DNSSEC Analyzer - powerdns.club

Domain Name:

Time: 2021-12-01 10:10:37 UTC, NTP stratum 16

Analyzing DNSSEC problems for powerdns.club

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 864 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (864 octets) ;; HEADER SECTION ;; id = 50000 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211221000000 20211130000000 20326 . bzGxyBzXDHcqGZwZ3v4L373VyBkgwi9l0Cb0p1ODHCvAa8AgLzJzj7SmksXFpbe3I28TlnigIF/G gl/wYYmRMtQW8C7XViKSsR110V426t1N+ZO66yegIe318yXcg4t3nFcWK1HwwJl0jD5LMaE7Cc99 ylyFYe0vI2d66MEq7BAmZDPs/5uDwId+RX47oP+WG06QcDqgx1NE48LebNW5DVnVyzkHvG6KZ1KX TdyRihH085reUqFokixQu3opu8YECy/WXv1mBPbdn0rRK7jWQBgF+3XkHVboVySr0J405H26MnwO flrP7qwIw+QupVopGAsC3O+YdQdrvjKn26k+GA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to d.root-servers.net for powerdns.club/A
	Received 751 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (751 octets) ;; HEADER SECTION ;; id = 17056 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS ( 29815 8 2 3b67f899b57454e924dd1efae729b8741d61ba9bc8d76cd888919e5c0950ca23 ) club. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . ag2JzEroA77yM7lLbybsPrJNDlHF/xO3ZOpkuYgKzksIVljVzQkY4sXn14vvEpPhFSkXY0BBGJGA wYnp9hLkrA0A2A0TPIWhuAgLoOFwV1GyZkMan2ea1oGOZN/beO6fQSfK/8TRhgaLzp7GaaXxuf5v eJgm0vjhYZI+Yf28xKsorfh8h0xzx2cKIrtmYjV/RjcLienZspf5oiYfh6UZVd4Nuzzh/yqhhqOO GZ5S1TZS9+Yot3qIO8TQC3SXe3HpT0KUHptJJiUQjpHAUJQNW0hGd94EOGop4p8ncMk0KhHiATA7 9CPyzKsy4ITP90zXewv1b5MRoR7q1Yw6S8T3WA== ) ;; ADDITIONAL SECTION (13 records) a.nic.club. 172800 IN A 37.209.192.10 b.nic.club. 172800 IN A 37.209.194.10 c.nic.club. 172800 IN A 37.209.196.10 ns1.dns.nic.club. 172800 IN A 156.154.144.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns3.dns.nic.club. 172800 IN A 156.154.159.215 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to d.root-servers.net for club/DNSKEY
	Received 742 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (742 octets) ;; HEADER SECTION ;; id = 49153 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS b.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 86400 IN DS ( 29815 8 2 3b67f899b57454e924dd1efae729b8741d61ba9bc8d76cd888919e5c0950ca23 ) club. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . ag2JzEroA77yM7lLbybsPrJNDlHF/xO3ZOpkuYgKzksIVljVzQkY4sXn14vvEpPhFSkXY0BBGJGA wYnp9hLkrA0A2A0TPIWhuAgLoOFwV1GyZkMan2ea1oGOZN/beO6fQSfK/8TRhgaLzp7GaaXxuf5v eJgm0vjhYZI+Yf28xKsorfh8h0xzx2cKIrtmYjV/RjcLienZspf5oiYfh6UZVd4Nuzzh/yqhhqOO GZ5S1TZS9+Yot3qIO8TQC3SXe3HpT0KUHptJJiUQjpHAUJQNW0hGd94EOGop4p8ncMk0KhHiATA7 9CPyzKsy4ITP90zXewv1b5MRoR7q1Yw6S8T3WA== ) ;; ADDITIONAL SECTION (13 records) a.nic.club. 172800 IN A 37.209.192.10 b.nic.club. 172800 IN A 37.209.194.10 c.nic.club. 172800 IN A 37.209.196.10 ns1.dns.nic.club. 172800 IN A 156.154.144.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns3.dns.nic.club. 172800 IN A 156.154.159.215 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found child zone club

club

	Checking DS between . and club
	Query to g.root-servers.net for club/DS
	Received 368 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (368 octets) ;; HEADER SECTION ;; id = 30585 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DS ;; ANSWER SECTION (2 records) club. 86400 IN DS ( 29815 8 2 3b67f899b57454e924dd1efae729b8741d61ba9bc8d76cd888919e5c0950ca23 ) club. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . ag2JzEroA77yM7lLbybsPrJNDlHF/xO3ZOpkuYgKzksIVljVzQkY4sXn14vvEpPhFSkXY0BBGJGA wYnp9hLkrA0A2A0TPIWhuAgLoOFwV1GyZkMan2ea1oGOZN/beO6fQSfK/8TRhgaLzp7GaaXxuf5v eJgm0vjhYZI+Yf28xKsorfh8h0xzx2cKIrtmYjV/RjcLienZspf5oiYfh6UZVd4Nuzzh/yqhhqOO GZ5S1TZS9+Yot3qIO8TQC3SXe3HpT0KUHptJJiUQjpHAUJQNW0hGd94EOGop4p8ncMk0KhHiATA7 9CPyzKsy4ITP90zXewv1b5MRoR7q1Yw6S8T3WA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for club in the . zone
	DS=29815/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`club. 86400 IN RRSIG ( DS 8 1 86400 20211214050000 20211201040000 14748 . ag2JzEroA77yM7lLbybsPrJNDlHF/xO3ZOpkuYgKzksIVljVzQkY4sXn14vvEpPhFSkXY0BBGJGA wYnp9hLkrA0A2A0TPIWhuAgLoOFwV1GyZkMan2ea1oGOZN/beO6fQSfK/8TRhgaLzp7GaaXxuf5v eJgm0vjhYZI+Yf28xKsorfh8h0xzx2cKIrtmYjV/RjcLienZspf5oiYfh6UZVd4Nuzzh/yqhhqOO GZ5S1TZS9+Yot3qIO8TQC3SXe3HpT0KUHptJJiUQjpHAUJQNW0hGd94EOGop4p8ncMk0KhHiATA7 9CPyzKsy4ITP90zXewv1b5MRoR7q1Yw6S8T3WA== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=29815/SHA-256 is now in the chain-of-trust
	`club. 86400 IN DS ( 29815 8 2 3b67f899b57454e924dd1efae729b8741d61ba9bc8d76cd888919e5c0950ca23 )`
	Query to a.nic.club for club/DNSKEY
	Received 977 bytes from 37.209.192.10
	;; Response received from 37.209.192.10 (977 octets) ;; HEADER SECTION ;; id = 22747 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (4 records) club. 7200 IN DNSKEY ( 257 3 8 AwEAAZrxwLBlG/mwciR3okW+/GdSjgHnT1mumFEyJs4Ig9cmchRYrQCzZzyVPLHHVVTYI5ZF4eWK 4iamaQAA8RxcvgZxEU0pJIqaNji7iZl4Vn8Pip8eoX7+if4Wg2wOuK22eg1K93xD4kd5GnHV8NYI np5wqoBZ1l+e80kOGpERLHpxT+R7bRu8wSYeFA9miA+vrHqTI2B3b98IpaXV9nf/oCM2lmLrKhO1 L5y3fVQlPRCBj4YZGF8oc9FHk5fXvg+AZDZk9g9SAqSaVyAW82tHR3b+zovQQ40aE7TytBWYiyA5 Es20CPGAutp66yWpSvd6ZCdoPZTObhxDB1SWUF1CORc= ) ; Key ID = 29815 club. 7200 IN DNSKEY ( 256 3 8 AwEAAdgGJmWpuK52ELzhs8+DyuZ0enj+K+KWqcdRxdW/tTChbUcXcAASfVgyHrNzcCll58YZarxC OR8RVIDC50McI044Z1uuVeW+IFlHQR8mGLf6G9ZprS6ceq3V6c5xuIQQKG0xfltTFWyhG+82vXOd k8djy25KH3tLMTdwsTNdESyejpowUOrtEiCTb88jlhnn3Y1zlIQQaupnmFJ+7AbRV+k= ) ; Key ID = 34263 club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20211229202403 20211129195930 29815 club. Ae/FA5zxdP8pMxBiZBS1KV2SxRIZ1VVCBf9E0qH+aAMwgjxfUs9/W6OBIFLg56T4FdlCuT5/fsxc h710TIfpDipDBypGffRjkkogQadBlL7U04u7QXZbtjHncaUG6GfS0rA5VbYr7/bRSb105y/ih7av 4fydIEhe2ef+UCzZCpn89Ve1ZS9RNbvCcGfKlewSIoB5gAv0UpICqRaeqUfG4FzUXwelXAr14I0k 1jvt7325tad2Yv+PUOsFR0JpRGFVhmq3E3m/yIPL621Xir58fV9xEPq1lRIfDq9MXKhbGxCuo84B ThGDZWA7QsU5P3fy7GS4A8EGn7kJSLbXSPhydg== ) club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20211229202403 20211129195930 34263 club. yBdHMaRsaGpjG2VRy3UmJiVLBliROQ4UErpYBTqYoSiys0ykUTw1PHke9KjhKG7GWcFGiWnS92fi KVQ9ly4IaovngBvpqIyDSAfCF+PTVG6wbZPXQgwKLKsUPTiD50CnONiKaBLDWZc/NrcNh8PNd7s7 acZ7lzQcbAvCbL+2pEKS0RmSsCpscMO0vDmLxw+nppZNGMAS688yll0UNjDa2A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for club
	`club. 7200 IN DNSKEY ( 257 3 8 AwEAAZrxwLBlG/mwciR3okW+/GdSjgHnT1mumFEyJs4Ig9cmchRYrQCzZzyVPLHHVVTYI5ZF4eWK 4iamaQAA8RxcvgZxEU0pJIqaNji7iZl4Vn8Pip8eoX7+if4Wg2wOuK22eg1K93xD4kd5GnHV8NYI np5wqoBZ1l+e80kOGpERLHpxT+R7bRu8wSYeFA9miA+vrHqTI2B3b98IpaXV9nf/oCM2lmLrKhO1 L5y3fVQlPRCBj4YZGF8oc9FHk5fXvg+AZDZk9g9SAqSaVyAW82tHR3b+zovQQ40aE7TytBWYiyA5 Es20CPGAutp66yWpSvd6ZCdoPZTObhxDB1SWUF1CORc= ) ; Key ID = 29815`
	`club. 7200 IN DNSKEY ( 256 3 8 AwEAAdgGJmWpuK52ELzhs8+DyuZ0enj+K+KWqcdRxdW/tTChbUcXcAASfVgyHrNzcCll58YZarxC OR8RVIDC50McI044Z1uuVeW+IFlHQR8mGLf6G9ZprS6ceq3V6c5xuIQQKG0xfltTFWyhG+82vXOd k8djy25KH3tLMTdwsTNdESyejpowUOrtEiCTb88jlhnn3Y1zlIQQaupnmFJ+7AbRV+k= ) ; Key ID = 34263`
	DNSKEY=29815/SEP is now in the chain-of-trust
	DS=29815/SHA-256 verifies DNSKEY=29815/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20211229202403 20211129195930 29815 club. Ae/FA5zxdP8pMxBiZBS1KV2SxRIZ1VVCBf9E0qH+aAMwgjxfUs9/W6OBIFLg56T4FdlCuT5/fsxc h710TIfpDipDBypGffRjkkogQadBlL7U04u7QXZbtjHncaUG6GfS0rA5VbYr7/bRSb105y/ih7av 4fydIEhe2ef+UCzZCpn89Ve1ZS9RNbvCcGfKlewSIoB5gAv0UpICqRaeqUfG4FzUXwelXAr14I0k 1jvt7325tad2Yv+PUOsFR0JpRGFVhmq3E3m/yIPL621Xir58fV9xEPq1lRIfDq9MXKhbGxCuo84B ThGDZWA7QsU5P3fy7GS4A8EGn7kJSLbXSPhydg== )`
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20211229202403 20211129195930 34263 club. yBdHMaRsaGpjG2VRy3UmJiVLBliROQ4UErpYBTqYoSiys0ykUTw1PHke9KjhKG7GWcFGiWnS92fi KVQ9ly4IaovngBvpqIyDSAfCF+PTVG6wbZPXQgwKLKsUPTiD50CnONiKaBLDWZc/NrcNh8PNd7s7 acZ7lzQcbAvCbL+2pEKS0RmSsCpscMO0vDmLxw+nppZNGMAS688yll0UNjDa2A== )`
	RRSIG=29815 and DNSKEY=29815/SEP verifies the DNSKEY RRset
	RRSIG=34263 and DNSKEY=34263 verifies the DNSKEY RRset
	DNSKEY=34263 is now in the chain-of-trust
	Query to ns2.dns.nic.club for powerdns.club/A
	Received 338 bytes from 156.154.145.215
	;; Response received from 156.154.145.215 (338 octets) ;; HEADER SECTION ;; id = 43788 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20211229184359 20211129181407 34263 club. kHRwHcbbDX+fdBcmN0HxeZceIpel2fcPzf5WfvnSGgXMeC35HoYAyO064Z58WD+RPnF12LBjWxML gRsC0Zhgt8SqVrcIavSWrUjKJtk4iHX86oPI3XBHXvR6lt5+Gq/j9q58tvqFsULNqmE5Ou4ofVHR JKz6VdpzT5J+4IZrJioUQI4j+2XR0txJ04D1FrCt5go3GfXTDujzNFJ4s82SOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to a.nic.club for powerdns.club/DNSKEY
	Received 338 bytes from 37.209.192.10
	;; Response received from 37.209.192.10 (338 octets) ;; HEADER SECTION ;; id = 47019 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20211229184359 20211129181407 34263 club. kHRwHcbbDX+fdBcmN0HxeZceIpel2fcPzf5WfvnSGgXMeC35HoYAyO064Z58WD+RPnF12LBjWxML gRsC0Zhgt8SqVrcIavSWrUjKJtk4iHX86oPI3XBHXvR6lt5+Gq/j9q58tvqFsULNqmE5Ou4ofVHR JKz6VdpzT5J+4IZrJioUQI4j+2XR0txJ04D1FrCt5go3GfXTDujzNFJ4s82SOg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone powerdns.club

powerdns.club

	Checking DS between club and powerdns.club
	Query to b.nic.club for powerdns.club/DS
	Received 286 bytes from 37.209.194.10
	;; Response received from 37.209.194.10 (286 octets) ;; HEADER SECTION ;; id = 39925 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DS ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20211229184359 20211129181407 34263 club. kHRwHcbbDX+fdBcmN0HxeZceIpel2fcPzf5WfvnSGgXMeC35HoYAyO064Z58WD+RPnF12LBjWxML gRsC0Zhgt8SqVrcIavSWrUjKJtk4iHX86oPI3XBHXvR6lt5+Gq/j9q58tvqFsULNqmE5Ou4ofVHR JKz6VdpzT5J+4IZrJioUQI4j+2XR0txJ04D1FrCt5go3GfXTDujzNFJ4s82SOg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for powerdns.club in the club zone
	DS=49111/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20211229184359 20211129181407 34263 club. kHRwHcbbDX+fdBcmN0HxeZceIpel2fcPzf5WfvnSGgXMeC35HoYAyO064Z58WD+RPnF12LBjWxML gRsC0Zhgt8SqVrcIavSWrUjKJtk4iHX86oPI3XBHXvR6lt5+Gq/j9q58tvqFsULNqmE5Ou4ofVHR JKz6VdpzT5J+4IZrJioUQI4j+2XR0txJ04D1FrCt5go3GfXTDujzNFJ4s82SOg== )`
	RRSIG=34263 and DNSKEY=34263 verifies the DS RRset
	DS=49111/SHA-256 is now in the chain-of-trust
	`powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 )`
	Query to bernoulli.7bits.nl for powerdns.club/DNSKEY
	Received 231 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (231 octets) ;; HEADER SECTION ;; id = 14295 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; Key ID = 49111 powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. KLUD4XSGiBjbqio4t8WVmkwjx9duecnC3ZyLcA/FU4MtdeMWaadrEZc/Vfl5c1oftjrCuFyJ9m0B 9G953YF+8w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for powerdns.club
	`powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; Key ID = 49111`
	DNSKEY=49111/SEP is now in the chain-of-trust
	DS=49111/SHA-256 verifies DNSKEY=49111/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. KLUD4XSGiBjbqio4t8WVmkwjx9duecnC3ZyLcA/FU4MtdeMWaadrEZc/Vfl5c1oftjrCuFyJ9m0B 9G953YF+8w== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the DNSKEY RRset
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (373 octets) ;; HEADER SECTION ;; id = 39015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	bernoulli.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to grace.7bits.nl for powerdns.club/SOA
	Received 214 bytes from 173.212.217.242
	;; Response received from 173.212.217.242 (214 octets) ;; HEADER SECTION ;; id = 64224 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN SOA ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (373 octets) ;; HEADER SECTION ;; id = 61068 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

powerdns.club

	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from 173.212.217.242 (373 octets) ;; HEADER SECTION ;; id = 27180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	grace.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from 173.212.217.242 (373 octets) ;; HEADER SECTION ;; id = 31956 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. 6yJ9FsduCZuAV3jJ0BHkDnVqoAy4bD9bSoH9qFDxHeR3OdYUTc4d/fm7VJi8g4jYQpijPYluWY8i 9CjsdiQZ8g== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20211209000000 20211118000000 49111 powerdns.club. ZKPlbYkcYhYDMex+MG/3oEzABtDacE/V55sE4qAahuqRsc8I/J0moVGrUOwee2n1UMpdgJ0JOZiz Z3Sph5/LsA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test powerdns.club at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: