DNSSEC Analyzer

Domain Name:

Time: 2022-11-28 17:34:20 UTC, NTP stratum 16

Analyzing DNSSEC problems for nic.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (864 octets) ;; HEADER SECTION ;; id = 32594 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to g.root-servers.net for nic.cz/A
	Received 619 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (619 octets) ;; HEADER SECTION ;; id = 12809 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . b/fBueZrfobCO0Aei0Z72CE1GEeK5fSGwo4pDjbNbSFzgd/xFjh16Uy0nNCt9/ZKuxyqzPABJZZx f9JIev8eJl5ODkCgGi8SfxdAnxxDV2XJnORqq1mPKe0O357ezKSzNAmcOgH2VAfAbFb/TtEQaAgl FbhlJSP7wGpKoGFbx/9TmY0lTQ11VxBeUxPCzsX3XBwxf/lWGrmQRfLT9lUi8sLy8A2mXIQ/ToHU UExCyKyhvUxZ5sjmmlpQ/JTGBaaJ8rsyjkymJjcJpKpd6mEi/aypjFxw2VwY93UloeaqNBblTan7 RXdRn5VmtubG5TlbXvFJe9mB9Cyjg0fm7NwgiA== ) ;; ADDITIONAL SECTION (9 records) d.ns.nic.cz. 172800 IN A 193.29.206.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 a.ns.nic.cz. 172800 IN A 194.0.12.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (613 octets) ;; HEADER SECTION ;; id = 21136 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . b/fBueZrfobCO0Aei0Z72CE1GEeK5fSGwo4pDjbNbSFzgd/xFjh16Uy0nNCt9/ZKuxyqzPABJZZx f9JIev8eJl5ODkCgGi8SfxdAnxxDV2XJnORqq1mPKe0O357ezKSzNAmcOgH2VAfAbFb/TtEQaAgl FbhlJSP7wGpKoGFbx/9TmY0lTQ11VxBeUxPCzsX3XBwxf/lWGrmQRfLT9lUi8sLy8A2mXIQ/ToHU UExCyKyhvUxZ5sjmmlpQ/JTGBaaJ8rsyjkymJjcJpKpd6mEi/aypjFxw2VwY93UloeaqNBblTan7 RXdRn5VmtubG5TlbXvFJe9mB9Cyjg0fm7NwgiA== ) ;; ADDITIONAL SECTION (9 records) b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to h.root-servers.net for cz/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (366 octets) ;; HEADER SECTION ;; id = 60997 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . b/fBueZrfobCO0Aei0Z72CE1GEeK5fSGwo4pDjbNbSFzgd/xFjh16Uy0nNCt9/ZKuxyqzPABJZZx f9JIev8eJl5ODkCgGi8SfxdAnxxDV2XJnORqq1mPKe0O357ezKSzNAmcOgH2VAfAbFb/TtEQaAgl FbhlJSP7wGpKoGFbx/9TmY0lTQ11VxBeUxPCzsX3XBwxf/lWGrmQRfLT9lUi8sLy8A2mXIQ/ToHU UExCyKyhvUxZ5sjmmlpQ/JTGBaaJ8rsyjkymJjcJpKpd6mEi/aypjFxw2VwY93UloeaqNBblTan7 RXdRn5VmtubG5TlbXvFJe9mB9Cyjg0fm7NwgiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . b/fBueZrfobCO0Aei0Z72CE1GEeK5fSGwo4pDjbNbSFzgd/xFjh16Uy0nNCt9/ZKuxyqzPABJZZx f9JIev8eJl5ODkCgGi8SfxdAnxxDV2XJnORqq1mPKe0O357ezKSzNAmcOgH2VAfAbFb/TtEQaAgl FbhlJSP7wGpKoGFbx/9TmY0lTQ11VxBeUxPCzsX3XBwxf/lWGrmQRfLT9lUi8sLy8A2mXIQ/ToHU UExCyKyhvUxZ5sjmmlpQ/JTGBaaJ8rsyjkymJjcJpKpd6mEi/aypjFxw2VwY93UloeaqNBblTan7 RXdRn5VmtubG5TlbXvFJe9mB9Cyjg0fm7NwgiA== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to c.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.14.1
	;; Response received from 194.0.14.1 (289 octets) ;; HEADER SECTION ;; id = 15709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 3600 IN DNSKEY ( 256 3 13 Q7wwkt5mA48ZejwoX1oWMU2LVHGs+x3zXlhnT9Bb6Q9QQgSnjUMb7Rtlm9Ty409CVivK1s4rBb42 0YVmlnZI5w== ) ; Key ID = 39289 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20221208162134 20221124145134 20237 cz. mGewivUfK2EsFeXmkw7xxV4m00jeuIjSVO06G/DxqJwgd6kUD8J49OoDPnk3qnfi6S3ovm/ULWUC fFEcIqCKmA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	`cz. 3600 IN DNSKEY ( 256 3 13 Q7wwkt5mA48ZejwoX1oWMU2LVHGs+x3zXlhnT9Bb6Q9QQgSnjUMb7Rtlm9Ty409CVivK1s4rBb42 0YVmlnZI5w== ) ; Key ID = 39289`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20221208162134 20221124145134 20237 cz. mGewivUfK2EsFeXmkw7xxV4m00jeuIjSVO06G/DxqJwgd6kUD8J49OoDPnk3qnfi6S3ovm/ULWUC fFEcIqCKmA== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=39289 is now in the chain-of-trust
	Query to b.ns.nic.cz for nic.cz/A
	Received 1056 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (1056 octets) ;; HEADER SECTION ;; id = 35536 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	b.ns.nic.cz is authoritative for nic.cz
	Query to a.ns.nic.cz for nic.cz/DNSKEY
	Received 297 bytes from 194.0.12.1
	;; Response received from 194.0.12.1 (297 octets) ;; HEADER SECTION ;; id = 49299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (3 records) nic.cz. 1800 IN DNSKEY ( 256 3 13 WXrOUTD3ICK/iUW7b029Yrz7gAhVTqOaONU/1N7Gt4S2OVLbXo/M61F8gG5ZpJ93dtIMbjajafWA /lDPwwtKpA== ) ; Key ID = 63159 nic.cz. 1800 IN DNSKEY ( 257 3 13 AvXlOcTj0MlLA/E2nPzn05SPT78X1bcGAQtmb4paqt8Ndl4qKAtxoR8g9BNR74viCHxI/60w+mM4 GqGAkVJMJw== ) ; Key ID = 14668 nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20221207072553 20221123055553 14668 nic.cz. zExQHBPObkacfrSDT1sqW35Htpm/eHiqdajWt99nGLs36qs5uJhYSBrrS9vX7EEdL0gJEJwdXchF QaD/koRCWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone nic.cz
	Attempting to learn nameservers for nic.cz
	Query to d.ns.nic.cz for nic.cz/NS
	Received 932 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (932 octets) ;; HEADER SECTION ;; id = 15826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN NS ;; ANSWER SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN A 194.0.13.1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN A 193.29.206.1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found nic.cz nameservers: a.ns.nic.cz, b.ns.nic.cz, d.ns.nic.cz

nic.cz

	Checking DS between cz and nic.cz
	Query to c.ns.nic.cz for nic.cz/DS
	Received 181 bytes from 194.0.14.1
	;; Response received from 194.0.14.1 (181 octets) ;; HEADER SECTION ;; id = 60458 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DS ;; ANSWER SECTION (2 records) nic.cz. 3600 IN DS ( 14668 13 2 13540b92c606ad331fe4f40f15d5d93723d210429f0a49bfab90dde6541465c6 ) nic.cz. 3600 IN RRSIG ( DS 13 2 3600 20221206135030 20221122122030 39289 cz. 6nLcLlzNSsqZVWSHqg6Gh0Jjb3NpMhVxtLaKGm5tFagA9L7Qsjw4smyXZsT4nzI92g1tlyjJYiXN KcpTwcvC8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for nic.cz in the cz zone
	DS=14668/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`nic.cz. 3600 IN RRSIG ( DS 13 2 3600 20221206135030 20221122122030 39289 cz. 6nLcLlzNSsqZVWSHqg6Gh0Jjb3NpMhVxtLaKGm5tFagA9L7Qsjw4smyXZsT4nzI92g1tlyjJYiXN KcpTwcvC8A== )`
	RRSIG=39289 and DNSKEY=39289 verifies the DS RRset
	DS=14668/SHA-256 is now in the chain-of-trust
	`nic.cz. 3600 IN DS ( 14668 13 2 13540b92c606ad331fe4f40f15d5d93723d210429f0a49bfab90dde6541465c6 )`
	Query to b.ns.nic.cz for nic.cz/DNSKEY
	Received 297 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (297 octets) ;; HEADER SECTION ;; id = 48884 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN DNSKEY ;; ANSWER SECTION (3 records) nic.cz. 1800 IN DNSKEY ( 257 3 13 AvXlOcTj0MlLA/E2nPzn05SPT78X1bcGAQtmb4paqt8Ndl4qKAtxoR8g9BNR74viCHxI/60w+mM4 GqGAkVJMJw== ) ; Key ID = 14668 nic.cz. 1800 IN DNSKEY ( 256 3 13 WXrOUTD3ICK/iUW7b029Yrz7gAhVTqOaONU/1N7Gt4S2OVLbXo/M61F8gG5ZpJ93dtIMbjajafWA /lDPwwtKpA== ) ; Key ID = 63159 nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20221207072553 20221123055553 14668 nic.cz. zExQHBPObkacfrSDT1sqW35Htpm/eHiqdajWt99nGLs36qs5uJhYSBrrS9vX7EEdL0gJEJwdXchF QaD/koRCWQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for nic.cz
	`nic.cz. 1800 IN DNSKEY ( 257 3 13 AvXlOcTj0MlLA/E2nPzn05SPT78X1bcGAQtmb4paqt8Ndl4qKAtxoR8g9BNR74viCHxI/60w+mM4 GqGAkVJMJw== ) ; Key ID = 14668`
	`nic.cz. 1800 IN DNSKEY ( 256 3 13 WXrOUTD3ICK/iUW7b029Yrz7gAhVTqOaONU/1N7Gt4S2OVLbXo/M61F8gG5ZpJ93dtIMbjajafWA /lDPwwtKpA== ) ; Key ID = 63159`
	DNSKEY=14668/SEP is now in the chain-of-trust
	DS=14668/SHA-256 verifies DNSKEY=14668/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`nic.cz. 1800 IN RRSIG ( DNSKEY 13 2 1800 20221207072553 20221123055553 14668 nic.cz. zExQHBPObkacfrSDT1sqW35Htpm/eHiqdajWt99nGLs36qs5uJhYSBrrS9vX7EEdL0gJEJwdXchF QaD/koRCWQ== )`
	RRSIG=14668 and DNSKEY=14668/SEP verifies the DNSKEY RRset
	DNSKEY=63159 is now in the chain-of-trust
	Query to a.ns.nic.cz for nic.cz/A
	Received 153 bytes from 194.0.12.1
	;; Response received from 194.0.12.1 (153 octets) ;; HEADER SECTION ;; id = 62999 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	a.ns.nic.cz is authoritative for nic.cz
	Found RRSIG signed by nic.cz zone
	Query to b.ns.nic.cz for nic.cz/SOA
	Received 1087 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (1087 octets) ;; HEADER SECTION ;; id = 23786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA ( a.ns.nic.cz. hostmaster.nic.cz. 1669635698 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) nic.cz. 1800 IN RRSIG ( SOA 13 2 1800 20221212114138 20221128101138 63159 nic.cz. doh/R7NFgvU9Bhi9P193GyuZKFV1gNhopefEYgGmn6AT7xC7Q812wJabOqzNxXPbMsZLSmuBzyNc F/T7bQGn3g== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for nic.cz/SOA
	Received 1087 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (1087 octets) ;; HEADER SECTION ;; id = 60461 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN SOA ;; ANSWER SECTION (2 records) nic.cz. 1800 IN SOA ( a.ns.nic.cz. hostmaster.nic.cz. 1669635698 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 7200 ;minimum ) nic.cz. 1800 IN RRSIG ( SOA 13 2 1800 20221212114138 20221128101138 63159 nic.cz. doh/R7NFgvU9Bhi9P193GyuZKFV1gNhopefEYgGmn6AT7xC7Q812wJabOqzNxXPbMsZLSmuBzyNc F/T7bQGn3g== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.ns.nic.cz for nic.cz/A
	Received 153 bytes from 194.0.12.1
	;; Response received from 194.0.12.1 (153 octets) ;; HEADER SECTION ;; id = 63338 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nic.cz A RR has value 217.31.205.50
	Found 1 RRSIGs over A RRset
	`nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== )`
	RRSIG=63159 and DNSKEY=63159 verifies the A RRset

nic.cz

	Query to b.ns.nic.cz for nic.cz/A
	Received 1056 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (1056 octets) ;; HEADER SECTION ;; id = 28057 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	b.ns.nic.cz is authoritative for nic.cz
	Found RRSIG signed by nic.cz zone
	Query to b.ns.nic.cz for nic.cz/A
	Received 1056 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (1056 octets) ;; HEADER SECTION ;; id = 58100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nic.cz A RR has value 217.31.205.50
	Found 1 RRSIGs over A RRset
	`nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== )`
	RRSIG=63159 and DNSKEY=63159 verifies the A RRset

nic.cz

	Query to d.ns.nic.cz for nic.cz/A
	Received 1056 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (1056 octets) ;; HEADER SECTION ;; id = 64182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	d.ns.nic.cz is authoritative for nic.cz
	Found RRSIG signed by nic.cz zone
	Query to d.ns.nic.cz for nic.cz/A
	Received 1056 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (1056 octets) ;; HEADER SECTION ;; id = 32312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; nic.cz. IN A ;; ANSWER SECTION (2 records) nic.cz. 1800 IN A 217.31.205.50 nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== ) ;; AUTHORITY SECTION (4 records) nic.cz. 1800 IN NS a.ns.nic.cz. nic.cz. 1800 IN NS b.ns.nic.cz. nic.cz. 1800 IN NS d.ns.nic.cz. nic.cz. 1800 IN RRSIG ( NS 13 2 1800 20221207055553 20221123042553 63159 nic.cz. VEVTrCNzFu4RTZZibB7CdkF3eKH4szb6x4xIZcWTkSd3ZxwXlXykMVsPEbq0u/BQxtQvKhJzGfzl vRhiaoFq4Q== ) ;; ADDITIONAL SECTION (13 records) a.ns.nic.cz. 1800 IN A 194.0.12.1 b.ns.nic.cz. 1800 IN A 194.0.13.1 d.ns.nic.cz. 1800 IN A 193.29.206.1 a.ns.nic.cz. 1800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 1800 IN AAAA 2001:678:10::1 d.ns.nic.cz. 1800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. zPUrzZ40c+822E7NVAnTcKySIzECCeiyo+Jm/tKNsOMhHLK11qgF0vn5F1GouPGWf8fnla8insFs oqHC/CBBwQ== ) a.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. qB62azcp0/RNl7WX6e04fDuq606uLE9b5N/jONCM/37WDa0jk5ZmA73WI32FsD28r0cpJ5z5DUit bBXQVqOaBw== ) b.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. SqDdSJqcE0sU+UNtU17s7kv83VHWW3/1ws2lqH3vdxVlUpZmKY+8/rQHWdyRhce6pOTUTsEOq9kg cH5z9cpWQA== ) b.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. hc32Ria3F5y14dxmAk4wJgCAo8VRHcL8qgfWeLDVCP/V41N2WD1MSqsHqPNk5MAv1doFItoYTfXm nQ1hv5bT0w== ) d.ns.nic.cz. 1800 IN RRSIG ( A 13 4 1800 20221207055553 20221123042553 63159 nic.cz. IpCPEayQmeWWMoLINKcnzKDCcGy1pGqq6JS/Cm0b+ox9La1kGmq/VELoWkVSqpdA3lVAypqm/9qq WJrs5j81Ew== ) d.ns.nic.cz. 1800 IN RRSIG ( AAAA 13 4 1800 20221207055553 20221123042553 63159 nic.cz. 9T2xFgKXsGVLSu8Jc0agXXTg2RA/e/nxGAHSKD2lXjZNchwpxAAs1E6OskhrmqUxgVqbCxIKTwfd NPd9TO8uYA== ) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	nic.cz A RR has value 217.31.205.50
	Found 1 RRSIGs over A RRset
	`nic.cz. 1800 IN RRSIG ( A 13 2 1800 20221207055553 20221123042553 63159 nic.cz. Xh4dM2MC+aLJpElWiNLPAC72hyZ8FfQeCPACV2THSsdpF5VER8kI9N/GE34MJH/JJTjGzK8laKVX bo5xPGh8ow== )`
	RRSIG=63159 and DNSKEY=63159 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test nic.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: