DNSSEC Analyzer - parlament.ch

Domain Name:

Time: 2020-08-13 06:18:56 UTC, NTP stratum 4

Analyzing DNSSEC problems for parlament.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (864 bytes) ;; HEADER SECTION ;; id = 25810 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdauOGxLhfAKFTTZwGhBXbk793QKdWIQRjiSftWdusCwkPhNyJrIjwtNffCWXGLlZAbpcs41 4RE3oS1qVwV+AdXsO92SBu5haGlxMUk0NqZO7Xlf84/wrzGZVRRouPo5pNX/CKS8Mv9UOi0olKGC u31dNfh8qCszWZcloLDgeLzSnQSkvFoGe69vNCfh7feESKedkBC2qRz0BZv9+oJI0IY/3D7WEnV0 NOlf8gSHozhfJFJ/ZAKtvw/Q3ogrVJFk0LyVaU/NVtVA5FM4pVMIRID7pfrPi78aAzG7b/Wh/Pce 4jPAIpS3dApq25YkvMuPvfB91NMf9FemKwlp78PBVcM= ) ; Key ID = 46594`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20200831000000 20200810000000 20326 . FyZ8LAbEV4Jbpm2/xcE8wZu+OSatuV+1xEbRaRLfTWsjvtrPnrKZTW7cnn1yphgDD9fSHA7gAA0c tS85lRSBxr24Du7Sh+KCaGKKbs3EnSIoTzMXK0mnSVJYL3yHOyofxXe/z3ZDAaBqOGQR2wkhEKih UhNJmPEaPDXUeOr0JwYgQRoEf6PdHXld7fBC1DjiEMhHA9sXsriuG3oLUxgJdZ1fslynQjTky769 ywLkpTF/IuX2nnko+RomXuBospuQdNcXaUi1ymfTE2i3xGbEvRZYGSI4DRbxvUK4u8Lu2rNJmXct vRsBvwcuWpIL182DkbGgsDdsarVRLtobfOwMGg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46594 is now in the chain-of-trust
	Query to f.root-servers.net for parlament.ch/A
	Received 800 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (800 bytes) ;; HEADER SECTION ;; id = 40087 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN A 74.116.178.40 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN A 194.0.1.40 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN A 85.119.5.230 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Query to d.root-servers.net for ch/DNSKEY
	Received 790 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (790 bytes) ;; HEADER SECTION ;; id = 12439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS h.nic.ch. ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 h.nic.ch. 172800 IN A 85.119.5.230 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 h.nic.ch. 172800 IN AAAA 2a03:bd80:36::1:203:230 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to f.root-servers.net for ch/DS
	Received 366 bytes from 192.5.5.241
	;; Answer received from 192.5.5.241 (366 bytes) ;; HEADER SECTION ;; id = 9739 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for ch in the . zone
	DS=55966/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20200826050000 20200813040000 46594 . YWJhM6ZpsOxb1DTJHJxzP6wXIZkYRBJuIqZN/8jPkwZg2x9blktG59yqkCrr6kPBDHENfRdgcT8H QEjw9Xc9WPPQIwSu9Q3RM+MKMpRWuztNW3nnTH20HTEsXKP+7QOQPNfRTHtGj93VyatmSBq8b++6 pvl6zVlgNtEWyGNz6jYRdy36hZGX6/VoRgL6STe5XLYvbtmUAAVFrE3J74oDaVgOXQ7AUgKV+juZ b6ImagX+4jx9IwuSCs8MTYdbXCUyn+OviepxlcfaePL9xRfZ4UAIVkNofSNsjiGpWo8BaioHmQt5 lP5mZoOkO1/CQ1Bw6HXSmYKhYROsEglg7dT0aA== )`
	RRSIG=46594 and DNSKEY=46594 verifies the DS RRset
	DS=55966/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 55966 13 2 ceb479416e4efd770800434be1245e1b10d4cf018255c11d8544c448fa032b32 )`
	Query to a.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.41
	;; Answer received from 130.59.31.41 (369 bytes) ;; HEADER SECTION ;; id = 39102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 BkG29KZIT4tzHJAMVM9/jBZOnnxmzvvL8Ri4RC3dBNruWJMu16W6pOIGPwEiAhXldhMx4nCslMzi WyJIhmAa6g== ) ; Key ID = 16948 ch. 86400 IN DNSKEY ( 256 3 13 QejQZ1AAfT/Fao3Jxq54xGTwRDn1Be7QWljy+kF3TmPHYl3onEqoD+cnUVr0/s6FrSUHzfGZOtdK zj5Q5E+elA== ) ; Key ID = 13190 ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200927100909 20200812090909 55966 ch. jZEyJoTL1n240EyEUwTdpVeWU4QWMGsLKCC1ejTxyoPHkDYCpwj3xyvH6G+lLASmx18oiky2JaLR myXimI+GFQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 BkG29KZIT4tzHJAMVM9/jBZOnnxmzvvL8Ri4RC3dBNruWJMu16W6pOIGPwEiAhXldhMx4nCslMzi WyJIhmAa6g== ) ; Key ID = 16948`
	`ch. 86400 IN DNSKEY ( 256 3 13 QejQZ1AAfT/Fao3Jxq54xGTwRDn1Be7QWljy+kF3TmPHYl3onEqoD+cnUVr0/s6FrSUHzfGZOtdK zj5Q5E+elA== ) ; Key ID = 13190`
	`ch. 86400 IN DNSKEY ( 257 3 13 8Tb8/h/ON8XsvUxjxUJyFLykQUUEyY80LACtat0nN+S0TOjoQ8o5e+huum6ZOJx1bVh4PaUfoUvN BUS77VWB0Q== ) ; Key ID = 55966`
	DNSKEY=55966/SEP is now in the chain-of-trust
	DS=55966/SHA-256 verifies DNSKEY=55966/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20200927100909 20200812090909 55966 ch. jZEyJoTL1n240EyEUwTdpVeWU4QWMGsLKCC1ejTxyoPHkDYCpwj3xyvH6G+lLASmx18oiky2JaLR myXimI+GFQ== )`
	RRSIG=55966 and DNSKEY=55966/SEP verifies the DNSKEY RRset
	DNSKEY=16948 is now in the chain-of-trust
	DNSKEY=13190 is now in the chain-of-trust
	Query to c.nic.ch for parlament.ch/A
	Received 466 bytes from 74.116.178.40
	;; Answer received from 74.116.178.40 (466 bytes) ;; HEADER SECTION ;; id = 64184 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) parlament.ch. 3600 IN NS ns1.ip-plus.net. parlament.ch. 3600 IN NS ns2.ip-plus.net. g85do6j18u0eig5d5o58jqoh746kjiir.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 g85j3k7r5jrilghvuk36n5hdk5h4ivo3 NS SOA RRSIG DNSKEY NSEC3PARAM ) g85do6j18u0eig5d5o58jqoh746kjiir.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200905141345 20200806140150 16948 ch. d5fdxhOijr7p8JE/mClBhkCWCwo7OENPKX5kz2OUffkfQfiRfbolEasIk3aZIdEwoqfzyFQxsTHc rRS03wbwsA== ) gq42ohhogiuuu319tukg6ummhthmqh8u.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 gq4eomc4mr6d45paq8klph66iltase8r NS DS RRSIG ) gq42ohhogiuuu319tukg6ummhthmqh8u.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200912033250 20200813030152 16948 ch. Z5MbL449MXXp/mmofihuN3MmqZjD3iLkOvlrPPlRMhEj8CdmzBXuIKNcqUm4nidGDk0W7ehgB8LC mdEd9coqSA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to f.nic.ch for parlament.ch/DNSKEY
	Received 451 bytes from 194.146.106.10
	;; Answer received from 194.146.106.10 (451 bytes) ;; HEADER SECTION ;; id = 4868 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) parlament.ch. 3600 IN NS ns1.ip-plus.net. parlament.ch. 3600 IN NS ns2.ip-plus.net. G85DO6J18U0EIG5D5O58JQOH746KJIIR.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 g85j3k7r5jrilghvuk36n5hdk5h4ivo3 NS SOA RRSIG DNSKEY NSEC3PARAM ) G85DO6J18U0EIG5D5O58JQOH746KJIIR.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200905141345 20200806140150 16948 ch. d5fdxhOijr7p8JE/mClBhkCWCwo7OENPKX5kz2OUffkfQfiRfbolEasIk3aZIdEwoqfzyFQxsTHc rRS03wbwsA== ) GQ42OHHOGIUUU319TUKG6UMMHTHMQH8U.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 gq4eomc4mr6d45paq8klph66iltase8r NS DS RRSIG ) GQ42OHHOGIUUU319TUKG6UMMHTHMQH8U.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200912033250 20200813030152 16948 ch. Z5MbL449MXXp/mmofihuN3MmqZjD3iLkOvlrPPlRMhEj8CdmzBXuIKNcqUm4nidGDk0W7ehgB8LC mdEd9coqSA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone parlament.ch

parlament.ch

	Checking DS between ch and parlament.ch
	Query to b.nic.ch for parlament.ch/DS
	Received 569 bytes from 130.59.31.43
	;; Answer received from 130.59.31.43 (569 bytes) ;; HEADER SECTION ;; id = 16211 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) G85DO6J18U0EIG5D5O58JQOH746KJIIR.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 g85j3k7r5jrilghvuk36n5hdk5h4ivo3 NS SOA RRSIG DNSKEY NSEC3PARAM ) G85DO6J18U0EIG5D5O58JQOH746KJIIR.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200905141345 20200806140150 16948 ch. d5fdxhOijr7p8JE/mClBhkCWCwo7OENPKX5kz2OUffkfQfiRfbolEasIk3aZIdEwoqfzyFQxsTHc rRS03wbwsA== ) ch. 900 IN SOA ( a.nic.ch. dns-operation.switch.ch. 2020081308 ;serial 900 ;refresh 600 ;retry 1123200 ;expire 900 ;minimum ) ch. 900 IN RRSIG ( SOA 13 1 900 20200912055107 20200813050154 16948 ch. QIb//aCUhUYO2YmFWsc4+/+NzU6XeV0pH0QURqUzQ4DPiihVyAl8MPPx7ISNar2qKA7+3nQLGzz1 Brik+OafVw== ) GQ42OHHOGIUUU319TUKG6UMMHTHMQH8U.ch. 900 IN NSEC3 ( 1 1 2 e5b52738 gq4eomc4mr6d45paq8klph66iltase8r NS DS RRSIG ) GQ42OHHOGIUUU319TUKG6UMMHTHMQH8U.ch. 900 IN RRSIG ( NSEC3 13 2 900 20200912033250 20200813030152 16948 ch. Z5MbL449MXXp/mmofihuN3MmqZjD3iLkOvlrPPlRMhEj8CdmzBXuIKNcqUm4nidGDk0W7ehgB8LC mdEd9coqSA== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for parlament.ch in the ch zone
	Query to ns1.ip-plus.net for parlament.ch/DNSKEY
	Received 103 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (103 bytes) ;; HEADER SECTION ;; id = 4399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) parlament.ch. 21600 IN SOA ( ns1.ip-plus.net. hostmaster.ip-plus.net. 2020062901 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 21600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns1.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (136 bytes) ;; HEADER SECTION ;; id = 6215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns1.ip-plus.net. parlament.ch. 900 IN NS ns2.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	parlament.ch is authoritative for parlament.ch
	Query to ns2.ip-plus.net for parlament.ch/SOA
	Received 167 bytes from 164.128.76.39
	;; Answer received from 164.128.76.39 (167 bytes) ;; HEADER SECTION ;; id = 10442 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN SOA ;; ANSWER SECTION (1 record) parlament.ch. 21600 IN SOA ( ns1.ip-plus.net. hostmaster.ip-plus.net. 2020062901 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 21600 ;minimum ) ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns2.ip-plus.net. parlament.ch. 900 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.ip-plus.net for parlament.ch/SOA
	Received 167 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (167 bytes) ;; HEADER SECTION ;; id = 61891 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN SOA ;; ANSWER SECTION (1 record) parlament.ch. 21600 IN SOA ( ns1.ip-plus.net. hostmaster.ip-plus.net. 2020062901 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 21600 ;minimum ) ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns2.ip-plus.net. parlament.ch. 900 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (136 bytes) ;; HEADER SECTION ;; id = 28024 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns1.ip-plus.net. parlament.ch. 900 IN NS ns2.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	parlament.ch A RR has value 91.226.202.77
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test parlament.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: