DNSSEC Analyzer - romirain.fun

Domain Name:

Time: 2023-10-02 21:39:11 UTC, NTP stratum 4

Analyzing DNSSEC problems for romirain.fun

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1141 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1141 octets) ;; HEADER SECTION ;; id = 15728 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to l.root-servers.net for romirain.fun/A
	Received 656 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (656 octets) ;; HEADER SECTION ;; id = 44259 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fun. 172800 IN NS a.nic.fun. fun. 172800 IN NS b.nic.fun. fun. 172800 IN NS e.nic.fun. fun. 172800 IN NS f.nic.fun. fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . sCRaulDLh8vQpXsWv/jtSEw/1/eJCS7IHHPA5QcDwvo6ZdMg9yNKXs/lv5g3DG+EWHMCePC20sgK zOtKKpBVTggrh7uiaccsrYp2oaj7O252Y4p/c9Fq0cBfl2GrEG9QaCY/W3HX4wXn0AAjU6m376m3 Z2TGYM1MBJL/EovTwvNfjhAyADUedzZZR3i3Jl02h0plmOvlW0MGMAxzTkvMBh6PDRQ6x1P84CMQ /SRzFGLqCzYDQ/48c7xK/i11aAIaXcL6hBnRq9A02Xm63wuNqvFIHmf8XLdMCE8c5ckRVWURKLaT YhC2Iw2BB6vr9ZsiikEoVMmLc27cJyniqpDWrw== ) ;; ADDITIONAL SECTION (9 records) a.nic.fun. 172800 IN A 194.169.218.72 a.nic.fun. 172800 IN AAAA 2001:67c:13cc::1:72 b.nic.fun. 172800 IN A 185.24.64.72 b.nic.fun. 172800 IN AAAA 2a04:2b00:13cc::1:72 e.nic.fun. 172800 IN A 212.18.248.72 e.nic.fun. 172800 IN AAAA 2a04:2b00:13ee::72 f.nic.fun. 172800 IN A 212.18.249.72 f.nic.fun. 172800 IN AAAA 2a04:2b00:13ff::72 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to i.root-servers.net for fun/DNSKEY
	Received 650 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (650 octets) ;; HEADER SECTION ;; id = 46199 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fun. 172800 IN NS b.nic.fun. fun. 172800 IN NS e.nic.fun. fun. 172800 IN NS f.nic.fun. fun. 172800 IN NS a.nic.fun. fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . sCRaulDLh8vQpXsWv/jtSEw/1/eJCS7IHHPA5QcDwvo6ZdMg9yNKXs/lv5g3DG+EWHMCePC20sgK zOtKKpBVTggrh7uiaccsrYp2oaj7O252Y4p/c9Fq0cBfl2GrEG9QaCY/W3HX4wXn0AAjU6m376m3 Z2TGYM1MBJL/EovTwvNfjhAyADUedzZZR3i3Jl02h0plmOvlW0MGMAxzTkvMBh6PDRQ6x1P84CMQ /SRzFGLqCzYDQ/48c7xK/i11aAIaXcL6hBnRq9A02Xm63wuNqvFIHmf8XLdMCE8c5ckRVWURKLaT YhC2Iw2BB6vr9ZsiikEoVMmLc27cJyniqpDWrw== ) ;; ADDITIONAL SECTION (9 records) f.nic.fun. 172800 IN A 212.18.249.72 e.nic.fun. 172800 IN A 212.18.248.72 b.nic.fun. 172800 IN A 185.24.64.72 a.nic.fun. 172800 IN A 194.169.218.72 f.nic.fun. 172800 IN AAAA 2a04:2b00:13ff::72 e.nic.fun. 172800 IN AAAA 2a04:2b00:13ee::72 b.nic.fun. 172800 IN AAAA 2a04:2b00:13cc::1:72 a.nic.fun. 172800 IN AAAA 2001:67c:13cc::1:72 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone fun

fun

	Checking DS between . and fun
	Query to b.root-servers.net for fun/DS
	Received 403 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (403 octets) ;; HEADER SECTION ;; id = 12961 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DS ;; ANSWER SECTION (3 records) fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . sCRaulDLh8vQpXsWv/jtSEw/1/eJCS7IHHPA5QcDwvo6ZdMg9yNKXs/lv5g3DG+EWHMCePC20sgK zOtKKpBVTggrh7uiaccsrYp2oaj7O252Y4p/c9Fq0cBfl2GrEG9QaCY/W3HX4wXn0AAjU6m376m3 Z2TGYM1MBJL/EovTwvNfjhAyADUedzZZR3i3Jl02h0plmOvlW0MGMAxzTkvMBh6PDRQ6x1P84CMQ /SRzFGLqCzYDQ/48c7xK/i11aAIaXcL6hBnRq9A02Xm63wuNqvFIHmf8XLdMCE8c5ckRVWURKLaT YhC2Iw2BB6vr9ZsiikEoVMmLc27cJyniqpDWrw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DS records for fun in the . zone
	DS=4594/SHA-1 has algorithm RSASHA256
	DS=4594/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fun. 86400 IN RRSIG ( DS 8 1 86400 20231015200000 20231002190000 46780 . sCRaulDLh8vQpXsWv/jtSEw/1/eJCS7IHHPA5QcDwvo6ZdMg9yNKXs/lv5g3DG+EWHMCePC20sgK zOtKKpBVTggrh7uiaccsrYp2oaj7O252Y4p/c9Fq0cBfl2GrEG9QaCY/W3HX4wXn0AAjU6m376m3 Z2TGYM1MBJL/EovTwvNfjhAyADUedzZZR3i3Jl02h0plmOvlW0MGMAxzTkvMBh6PDRQ6x1P84CMQ /SRzFGLqCzYDQ/48c7xK/i11aAIaXcL6hBnRq9A02Xm63wuNqvFIHmf8XLdMCE8c5ckRVWURKLaT YhC2Iw2BB6vr9ZsiikEoVMmLc27cJyniqpDWrw== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=4594/SHA-1 is now in the chain-of-trust
	`fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c`
	`fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 )`
	Query to e.nic.fun for fun/DNSKEY
	Received 895 bytes from 212.18.248.72
	;; Response received from 212.18.248.72 (895 octets) ;; HEADER SECTION ;; id = 49839 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DNSKEY ;; ANSWER SECTION (4 records) fun. 3600 IN DNSKEY ( 256 3 8 AwEAAZLshz3ec+SmsyOsBjMvot7rPV9i4lKKPakFtKS5y5sUSMoALAMtW8T/8S2Oq2YsnQCQAB5J 1WpXh7pQOo0bjilms7Q0pdsj5Csbr44dQ1fNp+poF4fVZfqIlb2W2FuvLm9YJOdQbg0z3RSRjaRi iafRESemJIm+j7/MXHmW+lyH ) ; Key ID = 21204 fun. 3600 IN DNSKEY ( 256 3 8 AwEAAbbMn70HstRoMqRXe3fKAnT1l3b0AswD3i/6Ylv3lx/A0jubk4bVcOPRTl5NInCLTSg3S3nB rU89dHt3aA+7ylAuPtdbcyAjoFO6Rv6k+Ah1KdHvEXIEI3uTXlHJre4fwp1ztesW0OpV/eSQyMwV LgnJ+Km8xF7jCw+bbFegnirb ) ; Key ID = 28153 fun. 3600 IN DNSKEY ( 257 3 8 AwEAAaOlIqDc/nBEqUdbNB24SLI/6yhBsFgEwb2enIgepQ3h3ddjUkoSCWshaaJgtaoZwE5zQb/W tfyMTtOgjzT/FCywzRwctQ6tsngs2WPTEtbEgiBQyI/NGDk0G8Iv/qukaizL7o+9z9fCnIf94iWO yxK7EsWpW59NGQL4MEcp3o5L4qtdzptBy4vdNUFwmhnbhX+V3ofhlvP0whoUR+M7Z0GdppJTbqzC Uanl7FEYnQ+LcfVkjWWEpHC3pnt6qZ3DYBk3C2vJ8YKrV5vbAUVIM4FdySsGbwvRAwVomY2J3x3z CStZs70ea4UzIVjVb6niIDmBk6uE4EP+h0hf2CuvJfc= ) ; Key ID = 4594 fun. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231019174510 20230919200511 4594 fun. NbFZ8bJpX0Vg92HFbIcqTJrkR/E4lcracvJtuwcZlyAfHgo9bITN55u2V+AQmV30gk9f+kOSnERP YSYm9AYEHJdXqLwlpHca2ORRMuWb3qjqR8dz3zz+vYe/DKZ2EbzvCukiR3hypq/WBYwUUzn0g3/N tHtCfOHX/ITw8Y9r7N8dG0vRkp9PVcSCmN+tjSDUclXUFUFnWWz4l4jD7cnC1VnCf1NusLMCTyT3 Oq2Iq8ghERLcOQP/MV+Y+cAsjd34pK9mOx2QMYXFyMqk2LRVHrkG1BS4CpDXAEuqqmCS3laSWscH AKLuWOLopTSXbfpN1KQebuJU3xuIiqDedb8luQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for fun
	`fun. 3600 IN DNSKEY ( 256 3 8 AwEAAZLshz3ec+SmsyOsBjMvot7rPV9i4lKKPakFtKS5y5sUSMoALAMtW8T/8S2Oq2YsnQCQAB5J 1WpXh7pQOo0bjilms7Q0pdsj5Csbr44dQ1fNp+poF4fVZfqIlb2W2FuvLm9YJOdQbg0z3RSRjaRi iafRESemJIm+j7/MXHmW+lyH ) ; Key ID = 21204`
	`fun. 3600 IN DNSKEY ( 256 3 8 AwEAAbbMn70HstRoMqRXe3fKAnT1l3b0AswD3i/6Ylv3lx/A0jubk4bVcOPRTl5NInCLTSg3S3nB rU89dHt3aA+7ylAuPtdbcyAjoFO6Rv6k+Ah1KdHvEXIEI3uTXlHJre4fwp1ztesW0OpV/eSQyMwV LgnJ+Km8xF7jCw+bbFegnirb ) ; Key ID = 28153`
	`fun. 3600 IN DNSKEY ( 257 3 8 AwEAAaOlIqDc/nBEqUdbNB24SLI/6yhBsFgEwb2enIgepQ3h3ddjUkoSCWshaaJgtaoZwE5zQb/W tfyMTtOgjzT/FCywzRwctQ6tsngs2WPTEtbEgiBQyI/NGDk0G8Iv/qukaizL7o+9z9fCnIf94iWO yxK7EsWpW59NGQL4MEcp3o5L4qtdzptBy4vdNUFwmhnbhX+V3ofhlvP0whoUR+M7Z0GdppJTbqzC Uanl7FEYnQ+LcfVkjWWEpHC3pnt6qZ3DYBk3C2vJ8YKrV5vbAUVIM4FdySsGbwvRAwVomY2J3x3z CStZs70ea4UzIVjVb6niIDmBk6uE4EP+h0hf2CuvJfc= ) ; Key ID = 4594`
	DNSKEY=4594/SEP is now in the chain-of-trust
	DS=4594/SHA-1 verifies DNSKEY=4594/SEP
	DS=4594/SHA-256 verifies DNSKEY=4594/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fun. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231019174510 20230919200511 4594 fun. NbFZ8bJpX0Vg92HFbIcqTJrkR/E4lcracvJtuwcZlyAfHgo9bITN55u2V+AQmV30gk9f+kOSnERP YSYm9AYEHJdXqLwlpHca2ORRMuWb3qjqR8dz3zz+vYe/DKZ2EbzvCukiR3hypq/WBYwUUzn0g3/N tHtCfOHX/ITw8Y9r7N8dG0vRkp9PVcSCmN+tjSDUclXUFUFnWWz4l4jD7cnC1VnCf1NusLMCTyT3 Oq2Iq8ghERLcOQP/MV+Y+cAsjd34pK9mOx2QMYXFyMqk2LRVHrkG1BS4CpDXAEuqqmCS3laSWscH AKLuWOLopTSXbfpN1KQebuJU3xuIiqDedb8luQ== )`
	RRSIG=4594 and DNSKEY=4594/SEP verifies the DNSKEY RRset
	DNSKEY=21204 is now in the chain-of-trust
	DNSKEY=28153 is now in the chain-of-trust
	Query to b.nic.fun for romirain.fun/A
	Received 996 bytes from 185.24.64.72
	;; Response received from 185.24.64.72 (996 octets) ;; HEADER SECTION ;; id = 38875 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NXDOMAIN ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) fun. 3600 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 247880 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) fun. 3600 IN RRSIG ( SOA 8 1 3600 20231101143721 20231002192350 21204 fun. g7zqoTMn9sX8knPm3QfDHXcG3WdiyxeQSP/DbgypYS1vU3fQADgNgHMissG8Q9qMaPH+el12WXeH /ERlGln4mcdq036h2i9/7DUs1fJJ/7EVP4Y0CKGTk7rgcrOY97CkVvTpep6prdvT3tjl2tqwAoKv 4DwVN+LCrooK4PBQHgM= ) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN NSEC3 ( 1 1 0 - ken1k8ntvn45q6j6ue627m40it7a5ur7 NS SOA RRSIG DNSKEY NSEC3PARAM ) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20231023211920 20230923232745 21204 fun. T+EihZm/7daXWotsnPv6IMbLhzfzJinrP567JmmN6FEr4E0Tq6dyo/RpPVdZnpXFx6KR/yN1GS9d gw0gA3kpXW4A0kwKMIMNY8QZ135nImnmHlUPEgWgGNQcbGE5GndMsaJgLgZaK0WapNi7IWc5npHX cps8TBhFTEe1JRvmmh4= ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN NSEC3 ( 1 1 0 - f57hun0bvr49n63340in2prlms8iuf79 NS DS RRSIG ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20231024003247 20230923173117 21204 fun. L06q/ZCNvVtJh97fQZk8rIRoQHWhJ4RIZRB4mbqoU+CwAH6sIzaQnGUu+JK08zsYNbD0GGSTESEN HchpAljx1rseysa0gNWhMQ7bdISe5Zx/edgXCsGrFNOfm7jU8YXb9gXTUZobWhvQhigIcN4t8hSi Uz5icVcCpDu/BVDpgQU= ) 2ocb357dmni8g4ubv2n8dubjls56mjlo.fun. 3600 IN NSEC3 ( 1 1 0 - 2oirhsdombllv9euq5vrjcgtmc8c312t NS DS RRSIG ) 2ocb357dmni8g4ubv2n8dubjls56mjlo.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20231030025601 20230929212150 21204 fun. esGQPvqRWgWcqz47PQoJmrIB9UiF4Lxks560zf1w0yySbPyTKSjfoyTF5+s1I3LHqwcjz6kjbJr3 Ev2A1ZiSvXZ3zogOzki2kHjOhoKMxjktbFrIfKfRJDsRNsY4Fa6MXuP/X6lPplhqBYgyesluCmYO DSHY2hjQzJ4Wwpzyh3U= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Zone fun (185.24.64.72) returns NXDOMAIN for romirain.fun
	NSEC3 validation not implemented yet

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test romirain.fun at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: