DNSSEC Analyzer - niel.site

Domain Name:

Time: 2023-10-02 21:02:37 UTC, NTP stratum 4

Analyzing DNSSEC problems for niel.site

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (1139 octets) ;; HEADER SECTION ;; id = 43792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to i.root-servers.net for niel.site/A
	Received 657 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (657 octets) ;; HEADER SECTION ;; id = 8608 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; niel.site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) site. 172800 IN NS e.nic.site. site. 172800 IN NS f.nic.site. site. 172800 IN NS a.nic.site. site. 172800 IN NS b.nic.site. site. 86400 IN DS 51676 8 1 90ddbeeeb973b0f8719ed763fb6eede97c73abf5 site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . jLEAKvUwxm8ewzVwpdqrsoz2z/LswKLKGjJkuZPi6bevZ6Jk2TDfBzIXw6upJh1/345CIkuOPLLc +5LT03ViG/eg7N4WRgf67DScR7znXZi5MGxBBXbitCogl2MsSnm0WHRXMS3g8aQx7u0UHiK6p2Vz Io0cqUOibcSeIxsbsRg1Tsf6qmMJAvqWJN2qy9xxRQppn70Av/EkVFOaOgS4jDC3Cx0eizwIzjNp vo7PnW/dJ+0gQfcWswGmW46PJDwK/D5ivXFw9KtEbH3MuoiEonlznJQ/nLnDktzRv+wO28HPpj5U oqvIVY+Si3fDXfULIw/WJxkCm/afxDqD7JLTEQ== ) ;; ADDITIONAL SECTION (9 records) f.nic.site. 172800 IN A 212.18.249.61 e.nic.site. 172800 IN A 212.18.248.61 b.nic.site. 172800 IN A 185.24.64.61 a.nic.site. 172800 IN A 194.169.218.61 f.nic.site. 172800 IN AAAA 2a04:2b00:13ff::61 e.nic.site. 172800 IN AAAA 2a04:2b00:13ee::61 b.nic.site. 172800 IN AAAA 2a04:2b00:13cc::1:61 a.nic.site. 172800 IN AAAA 2001:67c:13cc::1:61 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for site/DNSKEY
	Received 648 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (648 octets) ;; HEADER SECTION ;; id = 64957 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; site. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) site. 172800 IN NS a.nic.site. site. 172800 IN NS b.nic.site. site. 172800 IN NS e.nic.site. site. 172800 IN NS f.nic.site. site. 86400 IN DS 51676 8 1 90ddbeeeb973b0f8719ed763fb6eede97c73abf5 site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . jLEAKvUwxm8ewzVwpdqrsoz2z/LswKLKGjJkuZPi6bevZ6Jk2TDfBzIXw6upJh1/345CIkuOPLLc +5LT03ViG/eg7N4WRgf67DScR7znXZi5MGxBBXbitCogl2MsSnm0WHRXMS3g8aQx7u0UHiK6p2Vz Io0cqUOibcSeIxsbsRg1Tsf6qmMJAvqWJN2qy9xxRQppn70Av/EkVFOaOgS4jDC3Cx0eizwIzjNp vo7PnW/dJ+0gQfcWswGmW46PJDwK/D5ivXFw9KtEbH3MuoiEonlznJQ/nLnDktzRv+wO28HPpj5U oqvIVY+Si3fDXfULIw/WJxkCm/afxDqD7JLTEQ== ) ;; ADDITIONAL SECTION (9 records) a.nic.site. 172800 IN A 194.169.218.61 b.nic.site. 172800 IN A 185.24.64.61 e.nic.site. 172800 IN A 212.18.248.61 f.nic.site. 172800 IN A 212.18.249.61 a.nic.site. 172800 IN AAAA 2001:67c:13cc::1:61 b.nic.site. 172800 IN AAAA 2a04:2b00:13cc::1:61 e.nic.site. 172800 IN AAAA 2a04:2b00:13ee::61 f.nic.site. 172800 IN AAAA 2a04:2b00:13ff::61 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone site

site

	Checking DS between . and site
	Query to c.root-servers.net for site/DS
	Received 404 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (404 octets) ;; HEADER SECTION ;; id = 48581 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; site. IN DS ;; ANSWER SECTION (3 records) site. 86400 IN DS 51676 8 1 90ddbeeeb973b0f8719ed763fb6eede97c73abf5 site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 ) site. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . jLEAKvUwxm8ewzVwpdqrsoz2z/LswKLKGjJkuZPi6bevZ6Jk2TDfBzIXw6upJh1/345CIkuOPLLc +5LT03ViG/eg7N4WRgf67DScR7znXZi5MGxBBXbitCogl2MsSnm0WHRXMS3g8aQx7u0UHiK6p2Vz Io0cqUOibcSeIxsbsRg1Tsf6qmMJAvqWJN2qy9xxRQppn70Av/EkVFOaOgS4jDC3Cx0eizwIzjNp vo7PnW/dJ+0gQfcWswGmW46PJDwK/D5ivXFw9KtEbH3MuoiEonlznJQ/nLnDktzRv+wO28HPpj5U oqvIVY+Si3fDXfULIw/WJxkCm/afxDqD7JLTEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for site in the . zone
	DS=51676/SHA-1 has algorithm RSASHA256
	DS=51676/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`site. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . jLEAKvUwxm8ewzVwpdqrsoz2z/LswKLKGjJkuZPi6bevZ6Jk2TDfBzIXw6upJh1/345CIkuOPLLc +5LT03ViG/eg7N4WRgf67DScR7znXZi5MGxBBXbitCogl2MsSnm0WHRXMS3g8aQx7u0UHiK6p2Vz Io0cqUOibcSeIxsbsRg1Tsf6qmMJAvqWJN2qy9xxRQppn70Av/EkVFOaOgS4jDC3Cx0eizwIzjNp vo7PnW/dJ+0gQfcWswGmW46PJDwK/D5ivXFw9KtEbH3MuoiEonlznJQ/nLnDktzRv+wO28HPpj5U oqvIVY+Si3fDXfULIw/WJxkCm/afxDqD7JLTEQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=51676/SHA-1 is now in the chain-of-trust
	`site. 86400 IN DS 51676 8 1 90ddbeeeb973b0f8719ed763fb6eede97c73abf5`
	`site. 86400 IN DS ( 51676 8 2 883175f6f5c68ea81563b62d1b2b79b6a997d60dc6e20cc70afd0cd6b7e82f62 )`
	Query to b.nic.site for site/DNSKEY
	Received 897 bytes from 185.24.64.61
	;; Response received from 185.24.64.61 (897 octets) ;; HEADER SECTION ;; id = 8585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; site. IN DNSKEY ;; ANSWER SECTION (4 records) site. 3600 IN DNSKEY ( 256 3 8 AwEAAa8JVV/c6uHFawz5hMR3Pu/aQxXjPYbwnLA9+BTDQpoY0sAsCBjQh3KvuYab8q8KuborYboo ttWZO7J80dwMkfliPZiTq8QxaSlXBH1/VAOQUYjtXYUw0NAePRYRqi1zJ3ygZ7KsQld0mPRsGuVT YRNm730TxQ5voYz7UHNppqVB ) ; Key ID = 4459 site. 3600 IN DNSKEY ( 257 3 8 AwEAAfY9U7kWdXx4v2X9C+zy2QAaZvXnfK/Tr2RpVkxeGWyO30wKxxBGGounwgzWNF0Uel2mNCSq aCWfBfjZ3tnjkYeGtMOsqZoRGAF0ty4XwkZAMhlK08IWk7PbiLgHicDjg4HbxTIDQ7juXeYMqy2Y RhnV8ByC7E9Mz0qUK+MUIgSit8J1Jd1DYhoi6mFWgqufcWZ5SwR1JCCEM9M+OTCfY6k+EdplJGBU AM9NNgAokJMmjdFpYszLHQghMXl8xCk7QG4T+naoorzXDOJ0SELYUt9RSjCZ8jf+DgD+L0ylFiMB PH+my4ZzUW2Y0bpDclo5WC7M95Q5vVPA3uGqljnAhOM= ) ; Key ID = 51676 site. 3600 IN DNSKEY ( 256 3 8 AwEAAci+4z/lLiWEzmMLK1TUDPQFympptt8WXvLgFs+9zO/j9NCGQjiUOaVgTLbQ0n/Q/60Sbkkz nSPdvr7elFa1JVl7muQMXRLyIp5uZnzjP8W5fdjRTTCehMLlyybYy2/ika2YPz54Hm30PHesNrKl US7ZEbZe/cdbU3I1scC/2NSL ) ; Key ID = 40519 site. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231015193808 20230915133322 51676 site. C1cPUf4sK61x9A/h0Gb7oUxtI+IQXK02npmZjKkSivrb8WuxrFPwb/PDZqw2XulyIoLL9eAXdLWB 19WhnDXxdxzsOEKOeg+KvzVuIye99RsIRUxfFU8bL/i8mJSe2KCbf3KQTriRYHDN44LVl9LH5Hto nuQxnIPAExR5FX94R5UIP6mu8MWM1iX+Z7aQJY0RBfVrABJQa1OzDI0gmC+bGPOFFViSxl+heJW0 sI0kyg5tR+CSDXUpbn6RadnUfIwWNqZoqC0fwTe5R/HthiUQlrTtII+CPOfj5Ibav6W7UerHpWVk O4fOkWFyzAm+hTN//aqzIrNf8ZQgudRlxVqfEA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for site
	`site. 3600 IN DNSKEY ( 256 3 8 AwEAAa8JVV/c6uHFawz5hMR3Pu/aQxXjPYbwnLA9+BTDQpoY0sAsCBjQh3KvuYab8q8KuborYboo ttWZO7J80dwMkfliPZiTq8QxaSlXBH1/VAOQUYjtXYUw0NAePRYRqi1zJ3ygZ7KsQld0mPRsGuVT YRNm730TxQ5voYz7UHNppqVB ) ; Key ID = 4459`
	`site. 3600 IN DNSKEY ( 257 3 8 AwEAAfY9U7kWdXx4v2X9C+zy2QAaZvXnfK/Tr2RpVkxeGWyO30wKxxBGGounwgzWNF0Uel2mNCSq aCWfBfjZ3tnjkYeGtMOsqZoRGAF0ty4XwkZAMhlK08IWk7PbiLgHicDjg4HbxTIDQ7juXeYMqy2Y RhnV8ByC7E9Mz0qUK+MUIgSit8J1Jd1DYhoi6mFWgqufcWZ5SwR1JCCEM9M+OTCfY6k+EdplJGBU AM9NNgAokJMmjdFpYszLHQghMXl8xCk7QG4T+naoorzXDOJ0SELYUt9RSjCZ8jf+DgD+L0ylFiMB PH+my4ZzUW2Y0bpDclo5WC7M95Q5vVPA3uGqljnAhOM= ) ; Key ID = 51676`
	`site. 3600 IN DNSKEY ( 256 3 8 AwEAAci+4z/lLiWEzmMLK1TUDPQFympptt8WXvLgFs+9zO/j9NCGQjiUOaVgTLbQ0n/Q/60Sbkkz nSPdvr7elFa1JVl7muQMXRLyIp5uZnzjP8W5fdjRTTCehMLlyybYy2/ika2YPz54Hm30PHesNrKl US7ZEbZe/cdbU3I1scC/2NSL ) ; Key ID = 40519`
	DNSKEY=51676/SEP is now in the chain-of-trust
	DS=51676/SHA-1 verifies DNSKEY=51676/SEP
	DS=51676/SHA-256 verifies DNSKEY=51676/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`site. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231015193808 20230915133322 51676 site. C1cPUf4sK61x9A/h0Gb7oUxtI+IQXK02npmZjKkSivrb8WuxrFPwb/PDZqw2XulyIoLL9eAXdLWB 19WhnDXxdxzsOEKOeg+KvzVuIye99RsIRUxfFU8bL/i8mJSe2KCbf3KQTriRYHDN44LVl9LH5Hto nuQxnIPAExR5FX94R5UIP6mu8MWM1iX+Z7aQJY0RBfVrABJQa1OzDI0gmC+bGPOFFViSxl+heJW0 sI0kyg5tR+CSDXUpbn6RadnUfIwWNqZoqC0fwTe5R/HthiUQlrTtII+CPOfj5Ibav6W7UerHpWVk O4fOkWFyzAm+hTN//aqzIrNf8ZQgudRlxVqfEA== )`
	RRSIG=51676 and DNSKEY=51676/SEP verifies the DNSKEY RRset
	DNSKEY=4459 is now in the chain-of-trust
	DNSKEY=40519 is now in the chain-of-trust
	Query to b.nic.site for niel.site/A
	Received 593 bytes from 185.24.64.61
	;; Response received from 185.24.64.61 (593 octets) ;; HEADER SECTION ;; id = 63833 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; niel.site. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) niel.site. 3600 IN NS ns1.niel.site. niel.site. 3600 IN NS ns2.niel.site. kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN NSEC3 ( 1 1 0 - kkktpf5lim35udaj0nk2l8c1qhve3e9r NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018005024 20230918031411 4459 site. L3XpXwu6jctbwZpspNxnN0w9k2FqtSlEX/kI997Q9buWA/ZYTXwuogQkRyAWGnw9+/rmhc9fRK0v ZYWMdH7vBbrYCTyFC5nXZcMeoBjYai0rYMMPdnHcz3yQ6/VCs9MFbnQc0vKt7fsYcmKCKt2BiSGP nGWcTrGe7DqZKXWAZEI= ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN NSEC3 ( 1 1 0 - oh37v98uk5lpnbjti628mlsaqrd1s228 NS DS RRSIG ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018034544 20230918034359 4459 site. L1Ebx+vwPJSDMKizQwGcejOcQc7B70b5qIMmFz0kquhewaIpC/r5oiu/JuTJf5uMf9oFj658oPc6 w9DTFioLhN7kO/2z597SkDFaR1k0u9NrxqO3Si3DwKFNGqsQBEK8EjGWWTQCDVVGh8HBqR26fWpy z12x2TyRPD8hXU+ZaZE= ) ;; ADDITIONAL SECTION (3 records) ns1.niel.site. 3600 IN A 116.203.159.204 ns2.niel.site. 3600 IN A 116.203.159.204 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.nic.site for niel.site/DNSKEY
	Received 593 bytes from 212.18.249.61
	;; Response received from 212.18.249.61 (593 octets) ;; HEADER SECTION ;; id = 57450 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; niel.site. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) niel.site. 3600 IN NS ns2.niel.site. niel.site. 3600 IN NS ns1.niel.site. kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN NSEC3 ( 1 1 0 - kkktpf5lim35udaj0nk2l8c1qhve3e9r NS SOA RRSIG DNSKEY NSEC3PARAM ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018005024 20230918031411 4459 site. L3XpXwu6jctbwZpspNxnN0w9k2FqtSlEX/kI997Q9buWA/ZYTXwuogQkRyAWGnw9+/rmhc9fRK0v ZYWMdH7vBbrYCTyFC5nXZcMeoBjYai0rYMMPdnHcz3yQ6/VCs9MFbnQc0vKt7fsYcmKCKt2BiSGP nGWcTrGe7DqZKXWAZEI= ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN NSEC3 ( 1 1 0 - oh37v98uk5lpnbjti628mlsaqrd1s228 NS DS RRSIG ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018034544 20230918034359 4459 site. L1Ebx+vwPJSDMKizQwGcejOcQc7B70b5qIMmFz0kquhewaIpC/r5oiu/JuTJf5uMf9oFj658oPc6 w9DTFioLhN7kO/2z597SkDFaR1k0u9NrxqO3Si3DwKFNGqsQBEK8EjGWWTQCDVVGh8HBqR26fWpy z12x2TyRPD8hXU+ZaZE= ) ;; ADDITIONAL SECTION (3 records) ns1.niel.site. 3600 IN A 116.203.159.204 ns2.niel.site. 3600 IN A 116.203.159.204 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone niel.site

niel.site

	Checking DS between site and niel.site
	Query to e.nic.site for niel.site/DS
	Received 754 bytes from 212.18.248.61
	;; Response received from 212.18.248.61 (754 octets) ;; HEADER SECTION ;; id = 61476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; niel.site. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) site. 3600 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 358918 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN NSEC3 ( 1 1 0 - kkktpf5lim35udaj0nk2l8c1qhve3e9r NS SOA RRSIG DNSKEY NSEC3PARAM ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN NSEC3 ( 1 1 0 - oh37v98uk5lpnbjti628mlsaqrd1s228 NS DS RRSIG ) site. 3600 IN RRSIG ( SOA 8 1 3600 20231102013152 20231002183056 4459 site. TA6a28V9DC9VmU6e3t1HwjKfPHwmGfRX8p8ATW3eeraf3aDQfgH/rNmr71oVLPvAb3JusbgM84qC UUPk52SYIjG40l0yXkDftC5xo7IDmvy63MyIfrkweozy8NcNMSNxDSmNZ1B7+DLgt5Q6qrWmkPGX op4SC9sghBXQ18X89YQ= ) kkkldpnn5k2662ei72hm1tvtee3uakea.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018005024 20230918031411 4459 site. L3XpXwu6jctbwZpspNxnN0w9k2FqtSlEX/kI997Q9buWA/ZYTXwuogQkRyAWGnw9+/rmhc9fRK0v ZYWMdH7vBbrYCTyFC5nXZcMeoBjYai0rYMMPdnHcz3yQ6/VCs9MFbnQc0vKt7fsYcmKCKt2BiSGP nGWcTrGe7DqZKXWAZEI= ) oh1hdmkggg4a64g4mf3p2d8s24lfjfru.site. 3600 IN RRSIG ( NSEC3 8 2 3600 20231018034544 20230918034359 4459 site. L1Ebx+vwPJSDMKizQwGcejOcQc7B70b5qIMmFz0kquhewaIpC/r5oiu/JuTJf5uMf9oFj658oPc6 w9DTFioLhN7kO/2z597SkDFaR1k0u9NrxqO3Si3DwKFNGqsQBEK8EjGWWTQCDVVGh8HBqR26fWpy z12x2TyRPD8hXU+ZaZE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for niel.site in the site zone
	Query to ns1.niel.site for niel.site/DNSKEY
	Unknown host ns1.niel.site
	Query to ns2.niel.site for niel.site/DNSKEY
	Unknown host ns2.niel.site
	Failed to get DNSKEY RR set for zone niel.site
	Query to ns1.niel.site for niel.site/A
	Unknown host ns1.niel.site
	Query to ns2.niel.site for niel.site/A
	Unknown host ns2.niel.site
	No response from niel.site nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test niel.site at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: