DNSSEC Analyzer

Domain Name:

Time: 2022-11-28 18:10:09 UTC, NTP stratum 16

Analyzing DNSSEC problems for he.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 64087 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to f.root-servers.net for he.net/A
	Received 1163 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (1163 octets) ;; HEADER SECTION ;; id = 29486 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to c.root-servers.net for net/DNSKEY
	Received 1163 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1163 octets) ;; HEADER SECTION ;; id = 12647 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone net

net

	Checking DS between . and net
	Query to h.root-servers.net for net/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (367 octets) ;; HEADER SECTION ;; id = 58915 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee ) net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for net in the . zone
	DS=35886/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . YKnGM5GVRavil+2CN7qh0ytwU15LumfTy1Z0QxTMMw5moyda9Bac3a+JJZ/MlleXrwbJ1Nh9Fakz YWrW2ce6dJ7dixC9QRXTrMI7VXZ3wfoU1DsK18LoPQXb3LRNbP6/+548xHfpDCbRXnHTspAZ8g/L Wpzghp4x5g2GG6Vft4+35UiOptB/rI910kQ9EM/szICCK8M0NT1//wyFyFP4hsFQq2c/UBFt0nIe UONlzO//u44CvxXzw9wWwXBmlBpRmRS2q3rArBdBKL8p3V8CyJnDxCXplt2opAPUPEGGm2DDY666 s+JtUAmI2L/S888v4h+Q4r+QhL1HTFh6Ud8oAQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=35886/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 35886 8 2 7862b27f5f516ebe19680444d4ce5e762981931842c465f00236401d8bd973ee )`
	Query to j.gtld-servers.net for net/DNSKEY
	Received 775 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (775 octets) ;; HEADER SECTION ;; id = 32043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886 net. 86400 IN DNSKEY ( 256 3 8 AQO0wh8cBZHDse9ep/3UHa7hA+7BCTcAY9A7aZzaqZtbmsOP3FFxo1F92oQOklU3uFxzAUbQxKGH ud1DxAV4u1ZUJgcrfSLbK2mC3tIdw7hWASqPl5KgWFnpO77zoEdbQmI8Jwjx56DiXDVq2fdUV8M8 hEAwza9y0unybkwiv89y2mpfljdnmRkJttBGFnqdgI4Un+UZoop40TOBVAc/nl7r ) ; Key ID = 57635 net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205172830 20221120172330 35886 net. XaovTwC0KkKzacsCqG/HIicgPAiB4Mx1Yzo5dMElGRth8Jv08DVEJXRZFd/vgQvwrC+5F83AlV+y KFkff4qiMrTrgYmRpUYiKEZjquDhsCMwQdr+z2zTvNKVBBYHGW3ppzWSe1LPjASwUtQcSyAvjYgS G76VqU0A+xnP63AW7k9RjcVhR+9oimtYuiOLXv1Ar/YYckQE3sX3MvHuobTPuPiTf3U+WPQ72/o3 ipfThyucIs8G3OCwXgr7WZ14SL2pHk8Sgj+klwpHVabV+goPOLKRHG3vIXlWU8Zg4SULhTfHBFEU NAntCgyBz+gOzV4CT88XAx3Chy/WhEYowNAcnA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 257 3 8 AQOYBnzqWXIEj6mlgXg4LWC0HP2n8eK8XqgHlmJ/69iuIHsa1TrHDG6TcOra/pyeGKwH0nKZhTmX SuUFGh9BCNiwVDuyyb6OBGy2Nte9Kr8NwWg4q+zhSoOf4D+gC9dEzg0yFdwT0DKEvmNPt0K4jbQD S4Yimb+uPKuF6yieWWrPYYCrv8C9KC8JMze2uT6NuWBfsl2fDUoV4l65qMww06D7n+p7RbdwWkAZ 0fA63mXVXBZF6kpDtsYD7SUB9jhhfLQE/r85bvg3FaSs5Wi2BaqN06SzGWI1DHu7axthIOeHwg00 zxlhTpoYCH0ldoQz+S65zWYi/fRJiyLSBb6JZOvn ) ; Key ID = 35886`
	`net. 86400 IN DNSKEY ( 256 3 8 AQO0wh8cBZHDse9ep/3UHa7hA+7BCTcAY9A7aZzaqZtbmsOP3FFxo1F92oQOklU3uFxzAUbQxKGH ud1DxAV4u1ZUJgcrfSLbK2mC3tIdw7hWASqPl5KgWFnpO77zoEdbQmI8Jwjx56DiXDVq2fdUV8M8 hEAwza9y0unybkwiv89y2mpfljdnmRkJttBGFnqdgI4Un+UZoop40TOBVAc/nl7r ) ; Key ID = 57635`
	DNSKEY=35886/SEP is now in the chain-of-trust
	DS=35886/SHA-256 verifies DNSKEY=35886/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221205172830 20221120172330 35886 net. XaovTwC0KkKzacsCqG/HIicgPAiB4Mx1Yzo5dMElGRth8Jv08DVEJXRZFd/vgQvwrC+5F83AlV+y KFkff4qiMrTrgYmRpUYiKEZjquDhsCMwQdr+z2zTvNKVBBYHGW3ppzWSe1LPjASwUtQcSyAvjYgS G76VqU0A+xnP63AW7k9RjcVhR+9oimtYuiOLXv1Ar/YYckQE3sX3MvHuobTPuPiTf3U+WPQ72/o3 ipfThyucIs8G3OCwXgr7WZ14SL2pHk8Sgj+klwpHVabV+goPOLKRHG3vIXlWU8Zg4SULhTfHBFEU NAntCgyBz+gOzV4CT88XAx3Chy/WhEYowNAcnA== )`
	RRSIG=35886 and DNSKEY=35886/SEP verifies the DNSKEY RRset
	DNSKEY=57635 is now in the chain-of-trust
	Query to i.gtld-servers.net for he.net/A
	Received 894 bytes from 192.43.172.30
	;; Response received from 192.43.172.30 (894 octets) ;; HEADER SECTION ;; id = 22406 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) he.net. 172800 IN NS ns1.he.net. he.net. 172800 IN NS ns2.he.net. he.net. 172800 IN NS ns3.he.net. he.net. 172800 IN NS ns4.he.net. he.net. 172800 IN NS ns5.he.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN NSEC3 ( 1 1 0 - 2h01unu3hhqv4a8k4iunhbaqh1k786i4 NS DS RRSIG ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221202071840 20221125060840 57635 net. g1vCivPimkrvU11+uTTfhiKxL8aUw7hUNJFc2S/Sq6/GBSxbpMn/QJwvTBwIm+dndYUUUx/1cj5s JexgZDr4tXURbeddWc21cJPvNJzI7Cg94Sc4KTekHthYiz8WBg+aw189RkFbKzra8MfDhJQ92xjb 549QFrpK3wYpy/I8FDkz70POaGbu+LPDJcOODJZWf5oHDSEPZIJlvOP3Js2omw== ) ;; ADDITIONAL SECTION (11 records) ns1.he.net. 172800 IN AAAA 2001:470:100::2 ns1.he.net. 172800 IN A 216.218.130.2 ns2.he.net. 172800 IN AAAA 2001:470:200::2 ns2.he.net. 172800 IN A 216.218.131.2 ns3.he.net. 172800 IN AAAA 2001:470:300::2 ns3.he.net. 172800 IN A 216.218.132.2 ns4.he.net. 172800 IN AAAA 2001:470:400::2 ns4.he.net. 172800 IN A 216.66.1.2 ns5.he.net. 172800 IN AAAA 2001:470:500::2 ns5.he.net. 172800 IN A 216.66.80.18 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to j.gtld-servers.net for he.net/DNSKEY
	Received 894 bytes from 192.48.79.30
	;; Response received from 192.48.79.30 (894 octets) ;; HEADER SECTION ;; id = 17366 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) he.net. 172800 IN NS ns1.he.net. he.net. 172800 IN NS ns2.he.net. he.net. 172800 IN NS ns3.he.net. he.net. 172800 IN NS ns4.he.net. he.net. 172800 IN NS ns5.he.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN NSEC3 ( 1 1 0 - 2h01unu3hhqv4a8k4iunhbaqh1k786i4 NS DS RRSIG ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221202071840 20221125060840 57635 net. g1vCivPimkrvU11+uTTfhiKxL8aUw7hUNJFc2S/Sq6/GBSxbpMn/QJwvTBwIm+dndYUUUx/1cj5s JexgZDr4tXURbeddWc21cJPvNJzI7Cg94Sc4KTekHthYiz8WBg+aw189RkFbKzra8MfDhJQ92xjb 549QFrpK3wYpy/I8FDkz70POaGbu+LPDJcOODJZWf5oHDSEPZIJlvOP3Js2omw== ) ;; ADDITIONAL SECTION (11 records) ns1.he.net. 172800 IN AAAA 2001:470:100::2 ns1.he.net. 172800 IN A 216.218.130.2 ns2.he.net. 172800 IN AAAA 2001:470:200::2 ns2.he.net. 172800 IN A 216.218.131.2 ns3.he.net. 172800 IN AAAA 2001:470:300::2 ns3.he.net. 172800 IN A 216.218.132.2 ns4.he.net. 172800 IN AAAA 2001:470:400::2 ns4.he.net. 172800 IN A 216.66.1.2 ns5.he.net. 172800 IN AAAA 2001:470:500::2 ns5.he.net. 172800 IN A 216.66.80.18 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone he.net

he.net

	Checking DS between net and he.net
	Query to a.gtld-servers.net for he.net/DS
	Received 852 bytes from 192.5.6.30
	;; Response received from 192.5.6.30 (852 octets) ;; HEADER SECTION ;; id = 36402 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221205072735 20221128061735 57635 net. UvQua5wSqT4ricdUDS1K4/f6KGv+83mE0cM3JgKudWX2LNxnpa2jnFXWH5WQNhZieNDFWSRY+/Le aMxgjc/yIo7gez91d43L2qcVWAj4uNCVhfVMtehAA55JWWYPg8fC7UqcnqNS4c0lc1pg/dHQSaNV ao813TM6Ac6svDx/cpUsMDiPsjy1EansuTTTjtD7t6YISi0hTzNnTOCGYcrNxg== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1669658983 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 8 1 900 20221205180943 20221128165943 57635 net. IpkC/UpXQbgGCj3jw7H2PpXetnJTKpn8mEPkyox4DZDtQDxNZloZRAoVT4TuCw6TQZfftxj2fynT gkFOLaAF0kx4mtjWFfAxjKBdZOoZkcTW4QwXz3qwCmuLzetdHWIWWF2vkBn4MNG7opRSLaREqGeq ov4IN0fWJb7qfWSIi3nfk2u/qvE1SG5STkX0DZgpDFKT89WcoSFVSxr8/07SEg== ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN NSEC3 ( 1 1 0 - 2h01unu3hhqv4a8k4iunhbaqh1k786i4 NS DS RRSIG ) 2H00V7U4CL839KD1ECILTCF1Q6D2B9NJ.net. 86400 IN RRSIG ( NSEC3 8 2 86400 20221202071840 20221125060840 57635 net. g1vCivPimkrvU11+uTTfhiKxL8aUw7hUNJFc2S/Sq6/GBSxbpMn/QJwvTBwIm+dndYUUUx/1cj5s JexgZDr4tXURbeddWc21cJPvNJzI7Cg94Sc4KTekHthYiz8WBg+aw189RkFbKzra8MfDhJQ92xjb 549QFrpK3wYpy/I8FDkz70POaGbu+LPDJcOODJZWf5oHDSEPZIJlvOP3Js2omw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for he.net in the net zone
	Query to ns4.he.net for he.net/DNSKEY
	Timeout querying ns4.he.net/216.66.1.2 for he.net/DNSKEY
	All Queries to ns4.he.net for he.net/DNSKEY timed out or failed
	Query to ns3.he.net for he.net/DNSKEY
	Timeout querying ns3.he.net/216.218.132.2 for he.net/DNSKEY
	All Queries to ns3.he.net for he.net/DNSKEY timed out or failed
	Query to ns2.he.net for he.net/DNSKEY
	Received 86 bytes from 216.218.131.2
	;; Response received from 216.218.131.2 (86 octets) ;; HEADER SECTION ;; id = 2041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) he.net. 86400 IN SOA ( ns1.he.net. hostmaster.he.net. 202211280 ;serial 10800 ;refresh 1800 ;retry 604800 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to ns1.he.net for he.net/A
	Received 51 bytes from 216.218.130.2
	;; Response received from 216.218.130.2 (51 octets) ;; HEADER SECTION ;; id = 26510 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.he.net is authoritative for he.net
	Query to ns5.he.net for he.net/SOA
	Received 86 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (86 octets) ;; HEADER SECTION ;; id = 34681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN SOA ;; ANSWER SECTION (1 record) he.net. 86400 IN SOA ( ns1.he.net. hostmaster.he.net. 202211280 ;serial 10800 ;refresh 1800 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.he.net for he.net/SOA
	Received 86 bytes from 216.218.131.2
	;; Response received from 216.218.131.2 (86 octets) ;; HEADER SECTION ;; id = 63474 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN SOA ;; ANSWER SECTION (1 record) he.net. 86400 IN SOA ( ns1.he.net. hostmaster.he.net. 202211280 ;serial 10800 ;refresh 1800 ;retry 604800 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns1.he.net for he.net/A
	Received 51 bytes from 216.218.130.2
	;; Response received from 216.218.130.2 (51 octets) ;; HEADER SECTION ;; id = 25267 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	he.net A RR has value 216.218.236.2
	No RRSIGs found

he.net

	Query to ns5.he.net for he.net/A
	Received 51 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (51 octets) ;; HEADER SECTION ;; id = 85 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns5.he.net is authoritative for he.net
	Query to ns5.he.net for he.net/A
	Received 51 bytes from 216.66.80.18
	;; Response received from 216.66.80.18 (51 octets) ;; HEADER SECTION ;; id = 41426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	he.net A RR has value 216.218.236.2
	No RRSIGs found

he.net

	Query to ns2.he.net for he.net/A
	Received 51 bytes from 216.218.131.2
	;; Response received from 216.218.131.2 (51 octets) ;; HEADER SECTION ;; id = 55039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.he.net is authoritative for he.net
	Query to ns2.he.net for he.net/A
	Received 51 bytes from 216.218.131.2
	;; Response received from 216.218.131.2 (51 octets) ;; HEADER SECTION ;; id = 1532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; he.net. IN A ;; ANSWER SECTION (1 record) he.net. 86400 IN A 216.218.236.2 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	he.net A RR has value 216.218.236.2
	No RRSIGs found

he.net

No response from he.net nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test he.net at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: