DNSSEC Debugger

Domain Name:

Time: 2025-07-01 20:35:28 UTC

Analyzing DNSSEC problems for noi.kr

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to m.root-servers.net for ./DNSKEY
	Received 1417 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1417 octets ;; HEADER SECTION ;; id = 56254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 5 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (5 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148 . 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 4 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbEbGCpGTDrcZTWqWWE72nphyshpRcILdzCVlBGU9Ln1Fui9kkseUOP+g5GLUeVFKdTloeRT A9+EYiQdXgWXmXmuW/nGxZjAikluF/O9NzLVrr5iZnth2xu+F48nrJlAgWWiMNau54NI5sZ3iVQf hFsq2pZmf43RauRPniYMShOLO7EBWWXr5glDSgZGS9fSm6xHwwF+g8D4m8oanjvdCBNxXzSEKS31 ibxjLifTfvwCg3y4XXcNW9U6Nu3JmoKUdxqpPPIkBvVQbIz4UO2FwaR13uXC03ALP1Yx2QNSS4SZ lcIMtAftQR9wtCiuPWQnFv4jkzWqlhp1Lmf7bcoL9yk= ) ; keytag 53148`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbauxLSFZ+KSWi2cT6TJbm3d+GIVqb2N1XnDjMsRme0b6JlGp/cvwmM5CaJ5LQ7tG1r7LuTH jYZadtbNk2nZmclq9r4KInS48ungoAZb0gJXVw8IvBTBb1YWQmiBqD285pJuORwTii7DF++nNJJk 3i55HJt9SmBI7m7t8nvx7OOY/w0inxg3fLH2uY0SKO8he4FGwMc4Ubiab8N8Yhyhh+FkKKdD/+oA cuGF75PjlSXO460B4MlNLlEcjDEzIsKauRYx4YVgSaNomGhMMFblmXRzgW+1R6ywvm5mC9+omlyy izZp2GJfPwGMezuKSGDndO6CYYEc5/lsRhvBYsGjdPM= ) ; keytag 46441`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250722000000 20250701000000 20326 . UGhOn2e0xbV2um4IqDwLtkXZVqk32Dz6Orahd8l3n5pQxAPO+PzC96lwt3YdDLFpzmu1FqPWugCK eq5uju1L2DklkEX7hnvBKKzb/Q2dkEA1w85dQQH34II778mePR3fvIDckntFXGsT9a8tdN9tFaP+ qJiwgtNbiKej8YheeX/DAAmZPn0s6/Bg3cLuozR9FXAwkgrA3rjcRpN/jKhPSauHvsin7gCbcUjs jA+P3l9y4Izc5ibPfdUIxVaTUt+OofHUV9VaZoexMQKwggIE78BLAs7AsP7KwlXDB8++Cy6IXVcg +9Gzv3k/gJokM3UHOGa0UrSfCIAKlfMFYADJBA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=53148 is now in the chain-of-trust
	DNSKEY=46441 is now in the chain-of-trust
	Query to c.root-servers.net for noi.kr/A
	Received 680 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 680 octets ;; HEADER SECTION ;; id = 40657 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) kr. 172800 IN NS e.dns.kr. kr. 172800 IN NS g.dns.kr. kr. 172800 IN NS b.dns.kr. kr. 172800 IN NS d.dns.kr. kr. 172800 IN NS c.dns.kr. kr. 172800 IN NS f.dns.kr. kr. 86400 IN DS ( 61615 8 2 ed570aadc88713ce2775fb8affb2ad782d056ea21d0677e147f2fb7bf54404da ) kr. 86400 IN RRSIG ( DS 8 1 86400 20250714170000 20250701160000 46441 . fkWzYi53t7wXYup0Qg/blPwFfiM8qAXiXTTQvM2pzJGJBabBXtCz8cw58MaTsNRpjOdX1DkMINkP 3ku+e1nQN1X8puA0hKhuPHD+H7795hiVrMs8TeYYyOdBduOD6qbn3cg/59fgXC4hpug8EkbFOQGp Yde48TNk10UsX/JHjoqEHA8TUugDMATx/MXXVroOhbW5e4g4bbA6bYJle2ooUiB1jE2jMJ6+9Mqi zd1JnbybE/QshWc4wpzzkUoZpJAwN08qtLWSvBOoGDrUXDly1SEEULI00yTlX4W6LbPmIEGFWo37 inOsqraDCBWnoqgBAuzgn04UJKLZjpGqEye6lA== ) ;; ADDITIONAL SECTION (11 records) g.dns.kr. 172800 IN A 202.31.190.1 f.dns.kr. 172800 IN A 210.101.62.1 e.dns.kr. 172800 IN A 202.30.124.100 d.dns.kr. 172800 IN A 203.83.159.1 c.dns.kr. 172800 IN A 210.101.61.1 b.dns.kr. 172800 IN A 210.101.60.1 g.dns.kr. 172800 IN AAAA 2001:dc5:a::1 f.dns.kr. 172800 IN AAAA 2001:dcc:6::1 e.dns.kr. 172800 IN AAAA 2001:dcc:5::100 d.dns.kr. 172800 IN AAAA 2001:dcc:4::1 ;; { "EDNS-VERSION": 0 }
	Query to g.root-servers.net for kr/DNSKEY
	Received 676 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 676 octets ;; HEADER SECTION ;; id = 44799 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 8 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) kr. 172800 IN NS b.dns.kr. kr. 172800 IN NS d.dns.kr. kr. 172800 IN NS c.dns.kr. kr. 172800 IN NS e.dns.kr. kr. 172800 IN NS f.dns.kr. kr. 172800 IN NS g.dns.kr. kr. 86400 IN DS ( 61615 8 2 ed570aadc88713ce2775fb8affb2ad782d056ea21d0677e147f2fb7bf54404da ) kr. 86400 IN RRSIG ( DS 8 1 86400 20250714170000 20250701160000 46441 . fkWzYi53t7wXYup0Qg/blPwFfiM8qAXiXTTQvM2pzJGJBabBXtCz8cw58MaTsNRpjOdX1DkMINkP 3ku+e1nQN1X8puA0hKhuPHD+H7795hiVrMs8TeYYyOdBduOD6qbn3cg/59fgXC4hpug8EkbFOQGp Yde48TNk10UsX/JHjoqEHA8TUugDMATx/MXXVroOhbW5e4g4bbA6bYJle2ooUiB1jE2jMJ6+9Mqi zd1JnbybE/QshWc4wpzzkUoZpJAwN08qtLWSvBOoGDrUXDly1SEEULI00yTlX4W6LbPmIEGFWo37 inOsqraDCBWnoqgBAuzgn04UJKLZjpGqEye6lA== ) ;; ADDITIONAL SECTION (11 records) g.dns.kr. 172800 IN A 202.31.190.1 f.dns.kr. 172800 IN A 210.101.62.1 e.dns.kr. 172800 IN A 202.30.124.100 d.dns.kr. 172800 IN A 203.83.159.1 c.dns.kr. 172800 IN A 210.101.61.1 b.dns.kr. 172800 IN A 210.101.60.1 g.dns.kr. 172800 IN AAAA 2001:dc5:a::1 f.dns.kr. 172800 IN AAAA 2001:dcc:6::1 e.dns.kr. 172800 IN AAAA 2001:dcc:5::100 d.dns.kr. 172800 IN AAAA 2001:dcc:4::1 ;; { "EDNS-VERSION": 0 }
	Found child zone kr

	Checking DS between . and kr
	Query to i.root-servers.net for kr/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 53745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DS ;; ANSWER SECTION (2 records) kr. 86400 IN DS ( 61615 8 2 ed570aadc88713ce2775fb8affb2ad782d056ea21d0677e147f2fb7bf54404da ) kr. 86400 IN RRSIG ( DS 8 1 86400 20250714170000 20250701160000 46441 . fkWzYi53t7wXYup0Qg/blPwFfiM8qAXiXTTQvM2pzJGJBabBXtCz8cw58MaTsNRpjOdX1DkMINkP 3ku+e1nQN1X8puA0hKhuPHD+H7795hiVrMs8TeYYyOdBduOD6qbn3cg/59fgXC4hpug8EkbFOQGp Yde48TNk10UsX/JHjoqEHA8TUugDMATx/MXXVroOhbW5e4g4bbA6bYJle2ooUiB1jE2jMJ6+9Mqi zd1JnbybE/QshWc4wpzzkUoZpJAwN08qtLWSvBOoGDrUXDly1SEEULI00yTlX4W6LbPmIEGFWo37 inOsqraDCBWnoqgBAuzgn04UJKLZjpGqEye6lA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for kr in the . zone
	DS=61615/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`kr. 86400 IN RRSIG ( DS 8 1 86400 20250714170000 20250701160000 46441 . fkWzYi53t7wXYup0Qg/blPwFfiM8qAXiXTTQvM2pzJGJBabBXtCz8cw58MaTsNRpjOdX1DkMINkP 3ku+e1nQN1X8puA0hKhuPHD+H7795hiVrMs8TeYYyOdBduOD6qbn3cg/59fgXC4hpug8EkbFOQGp Yde48TNk10UsX/JHjoqEHA8TUugDMATx/MXXVroOhbW5e4g4bbA6bYJle2ooUiB1jE2jMJ6+9Mqi zd1JnbybE/QshWc4wpzzkUoZpJAwN08qtLWSvBOoGDrUXDly1SEEULI00yTlX4W6LbPmIEGFWo37 inOsqraDCBWnoqgBAuzgn04UJKLZjpGqEye6lA== )`
	RRSIG=46441 and DNSKEY=46441 verifies the DS RRset
	DS=61615/SHA-256 is now in the chain-of-trust
	`kr. 86400 IN DS ( 61615 8 2 ed570aadc88713ce2775fb8affb2ad782d056ea21d0677e147f2fb7bf54404da )`
	Query to d.dns.kr for kr/DNSKEY
	Received 745 bytes from 203.83.159.1
	;; Response received from [203.83.159.1] 745 octets ;; HEADER SECTION ;; id = 23178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; kr. IN DNSKEY ;; ANSWER SECTION (3 records) kr. 86400 IN DNSKEY ( 256 3 8 AwEAAdWtLCnx+T5DVcvlCxrgCbSWFMNqo7xAFKb7sku7SsPCqK6YDgxfJV9/V2xKG8cxmwwAepx7 XLbNeqQnjJyLsxn/wcIfCLRAFIYDgCSj2NBxg9NHpz17AbKArGdLI+znm2kjKLDRTPVEA5nFkBHy ZXf08Xys7pgUXg9TzVvAcJSD ) ; keytag 50880 kr. 86400 IN DNSKEY ( 257 3 8 AwEAAb2fqd9U3SbhbId4KV3sdcG0QhTd4o9LRM/nLvDADpIvRiFBci7lsrRdPyt+zQv2duJLw8Qc OChPwWyH/rQtQj0SkQ4ey9Z/nxbLb8OyQjLsR6WTlS/iR7vdHyP+6JS1dJ6L3HcN//j6NYiBHQEC m31q4yl3C5FfsQJjfzZjyzu7cy8VuEhCmEZ7f07gj9lNWZm2ASh+UCN6jIJkuz7JHkIaVD4D8Lbe aNh+vpyUh1fov9B03po3OROBpEVnvjT2xdnc/fFbxiOROHaIxLY56H7G5XHUt3bErk1AY3TqKMB7 GR2i4dUEOyq5tSWDvB4sJZpwA2CheCZ/EFK7/zAh3i0= ) ; keytag 61615 kr. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250731202041 20250701192042 61615 kr. JOqbfY6OUoEY3MTH1qBjBdE/c6eiWGvokinZES029zfudxzsuHdQ5WZQfXPIhJNCCtjZKu/TdgdR ndYA/bQR9iv85iKcwaMBwYokjrarwT73k9DLrGhPKUrbBYDhKqT7ZE2vadYd8+ain37zx1or4fMF K7bW70eksxg2EKwFms4IndMeIlGcQpkqYW5mN+roX9qqMMk2cT6FMBNSaOVm0lvwJv4uq11m+bnR f4ukn1CHVJYKA+54VC64PHKfFqaknd6se4ToRtK58ODMAJp4mf9CiX8Lq1PWT4KeGy5Ob5DMoC6X 3lE5IVKn7TN1HFTg6fI8ms3XJ7xYEF05UgOvwg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for kr
	`kr. 86400 IN DNSKEY ( 256 3 8 AwEAAdWtLCnx+T5DVcvlCxrgCbSWFMNqo7xAFKb7sku7SsPCqK6YDgxfJV9/V2xKG8cxmwwAepx7 XLbNeqQnjJyLsxn/wcIfCLRAFIYDgCSj2NBxg9NHpz17AbKArGdLI+znm2kjKLDRTPVEA5nFkBHy ZXf08Xys7pgUXg9TzVvAcJSD ) ; keytag 50880`
	`kr. 86400 IN DNSKEY ( 257 3 8 AwEAAb2fqd9U3SbhbId4KV3sdcG0QhTd4o9LRM/nLvDADpIvRiFBci7lsrRdPyt+zQv2duJLw8Qc OChPwWyH/rQtQj0SkQ4ey9Z/nxbLb8OyQjLsR6WTlS/iR7vdHyP+6JS1dJ6L3HcN//j6NYiBHQEC m31q4yl3C5FfsQJjfzZjyzu7cy8VuEhCmEZ7f07gj9lNWZm2ASh+UCN6jIJkuz7JHkIaVD4D8Lbe aNh+vpyUh1fov9B03po3OROBpEVnvjT2xdnc/fFbxiOROHaIxLY56H7G5XHUt3bErk1AY3TqKMB7 GR2i4dUEOyq5tSWDvB4sJZpwA2CheCZ/EFK7/zAh3i0= ) ; keytag 61615`
	DNSKEY=61615/SEP is now in the chain-of-trust
	DS=61615/SHA-256 verifies DNSKEY=61615/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`kr. 86400 IN RRSIG ( DNSKEY 8 1 86400 20250731202041 20250701192042 61615 kr. JOqbfY6OUoEY3MTH1qBjBdE/c6eiWGvokinZES029zfudxzsuHdQ5WZQfXPIhJNCCtjZKu/TdgdR ndYA/bQR9iv85iKcwaMBwYokjrarwT73k9DLrGhPKUrbBYDhKqT7ZE2vadYd8+ain37zx1or4fMF K7bW70eksxg2EKwFms4IndMeIlGcQpkqYW5mN+roX9qqMMk2cT6FMBNSaOVm0lvwJv4uq11m+bnR f4ukn1CHVJYKA+54VC64PHKfFqaknd6se4ToRtK58ODMAJp4mf9CiX8Lq1PWT4KeGy5Ob5DMoC6X 3lE5IVKn7TN1HFTg6fI8ms3XJ7xYEF05UgOvwg== )`
	RRSIG=61615 and DNSKEY=61615/SEP verifies the DNSKEY RRset
	DNSKEY=50880 is now in the chain-of-trust
	Query to d.dns.kr for noi.kr/A
	Received 588 bytes from 203.83.159.1
	;; Response received from [203.83.159.1] 588 octets ;; HEADER SECTION ;; id = 22937 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. noi.kr. 86400 IN NS ns1.gabia.co.kr. ebli4q6e9hq45ggh8bf41ivtp17ejbbo.kr. 900 IN NSEC3 ( 1 1 0 - eckneshnp5om6fnt9h1rvdrsle6h2om9 NS SOA RRSIG DNSKEY NSEC3PARAM ) ebli4q6e9hq45ggh8bf41ivtp17ejbbo.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. W83vNxAfluGeTIGwJ9w8a8NZkt1Cud3uBw22VANQKR1BPKYSl+vLwVQrSbNzNyw0euHaR5Kuq3vt 8p/xwZa+CXmCCOL4VzhXN2LX9IdYq4FI5x54RviqhH3+QfYmVtWKWezJ1wvLI64bWXCSpSQkour8 O5RgeI+51yTCL05lKNU= ) j633d3op97c6k5j3l3eqiaim53up9i5b.kr. 900 IN NSEC3 ( 1 1 0 - jbjcu70dof86oaq1b1ksvo57vika84sf NS DS RRSIG ) j633d3op97c6k5j3l3eqiaim53up9i5b.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. uA/EyBwF2sTNP/09X4TcpTUNbHp/ZK553u2HVbHx7prjnZksWAgquCLOvZgXGsEJspiGQzTYANe/ Duz7zuUoQ5cCEfLZVHihfvn8jl3NhMLzO11P9/57JKpHUb8ab1fEMxxk4PUeDcNQVBc5YXB9SW3+ BfWJ+/hATtbTpYS3wLk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to e.dns.kr for noi.kr/DNSKEY
	Received 590 bytes from 202.30.124.100
	;; Response received from [202.30.124.100] 590 octets ;; HEADER SECTION ;; id = 33840 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) noi.kr. 86400 IN NS ns.gabia.net. noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. EBLI4Q6E9HQ45GGH8BF41IVTP17EJBBO.kr. 900 IN NSEC3 ( 1 1 0 - eckneshnp5om6fnt9h1rvdrsle6h2om9 NS SOA RRSIG DNSKEY NSEC3PARAM ) EBLI4Q6E9HQ45GGH8BF41IVTP17EJBBO.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. W83vNxAfluGeTIGwJ9w8a8NZkt1Cud3uBw22VANQKR1BPKYSl+vLwVQrSbNzNyw0euHaR5Kuq3vt 8p/xwZa+CXmCCOL4VzhXN2LX9IdYq4FI5x54RviqhH3+QfYmVtWKWezJ1wvLI64bWXCSpSQkour8 O5RgeI+51yTCL05lKNU= ) J633D3OP97C6K5J3L3EQIAIM53UP9I5B.kr. 900 IN NSEC3 ( 1 1 0 - jbjcu70dof86oaq1b1ksvo57vika84sf NS DS RRSIG ) J633D3OP97C6K5J3L3EQIAIM53UP9I5B.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. uA/EyBwF2sTNP/09X4TcpTUNbHp/ZK553u2HVbHx7prjnZksWAgquCLOvZgXGsEJspiGQzTYANe/ Duz7zuUoQ5cCEfLZVHihfvn8jl3NhMLzO11P9/57JKpHUb8ab1fEMxxk4PUeDcNQVBc5YXB9SW3+ BfWJ+/hATtbTpYS3wLk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone noi.kr

noi.kr

	Checking DS between kr and noi.kr
	Query to c.dns.kr for noi.kr/DS
	Received 748 bytes from 210.101.61.1
	;; Response received from [210.101.61.1] 748 octets ;; HEADER SECTION ;; id = 47853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) EBLI4Q6E9HQ45GGH8BF41IVTP17EJBBO.kr. 900 IN NSEC3 ( 1 1 0 - eckneshnp5om6fnt9h1rvdrsle6h2om9 NS SOA RRSIG DNSKEY NSEC3PARAM ) EBLI4Q6E9HQ45GGH8BF41IVTP17EJBBO.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. W83vNxAfluGeTIGwJ9w8a8NZkt1Cud3uBw22VANQKR1BPKYSl+vLwVQrSbNzNyw0euHaR5Kuq3vt 8p/xwZa+CXmCCOL4VzhXN2LX9IdYq4FI5x54RviqhH3+QfYmVtWKWezJ1wvLI64bWXCSpSQkour8 O5RgeI+51yTCL05lKNU= ) kr. 900 IN SOA ( g.dns.kr. domain-manager.nic.or.kr. 2507020503 ;serial 3600 ;refresh 900 ;retry 604800 ;expire 900 ;minimum ) kr. 900 IN RRSIG ( SOA 8 1 86400 20250731202508 20250701192508 50880 kr. jHKPVYE+siCicGK7/ONFfoj8YX65oE29XdQ+e8/3w1VCqdWZz0ZO1IPNiny/4AOFVl7pVg1YI3FX 815KGLWADUfpjyqRay6Q55vzJxDMrkMSmZh5wSTYD/xj4zGKt6vk3gUeMDX3Lel440UN2caCgUkC pgQlS4tVLhfVyHzl/rI= ) J633D3OP97C6K5J3L3EQIAIM53UP9I5B.kr. 900 IN NSEC3 ( 1 1 0 - jbjcu70dof86oaq1b1ksvo57vika84sf NS DS RRSIG ) J633D3OP97C6K5J3L3EQIAIM53UP9I5B.kr. 900 IN RRSIG ( NSEC3 8 2 900 20250731192030 20250701192030 50880 kr. uA/EyBwF2sTNP/09X4TcpTUNbHp/ZK553u2HVbHx7prjnZksWAgquCLOvZgXGsEJspiGQzTYANe/ Duz7zuUoQ5cCEfLZVHihfvn8jl3NhMLzO11P9/57JKpHUb8ab1fEMxxk4PUeDcNQVBc5YXB9SW3+ BfWJ+/hATtbTpYS3wLk= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for noi.kr in the kr zone
	Query to ns1.gabia.co.kr for noi.kr/DNSKEY
	Received 102 bytes from 20.200.205.248
	;; Response received from [20.200.205.248] 102 octets ;; HEADER SECTION ;; id = 39713 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) noi.kr. 86400 IN SOA ( ns.gabia.co.kr. hosting.gabia.com. 2019091516 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns.gabia.co.kr for noi.kr/A
	Received 123 bytes from 43.201.170.100
	;; Response received from [43.201.170.100] 123 octets ;; HEADER SECTION ;; id = 2964 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.gabia.co.kr is authoritative for noi.kr
	Query to ns1.gabia.co.kr for noi.kr/SOA
	Received 160 bytes from 20.200.205.248
	;; Response received from [20.200.205.248] 160 octets ;; HEADER SECTION ;; id = 40137 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN SOA ;; ANSWER SECTION (1 record) noi.kr. 86400 IN SOA ( ns.gabia.co.kr. hosting.gabia.com. 2019091516 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.gabia.net for noi.kr/SOA
	Received 160 bytes from 121.78.117.39
	;; Response received from [121.78.117.39] 160 octets ;; HEADER SECTION ;; id = 5696 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN SOA ;; ANSWER SECTION (1 record) noi.kr. 86400 IN SOA ( ns.gabia.co.kr. hosting.gabia.com. 2019091516 ;serial 1800 ;refresh 600 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns.gabia.co.kr for noi.kr/A
	Received 123 bytes from 43.201.170.100
	;; Response received from [43.201.170.100] 123 octets ;; HEADER SECTION ;; id = 59051 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	noi.kr A RR has value 211.43.203.70
	No RRSIGs found

noi.kr

	Query to ns.gabia.net for noi.kr/A
	Received 123 bytes from 211.234.124.90
	;; Response received from [211.234.124.90] 123 octets ;; HEADER SECTION ;; id = 365 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns.gabia.net is authoritative for noi.kr
	Query to ns.gabia.net for noi.kr/A
	Received 123 bytes from 211.234.124.90
	;; Response received from [211.234.124.90] 123 octets ;; HEADER SECTION ;; id = 27127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	noi.kr A RR has value 211.43.203.70
	No RRSIGs found

noi.kr

	Query to ns1.gabia.co.kr for noi.kr/A
	Received 123 bytes from 20.200.205.248
	;; Response received from [20.200.205.248] 123 octets ;; HEADER SECTION ;; id = 38615 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.gabia.co.kr is authoritative for noi.kr
	Query to ns1.gabia.co.kr for noi.kr/A
	Received 123 bytes from 20.200.205.248
	;; Response received from [20.200.205.248] 123 octets ;; HEADER SECTION ;; id = 53819 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 3 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; noi.kr. IN A ;; ANSWER SECTION (1 record) noi.kr. 1800 IN A 211.43.203.70 ;; AUTHORITY SECTION (3 records) noi.kr. 86400 IN NS ns.gabia.co.kr. noi.kr. 86400 IN NS ns1.gabia.co.kr. noi.kr. 86400 IN NS ns.gabia.net. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	noi.kr A RR has value 211.43.203.70
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test noi.kr at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: