DNSSEC Analyzer - parlament.ch

Domain Name:

Time: 2021-05-16 00:11:29 UTC, NTP stratum 4

Analyzing DNSSEC problems for parlament.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Answer received from 192.203.230.10 (864 bytes) ;; HEADER SECTION ;; id = 30008 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210601000000 20210511000000 20326 . gMnsA3Lm58+9uTDddkHOoqUM18YWhCkx5brt2yk3UM7zojwiLr1Es/mk4am2BwPgHZwOMy+AeT+R 2rCCJlAleAbSXoF3ps6qogze1QS5Xf2eFPXckNWmChWAjmMZEAzzi8bABtUqTd0YhovNE/rhhIf3 OqPW16TM5cqv2ovDZq8+Qj1KFvJ0s+H8tXqI+P4DRR9o43TMbPr0iQYaScj6OaIwhiuMTUb6OT2b JP5c0KnsjDTj+w2AIdNSx2PAJd2jvk/2sMbHpjarmSR25TNfIfheyuDOzvyDtmVQmPls0bYJF6Y+ WFNq3+USPS8HNQEUo0U3tqA1Va8/khAcnUBW9A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for parlament.ch/A
	Received 740 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (740 bytes) ;; HEADER SECTION ;; id = 33590 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . DwV15xI8ktHdneQn3VqKCt8pWDVOiujBzSZzGVOnkftaOb0y/D60XCwwsn3/SsYspyXRY3GAgnHX FWEjyT0UM91zr/YdDpk369E1LtX2Z/Bqb76oRCRg9oHW+lcQO8Z429TAmbVSBzRdf4BjCqxoP6Zx wWXXavk7dGxWVynW9HoccLvODHjJR11n/iWqANvv7szKOjYg0VHprHYlkAsKPY1Jlijlf5z6yKNv vlIG7xRZw7HPfBMOYmgIrmX0jcyaKzK65BSLvv2DatfsC60zHE+4n3JGqcw/sjBGf51UNIm1uVA4 HwMheCJqGvwzFBcdYXLFtjJbc8VFr/z8iSyu8g== ) ;; ADDITIONAL SECTION (13 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for ch/DNSKEY
	Received 730 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (730 bytes) ;; HEADER SECTION ;; id = 5215 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . DwV15xI8ktHdneQn3VqKCt8pWDVOiujBzSZzGVOnkftaOb0y/D60XCwwsn3/SsYspyXRY3GAgnHX FWEjyT0UM91zr/YdDpk369E1LtX2Z/Bqb76oRCRg9oHW+lcQO8Z429TAmbVSBzRdf4BjCqxoP6Zx wWXXavk7dGxWVynW9HoccLvODHjJR11n/iWqANvv7szKOjYg0VHprHYlkAsKPY1Jlijlf5z6yKNv vlIG7xRZw7HPfBMOYmgIrmX0jcyaKzK65BSLvv2DatfsC60zHE+4n3JGqcw/sjBGf51UNIm1uVA4 HwMheCJqGvwzFBcdYXLFtjJbc8VFr/z8iSyu8g== ) ;; ADDITIONAL SECTION (13 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to m.root-servers.net for ch/DS
	Received 366 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (366 bytes) ;; HEADER SECTION ;; id = 39436 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . DwV15xI8ktHdneQn3VqKCt8pWDVOiujBzSZzGVOnkftaOb0y/D60XCwwsn3/SsYspyXRY3GAgnHX FWEjyT0UM91zr/YdDpk369E1LtX2Z/Bqb76oRCRg9oHW+lcQO8Z429TAmbVSBzRdf4BjCqxoP6Zx wWXXavk7dGxWVynW9HoccLvODHjJR11n/iWqANvv7szKOjYg0VHprHYlkAsKPY1Jlijlf5z6yKNv vlIG7xRZw7HPfBMOYmgIrmX0jcyaKzK65BSLvv2DatfsC60zHE+4n3JGqcw/sjBGf51UNIm1uVA4 HwMheCJqGvwzFBcdYXLFtjJbc8VFr/z8iSyu8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ch in the . zone
	DS=1053/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20210528170000 20210515160000 14631 . DwV15xI8ktHdneQn3VqKCt8pWDVOiujBzSZzGVOnkftaOb0y/D60XCwwsn3/SsYspyXRY3GAgnHX FWEjyT0UM91zr/YdDpk369E1LtX2Z/Bqb76oRCRg9oHW+lcQO8Z429TAmbVSBzRdf4BjCqxoP6Zx wWXXavk7dGxWVynW9HoccLvODHjJR11n/iWqANvv7szKOjYg0VHprHYlkAsKPY1Jlijlf5z6yKNv vlIG7xRZw7HPfBMOYmgIrmX0jcyaKzK65BSLvv2DatfsC60zHE+4n3JGqcw/sjBGf51UNIm1uVA4 HwMheCJqGvwzFBcdYXLFtjJbc8VFr/z8iSyu8g== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=1053/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 )`
	Query to e.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (369 bytes) ;; HEADER SECTION ;; id = 4353 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053 ch. 86400 IN DNSKEY ( 256 3 13 mkq7fKwtqE63+fZOXLQm/A3KwERRApDGSKRBxaD6RNQeJRrDRfD1F3KmFyc0K5BbQ1aj3mLGOF5T f4hBS4ANjQ== ) ; Key ID = 31174 ch. 86400 IN DNSKEY ( 256 3 13 SMCx7OwqldNbwYa1KPvOC1JYYCg650Pr3k0tte1e1v4DBBI7fr8r86u3GA/hZH54OvDGtEdaCvQF H9ATvulBCQ== ) ; Key ID = 26777 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210624100909 20210509090909 1053 ch. ehmogXXEoOHr09MFAThv0Q4QT9vP3+TUU8U9P8MSDq6oltC97ROJdKqokXqV62hJGvWYb6k3JYDR 2KCGVxc19g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053`
	`ch. 86400 IN DNSKEY ( 256 3 13 mkq7fKwtqE63+fZOXLQm/A3KwERRApDGSKRBxaD6RNQeJRrDRfD1F3KmFyc0K5BbQ1aj3mLGOF5T f4hBS4ANjQ== ) ; Key ID = 31174`
	`ch. 86400 IN DNSKEY ( 256 3 13 SMCx7OwqldNbwYa1KPvOC1JYYCg650Pr3k0tte1e1v4DBBI7fr8r86u3GA/hZH54OvDGtEdaCvQF H9ATvulBCQ== ) ; Key ID = 26777`
	DNSKEY=1053/SEP is now in the chain-of-trust
	DS=1053/SHA-256 verifies DNSKEY=1053/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20210624100909 20210509090909 1053 ch. ehmogXXEoOHr09MFAThv0Q4QT9vP3+TUU8U9P8MSDq6oltC97ROJdKqokXqV62hJGvWYb6k3JYDR 2KCGVxc19g== )`
	RRSIG=1053 and DNSKEY=1053/SEP verifies the DNSKEY RRset
	DNSKEY=31174 is now in the chain-of-trust
	DNSKEY=26777 is now in the chain-of-trust
	Query to f.nic.ch for parlament.ch/A
	Received 443 bytes from 194.146.106.10
	;; Answer received from 194.146.106.10 (443 bytes) ;; HEADER SECTION ;; id = 41108 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) parlament.ch. 3600 IN NS ns1.ip-plus.net. parlament.ch. 3600 IN NS ns2.ip-plus.net. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3kd322gltk29caufduj4rbocu3k6t2 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210606170118 20210507160200 31174 ch. 1/NZugMijkdCrrzOdwTUqYwGvxm3psaDvJCw6OmnznitltVa8ejjRlATGIpE6harbxugC2XbghYO kFNRTUeOAQ== ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN NSEC3 ( 1 1 0 - mqbg5njktf64q831kd58l92583j9qnv0 NS DS RRSIG ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210601120403 20210503113002 31174 ch. bbxLmc0VnSXIBqjYJfOT3tc1BA2OfXWRf6VRJRyYf/fMOQ6qSIgaa7f/1lUG1ltj0mxYNZXpBye7 DrCxu1b9YQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.ch for parlament.ch/DNSKEY
	Received 443 bytes from 130.59.31.41
	;; Answer received from 130.59.31.41 (443 bytes) ;; HEADER SECTION ;; id = 50777 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) parlament.ch. 3600 IN NS ns2.ip-plus.net. parlament.ch. 3600 IN NS ns1.ip-plus.net. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3kd322gltk29caufduj4rbocu3k6t2 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210606170118 20210507160200 31174 ch. 1/NZugMijkdCrrzOdwTUqYwGvxm3psaDvJCw6OmnznitltVa8ejjRlATGIpE6harbxugC2XbghYO kFNRTUeOAQ== ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN NSEC3 ( 1 1 0 - mqbg5njktf64q831kd58l92583j9qnv0 NS DS RRSIG ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210601120403 20210503113002 31174 ch. bbxLmc0VnSXIBqjYJfOT3tc1BA2OfXWRf6VRJRyYf/fMOQ6qSIgaa7f/1lUG1ltj0mxYNZXpBye7 DrCxu1b9YQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone parlament.ch

parlament.ch

	Checking DS between ch and parlament.ch
	Query to e.nic.ch for parlament.ch/DS
	Received 561 bytes from 194.0.17.1
	;; Answer received from 194.0.17.1 (561 bytes) ;; HEADER SECTION ;; id = 9367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3kd322gltk29caufduj4rbocu3k6t2 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210606170118 20210507160200 31174 ch. 1/NZugMijkdCrrzOdwTUqYwGvxm3psaDvJCw6OmnznitltVa8ejjRlATGIpE6harbxugC2XbghYO kFNRTUeOAQ== ) ch. 900 IN SOA ( a.nic.ch. dns-operation.switch.ch. 2021051602 ;serial 900 ;refresh 600 ;retry 1123200 ;expire 900 ;minimum ) ch. 900 IN RRSIG ( SOA 13 1 900 20210614230635 20210515230201 31174 ch. XAQsJXas1npqOyFit0VmYktzVgviV5i7YGkkiXXQ9VbEqAULg0aC9LscxH01Ms9rtrFneKBsfu66 eZR5PKyBOw== ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN NSEC3 ( 1 1 0 - mqbg5njktf64q831kd58l92583j9qnv0 NS DS RRSIG ) MQAV82ON8ED6R06NMTAIE831ITV2NR70.ch. 900 IN RRSIG ( NSEC3 13 2 900 20210601120403 20210503113002 31174 ch. bbxLmc0VnSXIBqjYJfOT3tc1BA2OfXWRf6VRJRyYf/fMOQ6qSIgaa7f/1lUG1ltj0mxYNZXpBye7 DrCxu1b9YQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for parlament.ch in the ch zone
	Query to ns2.ip-plus.net for parlament.ch/DNSKEY
	Received 103 bytes from 164.128.76.39
	;; Answer received from 164.128.76.39 (103 bytes) ;; HEADER SECTION ;; id = 45712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) parlament.ch. 21600 IN SOA ( ns1.ip-plus.net. hostmaster.ip-plus.net. 2021051103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 21600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns2.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.76.39
	;; Answer received from 164.128.76.39 (136 bytes) ;; HEADER SECTION ;; id = 35577 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns2.ip-plus.net. parlament.ch. 900 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.ip-plus.net is authoritative for parlament.ch
	Query to ns1.ip-plus.net for parlament.ch/SOA
	Received 167 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (167 bytes) ;; HEADER SECTION ;; id = 32905 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN SOA ;; ANSWER SECTION (1 record) parlament.ch. 21600 IN SOA ( ns1.ip-plus.net. hostmaster.ip-plus.net. 2021051103 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 21600 ;minimum ) ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns1.ip-plus.net. parlament.ch. 900 IN NS ns2.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.76.39
	;; Answer received from 164.128.76.39 (136 bytes) ;; HEADER SECTION ;; id = 18799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns1.ip-plus.net. parlament.ch. 900 IN NS ns2.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	parlament.ch A RR has value 91.226.202.77
	No RRSIGs found

parlament.ch

	Query to ns1.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (136 bytes) ;; HEADER SECTION ;; id = 34053 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns2.ip-plus.net. parlament.ch. 900 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.ip-plus.net is authoritative for parlament.ch
	Query to ns1.ip-plus.net for parlament.ch/A
	Received 136 bytes from 164.128.36.34
	;; Answer received from 164.128.36.34 (136 bytes) ;; HEADER SECTION ;; id = 42490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; parlament.ch. IN A ;; ANSWER SECTION (1 record) parlament.ch. 360 IN A 91.226.202.77 ;; AUTHORITY SECTION (2 records) parlament.ch. 900 IN NS ns2.ip-plus.net. parlament.ch. 900 IN NS ns1.ip-plus.net. ;; ADDITIONAL SECTION (3 records) ns1.ip-plus.net. 21600 IN A 164.128.36.34 ns2.ip-plus.net. 21600 IN A 164.128.76.39 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	parlament.ch A RR has value 91.226.202.77
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test parlament.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: