DNSSEC Debugger - limarc.org

Domain Name:

Time: 2024-09-20 08:55:55 UTC

Analyzing DNSSEC problems for limarc.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 1139 octets ;; HEADER SECTION ;; id = 48601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241010000000 20240919000000 20326 . a9nlgBllKW93EmoBhIbqkuXFLRElIUw51JFslF6VpL+5SROks4IkDYb1MvushJUV1KRarnqzxtFj igN8oGRluO9Rvxo3/XpyGgsuepmQtFvlyr5bVcd0rCZTASou5FuQQwVeSVj4o4Y42ylEZTO/FzbI wMM8+MsOtwEDzlZs6wKCK2o77oFHdgOyVk3/eIJV73vTH5HIXlwEw8Z5YlwYUxdBtCKvx6Wtaj7w mp+rbFqick8iHCafKOeeocunUz8kZxCvoWeju3zGczKV/1plUSJrRPfxLGw3G1dtW+WMbFLH/lQG rCsVHEb8nrDy15ePvy6/6bSS6yzgG9xXSA2pPA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	DNSKEY=61050 is now in the chain-of-trust
	Query to e.root-servers.net for limarc.org/A
	Received 776 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 776 octets ;; HEADER SECTION ;; id = 57837 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241003050000 20240920040000 20038 . IQ8U+VTpalLHJCH6R+CH8t+1jznC/jZs+u4tWbgt8gNzAYBIhbxHeQGaE5NBaiXmXaqlPrVkwZdt y2qDWByTOCph+Fv49gFnIJd1EW7s1ZX27NBA03XWQm1/mriUXnenJWyK9g1mDDSTo4JxSwb48DyK S6zmWEbaVi915MNOW6xldl/+gWkT5tYEbON/o2ILqdvisY/8DdVj3LH+d/SVDvMDeVNhErwViuVq boPMRtx31kCkS65FeQRTEqMcMprv+M6jCme9SBG8OFX1KoKStwTRaxhkL5e1p9x7jPvtWv7cPrFR KLUfE9LpubeVTrd8WF5RGC4AG38gJrFQbNgCkQ== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Query to k.root-servers.net for org/DNSKEY
	Received 769 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 769 octets ;; HEADER SECTION ;; id = 65067 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS d0.org.afilias-nst.org. org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241003050000 20240920040000 20038 . IQ8U+VTpalLHJCH6R+CH8t+1jznC/jZs+u4tWbgt8gNzAYBIhbxHeQGaE5NBaiXmXaqlPrVkwZdt y2qDWByTOCph+Fv49gFnIJd1EW7s1ZX27NBA03XWQm1/mriUXnenJWyK9g1mDDSTo4JxSwb48DyK S6zmWEbaVi915MNOW6xldl/+gWkT5tYEbON/o2ILqdvisY/8DdVj3LH+d/SVDvMDeVNhErwViuVq boPMRtx31kCkS65FeQRTEqMcMprv+M6jCme9SBG8OFX1KoKStwTRaxhkL5e1p9x7jPvtWv7cPrFR KLUfE9LpubeVTrd8WF5RGC4AG38gJrFQbNgCkQ== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; { "EDNS-VERSION": 0 }
	Found child zone org

org

	Checking DS between . and org
	Query to f.root-servers.net for org/DS
	Received 367 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 367 octets ;; HEADER SECTION ;; id = 9642 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (2 records) org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 ) org. 86400 IN RRSIG ( DS 8 1 86400 20241003050000 20240920040000 20038 . IQ8U+VTpalLHJCH6R+CH8t+1jznC/jZs+u4tWbgt8gNzAYBIhbxHeQGaE5NBaiXmXaqlPrVkwZdt y2qDWByTOCph+Fv49gFnIJd1EW7s1ZX27NBA03XWQm1/mriUXnenJWyK9g1mDDSTo4JxSwb48DyK S6zmWEbaVi915MNOW6xldl/+gWkT5tYEbON/o2ILqdvisY/8DdVj3LH+d/SVDvMDeVNhErwViuVq boPMRtx31kCkS65FeQRTEqMcMprv+M6jCme9SBG8OFX1KoKStwTRaxhkL5e1p9x7jPvtWv7cPrFR KLUfE9LpubeVTrd8WF5RGC4AG38gJrFQbNgCkQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for org in the . zone
	DS=26974/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20241003050000 20240920040000 20038 . IQ8U+VTpalLHJCH6R+CH8t+1jznC/jZs+u4tWbgt8gNzAYBIhbxHeQGaE5NBaiXmXaqlPrVkwZdt y2qDWByTOCph+Fv49gFnIJd1EW7s1ZX27NBA03XWQm1/mriUXnenJWyK9g1mDDSTo4JxSwb48DyK S6zmWEbaVi915MNOW6xldl/+gWkT5tYEbON/o2ILqdvisY/8DdVj3LH+d/SVDvMDeVNhErwViuVq boPMRtx31kCkS65FeQRTEqMcMprv+M6jCme9SBG8OFX1KoKStwTRaxhkL5e1p9x7jPvtWv7cPrFR KLUfE9LpubeVTrd8WF5RGC4AG38gJrFQbNgCkQ== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=26974/SHA-256 is now in the chain-of-trust
	`org. 86400 IN DS ( 26974 8 2 4fede294c53f438a158c41d39489cd78a86beb0d8a0aeaff14745c0d16e1de32 )`
	Query to a2.org.afilias-nst.info for org/DNSKEY
	Received 895 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 895 octets ;; HEADER SECTION ;; id = 59875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (4 records) org. 3600 IN DNSKEY ( 256 3 8 AwEAAbPGbWF+ZeC9Z5OjVqy9XWGI2/2kSTtPD2o8tRQ+INGE6PMBCuGE/G54mCdppJKAk/8YPfSt kTGyMWG1r9RDDyk4MMhXrd+ksSacUGM5xEoemeDL7uiAC3QKmmVUrHBqY6e57Y0DA5O/2V6FJA2e TL9jafWgjg3y53ybSb1h+sl1 ) ; Key ID = 15678 org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974 org. 3600 IN DNSKEY ( 256 3 8 AwEAAcrrd2ol7mdqRflg/1WNPBzyD2doLKcrfxcbkjPjR3+6u9VqKsLeFfvuueRYRD4DR4gb6aZJ /OTyC9pTr3EFQW2FyXQSZFUSHIQj4hHumjw9Y1YJ7DSJYsP/jgyUL6H4xCq4whLFQnplPL3se/rO aPAoV9zSYdPewHXkBELuMh63 ) ; Key ID = 23064 org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241008152928 20240917142928 26974 org. R4zr/CUTCWdOL5KrMg3bR4jKPCfNuGP6VeKxz3kiB54KdDeVlUMXQjfRbniR3CRblkE259D3olgw UIDW5BZ3R7IZmR/j3kJi5BRsqP5SlJ9FwCIHClLLmtUgr0FxnCLaDjBeHzBQFGfZvQ9jB2AJLuaN hfHIFU1N0OQrBlWR4LtZodpWLOYq2edD8ZOoFi2YeOA3xwQnfkOcEqBT5DE3khIQDXmFwhJbqG8P 4T0P+1ByorJT/jUydl6R6Gwe7AfNTiw2PZOOHLBigKxibG3beqKESTiypbEDI6vLjqPNa2DnA+2l Koja+M5P6ejhOwYnCZjOunkHbd7n4kn/NK2iqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for org
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAbPGbWF+ZeC9Z5OjVqy9XWGI2/2kSTtPD2o8tRQ+INGE6PMBCuGE/G54mCdppJKAk/8YPfSt kTGyMWG1r9RDDyk4MMhXrd+ksSacUGM5xEoemeDL7uiAC3QKmmVUrHBqY6e57Y0DA5O/2V6FJA2e TL9jafWgjg3y53ybSb1h+sl1 ) ; Key ID = 15678`
	`org. 3600 IN DNSKEY ( 257 3 8 AwEAAexZJ/1wfyNCxNPrTZizaG7UlibGhP+AyogR6bqjptKweEgE4gD8GxRQJkt+Fn5pCoNqzmm1 ZnEoKqvm93uOYtbKkYQDGH+W69J66MSKpgIyS+mT/4iaXn+lpb5o99l/sf7lHMa975O/fqN6aPUl l4hUbN2T1LHv6HzQuQCtNRJA8jHGwX5q0NMmh2Z+yaG6B9cISerje9l5L+ID2ydJ6zXquYteoIUv X2xzqnXCdHPSvD+oL6R/weW+tztdFS1hok/1z3tn5NzmcaOLll9nXniCozEpLFEGPswyvtphWgCY hI8bBTqhUsIwfIwLSBQTEg2oCX7sS5CbXg44OqwhIW8= ) ; Key ID = 26974`
	`org. 3600 IN DNSKEY ( 256 3 8 AwEAAcrrd2ol7mdqRflg/1WNPBzyD2doLKcrfxcbkjPjR3+6u9VqKsLeFfvuueRYRD4DR4gb6aZJ /OTyC9pTr3EFQW2FyXQSZFUSHIQj4hHumjw9Y1YJ7DSJYsP/jgyUL6H4xCq4whLFQnplPL3se/rO aPAoV9zSYdPewHXkBELuMh63 ) ; Key ID = 23064`
	DNSKEY=26974/SEP is now in the chain-of-trust
	DS=26974/SHA-256 verifies DNSKEY=26974/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`org. 3600 IN RRSIG ( DNSKEY 8 1 3600 20241008152928 20240917142928 26974 org. R4zr/CUTCWdOL5KrMg3bR4jKPCfNuGP6VeKxz3kiB54KdDeVlUMXQjfRbniR3CRblkE259D3olgw UIDW5BZ3R7IZmR/j3kJi5BRsqP5SlJ9FwCIHClLLmtUgr0FxnCLaDjBeHzBQFGfZvQ9jB2AJLuaN hfHIFU1N0OQrBlWR4LtZodpWLOYq2edD8ZOoFi2YeOA3xwQnfkOcEqBT5DE3khIQDXmFwhJbqG8P 4T0P+1ByorJT/jUydl6R6Gwe7AfNTiw2PZOOHLBigKxibG3beqKESTiypbEDI6vLjqPNa2DnA+2l Koja+M5P6ejhOwYnCZjOunkHbd7n4kn/NK2iqQ== )`
	RRSIG=26974 and DNSKEY=26974/SEP verifies the DNSKEY RRset
	DNSKEY=15678 is now in the chain-of-trust
	DNSKEY=23064 is now in the chain-of-trust
	Query to a2.org.afilias-nst.info for limarc.org/A
	Received 586 bytes from 199.249.112.1
	;; Response received from [199.249.112.1] 586 octets ;; HEADER SECTION ;; id = 57751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) limarc.org. 3600 IN NS ns1.ipower.com. limarc.org. 3600 IN NS ns2.ipower.com. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a inteiqvo66e50r80l088t7dv4rt64bed NS DS RRSIG ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241011085424 20240920075424 23064 org. YMoPDkuAFpoVT139xYEBzf5Guyucx8L1/MiVJlkiR1tZDidNdMhFCyelp1qDa3jVktY4xMBybHmv 5bTQRJTxACrHw5VHm3nYlcIGJE58G5f1IE7k8OmLSzWhllV3p4D4Vjv9aKgdoka0M3swrWu8ehpv KYtIMgMvegTTS/cCutY= ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241008152928 20240917142928 23064 org. Z/uJE3wSUwjbskgvqjrM4uql+k/0PxVWcxGZfxae0nl+nYMQ49PHK4y966Ge7Nxemo1SqCznbEf5 rgyaavz9Bb6nBLvdzSLUkPFG4ztJxPBStGmtiTkwx9rFQ5Yt23Mmc59JhzURITaYlJRVueMqlin+ QHBzOMcbJ0ImM/Gwwbg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c0.org.afilias-nst.info for limarc.org/DNSKEY
	Received 586 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 586 octets ;; HEADER SECTION ;; id = 36598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) limarc.org. 3600 IN NS ns2.ipower.com. limarc.org. 3600 IN NS ns1.ipower.com. gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241011085424 20240920075424 23064 org. YMoPDkuAFpoVT139xYEBzf5Guyucx8L1/MiVJlkiR1tZDidNdMhFCyelp1qDa3jVktY4xMBybHmv 5bTQRJTxACrHw5VHm3nYlcIGJE58G5f1IE7k8OmLSzWhllV3p4D4Vjv9aKgdoka0M3swrWu8ehpv KYtIMgMvegTTS/cCutY= ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a inteiqvo66e50r80l088t7dv4rt64bed NS DS RRSIG ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241008152928 20240917142928 23064 org. Z/uJE3wSUwjbskgvqjrM4uql+k/0PxVWcxGZfxae0nl+nYMQ49PHK4y966Ge7Nxemo1SqCznbEf5 rgyaavz9Bb6nBLvdzSLUkPFG4ztJxPBStGmtiTkwx9rFQ5Yt23Mmc59JhzURITaYlJRVueMqlin+ QHBzOMcbJ0ImM/Gwwbg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone limarc.org

limarc.org

	Checking DS between org and limarc.org
	Query to c0.org.afilias-nst.info for limarc.org/DS
	Received 785 bytes from 199.19.53.1
	;; Response received from [199.19.53.1] 785 octets ;; HEADER SECTION ;; id = 30878 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a gdtrea8kmj2rneqen4m2ogj26kfsukj7 NS SOA RRSIG DNSKEY NSEC3PARAM ) gdtpongmpok61u9lvnipqor8lra9l4t0.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241011085424 20240920075424 23064 org. YMoPDkuAFpoVT139xYEBzf5Guyucx8L1/MiVJlkiR1tZDidNdMhFCyelp1qDa3jVktY4xMBybHmv 5bTQRJTxACrHw5VHm3nYlcIGJE58G5f1IE7k8OmLSzWhllV3p4D4Vjv9aKgdoka0M3swrWu8ehpv KYtIMgMvegTTS/cCutY= ) org. 3600 IN SOA ( a0.org.afilias-nst.info. hostmaster.donuts.email. 1726822078 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 3600 ;minimum ) org. 3600 IN RRSIG ( SOA 8 1 3600 20241011085424 20240920075424 23064 org. V292AOqNRICskaadOYNGtXErEaMfJr5Jlx+P96DopRULYcZ4q1HjV0jB1PUs/QXepqwKO3tDxb8e YhBAJN4WpdcNyqh5JLC2Ym7dbSs0QJdw4W0UIhPjpbkQZdD+GHMC4AS42CcJfvjJLH0cgqFIBQee Kr4oINWEX0EfyDhRfHk= ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN NSEC3 ( 1 1 0 332539ee7f95c32a inteiqvo66e50r80l088t7dv4rt64bed NS DS RRSIG ) intai7fdepbelph2sflksu7s5ftuhf9k.org. 3600 IN RRSIG ( NSEC3 8 2 3600 20241008152928 20240917142928 23064 org. Z/uJE3wSUwjbskgvqjrM4uql+k/0PxVWcxGZfxae0nl+nYMQ49PHK4y966Ge7Nxemo1SqCznbEf5 rgyaavz9Bb6nBLvdzSLUkPFG4ztJxPBStGmtiTkwx9rFQ5Yt23Mmc59JhzURITaYlJRVueMqlin+ QHBzOMcbJ0ImM/Gwwbg= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for limarc.org in the org zone
	Query to ns1.ipower.com for limarc.org/DNSKEY
	Received 107 bytes from 66.96.142.144
	;; Response received from [66.96.142.144] 107 octets ;; HEADER SECTION ;; id = 32827 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) limarc.org. 3600 IN SOA ( ns1.yourhostingaccount.com. admin.yourhostingaccount.com. 2009071976 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.ipower.com for limarc.org/A
	Received 55 bytes from 66.96.142.144
	;; Response received from [66.96.142.144] 55 octets ;; HEADER SECTION ;; id = 12595 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (1 record) limarc.org. 1800 IN A 50.212.33.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.ipower.com is authoritative for limarc.org
	Query to ns2.ipower.com for limarc.org/SOA
	Received 107 bytes from 65.254.254.156
	;; Response received from [65.254.254.156] 107 octets ;; HEADER SECTION ;; id = 60481 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN SOA ;; ANSWER SECTION (1 record) limarc.org. 3600 IN SOA ( ns1.yourhostingaccount.com. admin.yourhostingaccount.com. 2009071976 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.ipower.com for limarc.org/A
	Received 55 bytes from 66.96.142.144
	;; Response received from [66.96.142.144] 55 octets ;; HEADER SECTION ;; id = 60379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (1 record) limarc.org. 1800 IN A 50.212.33.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	limarc.org A RR has value 50.212.33.3
	No RRSIGs found

limarc.org

	Query to ns2.ipower.com for limarc.org/A
	Received 55 bytes from 65.254.254.156
	;; Response received from [65.254.254.156] 55 octets ;; HEADER SECTION ;; id = 39530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (1 record) limarc.org. 1800 IN A 50.212.33.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.ipower.com is authoritative for limarc.org
	Query to ns2.ipower.com for limarc.org/A
	Received 55 bytes from 65.254.254.156
	;; Response received from [65.254.254.156] 55 octets ;; HEADER SECTION ;; id = 19715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; limarc.org. IN A ;; ANSWER SECTION (1 record) limarc.org. 1800 IN A 50.212.33.3 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	limarc.org A RR has value 50.212.33.3
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test limarc.org at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: