DNSSEC Analyzer - powerdns.club

Domain Name:

Time: 2022-10-07 03:33:24 UTC, NTP stratum 16

Analyzing DNSSEC problems for powerdns.club

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 1139 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (1139 octets) ;; HEADER SECTION ;; id = 14466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221022000000 20221001000000 20326 . J39bVSJaNAI0vdz8qBWGjXuc39IV5rNXi+3lX7cVHtcdZJ/APXxdBXKI1vD0AEJjBg31iE/r+8Vk 8PQQklaWtlJ9YBFM5sVUBozVl9WL6x0P7JcZbBvgotfNfuvx0mt3BE/myzw5+kJV0OuG6nBZcD6B QZP3aIbQbVe64Hj3TeMGowQTcdTIfWsPpKB5GvxEY2XhRdahhftG2c8aVJZsub86jUjpTSZn8Dp1 S8BS3+ZBbbqHcQGqf4cmwS1QZYHjOsa86889IPcKmQ4EBQUlLihv3qRrGILkC1fhPhsyj/r8HX3v hM+Wamz8hF1QjhOUSvUD01iBl5PdTXacgAZ3mw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	DNSKEY=18733 is now in the chain-of-trust
	Query to m.root-servers.net for powerdns.club/A
	Received 763 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (763 octets) ;; HEADER SECTION ;; id = 11975 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS b.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 172800 IN NS a.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 86400 IN DS ( 20392 8 2 1f1ebacd947952ce4df8a80045ec37d088a49b72618feb92b91229de4d31b7b4 ) club. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . jusnNvzo5sAWZX7DQirOiQFNpaRnKc3Q+uXeSa+ZtAryBFCW91LtlQ6JKUPQpx8q/zUVjnt7GLQi JFkl2HZpmZcJuPjmJ0/B7DRShZSIx7q5biAoNuBdxchbx1jdN1QPQqjpiDm3NRoiWVkBG2ym0c6W r7dyBfvM44GgI5PavwY4TUfd9UYvdvgIhieOcBx1HiWIGIOLsytv4udH/Jr2gkip3Co7vE0TqZux j6OmtSPM6faA3+lGEHmWewCfIhEVfDx68EF8NgDACFe+fXLUx63cWZrpGLvaMIh5xHKmcFty2eAC HAG32K2RGHibUUgWFlvpAtEa7ii4ZULiemCY9Q== ) ;; ADDITIONAL SECTION (13 records) ns3.dns.nic.club. 172800 IN A 156.154.159.215 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns1.dns.nic.club. 172800 IN A 156.154.144.215 c.nic.club. 172800 IN A 37.209.196.10 b.nic.club. 172800 IN A 37.209.194.10 a.nic.club. 172800 IN A 37.209.192.10 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to a.root-servers.net for club/DNSKEY
	Received 742 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (742 octets) ;; HEADER SECTION ;; id = 65 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) club. 172800 IN NS a.nic.club. club. 172800 IN NS ns2.dns.nic.club. club. 172800 IN NS ns3.dns.nic.club. club. 172800 IN NS c.nic.club. club. 172800 IN NS ns1.dns.nic.club. club. 172800 IN NS b.nic.club. club. 86400 IN DS ( 20392 8 2 1f1ebacd947952ce4df8a80045ec37d088a49b72618feb92b91229de4d31b7b4 ) club. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . jusnNvzo5sAWZX7DQirOiQFNpaRnKc3Q+uXeSa+ZtAryBFCW91LtlQ6JKUPQpx8q/zUVjnt7GLQi JFkl2HZpmZcJuPjmJ0/B7DRShZSIx7q5biAoNuBdxchbx1jdN1QPQqjpiDm3NRoiWVkBG2ym0c6W r7dyBfvM44GgI5PavwY4TUfd9UYvdvgIhieOcBx1HiWIGIOLsytv4udH/Jr2gkip3Co7vE0TqZux j6OmtSPM6faA3+lGEHmWewCfIhEVfDx68EF8NgDACFe+fXLUx63cWZrpGLvaMIh5xHKmcFty2eAC HAG32K2RGHibUUgWFlvpAtEa7ii4ZULiemCY9Q== ) ;; ADDITIONAL SECTION (13 records) a.nic.club. 172800 IN A 37.209.192.10 a.nic.club. 172800 IN AAAA 2001:dcd:1::10 ns2.dns.nic.club. 172800 IN A 156.154.145.215 ns2.dns.nic.club. 172800 IN AAAA 2610:a1:1072::d7 ns3.dns.nic.club. 172800 IN A 156.154.159.215 ns3.dns.nic.club. 172800 IN AAAA 2610:a1:1073::d7 c.nic.club. 172800 IN A 37.209.196.10 c.nic.club. 172800 IN AAAA 2001:dcd:3::10 ns1.dns.nic.club. 172800 IN A 156.154.144.215 ns1.dns.nic.club. 172800 IN AAAA 2610:a1:1071::d7 b.nic.club. 172800 IN A 37.209.194.10 b.nic.club. 172800 IN AAAA 2001:dcd:2::10 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone club

club

	Checking DS between . and club
	Query to l.root-servers.net for club/DS
	Received 368 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (368 octets) ;; HEADER SECTION ;; id = 26875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DS ;; ANSWER SECTION (2 records) club. 86400 IN DS ( 20392 8 2 1f1ebacd947952ce4df8a80045ec37d088a49b72618feb92b91229de4d31b7b4 ) club. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . jusnNvzo5sAWZX7DQirOiQFNpaRnKc3Q+uXeSa+ZtAryBFCW91LtlQ6JKUPQpx8q/zUVjnt7GLQi JFkl2HZpmZcJuPjmJ0/B7DRShZSIx7q5biAoNuBdxchbx1jdN1QPQqjpiDm3NRoiWVkBG2ym0c6W r7dyBfvM44GgI5PavwY4TUfd9UYvdvgIhieOcBx1HiWIGIOLsytv4udH/Jr2gkip3Co7vE0TqZux j6OmtSPM6faA3+lGEHmWewCfIhEVfDx68EF8NgDACFe+fXLUx63cWZrpGLvaMIh5xHKmcFty2eAC HAG32K2RGHibUUgWFlvpAtEa7ii4ZULiemCY9Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for club in the . zone
	DS=20392/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`club. 86400 IN RRSIG ( DS 8 1 86400 20221019200000 20221006190000 18733 . jusnNvzo5sAWZX7DQirOiQFNpaRnKc3Q+uXeSa+ZtAryBFCW91LtlQ6JKUPQpx8q/zUVjnt7GLQi JFkl2HZpmZcJuPjmJ0/B7DRShZSIx7q5biAoNuBdxchbx1jdN1QPQqjpiDm3NRoiWVkBG2ym0c6W r7dyBfvM44GgI5PavwY4TUfd9UYvdvgIhieOcBx1HiWIGIOLsytv4udH/Jr2gkip3Co7vE0TqZux j6OmtSPM6faA3+lGEHmWewCfIhEVfDx68EF8NgDACFe+fXLUx63cWZrpGLvaMIh5xHKmcFty2eAC HAG32K2RGHibUUgWFlvpAtEa7ii4ZULiemCY9Q== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=20392/SHA-256 is now in the chain-of-trust
	`club. 86400 IN DS ( 20392 8 2 1f1ebacd947952ce4df8a80045ec37d088a49b72618feb92b91229de4d31b7b4 )`
	Query to b.nic.club for club/DNSKEY
	Received 977 bytes from 37.209.194.10
	;; Response received from 37.209.194.10 (977 octets) ;; HEADER SECTION ;; id = 25342 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; club. IN DNSKEY ;; ANSWER SECTION (4 records) club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; Key ID = 15345 club. 7200 IN DNSKEY ( 257 3 8 AwEAAduFgIn0JxZ3/uIahPDgywb8huGLiZKmKX8XlSO/T84+pbveZnFsMfMjI520wTodIBxtQtxE rSIApELC3uUC5ZGo1oDuF0Qc5MqXcJ6jYp+khuUl3X1vsecbuZwr01/cqH5YbpK0kP0FzJ3LHZC+ 5c/7OUhc809DrFQNVFRgA7FRatNdssz0qj5wCZoi3gaJpKrDMU2GydO9myjhOJtBzoDkNvS1hBCL Dp/BVq08RrHDvIlFiti54sFwyCERDDoynfbz3X5nxqu/odJ1c8NqionsYQFj10drLSxFCaw5nTWc wHqhQWeuD6UWVxo6b7z/Ry1pDgR9Xo8OVMnY/o041jM= ) ; Key ID = 20392 club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20221102060510 20221003051014 15345 club. BK/fmbqh+pI1pNyym29CMJa5VnZNf3gwtlToiLWmi3wInSsQXTDTZ+cszGDs/3WSBniV9meScwxz iF2ulVV+1gfq3SvpyidpY9ynVuYJ/xGlt2aupwdyxybRMzujJNPFPqgE79Sa0037AxrpbBG55vxw 73pN3iDQaqK/dApza/kpJQcKizQjbXmwa7RClnMiqbGwuq+LhxM3orSazZcHsg== ) club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20221102060510 20221003051014 20392 club. evV0NzWTrKsFGp9A6q7mUvbc93LBPEnDry711KwI449GXt3PcAxWxNFHYSU29PuhesvgZxHsW43l BOCmkLRKDmplajgmcPq/b8aZcVOOSK67vn1C0XJyw+8+/2NlGD2e2oHDuw/zw69TWwBwz3I2ViqW Ao0aTjdN3K68lhiuDcH1GTCk4U62T1DpmzAEBAGX2hicnuYF9JTlcNR4lgeKh20s7nssQxmcuxTC kW6M7DAWvp2ueQ9kgZ9jufVve6txglessD/S2d+vZw/EDoJdFj2sSqbHChSrJwR4/GcAq9/qaWHR oRC+94yA2y0bQZVBXNLP8KPzSDa/rxwkJdhILw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for club
	`club. 7200 IN DNSKEY ( 256 3 8 AwEAAdFyuyIbphV/kJlXT/rQ8DeenXh2+yr/WJPWfIe3P1MOLNXkenRXkwzVdDFx7uN+wZz0TF7r n8PPw7Rr4qsjk+uis+QT5ouUyuZbkR+XvSE7Meg0QmUvGnfkK1eRaHPi/aRm7YYJqUZeqlJN2CVZ /8p5qQkIDr5xYbW2+H+nykNQ4ztWYw6UFWv8MbZ3h3f/FAyeIQHIvx1jfVsUTvHhejM= ) ; Key ID = 15345`
	`club. 7200 IN DNSKEY ( 257 3 8 AwEAAduFgIn0JxZ3/uIahPDgywb8huGLiZKmKX8XlSO/T84+pbveZnFsMfMjI520wTodIBxtQtxE rSIApELC3uUC5ZGo1oDuF0Qc5MqXcJ6jYp+khuUl3X1vsecbuZwr01/cqH5YbpK0kP0FzJ3LHZC+ 5c/7OUhc809DrFQNVFRgA7FRatNdssz0qj5wCZoi3gaJpKrDMU2GydO9myjhOJtBzoDkNvS1hBCL Dp/BVq08RrHDvIlFiti54sFwyCERDDoynfbz3X5nxqu/odJ1c8NqionsYQFj10drLSxFCaw5nTWc wHqhQWeuD6UWVxo6b7z/Ry1pDgR9Xo8OVMnY/o041jM= ) ; Key ID = 20392`
	DNSKEY=20392/SEP is now in the chain-of-trust
	DS=20392/SHA-256 verifies DNSKEY=20392/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20221102060510 20221003051014 15345 club. BK/fmbqh+pI1pNyym29CMJa5VnZNf3gwtlToiLWmi3wInSsQXTDTZ+cszGDs/3WSBniV9meScwxz iF2ulVV+1gfq3SvpyidpY9ynVuYJ/xGlt2aupwdyxybRMzujJNPFPqgE79Sa0037AxrpbBG55vxw 73pN3iDQaqK/dApza/kpJQcKizQjbXmwa7RClnMiqbGwuq+LhxM3orSazZcHsg== )`
	`club. 7200 IN RRSIG ( DNSKEY 8 1 7200 20221102060510 20221003051014 20392 club. evV0NzWTrKsFGp9A6q7mUvbc93LBPEnDry711KwI449GXt3PcAxWxNFHYSU29PuhesvgZxHsW43l BOCmkLRKDmplajgmcPq/b8aZcVOOSK67vn1C0XJyw+8+/2NlGD2e2oHDuw/zw69TWwBwz3I2ViqW Ao0aTjdN3K68lhiuDcH1GTCk4U62T1DpmzAEBAGX2hicnuYF9JTlcNR4lgeKh20s7nssQxmcuxTC kW6M7DAWvp2ueQ9kgZ9jufVve6txglessD/S2d+vZw/EDoJdFj2sSqbHChSrJwR4/GcAq9/qaWHR oRC+94yA2y0bQZVBXNLP8KPzSDa/rxwkJdhILw== )`
	RRSIG=15345 and DNSKEY=15345 verifies the DNSKEY RRset
	RRSIG=20392 and DNSKEY=20392/SEP verifies the DNSKEY RRset
	DNSKEY=15345 is now in the chain-of-trust
	Query to c.nic.club for powerdns.club/A
	Received 338 bytes from 37.209.196.10
	;; Response received from 37.209.196.10 (338 octets) ;; HEADER SECTION ;; id = 44778 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20221102045938 20221003042024 15345 club. KFGlemZI9wD3KvMJvbbDJY7UwOvUm6tudB7bHwzRlE3ZkH2lOtB6eXsgqyzPvC77vW+VZIDkYFLG Q3uz/Vvq2hs0S1DHipsxGuETCi5HrpU953pSwl9tJe3fM25OlUD4pv9ekM4wEVEzjX9b/IP8q8QQ 15AxJRwcpCTUCgsJzWd43acGrUEUnEsmte4sRWvVYlsWIGvKZQPL25MK80vs4A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.dns.nic.club for powerdns.club/DNSKEY
	Received 338 bytes from 156.154.145.215
	;; Response received from 156.154.145.215 (338 octets) ;; HEADER SECTION ;; id = 2326 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN NS grace.7bits.nl. powerdns.club. 3600 IN NS bernoulli.7bits.nl. powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20221102045938 20221003042024 15345 club. KFGlemZI9wD3KvMJvbbDJY7UwOvUm6tudB7bHwzRlE3ZkH2lOtB6eXsgqyzPvC77vW+VZIDkYFLG Q3uz/Vvq2hs0S1DHipsxGuETCi5HrpU953pSwl9tJe3fM25OlUD4pv9ekM4wEVEzjX9b/IP8q8QQ 15AxJRwcpCTUCgsJzWd43acGrUEUnEsmte4sRWvVYlsWIGvKZQPL25MK80vs4A== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone powerdns.club

powerdns.club

	Checking DS between club and powerdns.club
	Query to ns1.dns.nic.club for powerdns.club/DS
	Received 592 bytes from 156.154.144.215
	;; Response received from 156.154.144.215 (592 octets) ;; HEADER SECTION ;; id = 57601 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 7 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DS ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 ) powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20221102045938 20221003042024 15345 club. KFGlemZI9wD3KvMJvbbDJY7UwOvUm6tudB7bHwzRlE3ZkH2lOtB6eXsgqyzPvC77vW+VZIDkYFLG Q3uz/Vvq2hs0S1DHipsxGuETCi5HrpU953pSwl9tJe3fM25OlUD4pv9ekM4wEVEzjX9b/IP8q8QQ 15AxJRwcpCTUCgsJzWd43acGrUEUnEsmte4sRWvVYlsWIGvKZQPL25MK80vs4A== ) ;; AUTHORITY SECTION (7 records) club. 86400 IN NS a.nic.club. club. 86400 IN NS b.nic.club. club. 86400 IN NS c.nic.club. club. 86400 IN NS ns1.dns.nic.club. club. 86400 IN NS ns2.dns.nic.club. club. 86400 IN NS ns3.dns.nic.club. club. 86400 IN RRSIG ( NS 8 1 86400 20221102031856 20221003023105 15345 club. IZ5NOjrvRER9IRDXaqPzKxsL6BocVzF54iR/A2z117ZavSkdrY12JBrUmpuKUS4Xa/A9niZntkmp DvzfIPcNBvCRyJ0u0dGP9M5zHSFJszgce2X0F4hkYyUIO/StopW4yEcjllAJQ21HoKC4WRqnxGVQ FRDNlMRWekkXtcPPvQblNWqdo/zfkCRW2XFNbekHYSeexdKnTm00MrKlHIx6xw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for powerdns.club in the club zone
	DS=49111/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`powerdns.club. 3600 IN RRSIG ( DS 8 2 3600 20221102045938 20221003042024 15345 club. KFGlemZI9wD3KvMJvbbDJY7UwOvUm6tudB7bHwzRlE3ZkH2lOtB6eXsgqyzPvC77vW+VZIDkYFLG Q3uz/Vvq2hs0S1DHipsxGuETCi5HrpU953pSwl9tJe3fM25OlUD4pv9ekM4wEVEzjX9b/IP8q8QQ 15AxJRwcpCTUCgsJzWd43acGrUEUnEsmte4sRWvVYlsWIGvKZQPL25MK80vs4A== )`
	RRSIG=15345 and DNSKEY=15345 verifies the DS RRset
	DS=49111/SHA-256 is now in the chain-of-trust
	`powerdns.club. 3600 IN DS ( 49111 13 2 1c16fc8428ecef27a641c02a655606701db42997aa8e86c2cf7533f2a3fdb018 )`
	Query to bernoulli.7bits.nl for powerdns.club/DNSKEY
	Received 231 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (231 octets) ;; HEADER SECTION ;; id = 55328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN DNSKEY ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. xI6LiBH4s92wM3+SbEM/94+MC2ZOniJhvNl2J66t+i+z3ok+JwvVb289FTZNOYqqqFL60Y7BnOU8 K+ygSlkILA== ) powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; Key ID = 49111 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DNSKEY records for powerdns.club
	`powerdns.club. 3600 IN DNSKEY ( 257 3 13 K3PnNfh8Xo/yCfefLo27fngO4BweGAd4uQQo1rfqP1XtmmNPodTlDluq0clWeX9I4EKlmhm8+NS7 Pn5ESAIykA== ) ; Key ID = 49111`
	DNSKEY=49111/SEP is now in the chain-of-trust
	DS=49111/SHA-256 verifies DNSKEY=49111/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`powerdns.club. 3600 IN RRSIG ( DNSKEY 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. xI6LiBH4s92wM3+SbEM/94+MC2ZOniJhvNl2J66t+i+z3ok+JwvVb289FTZNOYqqqFL60Y7BnOU8 K+ygSlkILA== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the DNSKEY RRset
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from 173.212.217.242 (373 octets) ;; HEADER SECTION ;; id = 38707 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. FTP0cyykAJqugVY/cTCiYqbEZ/QgPpMPTfwZohu6ZOCH9V1cSdGojbiIZJ2lMnQXrP56pVSEB3gL ER+OsdV1eQ== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	grace.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to bernoulli.7bits.nl for powerdns.club/SOA
	Received 214 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (214 octets) ;; HEADER SECTION ;; id = 38746 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN SOA ;; ANSWER SECTION (2 records) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. KwWXtcjZIsMeBulv7YKQ9mlcS9P/odOa+Z0ybuKETISPNxZigyjTNxXHgaSNR5f6ImvPgmjsLse8 eqjTiSTEyg== ) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to grace.7bits.nl for powerdns.club/A
	Received 373 bytes from 173.212.217.242
	;; Response received from 173.212.217.242 (373 octets) ;; HEADER SECTION ;; id = 48864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. FTP0cyykAJqugVY/cTCiYqbEZ/QgPpMPTfwZohu6ZOCH9V1cSdGojbiIZJ2lMnQXrP56pVSEB3gL ER+OsdV1eQ== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. FTP0cyykAJqugVY/cTCiYqbEZ/QgPpMPTfwZohu6ZOCH9V1cSdGojbiIZJ2lMnQXrP56pVSEB3gL ER+OsdV1eQ== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

powerdns.club

	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (373 octets) ;; HEADER SECTION ;; id = 26078 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. KwWXtcjZIsMeBulv7YKQ9mlcS9P/odOa+Z0ybuKETISPNxZigyjTNxXHgaSNR5f6ImvPgmjsLse8 eqjTiSTEyg== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	bernoulli.7bits.nl is authoritative for powerdns.club
	Found RRSIG signed by powerdns.club zone
	Query to bernoulli.7bits.nl for powerdns.club/A
	Received 373 bytes from 89.188.2.130
	;; Response received from 89.188.2.130 (373 octets) ;; HEADER SECTION ;; id = 39173 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; powerdns.club. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) powerdns.club. 3600 IN SOA ( lorentz.7bits.nl. hostmaster.powerdns.club. 10 ;serial 10800 ;refresh 3600 ;retry 604800 ;expire 3600 ;minimum ) powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. KwWXtcjZIsMeBulv7YKQ9mlcS9P/odOa+Z0ybuKETISPNxZigyjTNxXHgaSNR5f6ImvPgmjsLse8 eqjTiSTEyg== ) powerdns.club. 3600 IN NSEC ( badpin.dotpin.powerdns.club. NS SOA RRSIG NSEC DNSKEY ) powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`powerdns.club. 3600 IN RRSIG ( NSEC 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. j3ki2mhHNJtH2b3XTpBGsn72ZfTL4zqiHG8TWa4UWDALN+/sfIDqk4RTB33QJ8c6e4d84T87l3iA 91njIAWyaQ== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the NSEC RRset
	NSEC proves no records of type A exist for powerdns.club
	Found 1 RRSIGs over SOA RRset
	`powerdns.club. 3600 IN RRSIG ( SOA 13 2 3600 20221020000000 20220929000000 49111 powerdns.club. KwWXtcjZIsMeBulv7YKQ9mlcS9P/odOa+Z0ybuKETISPNxZigyjTNxXHgaSNR5f6ImvPgmjsLse8 eqjTiSTEyg== )`
	RRSIG=49111 and DNSKEY=49111/SEP verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test powerdns.club at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: