DNSSEC Debugger - rfc8901.dev

Domain Name:

Time: 2025-01-22 16:57:36 UTC

Analyzing DNSSEC problems for rfc8901.dev

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 1141 octets ;; HEADER SECTION ;; id = 4411 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20250211000000 20250121000000 20326 . FSaCmTU7zEQ5NrbBh2l10fBe6UU1hv9wPNTJ31uAF1BSXLCg89/bKFqsULMY18TAnMcHcyfSk87Y VnDQIip68H4s5Nk8em8SrVfkpUetuhakQ/2W82Qbtdq+oqdWKnjsSp+zC1ffZCuVgSluSHw8BTxu I3RXbgI7lD+T3QhVnCRDHaAlbo5MXn+Rnnqrf4V4cz5lENB7PCYu4mASj7TVuUo/FUuBUHFjlHwy wHZ/4QQjnjorXCAnX/lY34VSVWufCu3OtmJNMxYbfz57kkfQNhRX7sBmi08rZYcGv+RWhKvtuzIS PTYUQGOXWR2mZawEDFQ6LGG437gFOCoICsaDuA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZ5A7jOztf62cGqhPhutjnyl7KBjIsjbyTb8il+FsgbMUbO2NQHaSbatHdlOlqANncDwSIKZ 9ryqd1+Dy1PoGzeTUv95vOJnVVJHlJu7xdavnUmPs+Mh2NV7hDlTTwPn5uXgFxAaxoO9M/YIAC92 GryCLjoJEg9JzeevkktEM/sFpmRv4I5jQtlLyRqVbnCzcWpi04XaVLxRKvURkd/Mdb/2RQS3MYvr kEBXuqtnAVBCf6Fx4sgBYOfYvbUuG2diLnGJW/MXvFpctZgQ76+3FwMqAZfR9k5bohL7AF3+jqz4 MUiootYoh5koyt7VEnUULxxy6U5PINTGgOC26f3zZuk= ) ; keytag 26470`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20250211000000 20250121000000 20326 . FSaCmTU7zEQ5NrbBh2l10fBe6UU1hv9wPNTJ31uAF1BSXLCg89/bKFqsULMY18TAnMcHcyfSk87Y VnDQIip68H4s5Nk8em8SrVfkpUetuhakQ/2W82Qbtdq+oqdWKnjsSp+zC1ffZCuVgSluSHw8BTxu I3RXbgI7lD+T3QhVnCRDHaAlbo5MXn+Rnnqrf4V4cz5lENB7PCYu4mASj7TVuUo/FUuBUHFjlHwy wHZ/4QQjnjorXCAnX/lY34VSVWufCu3OtmJNMxYbfz57kkfQNhRX7sBmi08rZYcGv+RWhKvtuzIS PTYUQGOXWR2mZawEDFQ6LGG437gFOCoICsaDuA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=38696/SEP is now in the chain-of-trust
	DNSKEY=26470 is now in the chain-of-trust
	Query to j.root-servers.net for rfc8901.dev/A
	Received 731 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 731 octets ;; HEADER SECTION ;; id = 31901 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) dev. 172800 IN NS ns-tld1.charlestonroadregistry.com. dev. 172800 IN NS ns-tld2.charlestonroadregistry.com. dev. 172800 IN NS ns-tld3.charlestonroadregistry.com. dev. 172800 IN NS ns-tld4.charlestonroadregistry.com. dev. 172800 IN NS ns-tld5.charlestonroadregistry.com. dev. 86400 IN DS ( 60074 8 2 b942e2ce5aebf62fca59d05707e6dbb795211d540d8adba02e9e89e833424785 ) dev. 86400 IN RRSIG ( DS 8 1 86400 20250204050000 20250122040000 26470 . THbUfBeNvjTJoDoWqN9Cj0zPT5U80lMtLS05ngs7bdyNwM/gILrRJq0ifAD9ieVvtNL5ZKiNhPvx n+Dr3RtsAJDiqsQReFnbt+c2tKLiiBgj3TKUIhW32hgOF/YippcLMbfFDQgRH1r2kQWGpCFq+2bL biUPu+G469FzalYVJtgft2vE9Jze3zisX6HO0Zb3D4wq0cibDKQhNM1ZRe/+N6R2bCuE6CQvIVre IMUt1/79XkSgiAI9pEUjldpUlaXs0A2s7ijv+eHxr/99jIEWAZojssAO+lnOS8npXHSInEkC1jcq WtFbSuyqcoLuikrgxXVNVEDlI1SCWXY0poRx3A== ) ;; ADDITIONAL SECTION (11 records) ns-tld1.charlestonroadregistry.com. 172800 IN A 216.239.32.105 ns-tld2.charlestonroadregistry.com. 172800 IN A 216.239.34.105 ns-tld3.charlestonroadregistry.com. 172800 IN A 216.239.36.105 ns-tld4.charlestonroadregistry.com. 172800 IN A 216.239.38.105 ns-tld5.charlestonroadregistry.com. 172800 IN A 216.239.60.105 ns-tld1.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:32::69 ns-tld2.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:34::69 ns-tld3.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:36::69 ns-tld4.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:38::69 ns-tld5.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4805::69 ;; { "EDNS-VERSION": 0 }
	Query to a.root-servers.net for dev/DNSKEY
	Received 723 bytes from 198.41.0.4
	;; Response received from [198.41.0.4] 723 octets ;; HEADER SECTION ;; id = 6379 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dev. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) dev. 172800 IN NS ns-tld1.charlestonroadregistry.com. dev. 172800 IN NS ns-tld3.charlestonroadregistry.com. dev. 172800 IN NS ns-tld5.charlestonroadregistry.com. dev. 172800 IN NS ns-tld2.charlestonroadregistry.com. dev. 172800 IN NS ns-tld4.charlestonroadregistry.com. dev. 86400 IN DS ( 60074 8 2 b942e2ce5aebf62fca59d05707e6dbb795211d540d8adba02e9e89e833424785 ) dev. 86400 IN RRSIG ( DS 8 1 86400 20250204050000 20250122040000 26470 . THbUfBeNvjTJoDoWqN9Cj0zPT5U80lMtLS05ngs7bdyNwM/gILrRJq0ifAD9ieVvtNL5ZKiNhPvx n+Dr3RtsAJDiqsQReFnbt+c2tKLiiBgj3TKUIhW32hgOF/YippcLMbfFDQgRH1r2kQWGpCFq+2bL biUPu+G469FzalYVJtgft2vE9Jze3zisX6HO0Zb3D4wq0cibDKQhNM1ZRe/+N6R2bCuE6CQvIVre IMUt1/79XkSgiAI9pEUjldpUlaXs0A2s7ijv+eHxr/99jIEWAZojssAO+lnOS8npXHSInEkC1jcq WtFbSuyqcoLuikrgxXVNVEDlI1SCWXY0poRx3A== ) ;; ADDITIONAL SECTION (11 records) ns-tld1.charlestonroadregistry.com. 172800 IN A 216.239.32.105 ns-tld1.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:32::69 ns-tld3.charlestonroadregistry.com. 172800 IN A 216.239.36.105 ns-tld3.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:36::69 ns-tld5.charlestonroadregistry.com. 172800 IN A 216.239.60.105 ns-tld5.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4805::69 ns-tld2.charlestonroadregistry.com. 172800 IN A 216.239.34.105 ns-tld2.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:34::69 ns-tld4.charlestonroadregistry.com. 172800 IN A 216.239.38.105 ns-tld4.charlestonroadregistry.com. 172800 IN AAAA 2001:4860:4802:38::69 ;; { "EDNS-VERSION": 0 }
	Found child zone dev

dev

	Checking DS between . and dev
	Query to b.root-servers.net for dev/DS
	Received 367 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 367 octets ;; HEADER SECTION ;; id = 52709 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dev. IN DS ;; ANSWER SECTION (2 records) dev. 86400 IN DS ( 60074 8 2 b942e2ce5aebf62fca59d05707e6dbb795211d540d8adba02e9e89e833424785 ) dev. 86400 IN RRSIG ( DS 8 1 86400 20250204050000 20250122040000 26470 . THbUfBeNvjTJoDoWqN9Cj0zPT5U80lMtLS05ngs7bdyNwM/gILrRJq0ifAD9ieVvtNL5ZKiNhPvx n+Dr3RtsAJDiqsQReFnbt+c2tKLiiBgj3TKUIhW32hgOF/YippcLMbfFDQgRH1r2kQWGpCFq+2bL biUPu+G469FzalYVJtgft2vE9Jze3zisX6HO0Zb3D4wq0cibDKQhNM1ZRe/+N6R2bCuE6CQvIVre IMUt1/79XkSgiAI9pEUjldpUlaXs0A2s7ijv+eHxr/99jIEWAZojssAO+lnOS8npXHSInEkC1jcq WtFbSuyqcoLuikrgxXVNVEDlI1SCWXY0poRx3A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for dev in the . zone
	DS=60074/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`dev. 86400 IN RRSIG ( DS 8 1 86400 20250204050000 20250122040000 26470 . THbUfBeNvjTJoDoWqN9Cj0zPT5U80lMtLS05ngs7bdyNwM/gILrRJq0ifAD9ieVvtNL5ZKiNhPvx n+Dr3RtsAJDiqsQReFnbt+c2tKLiiBgj3TKUIhW32hgOF/YippcLMbfFDQgRH1r2kQWGpCFq+2bL biUPu+G469FzalYVJtgft2vE9Jze3zisX6HO0Zb3D4wq0cibDKQhNM1ZRe/+N6R2bCuE6CQvIVre IMUt1/79XkSgiAI9pEUjldpUlaXs0A2s7ijv+eHxr/99jIEWAZojssAO+lnOS8npXHSInEkC1jcq WtFbSuyqcoLuikrgxXVNVEDlI1SCWXY0poRx3A== )`
	RRSIG=26470 and DNSKEY=26470 verifies the DS RRset
	DS=60074/SHA-256 is now in the chain-of-trust
	`dev. 86400 IN DS ( 60074 8 2 b942e2ce5aebf62fca59d05707e6dbb795211d540d8adba02e9e89e833424785 )`
	Query to ns-tld1.charlestonroadregistry.com for dev/DNSKEY
	Received 747 bytes from 216.239.32.105
	;; Response received from [216.239.32.105] 747 octets ;; HEADER SECTION ;; id = 54484 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dev. IN DNSKEY ;; ANSWER SECTION (3 records) dev. 300 IN DNSKEY ( 256 3 8 AwEAAbC0LcMpp2A6LuITRxsV+f97OUJ+xQ1GSiVPwdWQ2iBG+0BssD2gQ8alXBVCfIpUMw2q5q2X q6Vhlqspiq+aZjRbqyo/o4FQq9LqkjVJy6tMuWHYF8BG71h47SK6UnfRtZ/DEO/kWSQBwFx2Dp/l p8zBlHkl+WLMCgIHc6pFfuKV ) ; keytag 20076 dev. 300 IN DNSKEY ( 257 3 8 AwEAAYtM84o4wEWfgE0ywuvg89cB3uHoH705EtMkp4Xp32KSJNVPwQ9YNYc4TXoNd++9maW1QNu6 n7zcpxRRPstCVGqEFsNVeJBurJGytLctzCK1MwiDAgq+t50h0FSpIw8kzroueTNWRKqQRXwp2CUj QMPvw/BWFgCXJVrbiypFXjWrRCKZJC8peLkRDhfEIxUc5iu4ar8eQnEjZeH8uvr2OcUfaz07BT9+ 7DnkAqpsg9ozccR4OQWmqmsd0w1O3Sjc3XkkLlmDMCLszwqkbPinzwSKwsDlk8SPNb79B7lcrTd0 x3ja4hk403dgHpq1LpUOId21TNRHmKxJLZ7lTaIfya8= ) ; keytag 60074 dev. 300 IN RRSIG ( DNSKEY 8 1 300 20250211211858 20250120211858 60074 dev. QtMdQmkpYlB8HmrP0NlNYvDOfvwAQhlaGxUazyhMDqWOXGliCK1GXAyMS8uCqiIEgVEL0j54qsDN yOOzUoe4nx5XPnqevTL8M+cjZM33HbLk2IxycUsDu/TJWv7PIagpQjgeEV4PyV158COUvZrEUl+C 4fqcvethdr9I4aBa1GeNkCggycsoC5qEZfZciS9NuHY+9D9PGFFtx7anVg2O/rQRE941HUp7a9gV ttoUYXvQVfYhBOQeOUI/ETAuUYe019I3q/nLPIrYZrK0HYahL1At9x8rGJdpNcKRZ8pMjuqxsCKi E68W/1oRZAy4LYYsFqxgaM69uQxsnVOjPy5cxw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for dev
	`dev. 300 IN DNSKEY ( 256 3 8 AwEAAbC0LcMpp2A6LuITRxsV+f97OUJ+xQ1GSiVPwdWQ2iBG+0BssD2gQ8alXBVCfIpUMw2q5q2X q6Vhlqspiq+aZjRbqyo/o4FQq9LqkjVJy6tMuWHYF8BG71h47SK6UnfRtZ/DEO/kWSQBwFx2Dp/l p8zBlHkl+WLMCgIHc6pFfuKV ) ; keytag 20076`
	`dev. 300 IN DNSKEY ( 257 3 8 AwEAAYtM84o4wEWfgE0ywuvg89cB3uHoH705EtMkp4Xp32KSJNVPwQ9YNYc4TXoNd++9maW1QNu6 n7zcpxRRPstCVGqEFsNVeJBurJGytLctzCK1MwiDAgq+t50h0FSpIw8kzroueTNWRKqQRXwp2CUj QMPvw/BWFgCXJVrbiypFXjWrRCKZJC8peLkRDhfEIxUc5iu4ar8eQnEjZeH8uvr2OcUfaz07BT9+ 7DnkAqpsg9ozccR4OQWmqmsd0w1O3Sjc3XkkLlmDMCLszwqkbPinzwSKwsDlk8SPNb79B7lcrTd0 x3ja4hk403dgHpq1LpUOId21TNRHmKxJLZ7lTaIfya8= ) ; keytag 60074`
	DNSKEY=60074/SEP is now in the chain-of-trust
	DS=60074/SHA-256 verifies DNSKEY=60074/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`dev. 300 IN RRSIG ( DNSKEY 8 1 300 20250211211858 20250120211858 60074 dev. QtMdQmkpYlB8HmrP0NlNYvDOfvwAQhlaGxUazyhMDqWOXGliCK1GXAyMS8uCqiIEgVEL0j54qsDN yOOzUoe4nx5XPnqevTL8M+cjZM33HbLk2IxycUsDu/TJWv7PIagpQjgeEV4PyV158COUvZrEUl+C 4fqcvethdr9I4aBa1GeNkCggycsoC5qEZfZciS9NuHY+9D9PGFFtx7anVg2O/rQRE941HUp7a9gV ttoUYXvQVfYhBOQeOUI/ETAuUYe019I3q/nLPIrYZrK0HYahL1At9x8rGJdpNcKRZ8pMjuqxsCKi E68W/1oRZAy4LYYsFqxgaM69uQxsnVOjPy5cxw== )`
	RRSIG=60074 and DNSKEY=60074/SEP verifies the DNSKEY RRset
	DNSKEY=20076 is now in the chain-of-trust
	Query to ns-tld2.charlestonroadregistry.com for rfc8901.dev/A
	Received 444 bytes from 216.239.34.105
	;; Response received from [216.239.34.105] 444 octets ;; HEADER SECTION ;; id = 17499 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rfc8901.dev. 10800 IN NS alice.ns.cloudflare.com. rfc8901.dev. 10800 IN NS a.ns.fcelda.cz. rfc8901.dev. 10800 IN NS dns1.p01.nsone.net. rfc8901.dev. 1800 IN DS ( 9951 13 2 d6dfb5af0e79bfbef577a39f9b288bc603d47a955d409303a29736537230e902 ) rfc8901.dev. 1800 IN DS ( 2371 13 2 4fe97fcec4adcedfa17294b98038e040b10f7e206aad1ab01b9421ffed4375d1 ) rfc8901.dev. 1800 IN DS ( 48553 13 2 4c51828faa8e435eb358be7c548fda71e1065069c70ef0dee4ca20ad8f61eee7 ) rfc8901.dev. 1800 IN RRSIG ( DS 8 2 1800 20250211211858 20250120211858 20076 dev. MDyqmrfnVyF0Tzwfoasls31tbiH0++3bTRibROpmuEKFUJCaQwOtqRACUtP4XfiHUI86u/34mRCx 6RyTWhdAxfMxlWggYZzBBeENeP93blLwy9g97JoOYFugxXzDS6cQWQzzirBIDNvwT+9omF0xnRBt d1l6TiQco6Idvy2m2LU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns-tld5.charlestonroadregistry.com for rfc8901.dev/DNSKEY
	Received 444 bytes from 216.239.60.105
	;; Response received from [216.239.60.105] 444 octets ;; HEADER SECTION ;; id = 40558 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) rfc8901.dev. 10800 IN NS a.ns.fcelda.cz. rfc8901.dev. 10800 IN NS dns1.p01.nsone.net. rfc8901.dev. 10800 IN NS alice.ns.cloudflare.com. rfc8901.dev. 1800 IN DS ( 9951 13 2 d6dfb5af0e79bfbef577a39f9b288bc603d47a955d409303a29736537230e902 ) rfc8901.dev. 1800 IN DS ( 48553 13 2 4c51828faa8e435eb358be7c548fda71e1065069c70ef0dee4ca20ad8f61eee7 ) rfc8901.dev. 1800 IN DS ( 2371 13 2 4fe97fcec4adcedfa17294b98038e040b10f7e206aad1ab01b9421ffed4375d1 ) rfc8901.dev. 1800 IN RRSIG ( DS 8 2 1800 20250211211858 20250120211858 20076 dev. MDyqmrfnVyF0Tzwfoasls31tbiH0++3bTRibROpmuEKFUJCaQwOtqRACUtP4XfiHUI86u/34mRCx 6RyTWhdAxfMxlWggYZzBBeENeP93blLwy9g97JoOYFugxXzDS6cQWQzzirBIDNvwT+9omF0xnRBt d1l6TiQco6Idvy2m2LU= ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone rfc8901.dev

rfc8901.dev

	Checking DS between dev and rfc8901.dev
	Query to ns-tld3.charlestonroadregistry.com for rfc8901.dev/DS
	Received 347 bytes from 216.239.36.105
	;; Response received from [216.239.36.105] 347 octets ;; HEADER SECTION ;; id = 34379 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 0, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN DS ;; ANSWER SECTION (4 records) rfc8901.dev. 1800 IN DS ( 2371 13 2 4fe97fcec4adcedfa17294b98038e040b10f7e206aad1ab01b9421ffed4375d1 ) rfc8901.dev. 1800 IN DS ( 48553 13 2 4c51828faa8e435eb358be7c548fda71e1065069c70ef0dee4ca20ad8f61eee7 ) rfc8901.dev. 1800 IN DS ( 9951 13 2 d6dfb5af0e79bfbef577a39f9b288bc603d47a955d409303a29736537230e902 ) rfc8901.dev. 1800 IN RRSIG ( DS 8 2 1800 20250211211858 20250120211858 20076 dev. MDyqmrfnVyF0Tzwfoasls31tbiH0++3bTRibROpmuEKFUJCaQwOtqRACUtP4XfiHUI86u/34mRCx 6RyTWhdAxfMxlWggYZzBBeENeP93blLwy9g97JoOYFugxXzDS6cQWQzzirBIDNvwT+9omF0xnRBt d1l6TiQco6Idvy2m2LU= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DS records for rfc8901.dev in the dev zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	DS=48553/SHA-256 has algorithm ECDSAP256SHA256
	DS=9951/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`rfc8901.dev. 1800 IN RRSIG ( DS 8 2 1800 20250211211858 20250120211858 20076 dev. MDyqmrfnVyF0Tzwfoasls31tbiH0++3bTRibROpmuEKFUJCaQwOtqRACUtP4XfiHUI86u/34mRCx 6RyTWhdAxfMxlWggYZzBBeENeP93blLwy9g97JoOYFugxXzDS6cQWQzzirBIDNvwT+9omF0xnRBt d1l6TiQco6Idvy2m2LU= )`
	RRSIG=20076 and DNSKEY=20076 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	DS=48553/SHA-256 is now in the chain-of-trust
	DS=9951/SHA-256 is now in the chain-of-trust
	`rfc8901.dev. 1800 IN DS ( 2371 13 2 4fe97fcec4adcedfa17294b98038e040b10f7e206aad1ab01b9421ffed4375d1 )`
	`rfc8901.dev. 1800 IN DS ( 48553 13 2 4c51828faa8e435eb358be7c548fda71e1065069c70ef0dee4ca20ad8f61eee7 )`
	`rfc8901.dev. 1800 IN DS ( 9951 13 2 d6dfb5af0e79bfbef577a39f9b288bc603d47a955d409303a29736537230e902 )`
	Query to dns1.p01.nsone.net for rfc8901.dev/DNSKEY
	Received 627 bytes from 198.51.44.1
	;; Response received from [198.51.44.1] 627 octets ;; HEADER SECTION ;; id = 12263 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 7 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN DNSKEY ;; ANSWER SECTION (7 records) rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/ 6UEL8+JBmA== ) ; keytag 48553 rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J 9EeLqyeuBw== ) ; keytag 12196 rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505 rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371 rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 m7RWGXKdF1N9f0Kr3iCqSx6MF0qIIESF97ne+pIVa12FymKXWHnqtL7fr1Bi5hIugrFyRQh2YQ94 pSZWRp+5LQ== ) ; keytag 43808 rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 3HU7Fzh0HptAlbd4DRe8SglLvc83Sz17RV7ZtnOddHP4KQCHS6TtkD8Vevsk81BpIduvjePtmHWe rt5hjcT1yA== ) ; keytag 9951 rfc8901.dev. 1800 IN RRSIG ( DNSKEY 13 2 1800 20250129094223 20250121094223 48553 rfc8901.dev. ql3b+n6rwgMPhikrjpJHfkfLFPHrOmXynfrB+wfUARUcxYgs0e+/LU1VEmaHyxvDAmZMFaB3hWe3 HdrUg/v4Vw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 6 DNSKEY records for rfc8901.dev
	`rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 t+4DPP+MFZ0Cr7gAXiDYv6HTyXzq/O2ESVRLc/ysuh5xBXKIsjsj5baV1HzhBNo2F7mbsevsEo0/ 6UEL8+JBmA== ) ; keytag 48553`
	`rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 3u9onSaqbxIlglXMHjh5Plcah8n2pXj0QuBVY/6YTdC6L/eUEYPDh57nOVJ8dd3fkPMrjt2Oij6J 9EeLqyeuBw== ) ; keytag 12196`
	`rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; keytag 34505`
	`rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; keytag 2371`
	`rfc8901.dev. 1800 IN DNSKEY ( 256 3 13 m7RWGXKdF1N9f0Kr3iCqSx6MF0qIIESF97ne+pIVa12FymKXWHnqtL7fr1Bi5hIugrFyRQh2YQ94 pSZWRp+5LQ== ) ; keytag 43808`
	`rfc8901.dev. 1800 IN DNSKEY ( 257 3 13 3HU7Fzh0HptAlbd4DRe8SglLvc83Sz17RV7ZtnOddHP4KQCHS6TtkD8Vevsk81BpIduvjePtmHWe rt5hjcT1yA== ) ; keytag 9951`
	DNSKEY=48553/SEP is now in the chain-of-trust
	DS=48553/SHA-256 verifies DNSKEY=48553/SEP
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	DNSKEY=9951/SEP is now in the chain-of-trust
	DS=9951/SHA-256 verifies DNSKEY=9951/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rfc8901.dev. 1800 IN RRSIG ( DNSKEY 13 2 1800 20250129094223 20250121094223 48553 rfc8901.dev. ql3b+n6rwgMPhikrjpJHfkfLFPHrOmXynfrB+wfUARUcxYgs0e+/LU1VEmaHyxvDAmZMFaB3hWe3 HdrUg/v4Vw== )`
	RRSIG=48553 and DNSKEY=48553/SEP verifies the DNSKEY RRset
	DNSKEY=12196 is now in the chain-of-trust
	DNSKEY=34505 is now in the chain-of-trust
	DNSKEY=43808 is now in the chain-of-trust
	Query to a.ns.fcelda.cz for rfc8901.dev/A
	Received 163 bytes from 45.76.37.63
	;; Response received from [45.76.37.63] 163 octets ;; HEADER SECTION ;; id = 4826 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 1200 IN A 45.76.37.63 rfc8901.dev. 1200 IN RRSIG ( A 13 2 1200 20250129115008 20250115102008 43808 rfc8901.dev. 3U95PFN6zrnw6Xud2W9I6HaaOarKERXopciwPfN+hdfjlbUccereEZCUx17OglNUe9UAW5Yy2j/R /VjXqw+Rjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a.ns.fcelda.cz is authoritative for rfc8901.dev
	Found RRSIG signed by rfc8901.dev zone
	Query to alice.ns.cloudflare.com for rfc8901.dev/SOA
	Received 210 bytes from 173.245.58.60
	;; Response received from [173.245.58.60] 210 octets ;; HEADER SECTION ;; id = 60161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN SOA ;; ANSWER SECTION (2 records) rfc8901.dev. 1800 IN SOA ( alice.ns.cloudflare.com. dns.cloudflare.com. 2361915821 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) rfc8901.dev. 1800 IN RRSIG ( SOA 13 2 1800 20250123175736 20250121155736 34505 rfc8901.dev. Om0JcsLdUhvJ+opIu1053bSu2TPxE2bmiF/xtnxnQSVbRrISFtEbMf3xdGBpG2m+Zl8Ns/46UyRk YNyg7o3vZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.p01.nsone.net for rfc8901.dev/SOA
	Received 212 bytes from 198.51.44.1
	;; Response received from [198.51.44.1] 212 octets ;; HEADER SECTION ;; id = 24774 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN SOA ;; ANSWER SECTION (2 records) rfc8901.dev. 1800 IN SOA ( dns1.p01.nsone.net. hostmaster.nsone.net. 1654073939 ;serial 1200 ;refresh 1200 ;retry 2678400 ;expire 1200 ;minimum ) rfc8901.dev. 1800 IN RRSIG ( SOA 13 2 1800 20250123165737 20250121165737 12196 rfc8901.dev. slQeKMMjCwY0doseyLiiy3CIfFRS/zRzMiTd1vq5HiIHlCf48SmS6xI5/akdr7dpi9ZDHOcievG7 lT6tuWcNIg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.p01.nsone.net serial (1654073939) differs from alice.ns.cloudflare.com serial (2361915821)
	Query to a.ns.fcelda.cz for rfc8901.dev/A
	Received 163 bytes from 45.76.37.63
	;; Response received from [45.76.37.63] 163 octets ;; HEADER SECTION ;; id = 10151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 1200 IN A 45.76.37.63 rfc8901.dev. 1200 IN RRSIG ( A 13 2 1200 20250129115008 20250115102008 43808 rfc8901.dev. 3U95PFN6zrnw6Xud2W9I6HaaOarKERXopciwPfN+hdfjlbUccereEZCUx17OglNUe9UAW5Yy2j/R /VjXqw+Rjg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rfc8901.dev A RR has value 45.76.37.63
	Found 1 RRSIGs over A RRset
	`rfc8901.dev. 1200 IN RRSIG ( A 13 2 1200 20250129115008 20250115102008 43808 rfc8901.dev. 3U95PFN6zrnw6Xud2W9I6HaaOarKERXopciwPfN+hdfjlbUccereEZCUx17OglNUe9UAW5Yy2j/R /VjXqw+Rjg== )`
	RRSIG=43808 and DNSKEY=43808 verifies the A RRset

rfc8901.dev

	Query to alice.ns.cloudflare.com for rfc8901.dev/A
	Received 163 bytes from 108.162.192.60
	;; Response received from [108.162.192.60] 163 octets ;; HEADER SECTION ;; id = 35960 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 300 IN A 45.76.37.63 rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123175737 20250121155737 34505 rfc8901.dev. jL4elh9N+wkE2M92eHveVPDOQ0r2saUBYwHLPHzQcciCYKD7GzoBKFkVClWNOG9yCRg3pHi0JRU7 0CFeweLFzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	alice.ns.cloudflare.com is authoritative for rfc8901.dev
	Found RRSIG signed by rfc8901.dev zone
	Query to alice.ns.cloudflare.com for rfc8901.dev/A
	Received 163 bytes from 108.162.192.60
	;; Response received from [108.162.192.60] 163 octets ;; HEADER SECTION ;; id = 41719 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 300 IN A 45.76.37.63 rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123175737 20250121155737 34505 rfc8901.dev. /Zp3btCsMJOZvzwio7OZNIcAnOnQ+ReQoYmTqE+5K6xJtVcvFYrl4/g7NAHMZ/N+BfwmW2jKr11U Xu44y6n8Ng== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rfc8901.dev A RR has value 45.76.37.63
	Found 1 RRSIGs over A RRset
	`rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123175737 20250121155737 34505 rfc8901.dev. /Zp3btCsMJOZvzwio7OZNIcAnOnQ+ReQoYmTqE+5K6xJtVcvFYrl4/g7NAHMZ/N+BfwmW2jKr11U Xu44y6n8Ng== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

rfc8901.dev

	Query to dns1.p01.nsone.net for rfc8901.dev/A
	Received 163 bytes from 198.51.44.1
	;; Response received from [198.51.44.1] 163 octets ;; HEADER SECTION ;; id = 30123 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 300 IN A 45.76.37.63 rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123165737 20250121165737 12196 rfc8901.dev. ++DwRUJZsWx4vPIgpTLd2mmBhOPu02qWpgZlnOS9EMAlGdi+hBYqe6oFo7ysRd90u/7EXJxeHYuP l6BjizSA7g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.p01.nsone.net is authoritative for rfc8901.dev
	Found RRSIG signed by rfc8901.dev zone
	Query to dns1.p01.nsone.net for rfc8901.dev/A
	Received 163 bytes from 198.51.44.1
	;; Response received from [198.51.44.1] 163 octets ;; HEADER SECTION ;; id = 28070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rfc8901.dev. IN A ;; ANSWER SECTION (2 records) rfc8901.dev. 300 IN A 45.76.37.63 rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123165737 20250121165737 12196 rfc8901.dev. 5r2XCIDrSe+WrfiwD7uDjEOpRVVlIxDbFxDsYqANPjQJu9wiSBvrlEqPFvdbhXU4njPkmHonEltm AMaejiKOAQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	rfc8901.dev A RR has value 45.76.37.63
	Found 1 RRSIGs over A RRset
	`rfc8901.dev. 300 IN RRSIG ( A 13 2 300 20250123165737 20250121165737 12196 rfc8901.dev. 5r2XCIDrSe+WrfiwD7uDjEOpRVVlIxDbFxDsYqANPjQJu9wiSBvrlEqPFvdbhXU4njPkmHonEltm AMaejiKOAQ== )`
	RRSIG=12196 and DNSKEY=12196 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rfc8901.dev at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: