxX3rDlPeqp9GZV0/H0WNUuv6NFe1aikLXe/VOxa2VQ5mwr5pOA+3 aN8n7qB/nTUKxr/TcRdu2WZR ) ; keytag 14565`
	`su. 345600 IN DNSKEY ( 257 3 8 AwEAAaiX7pBUfcVtTUTt0u9edarRAb9gjmAuZ0LK50S6C2LUnQs+7FeQ6GzoBcHu7JRg/u5pUUU8 Si3XHEK0vzeQZa0kq/Q/SACIwpL9zHm0mTnB6xRuQJh7+dqotySIICIfyj9sb5naA3DHSihj818E dsXZ+4eS0sIQG03gn0WdBL21u+PXoOMc8eB/NUG40jDsBop2VGllh2N0iLEKp8Rn8k7mLjJL/DKt 1m7uTQJR9CsFW2rD4W7rtNeOZbVc1tIOPvczv+Oo9xlD8MB5z60oXmbQHiMXQTA1n7HBpwVvbtBm ssJ8j8tRgJ+ZTjjCntlVq8ppRPFQZ8c42A06/GcpEgE= ) ; keytag 31297`
	DNSKEY=31297/SEP is now in the chain-of-trust
	DS=31297/SHA-256 verifies DNSKEY=31297/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`su. 345600 IN RRSIG ( DNSKEY 8 1 345600 20251214000000 20251124000000 31297 su. S/SG2Bnw6MyI8976BiAWe7fDo5kuh3GJcuFeb0uF5YLOIBQxcnN1/AjEya2RhBqKeezfKaFCwJq+ rGuAJdida/F+LRejpvURMc3y6nB4dPhfnj6rjjVe17HlKfWPHGtADdASdLfziQAjP0+37L+S3Rzw 2U9dgWea/QVwUm7gS7wkvhco+Ew3NgfX8fWy9xN+z1SpRRuzQs7WVoLuzGZVHQMuUQSA10OaJv7v mm8/MAiVSeqFwpEtgIlRkhK1RbUUQj3ESD1fMm4eWmUMqXki8yO+SBTUASPUJ4CSeih5lCetkMP6 nVy2ahF3k6ZwunqVIdTtvK5gAe2tdaWme9ZulA== )`
	RRSIG=31297 and DNSKEY=31297/SEP verifies the DNSKEY RRset
	DNSKEY=14565 is now in the chain-of-trust
	Query to e.dns.ripn.net for goldenbaby.su/A
	Received 596 bytes from 193.232.142.17
	;; Response received from [193.232.142.17] 596 octets ;; HEADER SECTION ;; id = 7040 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOLDENBABY.su. 345600 IN NS ns8.nic.ru. GOLDENBABY.su. 345600 IN NS ns3.nic.ru. GOLDENBABY.su. 345600 IN NS ns4.nic.ru. VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251227004607 20251123055519 14565 su. xknB7Gx33cT4V7zooD/OPdQP9oe7iJlZP+XZ8kd2Mdpbjo1bDoAM4WEjR12wbrP5m2KHNfQak3hw hnIcEaNczlJ/qXb0h8kggfCK3vjB9HZyIDwP1ZfPoO0n8YJCrGAP3vsQesBhZjgLvaYOxnav4DJO E7O6jUrcoMc4oln+I2c= ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251228073909 20251123195518 14565 su. pHTLqQvsyHpU06Wl1pKNATwzat06/PP4b6GbrG3xkFv+BWLTFlGUiKu9MmO2/eltFwDCGjuol0zk S2jcHzIEdAyaywkSjtGAu44vc8GjCPW2HXAoRSCsI9OZ/HG1fbGW8pNvT0oerD/FXt8xcYgoHBSe X13YEbRDMXQbGPd1tvM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a.dns.ripn.net for goldenbaby.su/DNSKEY
	Received 596 bytes from 193.232.128.6
	;; Response received from [193.232.128.6] 596 octets ;; HEADER SECTION ;; id = 38594 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) GOLDENBABY.su. 345600 IN NS ns3.nic.ru. GOLDENBABY.su. 345600 IN NS ns4.nic.ru. GOLDENBABY.su. 345600 IN NS ns8.nic.ru. VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) VAQO3MGSG8T6BM42K1DG137H5UR02QV7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251227004607 20251123055519 14565 su. xknB7Gx33cT4V7zooD/OPdQP9oe7iJlZP+XZ8kd2Mdpbjo1bDoAM4WEjR12wbrP5m2KHNfQak3hw hnIcEaNczlJ/qXb0h8kggfCK3vjB9HZyIDwP1ZfPoO0n8YJCrGAP3vsQesBhZjgLvaYOxnav4DJO E7O6jUrcoMc4oln+I2c= ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) PJKIVH918O2193RD3JBP6G6R94GLUTB9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251228073909 20251123195518 14565 su. pHTLqQvsyHpU06Wl1pKNATwzat06/PP4b6GbrG3xkFv+BWLTFlGUiKu9MmO2/eltFwDCGjuol0zk S2jcHzIEdAyaywkSjtGAu44vc8GjCPW2HXAoRSCsI9OZ/HG1fbGW8pNvT0oerD/FXt8xcYgoHBSe X13YEbRDMXQbGPd1tvM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone goldenbaby.su

goldenbaby.su

	Checking DS between su and goldenbaby.su
	Query to d.dns.ripn.net for goldenbaby.su/DS
	Received 748 bytes from 194.190.124.17
	;; Response received from [194.190.124.17] 748 octets ;; HEADER SECTION ;; id = 12985 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) su. 3600 IN SOA ( a.dns.ripn.net. hostmaster.ripn.net. 650207047 ;serial 86400 ;refresh 14400 ;retry 2592000 ;expire 3600 ;minimum ) su. 3600 IN RRSIG ( SOA 8 1 345600 20251226044407 20251124155515 14565 su. ZLjAOYnssoQMi+pmxnvHoHoEuHjCr6c9NXIQ7xiHIHyVunXl5ntl6a3wrDn3SmVm8pOZfqL2XCaw ke089+37kYbqTwbk6H7m7nqmSMHOenXFe/ojA2I643Sdn0WBtSEkA7rhox9l5N7MjtesCSuJq+pb NbVuTtLWwQyAFMv+JDU= ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN NSEC3 ( 1 1 0 - vb66jvvsi85ta9n6kk5s2hsgovhio3c5 NS SOA RRSIG DNSKEY NSEC3PARAM ) vaqo3mgsg8t6bm42k1dg137h5ur02qv7.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251227004607 20251123055519 14565 su. xknB7Gx33cT4V7zooD/OPdQP9oe7iJlZP+XZ8kd2Mdpbjo1bDoAM4WEjR12wbrP5m2KHNfQak3hw hnIcEaNczlJ/qXb0h8kggfCK3vjB9HZyIDwP1ZfPoO0n8YJCrGAP3vsQesBhZjgLvaYOxnav4DJO E7O6jUrcoMc4oln+I2c= ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN NSEC3 ( 1 1 0 - pndpab2ceao41tlqb781326kctcifubb NS DS RRSIG ) pjkivh918o2193rd3jbp6g6r94glutb9.su. 3600 IN RRSIG ( NSEC3 8 2 3600 20251228073909 20251123195518 14565 su. pHTLqQvsyHpU06Wl1pKNATwzat06/PP4b6GbrG3xkFv+BWLTFlGUiKu9MmO2/eltFwDCGjuol0zk S2jcHzIEdAyaywkSjtGAu44vc8GjCPW2HXAoRSCsI9OZ/HG1fbGW8pNvT0oerD/FXt8xcYgoHBSe X13YEbRDMXQbGPd1tvM= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for goldenbaby.su in the su zone
	Query to ns8.nic.ru for goldenbaby.su/DNSKEY
	Received 94 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 94 octets ;; HEADER SECTION ;; id = 22326 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns3.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.85.61.20
	;; Response received from [194.85.61.20] 58 octets ;; HEADER SECTION ;; id = 17136 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns3.nic.ru is authoritative for goldenbaby.su
	Query to ns8.nic.ru for goldenbaby.su/SOA
	Received 94 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 94 octets ;; HEADER SECTION ;; id = 60116 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN SOA ;; ANSWER SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns4.nic.ru for goldenbaby.su/SOA
	Received 94 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 94 octets ;; HEADER SECTION ;; id = 7724 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN SOA ;; ANSWER SECTION (1 record) goldenbaby.su. 600 IN SOA ( ns3.nic.ru. admin.goldenbaby.su. 1690313352 ;serial 1440 ;refresh 3600 ;retry 259200 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns3.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.85.61.20
	;; Response received from [194.85.61.20] 58 octets ;; HEADER SECTION ;; id = 38945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

goldenbaby.su

	Query to ns8.nic.ru for goldenbaby.su/A
	Received 58 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 58 octets ;; HEADER SECTION ;; id = 20915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns8.nic.ru is authoritative for goldenbaby.su
	Query to ns8.nic.ru for goldenbaby.su/A
	Received 58 bytes from 193.232.130.14
	;; Response received from [193.232.130.14] 58 octets ;; HEADER SECTION ;; id = 56928 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

goldenbaby.su

	Query to ns4.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 58 octets ;; HEADER SECTION ;; id = 48540 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns4.nic.ru is authoritative for goldenbaby.su
	Query to ns4.nic.ru for goldenbaby.su/A
	Received 58 bytes from 194.226.96.8
	;; Response received from [194.226.96.8] 58 octets ;; HEADER SECTION ;; id = 43888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; goldenbaby.su. IN A ;; ANSWER SECTION (1 record) goldenbaby.su. 3600 IN A 91.189.114.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	goldenbaby.su A RR has value 91.189.114.14
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test goldenbaby.su at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: