DNSSEC Analyzer - netmeister.org

Domain Name:

Time: 2020-02-28 07:05:36 UTC, NTP stratum 4

Analyzing DNSSEC problems for netmeister.org

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 864 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (864 bytes) ;; HEADER SECTION ;; id = 55007 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeN+h0loXPKt7lFdW2zKIDkVHyJ1aYGUVE1dMNBlRH3kTn40JKcHiPOs+fy0OFVCBwoKa1s9 qZtdyP1UC0hgKoldj3oELK1yLI5MUbTMcNkWbBMRuxRz/CgZJu3IxcmuZWZMbn4LQDMj5YeiUiuW ns5vipFGWWpyPyozQXmenSWOK2GJOwcm7I/DyHVtVdztTvqiHqzy2aRoxwPhmEuAoYzzuNJJw6JN EnXaN/7l2TIciskFyPVPBFZYHnk+1ma906dfehIR190z3lh1ZESL2Yy3VIE2QGpRU6Px4ydH5sXx Z2wSMgqNNga4kjnfM1msBqk3EI48RvTTkuV0yb1eFuU= ) ; Key ID = 33853`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200312000000 20200220000000 20326 . PnEtScwUNMURExFG5Ll1KYHV4DM/xo3fjfximxW/voVvB58Sr2usDMx4zntsjhOgVKjuv7h+xu8z KiCfLpoURmg9bZEB8Xg9Q+8wUkoy4Zc+X+/oAH8lFBZKLm2epR+gyNtx3kRdXHC0gJZyb7R8J2oX 02MLdy8mq2KzzytanlNkPjYJWQBxel5jZuDNpxU+v9nJbHqngn1FuYTKnoKEwCtnNH1WMaHXi+LY D538vnososgAi5K/F+KVaDpkz35YOrSyMugfoLkZerx0JBWHzjcMox1vjJ1y1bpzlES3STrnIU3o E0x6mFlKrfs1grViHpptI3lBXaBV/xl9V4QWmg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=33853 is now in the chain-of-trust
	Query to j.root-servers.net for netmeister.org/A
	Received 816 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (816 bytes) ;; HEADER SECTION ;; id = 64995 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS a0.org.afilias-nst.info. org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS b2.org.afilias-nst.org. org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . WPkeNwB02jpBsmJY2cySfQLGEWEDAkK8lyOkQcr4787uJe4yzpXhNytcpVgztCwBmrDPEu0WocQC 6PTsOtWSsvun4iJ6CUxTEpsGiXUUFHiC/Pr1sj0iYoK+9roC4k3DFwQh6PBlJE81Y+rMRKZe8Orf eq5Q0FmiiHRfUj7It7ZMXunIS7Ed476gekwalbRBcdI+wgtHrj9hxNwY8vMTDpN0HZZFkhsnk6iJ wvxxcORKUbCWkfsXNvNaOodbQwmIuTMqhrgkxnf65J6S9C5gI5HbcZx78emHxZxiHc9AWhK4XFG/ 2SkDO5M5KKgI7xBVogaxlpofPWRTpQnkMV0oTQ== ) ;; ADDITIONAL SECTION (13 records) d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for org/DNSKEY
	Received 805 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (805 bytes) ;; HEADER SECTION ;; id = 44746 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) org. 172800 IN NS c0.org.afilias-nst.info. org. 172800 IN NS b2.org.afilias-nst.org. org. 172800 IN NS d0.org.afilias-nst.org. org. 172800 IN NS b0.org.afilias-nst.org. org. 172800 IN NS a2.org.afilias-nst.info. org. 172800 IN NS a0.org.afilias-nst.info. org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . WPkeNwB02jpBsmJY2cySfQLGEWEDAkK8lyOkQcr4787uJe4yzpXhNytcpVgztCwBmrDPEu0WocQC 6PTsOtWSsvun4iJ6CUxTEpsGiXUUFHiC/Pr1sj0iYoK+9roC4k3DFwQh6PBlJE81Y+rMRKZe8Orf eq5Q0FmiiHRfUj7It7ZMXunIS7Ed476gekwalbRBcdI+wgtHrj9hxNwY8vMTDpN0HZZFkhsnk6iJ wvxxcORKUbCWkfsXNvNaOodbQwmIuTMqhrgkxnf65J6S9C5gI5HbcZx78emHxZxiHc9AWhK4XFG/ 2SkDO5M5KKgI7xBVogaxlpofPWRTpQnkMV0oTQ== ) ;; ADDITIONAL SECTION (13 records) a0.org.afilias-nst.info. 172800 IN A 199.19.56.1 a2.org.afilias-nst.info. 172800 IN A 199.249.112.1 b0.org.afilias-nst.org. 172800 IN A 199.19.54.1 b2.org.afilias-nst.org. 172800 IN A 199.249.120.1 c0.org.afilias-nst.info. 172800 IN A 199.19.53.1 d0.org.afilias-nst.org. 172800 IN A 199.19.57.1 a0.org.afilias-nst.info. 172800 IN AAAA 2001:500:e::1 a2.org.afilias-nst.info. 172800 IN AAAA 2001:500:40::1 b0.org.afilias-nst.org. 172800 IN AAAA 2001:500:c::1 b2.org.afilias-nst.org. 172800 IN AAAA 2001:500:48::1 c0.org.afilias-nst.info. 172800 IN AAAA 2001:500:b::1 d0.org.afilias-nst.org. 172800 IN AAAA 2001:500:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone org

org

	Checking DS between . and org
	Query to l.root-servers.net for org/DS
	Received 403 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (403 bytes) ;; HEADER SECTION ;; id = 62973 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DS ;; ANSWER SECTION (3 records) org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982 org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 ) org. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . WPkeNwB02jpBsmJY2cySfQLGEWEDAkK8lyOkQcr4787uJe4yzpXhNytcpVgztCwBmrDPEu0WocQC 6PTsOtWSsvun4iJ6CUxTEpsGiXUUFHiC/Pr1sj0iYoK+9roC4k3DFwQh6PBlJE81Y+rMRKZe8Orf eq5Q0FmiiHRfUj7It7ZMXunIS7Ed476gekwalbRBcdI+wgtHrj9hxNwY8vMTDpN0HZZFkhsnk6iJ wvxxcORKUbCWkfsXNvNaOodbQwmIuTMqhrgkxnf65J6S9C5gI5HbcZx78emHxZxiHc9AWhK4XFG/ 2SkDO5M5KKgI7xBVogaxlpofPWRTpQnkMV0oTQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for org in the . zone
	DS=9795/SHA-1 has algorithm RSASHA1-NSEC3-SHA1
	DS=9795/SHA-256 has algorithm RSASHA1-NSEC3-SHA1
	Found 1 RRSIGs over DS RRset
	`org. 86400 IN RRSIG ( DS 8 1 86400 20200312050000 20200228040000 33853 . WPkeNwB02jpBsmJY2cySfQLGEWEDAkK8lyOkQcr4787uJe4yzpXhNytcpVgztCwBmrDPEu0WocQC 6PTsOtWSsvun4iJ6CUxTEpsGiXUUFHiC/Pr1sj0iYoK+9roC4k3DFwQh6PBlJE81Y+rMRKZe8Orf eq5Q0FmiiHRfUj7It7ZMXunIS7Ed476gekwalbRBcdI+wgtHrj9hxNwY8vMTDpN0HZZFkhsnk6iJ wvxxcORKUbCWkfsXNvNaOodbQwmIuTMqhrgkxnf65J6S9C5gI5HbcZx78emHxZxiHc9AWhK4XFG/ 2SkDO5M5KKgI7xBVogaxlpofPWRTpQnkMV0oTQ== )`
	RRSIG=33853 and DNSKEY=33853 verifies the DS RRset
	DS=9795/SHA-1 is now in the chain-of-trust
	`org. 86400 IN DS 9795 7 1 364dfab3daf254cab477b5675b10766ddaa24982`
	`org. 86400 IN DS ( 9795 7 2 3922b31b6f3a4ea92b19eb7b52120f031fd8e05ff0b03bafcf9f891bfe7ff8e5 )`
	Query to a2.org.afilias-nst.info for org/DNSKEY
	Error querying a2.org.afilias-nst.info/2001:500:40:0:0:0:0:1 for org/DNSKEY: 'IPv6 transport disabled'
	Received 1625 bytes from 199.249.112.1
	;; Answer received from 199.249.112.1 (1625 bytes) ;; HEADER SECTION ;; id = 24494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 7 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; org. IN DNSKEY ;; ANSWER SECTION (7 records) org. 900 IN DNSKEY ( 256 3 7 AwEAAaeW4rQBjY9Z4xE575nPn6HpUdVu7FZijNNQlxavr2gUQMaAgDc5u6QiB3QzYrY1dSZALSEb HHGyA5z7ZN5XUaC+zwmu5xT58nox/1c/bxPBWZE17d6tqIYfdpKKlqgSIHnaQsTbIv9FFHvKxdDD ukCTInKZyPW4rLLJyipUJUYH ) ; Key ID = 33209 org. 900 IN DNSKEY ( 256 3 7 AwEAAc2YgUjigNpgbsmzLkHyamRd31OOchY1kRkYDhPyufgiM9KiqujZU53x9qEhq465qf6IgdKx WeYQMk+Glw49IHRx1hvdxjn6Gfjc/96uH5cvkhEV38SvuDeZOzbNkJK0BvYo6Hck4lCSjJ1Wl2n1 Mjguba0lEo8haWdJMJS1D603 ) ; Key ID = 63887 org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795 org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883 org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 63887 org. UM2mx+6HpqOMYWJ+GcW6Pugy2WscZlebsLTl1VCIjlg6YUJ6Cf50KI2pDykRYwo307ScqR/0pG0I WhP4tr7aOWSKSi4fzvtwA/Z38zZbPBK4P3d7nCPiNZFpz4KdkJ0Q8hXaXtIJGiaBW6QbDKfjEBI0 PTvFEuFaIBXUF0WCyTA= ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 9795 org. kNAMX1hFkBRGGro4XC8VJ3QdiWfJlogs6CLW5vyBStb3DWkSGbBrcUPJs4zdDuUoIvb8Pafh4sEr 2HQlImoHCoije7pdcV4VbDwvUKG64O3QUzhFwh4n/ESUHd68rvWljwOnmifd8G4eS1vzyh6LllBI Br23lv+QVpj/99NSpZ2rN4OeTzCFbDcWMwNAsu+qPh5nIAUiVEjkI3slNER/pgwVNlUNvqch3rGS wzjvBL75P8Rb3SwTsf2+a6ozVhs8h6ZAeQK+Qe9YO7tFKc6zeC773UDBKpoaxsL81sQGShJbBT7W L0weLIcAVxMwOYNrhnFJfbN9fjOOAEiv1RV7Mg== ) org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 17883 org. Go3LfD85NSowqxmE2iyQ9CISsEzGWGxy0omtCVOrei459wErJNnwgcbtCS/vTpv6+NnLtuoayWjf /XQtMJJhpUjN8WZQeWRgr0eSM5W/1SaLM/AonkSbBEWFGCpsyZ8Nqc4OnFN63ICUJhVH+X8z3aYS MzBdTXa5NPoTI2aQ/QRTb3Wm5k5VdvDoOi8DI+zC0YmBcTNpViNLk79zfGiJq/5V3eYXRQ22BoMA J2At7V5F9zGfpBScEe5HM8+I75yzVkhHpqA9t2JUi6s68vrZphBPnA9azXMY3GiMXJePA3jXFm9B FrHByDsXj/21zyTDBS0ZgUQ2j5XMnUlswCi6kQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 4 DNSKEY records for org
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAaeW4rQBjY9Z4xE575nPn6HpUdVu7FZijNNQlxavr2gUQMaAgDc5u6QiB3QzYrY1dSZALSEb HHGyA5z7ZN5XUaC+zwmu5xT58nox/1c/bxPBWZE17d6tqIYfdpKKlqgSIHnaQsTbIv9FFHvKxdDD ukCTInKZyPW4rLLJyipUJUYH ) ; Key ID = 33209`
	`org. 900 IN DNSKEY ( 256 3 7 AwEAAc2YgUjigNpgbsmzLkHyamRd31OOchY1kRkYDhPyufgiM9KiqujZU53x9qEhq465qf6IgdKx WeYQMk+Glw49IHRx1hvdxjn6Gfjc/96uH5cvkhEV38SvuDeZOzbNkJK0BvYo6Hck4lCSjJ1Wl2n1 Mjguba0lEo8haWdJMJS1D603 ) ; Key ID = 63887`
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAZTjbIO5kIpxWUtyXc8avsKyHIIZ+LjC2Dv8naO+Tz6X2fqzDC1bdq7HlZwtkaqTkMVVJ+8g E9FIreGJ4c8G1GdbjQgbP1OyYIG7OHTc4hv5T2NlyWr6k6QFz98Q4zwFIGTFVvwBhmrMDYsOTtXa kK6QwHovA1+83BsUACxlidpwB0hQacbD6x+I2RCDzYuTzj64Jv0/9XsX6AYV3ebcgn4hL1jIR2eJ YyXlrAoWxdzxcW//5yeL5RVWuhRxejmnSVnCuxkfS4AQ485KH2tpdbWcCopLJZs6tw8q3jWcpTGz dh/v3xdYfNpQNcPImFlxAun3BtORPA2r8ti6MNoJEHU= ) ; Key ID = 9795`
	`org. 900 IN DNSKEY ( 257 3 7 AwEAAcMnWBKLuvG/LwnPVykcmpvnntwxfshHlHRhlY0F3oz8AMcuF8gw9McCw+BoC2YxWaiTpNPu xjSNhUlBtcJmcdkz3/r7PIn0oDf14ept1Y9pdPh8SbIBIWx50ZPfVRlj8oQXv2Y6yKiQik7bi3MT 37zMRU2kw2oy3cgrsGAzGN4s/C6SFYon5N1Q2O4hGDbeOq538kATOy0GFELjuauV9guX/431msYu 4Rgb5lLuQ3Mx5FSIxXpI/RaAn2mhM4nEZ/5IeRPKZVGydcuLBS8GZlxW4qbb8MgRZ8bwMg0pqWRH mhirGmJIt3UuzvN1pSFBfX7ysI9PPhSnwXCNDXk0kk0= ) ; Key ID = 17883`
	DNSKEY=9795/SEP is now in the chain-of-trust
	DS=9795/SHA-1 verifies DNSKEY=9795/SEP
	DS=9795/SHA-256 verifies DNSKEY=9795/SEP
	Found 3 RRSIGs over DNSKEY RRset
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 63887 org. UM2mx+6HpqOMYWJ+GcW6Pugy2WscZlebsLTl1VCIjlg6YUJ6Cf50KI2pDykRYwo307ScqR/0pG0I WhP4tr7aOWSKSi4fzvtwA/Z38zZbPBK4P3d7nCPiNZFpz4KdkJ0Q8hXaXtIJGiaBW6QbDKfjEBI0 PTvFEuFaIBXUF0WCyTA= )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 9795 org. kNAMX1hFkBRGGro4XC8VJ3QdiWfJlogs6CLW5vyBStb3DWkSGbBrcUPJs4zdDuUoIvb8Pafh4sEr 2HQlImoHCoije7pdcV4VbDwvUKG64O3QUzhFwh4n/ESUHd68rvWljwOnmifd8G4eS1vzyh6LllBI Br23lv+QVpj/99NSpZ2rN4OeTzCFbDcWMwNAsu+qPh5nIAUiVEjkI3slNER/pgwVNlUNvqch3rGS wzjvBL75P8Rb3SwTsf2+a6ozVhs8h6ZAeQK+Qe9YO7tFKc6zeC773UDBKpoaxsL81sQGShJbBT7W L0weLIcAVxMwOYNrhnFJfbN9fjOOAEiv1RV7Mg== )`
	`org. 900 IN RRSIG ( DNSKEY 7 1 900 20200317152700 20200225142700 17883 org. Go3LfD85NSowqxmE2iyQ9CISsEzGWGxy0omtCVOrei459wErJNnwgcbtCS/vTpv6+NnLtuoayWjf /XQtMJJhpUjN8WZQeWRgr0eSM5W/1SaLM/AonkSbBEWFGCpsyZ8Nqc4OnFN63ICUJhVH+X8z3aYS MzBdTXa5NPoTI2aQ/QRTb3Wm5k5VdvDoOi8DI+zC0YmBcTNpViNLk79zfGiJq/5V3eYXRQ22BoMA J2At7V5F9zGfpBScEe5HM8+I75yzVkhHpqA9t2JUi6s68vrZphBPnA9azXMY3GiMXJePA3jXFm9B FrHByDsXj/21zyTDBS0ZgUQ2j5XMnUlswCi6kQ== )`
	RRSIG=63887 and DNSKEY=63887 verifies the DNSKEY RRset
	RRSIG=9795 and DNSKEY=9795/SEP verifies the DNSKEY RRset
	RRSIG=17883 and DNSKEY=17883/SEP verifies the DNSKEY RRset
	DNSKEY=33209 is now in the chain-of-trust
	DNSKEY=63887 is now in the chain-of-trust
	DNSKEY=17883/SEP is now in the chain-of-trust
	Query to a0.org.afilias-nst.info for netmeister.org/A
	Received 332 bytes from 199.19.56.1
	;; Answer received from 199.19.56.1 (332 bytes) ;; HEADER SECTION ;; id = 1676 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) netmeister.org. 86400 IN NS ns-179-c.gandi.net. netmeister.org. 86400 IN NS ns-143-b.gandi.net. netmeister.org. 86400 IN NS ns-181-a.gandi.net. netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20200317152700 20200225142700 63887 org. BemWaJopeSuaszPrtoMNM5Xn15jzXFKWYTDWBNQq1WS6RLeSmphzNuVPqCzAOxkn2kT6GHfy6Qjm Feiihuhh9scinQDdcFy0rBVx7/tg7rSB2ShXiCfCKtfp7BAAtozcJetrcD5p9sZB34Bhi4ScG6AJ vc+8bmw8KhSaOyWeM7E= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a2.org.afilias-nst.info for netmeister.org/DNSKEY
	Error querying a2.org.afilias-nst.info/2001:500:40:0:0:0:0:1 for netmeister.org/DNSKEY: 'IPv6 transport disabled'
	Received 332 bytes from 199.249.112.1
	;; Answer received from 199.249.112.1 (332 bytes) ;; HEADER SECTION ;; id = 52627 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) netmeister.org. 86400 IN NS ns-143-b.gandi.net. netmeister.org. 86400 IN NS ns-179-c.gandi.net. netmeister.org. 86400 IN NS ns-181-a.gandi.net. netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20200317152700 20200225142700 63887 org. BemWaJopeSuaszPrtoMNM5Xn15jzXFKWYTDWBNQq1WS6RLeSmphzNuVPqCzAOxkn2kT6GHfy6Qjm Feiihuhh9scinQDdcFy0rBVx7/tg7rSB2ShXiCfCKtfp7BAAtozcJetrcD5p9sZB34Bhi4ScG6AJ vc+8bmw8KhSaOyWeM7E= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone netmeister.org

netmeister.org

	Checking DS between org and netmeister.org
	Query to b0.org.afilias-nst.org for netmeister.org/DS
	Error querying b0.org.afilias-nst.org/2001:500:c:0:0:0:0:1 for netmeister.org/DS: 'IPv6 transport disabled'
	Received 254 bytes from 199.19.54.1
	;; Answer received from 199.19.54.1 (254 bytes) ;; HEADER SECTION ;; id = 30478 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DS ;; ANSWER SECTION (2 records) netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 ) netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20200317152700 20200225142700 63887 org. BemWaJopeSuaszPrtoMNM5Xn15jzXFKWYTDWBNQq1WS6RLeSmphzNuVPqCzAOxkn2kT6GHfy6Qjm Feiihuhh9scinQDdcFy0rBVx7/tg7rSB2ShXiCfCKtfp7BAAtozcJetrcD5p9sZB34Bhi4ScG6AJ vc+8bmw8KhSaOyWeM7E= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for netmeister.org in the org zone
	DS=31910/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`netmeister.org. 86400 IN RRSIG ( DS 7 2 86400 20200317152700 20200225142700 63887 org. BemWaJopeSuaszPrtoMNM5Xn15jzXFKWYTDWBNQq1WS6RLeSmphzNuVPqCzAOxkn2kT6GHfy6Qjm Feiihuhh9scinQDdcFy0rBVx7/tg7rSB2ShXiCfCKtfp7BAAtozcJetrcD5p9sZB34Bhi4ScG6AJ vc+8bmw8KhSaOyWeM7E= )`
	RRSIG=63887 and DNSKEY=63887 verifies the DS RRset
	DS=31910/SHA-256 is now in the chain-of-trust
	`netmeister.org. 86400 IN DS ( 31910 13 2 9aa11c0c17f25e9c09a8a7360c6292cc5daa0fdeadda1d0edc733949aa05b781 )`
	Query to ns-179-c.gandi.net for netmeister.org/DNSKEY
	Received 233 bytes from 217.70.187.180
	;; Answer received from 217.70.187.180 (233 bytes) ;; HEADER SECTION ;; id = 32692 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN DNSKEY ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN DNSKEY ( 256 3 13 W1zt0mA1d1FHzK+qkEzMb8B7IZkn7qbHxSzjwDzQr4DUCjlycXDRGdxupCDsE7iaaxDCGR2T8nZs teX0PXx7Bg== ) ; Key ID = 31910 netmeister.org. 10800 IN RRSIG ( DNSKEY 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. e5INK2aiUMq7Vd1fpYYD+zHlWP4Yz7J9d8ptc0wb3M77vmTGqFa/0GOccoRjBsJ+FRjjR3PQ/bfZ Wh/0Irm5pw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for netmeister.org
	`netmeister.org. 10800 IN DNSKEY ( 256 3 13 W1zt0mA1d1FHzK+qkEzMb8B7IZkn7qbHxSzjwDzQr4DUCjlycXDRGdxupCDsE7iaaxDCGR2T8nZs teX0PXx7Bg== ) ; Key ID = 31910`
	DNSKEY=31910 is now in the chain-of-trust
	DS=31910/SHA-256 verifies DNSKEY=31910
	Found 1 RRSIGs over DNSKEY RRset
	`netmeister.org. 10800 IN RRSIG ( DNSKEY 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. e5INK2aiUMq7Vd1fpYYD+zHlWP4Yz7J9d8ptc0wb3M77vmTGqFa/0GOccoRjBsJ+FRjjR3PQ/bfZ Wh/0Irm5pw== )`
	RRSIG=31910 and DNSKEY=31910 verifies the DNSKEY RRset
	Query to ns-181-a.gandi.net for netmeister.org/A
	Error querying ns-181-a.gandi.net/2001:4b98:aaaa:0:0:0:0:b6 for netmeister.org/A: 'IPv6 transport disabled'
	Received 169 bytes from 173.246.100.182
	;; Answer received from 173.246.100.182 (169 bytes) ;; HEADER SECTION ;; id = 42908 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN A 166.84.7.99 netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. +DJqZjVxNJqY3J3VOUHh/9yOyhDZm3P6GwscMrdnj9PewK8w9j8mi0cXGqm2bWWkosRRQre2x4nq MGGNcncd2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netmeister.org is authoritative for netmeister.org
	Found RRSIG signed by netmeister.org zone
	Query to ns-181-a.gandi.net for netmeister.org/SOA
	Received 213 bytes from 173.246.100.182
	;; Answer received from 173.246.100.182 (213 bytes) ;; HEADER SECTION ;; id = 24000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1582761600 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. 6bzc56NiPh7d1YQMm6fEsXLtBNoVTq/xaSYFWBsC+jSeXp2TA2vEwwTwqsODVz6rIOSpjsABatzO l12Sfi7guw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-179-c.gandi.net for netmeister.org/SOA
	Error querying ns-179-c.gandi.net/2604:3400:aaac:0:0:0:0:b4 for netmeister.org/SOA: 'IPv6 transport disabled'
	Received 213 bytes from 217.70.187.180
	;; Answer received from 217.70.187.180 (213 bytes) ;; HEADER SECTION ;; id = 42676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1582761600 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. 6bzc56NiPh7d1YQMm6fEsXLtBNoVTq/xaSYFWBsC+jSeXp2TA2vEwwTwqsODVz6rIOSpjsABatzO l12Sfi7guw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-143-b.gandi.net for netmeister.org/SOA
	Error querying ns-143-b.gandi.net/2001:4b98:aaab:0:0:0:0:90 for netmeister.org/SOA: 'IPv6 transport disabled'
	Received 213 bytes from 213.167.230.144
	;; Answer received from 213.167.230.144 (213 bytes) ;; HEADER SECTION ;; id = 53766 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN SOA ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN SOA ( ns1.gandi.net. hostmaster.gandi.net. 1582761600 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 10800 ;minimum ) netmeister.org. 10800 IN RRSIG ( SOA 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. 6bzc56NiPh7d1YQMm6fEsXLtBNoVTq/xaSYFWBsC+jSeXp2TA2vEwwTwqsODVz6rIOSpjsABatzO l12Sfi7guw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns-181-a.gandi.net for netmeister.org/A
	Received 169 bytes from 173.246.100.182
	;; Answer received from 173.246.100.182 (169 bytes) ;; HEADER SECTION ;; id = 53588 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; netmeister.org. IN A ;; ANSWER SECTION (2 records) netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. 9i7SfM3KIyB0bOmGdIW2oipbfiqjRyr35Q+Sv74Hb7Kx/O6KrgONXakPetxy2pFg6YEOngFPnUCd PyGLcf3aAw== ) netmeister.org. 10800 IN A 166.84.7.99 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	netmeister.org A RR has value 166.84.7.99
	Found 1 RRSIGs over A RRset
	`netmeister.org. 10800 IN RRSIG ( A 13 2 10800 20200312000000 20200220000000 31910 netmeister.org. 9i7SfM3KIyB0bOmGdIW2oipbfiqjRyr35Q+Sv74Hb7Kx/O6KrgONXakPetxy2pFg6YEOngFPnUCd PyGLcf3aAw== )`
	RRSIG=31910 and DNSKEY=31910 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test netmeister.org at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: