DNSSEC Analyzer - romirain.fun

Domain Name:

Time: 2023-06-08 15:31:23 UTC, NTP stratum 4

Analyzing DNSSEC problems for romirain.fun

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 864 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (864 octets) ;; HEADER SECTION ;; id = 63541 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to a.root-servers.net for romirain.fun/A
	Received 656 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (656 octets) ;; HEADER SECTION ;; id = 8925 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fun. 172800 IN NS f.nic.fun. fun. 172800 IN NS b.nic.fun. fun. 172800 IN NS a.nic.fun. fun. 172800 IN NS e.nic.fun. fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . HGQ/t+PzbpbPtbPi9hp0jDkA4mhpUpqNaPRmmYTDd0l7Ak1MsobaaMBS0sg/e8u1XdNBPbSpnB7O 6ZTWRu6Zh+vgga0o5JAU68yNlLq2hq5BTLb6+zi5mVUwTX8LyOBbsNWcMs96cdZYmHaytYwjOYWs fIUOw3vyPQbKyUBHkcsuX6RrtlYc3vzcfQ6nqZXSqxCsCWfaK7CFnqwJ70srUWREqvdlGTDSJFE3 USj6QhrS0AOy6L38Nq4KSqoTY7TDcdfoVZl2i7totHzg8MQV9e3eON+VZlk8QwOHY3OhyrMJXY4x URrBbj13a61dBUYuvlhVBu5f1jAohuFGsIL8iQ== ) ;; ADDITIONAL SECTION (9 records) f.nic.fun. 172800 IN A 212.18.249.72 f.nic.fun. 172800 IN AAAA 2a04:2b00:13ff::72 b.nic.fun. 172800 IN A 185.24.64.72 b.nic.fun. 172800 IN AAAA 2a04:2b00:13cc::1:72 a.nic.fun. 172800 IN A 194.169.218.72 a.nic.fun. 172800 IN AAAA 2001:67c:13cc::1:72 e.nic.fun. 172800 IN A 212.18.248.72 e.nic.fun. 172800 IN AAAA 2a04:2b00:13ee::72 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for fun/DNSKEY
	Received 650 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (650 octets) ;; HEADER SECTION ;; id = 54598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) fun. 172800 IN NS f.nic.fun. fun. 172800 IN NS e.nic.fun. fun. 172800 IN NS a.nic.fun. fun. 172800 IN NS b.nic.fun. fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . HGQ/t+PzbpbPtbPi9hp0jDkA4mhpUpqNaPRmmYTDd0l7Ak1MsobaaMBS0sg/e8u1XdNBPbSpnB7O 6ZTWRu6Zh+vgga0o5JAU68yNlLq2hq5BTLb6+zi5mVUwTX8LyOBbsNWcMs96cdZYmHaytYwjOYWs fIUOw3vyPQbKyUBHkcsuX6RrtlYc3vzcfQ6nqZXSqxCsCWfaK7CFnqwJ70srUWREqvdlGTDSJFE3 USj6QhrS0AOy6L38Nq4KSqoTY7TDcdfoVZl2i7totHzg8MQV9e3eON+VZlk8QwOHY3OhyrMJXY4x URrBbj13a61dBUYuvlhVBu5f1jAohuFGsIL8iQ== ) ;; ADDITIONAL SECTION (9 records) f.nic.fun. 172800 IN A 212.18.249.72 e.nic.fun. 172800 IN A 212.18.248.72 b.nic.fun. 172800 IN A 185.24.64.72 a.nic.fun. 172800 IN A 194.169.218.72 f.nic.fun. 172800 IN AAAA 2a04:2b00:13ff::72 e.nic.fun. 172800 IN AAAA 2a04:2b00:13ee::72 b.nic.fun. 172800 IN AAAA 2a04:2b00:13cc::1:72 a.nic.fun. 172800 IN AAAA 2001:67c:13cc::1:72 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone fun

fun

	Checking DS between . and fun
	Query to j.root-servers.net for fun/DS
	Received 403 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (403 octets) ;; HEADER SECTION ;; id = 54731 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DS ;; ANSWER SECTION (3 records) fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 ) fun. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . HGQ/t+PzbpbPtbPi9hp0jDkA4mhpUpqNaPRmmYTDd0l7Ak1MsobaaMBS0sg/e8u1XdNBPbSpnB7O 6ZTWRu6Zh+vgga0o5JAU68yNlLq2hq5BTLb6+zi5mVUwTX8LyOBbsNWcMs96cdZYmHaytYwjOYWs fIUOw3vyPQbKyUBHkcsuX6RrtlYc3vzcfQ6nqZXSqxCsCWfaK7CFnqwJ70srUWREqvdlGTDSJFE3 USj6QhrS0AOy6L38Nq4KSqoTY7TDcdfoVZl2i7totHzg8MQV9e3eON+VZlk8QwOHY3OhyrMJXY4x URrBbj13a61dBUYuvlhVBu5f1jAohuFGsIL8iQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for fun in the . zone
	DS=4594/SHA-1 has algorithm RSASHA256
	DS=4594/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`fun. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . HGQ/t+PzbpbPtbPi9hp0jDkA4mhpUpqNaPRmmYTDd0l7Ak1MsobaaMBS0sg/e8u1XdNBPbSpnB7O 6ZTWRu6Zh+vgga0o5JAU68yNlLq2hq5BTLb6+zi5mVUwTX8LyOBbsNWcMs96cdZYmHaytYwjOYWs fIUOw3vyPQbKyUBHkcsuX6RrtlYc3vzcfQ6nqZXSqxCsCWfaK7CFnqwJ70srUWREqvdlGTDSJFE3 USj6QhrS0AOy6L38Nq4KSqoTY7TDcdfoVZl2i7totHzg8MQV9e3eON+VZlk8QwOHY3OhyrMJXY4x URrBbj13a61dBUYuvlhVBu5f1jAohuFGsIL8iQ== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=4594/SHA-1 is now in the chain-of-trust
	`fun. 86400 IN DS 4594 8 1 e256d68d24212dd3355f3ae897504e47f847579c`
	`fun. 86400 IN DS ( 4594 8 2 58d070a391a5808da071de7234c293b2a4a32006f1ff152ccac45e2ee66c3891 )`
	Query to f.nic.fun for fun/DNSKEY
	Received 895 bytes from 212.18.249.72
	;; Response received from 212.18.249.72 (895 octets) ;; HEADER SECTION ;; id = 28520 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; fun. IN DNSKEY ;; ANSWER SECTION (4 records) fun. 3600 IN DNSKEY ( 256 3 8 AwEAAaXI5IDhw+73lRWip9AueMd4++/c4PZF4J9KHUenxY2gSKLctUxhuHQvEwHhASJZnIFroFlT f4d0L4hzdRzK9kfwDh+ioEqIqabVnm8IkWG4UHo2fFDSDdl8PYipK5xQoZrItks3vf3Yn23fQsvR t8Q8pUhVtWdBwQ9x+AkQNIix ) ; Key ID = 49539 fun. 3600 IN DNSKEY ( 257 3 8 AwEAAaOlIqDc/nBEqUdbNB24SLI/6yhBsFgEwb2enIgepQ3h3ddjUkoSCWshaaJgtaoZwE5zQb/W tfyMTtOgjzT/FCywzRwctQ6tsngs2WPTEtbEgiBQyI/NGDk0G8Iv/qukaizL7o+9z9fCnIf94iWO yxK7EsWpW59NGQL4MEcp3o5L4qtdzptBy4vdNUFwmhnbhX+V3ofhlvP0whoUR+M7Z0GdppJTbqzC Uanl7FEYnQ+LcfVkjWWEpHC3pnt6qZ3DYBk3C2vJ8YKrV5vbAUVIM4FdySsGbwvRAwVomY2J3x3z CStZs70ea4UzIVjVb6niIDmBk6uE4EP+h0hf2CuvJfc= ) ; Key ID = 4594 fun. 3600 IN DNSKEY ( 256 3 8 AwEAAcgClnE379tx8rxVNO6u96B4FgthOtdU/+RVEP2XPy23/Dld+oPgDMSyDQy3FP4aCW+aUPB6 xeZhy6z/LsOzA3jsj+l51mxJGyyINTs7h8AtrDISp4eo4LGnW3tOTJPhrHVWtlvgY4trFcPfFdj7 1S5Nm9o6+nV0F8U97KlEwxiT ) ; Key ID = 44134 fun. 3600 IN RRSIG ( DNSKEY 8 1 3600 20230707122723 20230607104421 4594 fun. ICUBQxe49PhwMojqaWEklPh63a5EokitCYD4r0TbKiPtPaY4ykNnT0K+5MI6E1Msy1UyZKwupTle Mw0qqiRsRV2zx5Q7yZp0DXvAfkM89SOoQRDn17hbF9ZKb4VEgi+ABDEK7kgSc2Yp1bk/Pn5l0Hg+ t1Y4sovUzIY/lknC/7ZE0So9U886maXReEYV4M2jNfpAiDk0Jj/oD6wSB/w1r/fIZaRhUdN6qcLD 5sULT7HYUi5pkhZ/mk/afehcZahy7X5OEnMETx9Q3+vH7TIznqcvqnzveGtnXBcavB/jm1Miz4ig +xwdbUwLCSLP/kY1n3xVda9GdUeat01wQiZwzg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for fun
	`fun. 3600 IN DNSKEY ( 256 3 8 AwEAAaXI5IDhw+73lRWip9AueMd4++/c4PZF4J9KHUenxY2gSKLctUxhuHQvEwHhASJZnIFroFlT f4d0L4hzdRzK9kfwDh+ioEqIqabVnm8IkWG4UHo2fFDSDdl8PYipK5xQoZrItks3vf3Yn23fQsvR t8Q8pUhVtWdBwQ9x+AkQNIix ) ; Key ID = 49539`
	`fun. 3600 IN DNSKEY ( 257 3 8 AwEAAaOlIqDc/nBEqUdbNB24SLI/6yhBsFgEwb2enIgepQ3h3ddjUkoSCWshaaJgtaoZwE5zQb/W tfyMTtOgjzT/FCywzRwctQ6tsngs2WPTEtbEgiBQyI/NGDk0G8Iv/qukaizL7o+9z9fCnIf94iWO yxK7EsWpW59NGQL4MEcp3o5L4qtdzptBy4vdNUFwmhnbhX+V3ofhlvP0whoUR+M7Z0GdppJTbqzC Uanl7FEYnQ+LcfVkjWWEpHC3pnt6qZ3DYBk3C2vJ8YKrV5vbAUVIM4FdySsGbwvRAwVomY2J3x3z CStZs70ea4UzIVjVb6niIDmBk6uE4EP+h0hf2CuvJfc= ) ; Key ID = 4594`
	`fun. 3600 IN DNSKEY ( 256 3 8 AwEAAcgClnE379tx8rxVNO6u96B4FgthOtdU/+RVEP2XPy23/Dld+oPgDMSyDQy3FP4aCW+aUPB6 xeZhy6z/LsOzA3jsj+l51mxJGyyINTs7h8AtrDISp4eo4LGnW3tOTJPhrHVWtlvgY4trFcPfFdj7 1S5Nm9o6+nV0F8U97KlEwxiT ) ; Key ID = 44134`
	DNSKEY=4594/SEP is now in the chain-of-trust
	DS=4594/SHA-1 verifies DNSKEY=4594/SEP
	DS=4594/SHA-256 verifies DNSKEY=4594/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`fun. 3600 IN RRSIG ( DNSKEY 8 1 3600 20230707122723 20230607104421 4594 fun. ICUBQxe49PhwMojqaWEklPh63a5EokitCYD4r0TbKiPtPaY4ykNnT0K+5MI6E1Msy1UyZKwupTle Mw0qqiRsRV2zx5Q7yZp0DXvAfkM89SOoQRDn17hbF9ZKb4VEgi+ABDEK7kgSc2Yp1bk/Pn5l0Hg+ t1Y4sovUzIY/lknC/7ZE0So9U886maXReEYV4M2jNfpAiDk0Jj/oD6wSB/w1r/fIZaRhUdN6qcLD 5sULT7HYUi5pkhZ/mk/afehcZahy7X5OEnMETx9Q3+vH7TIznqcvqnzveGtnXBcavB/jm1Miz4ig +xwdbUwLCSLP/kY1n3xVda9GdUeat01wQiZwzg== )`
	RRSIG=4594 and DNSKEY=4594/SEP verifies the DNSKEY RRset
	DNSKEY=49539 is now in the chain-of-trust
	DNSKEY=44134 is now in the chain-of-trust
	Query to e.nic.fun for romirain.fun/A
	Received 586 bytes from 212.18.248.72
	;; Response received from 212.18.248.72 (586 octets) ;; HEADER SECTION ;; id = 1584 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) romirain.fun. 3600 IN NS riya.ns.cloudflare.com. romirain.fun. 3600 IN NS johnathan.ns.cloudflare.com. keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN NSEC3 ( 1 1 0 - keospcnecq5rle34hpsfuce56pmia968 NS SOA RRSIG DNSKEY NSEC3PARAM ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN NSEC3 ( 1 1 0 - f57hun0bvr49n63340in2prlms8iuf79 NS DS RRSIG ) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707024419 20230607104421 44134 fun. j+1YfAh2mdahiebcqFBFAOANVkJsHHROlRZNb8It0ZP7BrKY1p0zOAQ6/GnX0LPxCaRm1sAAKOaM QJwmwn5cwm/TEDCP2eVIC58BPP0oYbCT6JhdhPnc0Cf7sw5g0EKjpX6/+g2AKZpbCv9wY9bqfDHq 81vLlMFB9kxvaEYoiOo= ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707111153 20230607104421 44134 fun. D4PUpTNg86gHABM8XhK4YaGzrLTYiFtZHkGYfiFa/sGfYRSV2tqF+HrpG2YiQPTYyoXPgBQ7o/a2 n4MCDqVAcnwEEjgfHHz6cZEa2I7WQapUd8Xoxu/WNcaTnqAk2Jjfk/iXzXm9zNO7G/FIbOZrgNgp yQSF5a5GqmqYTvrOEHg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to b.nic.fun for romirain.fun/DNSKEY
	Received 586 bytes from 185.24.64.72
	;; Response received from 185.24.64.72 (586 octets) ;; HEADER SECTION ;; id = 47098 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) romirain.fun. 3600 IN NS johnathan.ns.cloudflare.com. romirain.fun. 3600 IN NS riya.ns.cloudflare.com. keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN NSEC3 ( 1 1 0 - keospcnecq5rle34hpsfuce56pmia968 NS SOA RRSIG DNSKEY NSEC3PARAM ) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707024419 20230607104421 44134 fun. j+1YfAh2mdahiebcqFBFAOANVkJsHHROlRZNb8It0ZP7BrKY1p0zOAQ6/GnX0LPxCaRm1sAAKOaM QJwmwn5cwm/TEDCP2eVIC58BPP0oYbCT6JhdhPnc0Cf7sw5g0EKjpX6/+g2AKZpbCv9wY9bqfDHq 81vLlMFB9kxvaEYoiOo= ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN NSEC3 ( 1 1 0 - f57hun0bvr49n63340in2prlms8iuf79 NS DS RRSIG ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707111153 20230607104421 44134 fun. D4PUpTNg86gHABM8XhK4YaGzrLTYiFtZHkGYfiFa/sGfYRSV2tqF+HrpG2YiQPTYyoXPgBQ7o/a2 n4MCDqVAcnwEEjgfHHz6cZEa2I7WQapUd8Xoxu/WNcaTnqAk2Jjfk/iXzXm9zNO7G/FIbOZrgNgp yQSF5a5GqmqYTvrOEHg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone romirain.fun

romirain.fun

	Checking DS between fun and romirain.fun
	Query to f.nic.fun for romirain.fun/DS
	Received 754 bytes from 212.18.249.72
	;; Response received from 212.18.249.72 (754 octets) ;; HEADER SECTION ;; id = 15913 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN NSEC3 ( 1 1 0 - keospcnecq5rle34hpsfuce56pmia968 NS SOA RRSIG DNSKEY NSEC3PARAM ) keioc2vkcvr1hdq1op4viqep8j0cvod2.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707024419 20230607104421 44134 fun. j+1YfAh2mdahiebcqFBFAOANVkJsHHROlRZNb8It0ZP7BrKY1p0zOAQ6/GnX0LPxCaRm1sAAKOaM QJwmwn5cwm/TEDCP2eVIC58BPP0oYbCT6JhdhPnc0Cf7sw5g0EKjpX6/+g2AKZpbCv9wY9bqfDHq 81vLlMFB9kxvaEYoiOo= ) fun. 3600 IN SOA ( ns0.centralnic.net. hostmaster.centralnic.net. 240944 ;serial 900 ;refresh 1800 ;retry 6048000 ;expire 3600 ;minimum ) fun. 3600 IN RRSIG ( SOA 8 1 3600 20230708140910 20230608131249 44134 fun. ZBXE5j1Qzf5zdtwcdt8+WSva8aoL0P9Lz2StXCx/FjWS5tj5UXsMzvbkpKq0je3qmqh5Tk/wrlSP 29bbv1fD9gMVYO3K2bSRVR0loobea73ONykZ2JVSxDzi5PDHaL9cRpHWnCsmoM5SmSLCJTok7UQr pdkDNe4pojzg2foozhI= ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN NSEC3 ( 1 1 0 - f57hun0bvr49n63340in2prlms8iuf79 NS DS RRSIG ) f55djkp28mu0oa22q3ok45gmr2r3el4h.fun. 3600 IN RRSIG ( NSEC3 8 2 3600 20230707111153 20230607104421 44134 fun. D4PUpTNg86gHABM8XhK4YaGzrLTYiFtZHkGYfiFa/sGfYRSV2tqF+HrpG2YiQPTYyoXPgBQ7o/a2 n4MCDqVAcnwEEjgfHHz6cZEa2I7WQapUd8Xoxu/WNcaTnqAk2Jjfk/iXzXm9zNO7G/FIbOZrgNgp yQSF5a5GqmqYTvrOEHg= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for romirain.fun in the fun zone
	Query to riya.ns.cloudflare.com for romirain.fun/DNSKEY
	Received 108 bytes from 172.64.34.155
	;; Response received from 172.64.34.155 (108 octets) ;; HEADER SECTION ;; id = 8148 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) romirain.fun. 1800 IN SOA ( johnathan.ns.cloudflare.com. dns.cloudflare.com. 2311678089 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to johnathan.ns.cloudflare.com for romirain.fun/A
	Received 73 bytes from 172.64.35.44
	;; Response received from 172.64.35.44 (73 octets) ;; HEADER SECTION ;; id = 352 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (2 records) romirain.fun. 300 IN A 104.21.26.70 romirain.fun. 300 IN A 172.67.135.153 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	johnathan.ns.cloudflare.com is authoritative for romirain.fun
	Query to riya.ns.cloudflare.com for romirain.fun/SOA
	Received 108 bytes from 172.64.34.155
	;; Response received from 172.64.34.155 (108 octets) ;; HEADER SECTION ;; id = 56415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN SOA ;; ANSWER SECTION (1 record) romirain.fun. 1800 IN SOA ( johnathan.ns.cloudflare.com. dns.cloudflare.com. 2311678089 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to johnathan.ns.cloudflare.com for romirain.fun/A
	Received 73 bytes from 108.162.195.44
	;; Response received from 108.162.195.44 (73 octets) ;; HEADER SECTION ;; id = 38988 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (2 records) romirain.fun. 300 IN A 172.67.135.153 romirain.fun. 300 IN A 104.21.26.70 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	romirain.fun A RR has value 172.67.135.153
	romirain.fun A RR has value 104.21.26.70
	No RRSIGs found

romirain.fun

	Query to riya.ns.cloudflare.com for romirain.fun/A
	Received 57 bytes from 162.159.38.155
	;; Response received from 162.159.38.155 (57 octets) ;; HEADER SECTION ;; id = 41298 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (1 record) romirain.fun. 282 IN A 172.64.80.1 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	riya.ns.cloudflare.com is authoritative for romirain.fun
	Query to riya.ns.cloudflare.com for romirain.fun/A
	Received 73 bytes from 172.64.34.155
	;; Response received from 172.64.34.155 (73 octets) ;; HEADER SECTION ;; id = 1945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; romirain.fun. IN A ;; ANSWER SECTION (2 records) romirain.fun. 300 IN A 172.67.135.153 romirain.fun. 300 IN A 104.21.26.70 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	romirain.fun A RR has value 172.67.135.153
	romirain.fun A RR has value 104.21.26.70
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test romirain.fun at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: