DNSSEC Debugger - rings.strn.pl

Domain Name:

Time: 2024-10-30 22:51:46 UTC

Analyzing DNSSEC problems for rings.strn.pl

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from [192.112.36.4] 865 octets ;; HEADER SECTION ;; id = 26099 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241111000000 20241021000000 20326 . alCFgDZS+0l5zcpQ/7R+5OFeCrk9KGkNP2F9ynXIXG6QigPj/9qjm0xxItRJUUim+SrJywAmLKe+ 48oTUeSRyDKVVg3LGDekLKcIVz0EBqTL2y44usDlUlxqx5O0LQVHy4h/hm9+dCXFiSBWoV0LcApl V9OYWhxi+CxmxZU58vK6eVAde8E2JHdeDuy23WF5lxYEg1q7ehEt5EdRvZ7hZzfawEFR3Qv3WMoo tO2eBAAneIe94daJP/i1iwQJ4p+bGVCZ4sJk+Pk9J7lwEQq6GhkdSpLsRxArUhvoVgtnh0LkAV7T sajYk8K2JRt7wHNDbBV6+Vdq2bh7ZPGvLiGkIQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to j.root-servers.net for rings.strn.pl/A
	Received 761 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 761 octets ;; HEADER SECTION ;; id = 42729 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS j-dns.pl. pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . taukk2YOtmoADsDtviZ7LeTEWCv260sNlTzxxsh0iTW3qDuXvLbEW6AjqzA+9wWfUwVssWh6hwK5 Sm3kMUNXqXRUEtNGlPbqURPEqNuLfivlFUuhXFcr345sGc4qMyXOvv7QwRhimUAfCVQA44pcMelV Nnan11+b6ibkW+zH/2K6bvOTwJ5wa1Koh2/llFQq93h8tlpRJ9xl+sLk6mGmOVgHkrNL7JX7eKH1 +dpfqo7WNLSIrzFdjBmY2zKCT1zr/GN/3iPgdXjye0sSdUM/RfRoyM11vUGEhOkKJzzdWNZE0Bqh mxec1EctbYz9+2r6hNqbguONzuu9HWEiKyOnEQ== ) ;; ADDITIONAL SECTION (13 records) a-dns.pl. 172800 IN A 192.102.225.53 b-dns.pl. 172800 IN A 192.195.72.53 d-dns.pl. 172800 IN A 185.159.197.48 f-dns.pl. 172800 IN A 194.0.25.29 h-dns.pl. 172800 IN A 185.159.198.48 j-dns.pl. 172800 IN A 204.61.217.4 a-dns.pl. 172800 IN AAAA 2001:7f9::53 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 d-dns.pl. 172800 IN AAAA 2620:10a:80aa::48 f-dns.pl. 172800 IN AAAA 2001:678:20::29 h-dns.pl. 172800 IN AAAA 2620:10a:80ab::48 j-dns.pl. 172800 IN AAAA 2001:500:14:7004:ad::1 ;; { "EDNS-VERSION": 0 }
	Query to i.root-servers.net for pl/DNSKEY
	Received 750 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 750 octets ;; HEADER SECTION ;; id = 25418 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) pl. 172800 IN NS d-dns.pl. pl. 172800 IN NS b-dns.pl. pl. 172800 IN NS h-dns.pl. pl. 172800 IN NS j-dns.pl. pl. 172800 IN NS a-dns.pl. pl. 172800 IN NS f-dns.pl. pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . taukk2YOtmoADsDtviZ7LeTEWCv260sNlTzxxsh0iTW3qDuXvLbEW6AjqzA+9wWfUwVssWh6hwK5 Sm3kMUNXqXRUEtNGlPbqURPEqNuLfivlFUuhXFcr345sGc4qMyXOvv7QwRhimUAfCVQA44pcMelV Nnan11+b6ibkW+zH/2K6bvOTwJ5wa1Koh2/llFQq93h8tlpRJ9xl+sLk6mGmOVgHkrNL7JX7eKH1 +dpfqo7WNLSIrzFdjBmY2zKCT1zr/GN/3iPgdXjye0sSdUM/RfRoyM11vUGEhOkKJzzdWNZE0Bqh mxec1EctbYz9+2r6hNqbguONzuu9HWEiKyOnEQ== ) ;; ADDITIONAL SECTION (13 records) j-dns.pl. 172800 IN A 204.61.217.4 h-dns.pl. 172800 IN A 185.159.198.48 f-dns.pl. 172800 IN A 194.0.25.29 d-dns.pl. 172800 IN A 185.159.197.48 b-dns.pl. 172800 IN A 192.195.72.53 a-dns.pl. 172800 IN A 192.102.225.53 j-dns.pl. 172800 IN AAAA 2001:500:14:7004:ad::1 h-dns.pl. 172800 IN AAAA 2620:10a:80ab::48 f-dns.pl. 172800 IN AAAA 2001:678:20::29 d-dns.pl. 172800 IN AAAA 2620:10a:80aa::48 b-dns.pl. 172800 IN AAAA 2001:7f9:c::53 a-dns.pl. 172800 IN AAAA 2001:7f9::53 ;; { "EDNS-VERSION": 0 }
	Found child zone pl

	Checking DS between . and pl
	Query to i.root-servers.net for pl/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 366 octets ;; HEADER SECTION ;; id = 65437 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DS ;; ANSWER SECTION (2 records) pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f ) pl. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . taukk2YOtmoADsDtviZ7LeTEWCv260sNlTzxxsh0iTW3qDuXvLbEW6AjqzA+9wWfUwVssWh6hwK5 Sm3kMUNXqXRUEtNGlPbqURPEqNuLfivlFUuhXFcr345sGc4qMyXOvv7QwRhimUAfCVQA44pcMelV Nnan11+b6ibkW+zH/2K6bvOTwJ5wa1Koh2/llFQq93h8tlpRJ9xl+sLk6mGmOVgHkrNL7JX7eKH1 +dpfqo7WNLSIrzFdjBmY2zKCT1zr/GN/3iPgdXjye0sSdUM/RfRoyM11vUGEhOkKJzzdWNZE0Bqh mxec1EctbYz9+2r6hNqbguONzuu9HWEiKyOnEQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for pl in the . zone
	DS=48559/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`pl. 86400 IN RRSIG ( DS 8 1 86400 20241112200000 20241030190000 61050 . taukk2YOtmoADsDtviZ7LeTEWCv260sNlTzxxsh0iTW3qDuXvLbEW6AjqzA+9wWfUwVssWh6hwK5 Sm3kMUNXqXRUEtNGlPbqURPEqNuLfivlFUuhXFcr345sGc4qMyXOvv7QwRhimUAfCVQA44pcMelV Nnan11+b6ibkW+zH/2K6bvOTwJ5wa1Koh2/llFQq93h8tlpRJ9xl+sLk6mGmOVgHkrNL7JX7eKH1 +dpfqo7WNLSIrzFdjBmY2zKCT1zr/GN/3iPgdXjye0sSdUM/RfRoyM11vUGEhOkKJzzdWNZE0Bqh mxec1EctbYz9+2r6hNqbguONzuu9HWEiKyOnEQ== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=48559/SHA-256 is now in the chain-of-trust
	`pl. 86400 IN DS ( 48559 8 2 6c7d94c6f25556eeb180ef5e3e9237f2247597f28dca8d7fa63b3a1a45b79a4f )`
	Query to f-dns.pl for pl/DNSKEY
	Received 1385 bytes from 194.0.25.29
	;; Response received from [194.0.25.29] 1385 octets ;; HEADER SECTION ;; id = 7681 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; pl. IN DNSKEY ;; ANSWER SECTION (3 records) pl. 86400 IN DNSKEY ( 256 3 8 AwEAAdKUVz9ZTrh7H4r2bRvurvKH0j/m7eIQpTYsfeedADxwICgHl62Pi1tsrPcWohQKMKlDiWPR Cj6LzrA2goxPe2cIqKONa2yOqCEpIBSKC0Ks9MJfGPX2M3q4rB3tno/wf/mwag7CDwX+t4cFGa4H YDuNuWdjbrkp4A8rbvc18WefGmP5X6Lf6fRT9MQ5nbFPj6AEmWnjGm9XuFWDnjeBhGRSKIqoUYy5 X77l2pg1Y3gNZ2Z2vyAKw4e2VXeiOkULtb22tVd4c6323Sh2Nd9p5OpFG3LdvnXFGAHu01zg/LIO ZBf3T0m/XdRHww+RvTyTo+Lzf18Ivks+CPOcOvsnPBM= ) ; Key ID = 36729 pl. 86400 IN DNSKEY ( 257 3 8 AwEAAd85/h24DHNy+oC5gZVLEZfG4AQaegUN8zwsVBFhe7rLGBhC/MaCax8ToGrU57vZqcva0VCV eF7TRP5+V2EZ3v67350fJxGxJXjrN9qXx7UF8VPDlcXIDg6RNmHJ2dbVNF8EzQMEg9fYU0NFmHpy y9FAxENw2I21FVbx6FGvCarXGSUqAsCw3gPkGJEZbIIyVxvNiMK4NYpvlQOoY08zoywTFS4/HscL DmUWWDh4iFP++o/vuTV94IxG2YNOPo1ja+GpcHulANsV5gH+uUDR/9Q+BuqD4Dp7Mn8Q53x7PAxm iFIW/ImFphyLw4XGQ5j8cDT+/3mPblJRgcKNind3bcuNT8VXGevV/wsjdwlZ0/sKMQdPZ6zWKccS Vd0qWRODafMY8AHAMT4PJNDMRUkJxDsayCEwvMIHUKk6ZufYQ+n58k1nFmRL1k1fW/TdznBatCU4 NgSZy6BpVhGUk9VDP8mnrdaLQ6GYGMk8fuQ3KR3eLMXhzauUmToF2PXd5Qw7j5sICokv75kAvF/S hGX+rXvB4g2oVs6qwkRXDJ2U3Wj58Sw0l86A9T90VZy/sGSJvtgMHxlEd0ULWWY0BVTgLT0IHTGG eIXbn/pdWTvXVUaHr5reCXa2wPpv6MoBUPfQJ2eszMDSebM5PEU+JNCm2wy7Cw+iZLZBBogZsoHG rZ8d ) ; Key ID = 48559 pl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241126120000 20241027120000 48559 pl. GJYL7OJ18/9uJ2yTeBNwbza+aXkqtWLMDPJH/oijwuMDIDE633dgRdtk2JMSOi6GhSRyz0pkGeYZ 54cGnwcIl1Gub6RP09EYr41OVtqR7oB01leLCFdPjpuSIGOxgXxgf1xpObwXEVQRLS51nlqq/1t0 IeebIgsbetZyoKoIPpCNoWqIT09/r5EJ0q6+ISKbnfh0KMT5+TSVLm/do5kxHTYC61EJuO0Ats1o EMCaxdmTxKXXIXe7LJnUHHjskObgmx+YdvSwYAV8f68VpgNiMwrxZik/kg+FDtz7RipHFKeQ4F/V bvlPWkfCqxgs+gS/C+Fsoo3McLvmOx4BmjZXA5+enwICA0LOtr8r+TT1yuAK0Q5wAj/Ejd0QI6a9 gXvHJ6iTmGaEWhmiW6syhfSvwXVbILInTTkMnR4XxDRWYvymUCVq9dTsYPIjpsnDiOUlHfFMHqkS iptXdJ/x66KHCylVulUwlUrF/BOHqZOe4IB1FvltREq6W3QLSRvFUsfqV7rO9m5jiXv2k2fzFo59 vAS/9VYfdh8nm9V57YeqKnHAi8+uX8drKi0oTUxKqzEhDyfxBSib1kcKHj6fjJHdh8NLHBiZKdXs V3Kudxnp1kiqkS2fR6wxlOqsnpbkFVCb6Kc5rfH4626B9OHFsqE5PNxnj1vRd6iWLdSi6PUqZ08= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for pl
	`pl. 86400 IN DNSKEY ( 256 3 8 AwEAAdKUVz9ZTrh7H4r2bRvurvKH0j/m7eIQpTYsfeedADxwICgHl62Pi1tsrPcWohQKMKlDiWPR Cj6LzrA2goxPe2cIqKONa2yOqCEpIBSKC0Ks9MJfGPX2M3q4rB3tno/wf/mwag7CDwX+t4cFGa4H YDuNuWdjbrkp4A8rbvc18WefGmP5X6Lf6fRT9MQ5nbFPj6AEmWnjGm9XuFWDnjeBhGRSKIqoUYy5 X77l2pg1Y3gNZ2Z2vyAKw4e2VXeiOkULtb22tVd4c6323Sh2Nd9p5OpFG3LdvnXFGAHu01zg/LIO ZBf3T0m/XdRHww+RvTyTo+Lzf18Ivks+CPOcOvsnPBM= ) ; Key ID = 36729`
	pl. 86400 IN DNSKEY ( 257 3 8 AwEAAd85/h24DHNy+oC5gZVLEZfG4AQaegUN8zwsVBFhe7rLGBhC/MaCax8ToGrU57vZqcva0VCV eF7TRP5+V2EZ3v67350fJxGxJXjrN9qXx7UF8VPDlcXIDg6RNmHJ2dbVNF8EzQMEg9fYU0NFmHpy y9FAxENw2I21FVbx6FGvCarXGSUqAsCw3gPkGJEZbIIyVxvNiMK4NYpvlQOoY08zoywTFS4/HscL DmUWWDh4iFP++o/vuTV94IxG2YNOPo1ja+GpcHulANsV5gH+uUDR/9Q+BuqD4Dp7Mn8Q53x7PAxm iFIW/ImFphyLw4XGQ5j8cDT+/3mPblJRgcKNind3bcuNT8VXGevV/wsjdwlZ0/sKMQdPZ6zWKccS Vd0qWRODafMY8AHAMT4PJNDMRUkJxDsayCEwvMIHUKk6ZufYQ+n58k1nFmRL1k1fW/TdznBatCU4 NgSZy6BpVhGUk9VDP8mnrdaLQ6GYGMk8fuQ3KR3eLMXhzauUmToF2PXd5Qw7j5sICokv75kAvF/S hGX+rXvB4g2oVs6qwkRXDJ2U3Wj58Sw0l86A9T90VZy/sGSJvtgMHxlEd0ULWWY0BVTgLT0IHTGG eIXbn/pdWTvXVUaHr5reCXa2wPpv6MoBUPfQJ2eszMDSebM5PEU+JNCm2wy7Cw+iZLZBBogZsoHG rZ8d ) ; Key ID = 48559
	DNSKEY=48559/SEP is now in the chain-of-trust
	DS=48559/SHA-256 verifies DNSKEY=48559/SEP
	Found 1 RRSIGs over DNSKEY RRset
	pl. 86400 IN RRSIG ( DNSKEY 8 1 86400 20241126120000 20241027120000 48559 pl. GJYL7OJ18/9uJ2yTeBNwbza+aXkqtWLMDPJH/oijwuMDIDE633dgRdtk2JMSOi6GhSRyz0pkGeYZ 54cGnwcIl1Gub6RP09EYr41OVtqR7oB01leLCFdPjpuSIGOxgXxgf1xpObwXEVQRLS51nlqq/1t0 IeebIgsbetZyoKoIPpCNoWqIT09/r5EJ0q6+ISKbnfh0KMT5+TSVLm/do5kxHTYC61EJuO0Ats1o EMCaxdmTxKXXIXe7LJnUHHjskObgmx+YdvSwYAV8f68VpgNiMwrxZik/kg+FDtz7RipHFKeQ4F/V bvlPWkfCqxgs+gS/C+Fsoo3McLvmOx4BmjZXA5+enwICA0LOtr8r+TT1yuAK0Q5wAj/Ejd0QI6a9 gXvHJ6iTmGaEWhmiW6syhfSvwXVbILInTTkMnR4XxDRWYvymUCVq9dTsYPIjpsnDiOUlHfFMHqkS iptXdJ/x66KHCylVulUwlUrF/BOHqZOe4IB1FvltREq6W3QLSRvFUsfqV7rO9m5jiXv2k2fzFo59 vAS/9VYfdh8nm9V57YeqKnHAi8+uX8drKi0oTUxKqzEhDyfxBSib1kcKHj6fjJHdh8NLHBiZKdXs V3Kudxnp1kiqkS2fR6wxlOqsnpbkFVCb6Kc5rfH4626B9OHFsqE5PNxnj1vRd6iWLdSi6PUqZ08= )
	RRSIG=48559 and DNSKEY=48559/SEP verifies the DNSKEY RRset
	DNSKEY=36729 is now in the chain-of-trust
	Query to f-dns.pl for rings.strn.pl/A
	Received 844 bytes from 194.0.25.29
	;; Response received from [194.0.25.29] 844 octets ;; HEADER SECTION ;; id = 36478 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) strn.pl. 86400 IN NS coco.bunny.net. strn.pl. 86400 IN NS kiki.bunny.net. nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 nmej9spm3kggmh7huksk4descpvvfsha NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. mv5YDfW8knpi7aRCuiN2aZeMeHNCGcRfhPJKPUXUmBA+GA/wIiuXdjguip7JUMHIqVNc5MvxhBbs LiaTMFhgYOW+CvgR4Mq8v7aho+duw3ctYJZlQw8noWTWzUqB+U7XTRo4shF603m95ng8Q4xpAqLk 5L0a6cVqVrCURYPoyroVbx3W8x9c92Rq4pn6Ssi7EwRV9BRdcfzzCRCxQWkMbA3uia/KiOc4T3wk 9kznSDjK1UhUn39bvRJnQ417C2kH2p+MlcEQWxUEHGilzEPoyP+XiPm1hOfimX7nfcY9xbQ9gmx5 2wardbUBrCAhxco/L4PKKZPDBI6/JAOZJb04Rg== ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 gi66edrstisjksmulqu3uugk3livcrli NS DS RRSIG ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. pOrindVPqEGLQ4Wbg21S570a5IASRyHFCM80Vjkk5FXcMqAfosX5OmOF17KkoQrxB7IF6IT24j2v OuGv2t+ZuOZj9djvhk+0kokmeryB7FC6UGhDUr770M/OMn3ktbgQRtk5/S9F8mdN/jrAAF9tEsae l0AOXFQO+pBQUpEo3wdvi5yyZ/V2FIOe64UMsx3ilzBT+3zxkZsRZ5tyUJxaQ/jMjf/NE24/J9MQ fphRjrLoviig5LpWjqtjP9UkvLNDw9mBJltR4CIr8DYXBYoWcVeym+yHlGuvddosZo2KIYsW/vOC 5A+Vwzf91uY04JA8DcUKdl24uTRjb4rkIncmlg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to f-dns.pl for strn.pl/DNSKEY
	Received 838 bytes from 194.0.25.29
	;; Response received from [194.0.25.29] 838 octets ;; HEADER SECTION ;; id = 32260 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) strn.pl. 86400 IN NS coco.bunny.net. strn.pl. 86400 IN NS kiki.bunny.net. nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 nmej9spm3kggmh7huksk4descpvvfsha NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. mv5YDfW8knpi7aRCuiN2aZeMeHNCGcRfhPJKPUXUmBA+GA/wIiuXdjguip7JUMHIqVNc5MvxhBbs LiaTMFhgYOW+CvgR4Mq8v7aho+duw3ctYJZlQw8noWTWzUqB+U7XTRo4shF603m95ng8Q4xpAqLk 5L0a6cVqVrCURYPoyroVbx3W8x9c92Rq4pn6Ssi7EwRV9BRdcfzzCRCxQWkMbA3uia/KiOc4T3wk 9kznSDjK1UhUn39bvRJnQ417C2kH2p+MlcEQWxUEHGilzEPoyP+XiPm1hOfimX7nfcY9xbQ9gmx5 2wardbUBrCAhxco/L4PKKZPDBI6/JAOZJb04Rg== ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 gi66edrstisjksmulqu3uugk3livcrli NS DS RRSIG ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. pOrindVPqEGLQ4Wbg21S570a5IASRyHFCM80Vjkk5FXcMqAfosX5OmOF17KkoQrxB7IF6IT24j2v OuGv2t+ZuOZj9djvhk+0kokmeryB7FC6UGhDUr770M/OMn3ktbgQRtk5/S9F8mdN/jrAAF9tEsae l0AOXFQO+pBQUpEo3wdvi5yyZ/V2FIOe64UMsx3ilzBT+3zxkZsRZ5tyUJxaQ/jMjf/NE24/J9MQ fphRjrLoviig5LpWjqtjP9UkvLNDw9mBJltR4CIr8DYXBYoWcVeym+yHlGuvddosZo2KIYsW/vOC 5A+Vwzf91uY04JA8DcUKdl24uTRjb4rkIncmlg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone strn.pl

strn.pl

	Checking DS between pl and strn.pl
	Query to f-dns.pl for strn.pl/DS
	Received 1138 bytes from 194.0.25.29
	;; Response received from [194.0.25.29] 1138 octets ;; HEADER SECTION ;; id = 33506 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1400, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) pl. 3600 IN SOA ( a-dns.pl. dnsmaster.nask.pl. 1730273638 ;serial 900 ;refresh 300 ;retry 2592000 ;expire 3600 ;minimum ) pl. 3600 IN RRSIG ( SOA 8 1 86400 20241129225004 20241030215004 36729 pl. kzidmpl8EKXUgelVenkhcWXdzIjH9p6t7DrTucHR61pYi/3WSEsOENAMkAbaXaG73AhKrx2xy7Bl FCPNdidLNO42NRXqVqhVQyRjJdStSdDai0rFfBgUM37tVyKuov9A+oru36VBLfkGO+xUh7/9M90L V5jlMr+DE741XlGUrk5GXK81sKK0Uy9++bR/9/UpsdOmSE8KgLmmjW7k6pDnLwJ6xMke738qIsqk O4F3IpOPtalxs8NNvXk5KaHZLG24/qcY2MbZb4kxn1VRn5MyxTN6lKni7s/Mxr/TEuRp02S+aqJc SRvneLE0jH3e0aUm02zKyV/TBojTNCnvo9ReAw== ) nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 nmej9spm3kggmh7huksk4descpvvfsha NS SOA TXT RRSIG DNSKEY NSEC3PARAM ) nmee89mg1lscfgqt6tcd91sl39nqk72r.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. mv5YDfW8knpi7aRCuiN2aZeMeHNCGcRfhPJKPUXUmBA+GA/wIiuXdjguip7JUMHIqVNc5MvxhBbs LiaTMFhgYOW+CvgR4Mq8v7aho+duw3ctYJZlQw8noWTWzUqB+U7XTRo4shF603m95ng8Q4xpAqLk 5L0a6cVqVrCURYPoyroVbx3W8x9c92Rq4pn6Ssi7EwRV9BRdcfzzCRCxQWkMbA3uia/KiOc4T3wk 9kznSDjK1UhUn39bvRJnQ417C2kH2p+MlcEQWxUEHGilzEPoyP+XiPm1hOfimX7nfcY9xbQ9gmx5 2wardbUBrCAhxco/L4PKKZPDBI6/JAOZJb04Rg== ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN NSEC3 ( 1 1 12 d3c60edcf166a271 gi66edrstisjksmulqu3uugk3livcrli NS DS RRSIG ) gi65hkrm6b3da6aj85on9d8pqk8miqmn.pl. 3600 IN RRSIG ( NSEC3 8 2 3600 20241126120000 20241027120000 36729 pl. pOrindVPqEGLQ4Wbg21S570a5IASRyHFCM80Vjkk5FXcMqAfosX5OmOF17KkoQrxB7IF6IT24j2v OuGv2t+ZuOZj9djvhk+0kokmeryB7FC6UGhDUr770M/OMn3ktbgQRtk5/S9F8mdN/jrAAF9tEsae l0AOXFQO+pBQUpEo3wdvi5yyZ/V2FIOe64UMsx3ilzBT+3zxkZsRZ5tyUJxaQ/jMjf/NE24/J9MQ fphRjrLoviig5LpWjqtjP9UkvLNDw9mBJltR4CIr8DYXBYoWcVeym+yHlGuvddosZo2KIYsW/vOC 5A+Vwzf91uY04JA8DcUKdl24uTRjb4rkIncmlg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for strn.pl in the pl zone
	Query to kiki.bunny.net for strn.pl/DNSKEY
	Received 106 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 106 octets ;; HEADER SECTION ;; id = 30748 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to coco.bunny.net for rings.strn.pl/A
	Received 112 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 112 octets ;; HEADER SECTION ;; id = 63982 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	coco.bunny.net is authoritative for rings.strn.pl
	Query to coco.bunny.net for rings.strn.pl/DNSKEY
	Received 112 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 112 octets ;; HEADER SECTION ;; id = 55625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone rings.strn.pl
	Attempting to learn nameservers for rings.strn.pl
	Query to coco.bunny.net for rings.strn.pl/NS
	Received 112 bytes from 109.104.147.1
	;; Response received from [109.104.147.1] 112 octets ;; HEADER SECTION ;; id = 30125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN NS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found rings.strn.pl nameservers:

rings.strn.pl

	Checking DS between strn.pl and rings.strn.pl
	Query to kiki.bunny.net for rings.strn.pl/DS
	Received 112 bytes from 91.200.176.1
	;; Response received from [91.200.176.1] 112 octets ;; HEADER SECTION ;; id = 49944 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "0000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; rings.strn.pl. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) rings.strn.pl. 900 IN SOA ( kiki.bunny.net. hostmaster.bunny.net. 2020458538 ;serial 7200 ;refresh 900 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for rings.strn.pl in the strn.pl zone
	No DNSKEY records found
	No known nameservers for rings.strn.pl

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rings.strn.pl at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: