DNSSEC Analyzer - rowanet.cz

Domain Name:

Time: 2021-04-22 11:50:31 UTC, NTP stratum 4

Analyzing DNSSEC problems for rowanet.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (864 bytes) ;; HEADER SECTION ;; id = 37205 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to l.root-servers.net for rowanet.cz/A
	Received 621 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (621 bytes) ;; HEADER SECTION ;; id = 51085 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . jlaJap5Y5std+mIbLaa3bobavF6/kx4jv5rhuEPh1C2DWI5oXPuNack5QrfgjFTVFMFU8nsnH/mi vqSsKr0fgw50uh3sdus0EpAA3N8qDRD5LG+bloTuFjHOg409Nw3k6/l7ZzpaaWs4kwZGjjurFt0a EbPckwG8hXicNhKKuGhbD6wq9+k8SlZms+xjkCJuOA8H3Uu94p5lQ8QF5BqrMtmJhUph7OC9CzHi d740pS6R/9Rw5lcdUzzaJElIOZ5epZw1nR+zHdToKUtoKGEDk/2hoRN7zFySii0AS4G0MsIQt3MJ P1lilAVC8+CjNNKRQdwu5NWydpd1Ck958yXWGQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to b.root-servers.net for cz/DNSKEY
	Received 613 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (613 bytes) ;; HEADER SECTION ;; id = 40754 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . jlaJap5Y5std+mIbLaa3bobavF6/kx4jv5rhuEPh1C2DWI5oXPuNack5QrfgjFTVFMFU8nsnH/mi vqSsKr0fgw50uh3sdus0EpAA3N8qDRD5LG+bloTuFjHOg409Nw3k6/l7ZzpaaWs4kwZGjjurFt0a EbPckwG8hXicNhKKuGhbD6wq9+k8SlZms+xjkCJuOA8H3Uu94p5lQ8QF5BqrMtmJhUph7OC9CzHi d740pS6R/9Rw5lcdUzzaJElIOZ5epZw1nR+zHdToKUtoKGEDk/2hoRN7zFySii0AS4G0MsIQt3MJ P1lilAVC8+CjNNKRQdwu5NWydpd1Ck958yXWGQ== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to l.root-servers.net for cz/DS
	Received 366 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (366 bytes) ;; HEADER SECTION ;; id = 24453 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . jlaJap5Y5std+mIbLaa3bobavF6/kx4jv5rhuEPh1C2DWI5oXPuNack5QrfgjFTVFMFU8nsnH/mi vqSsKr0fgw50uh3sdus0EpAA3N8qDRD5LG+bloTuFjHOg409Nw3k6/l7ZzpaaWs4kwZGjjurFt0a EbPckwG8hXicNhKKuGhbD6wq9+k8SlZms+xjkCJuOA8H3Uu94p5lQ8QF5BqrMtmJhUph7OC9CzHi d740pS6R/9Rw5lcdUzzaJElIOZ5epZw1nR+zHdToKUtoKGEDk/2hoRN7zFySii0AS4G0MsIQt3MJ P1lilAVC8+CjNNKRQdwu5NWydpd1Ck958yXWGQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . jlaJap5Y5std+mIbLaa3bobavF6/kx4jv5rhuEPh1C2DWI5oXPuNack5QrfgjFTVFMFU8nsnH/mi vqSsKr0fgw50uh3sdus0EpAA3N8qDRD5LG+bloTuFjHOg409Nw3k6/l7ZzpaaWs4kwZGjjurFt0a EbPckwG8hXicNhKKuGhbD6wq9+k8SlZms+xjkCJuOA8H3Uu94p5lQ8QF5BqrMtmJhUph7OC9CzHi d740pS6R/9Rw5lcdUzzaJElIOZ5epZw1nR+zHdToKUtoKGEDk/2hoRN7zFySii0AS4G0MsIQt3MJ P1lilAVC8+CjNNKRQdwu5NWydpd1Ck958yXWGQ== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to c.ns.nic.cz for cz/DNSKEY
	Received 387 bytes from 194.0.14.1
	;; Answer received from 194.0.14.1 (387 bytes) ;; HEADER SECTION ;; id = 31282 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (4 records) cz. 18000 IN DNSKEY ( 256 3 13 h1Ft69u2wLt1FRU5PRbDkxStIrQqSTqgIz/nVFgoCpvm217rjwubDueTY3VCT1mNO0xC76IjyQcQ 4hWTXCZVVQ== ) ; Key ID = 17014 cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20210427000000 20210413000000 20237 cz. MneJzjrx7lN42UBcz2h4TvZv/8/iigJEKXJwGd17aLkYYBaawN0e+QmcH3ldcyVJ73K8cK+w1X+t r0mbeDPu7w== ) cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20210504103453 20210422100532 17014 cz. xLaCPcH1x7s6V9ecrA0bKtvas32Drklq2tnZu3YXsYL+hFlVFSOriHeWOypAPk3mbipVpywPKAa4 h7XJU2b4sA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 18000 IN DNSKEY ( 256 3 13 h1Ft69u2wLt1FRU5PRbDkxStIrQqSTqgIz/nVFgoCpvm217rjwubDueTY3VCT1mNO0xC76IjyQcQ 4hWTXCZVVQ== ) ; Key ID = 17014`
	`cz. 18000 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20210427000000 20210413000000 20237 cz. MneJzjrx7lN42UBcz2h4TvZv/8/iigJEKXJwGd17aLkYYBaawN0e+QmcH3ldcyVJ73K8cK+w1X+t r0mbeDPu7w== )`
	`cz. 18000 IN RRSIG ( DNSKEY 13 1 18000 20210504103453 20210422100532 17014 cz. xLaCPcH1x7s6V9ecrA0bKtvas32Drklq2tnZu3YXsYL+hFlVFSOriHeWOypAPk3mbipVpywPKAa4 h7XJU2b4sA== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	RRSIG=17014 and DNSKEY=17014 verifies the DNSKEY RRset
	DNSKEY=17014 is now in the chain-of-trust
	Query to b.ns.nic.cz for rowanet.cz/A
	Received 306 bytes from 194.0.13.1
	;; Answer received from 194.0.13.1 (306 bytes) ;; HEADER SECTION ;; id = 21879 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20210501055444 20210417173542 17014 cz. fH0vXsXAmzXTopPo50A4fR/t7paT7miKqIghqnzLMI5K1ZJG9X+Wy3S7u2NxxhK0aS5Fc233zOhi Mke+NLT5cA== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for rowanet.cz/DNSKEY
	Received 306 bytes from 193.29.206.1
	;; Answer received from 193.29.206.1 (306 bytes) ;; HEADER SECTION ;; id = 33751 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20210501055444 20210417173542 17014 cz. fH0vXsXAmzXTopPo50A4fR/t7paT7miKqIghqnzLMI5K1ZJG9X+Wy3S7u2NxxhK0aS5Fc233zOhi Mke+NLT5cA== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone rowanet.cz

rowanet.cz

	Checking DS between cz and rowanet.cz
	Query to a.ns.nic.cz for rowanet.cz/DS
	Received 185 bytes from 194.0.12.1
	;; Answer received from 194.0.12.1 (185 bytes) ;; HEADER SECTION ;; id = 42715 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DS ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20210501055444 20210417173542 17014 cz. fH0vXsXAmzXTopPo50A4fR/t7paT7miKqIghqnzLMI5K1ZJG9X+Wy3S7u2NxxhK0aS5Fc233zOhi Mke+NLT5cA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for rowanet.cz in the cz zone
	DS=16644/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20210501055444 20210417173542 17014 cz. fH0vXsXAmzXTopPo50A4fR/t7paT7miKqIghqnzLMI5K1ZJG9X+Wy3S7u2NxxhK0aS5Fc233zOhi Mke+NLT5cA== )`
	RRSIG=17014 and DNSKEY=17014 verifies the DS RRset
	DS=16644/SHA-256 is now in the chain-of-trust
	`rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 )`
	Query to ns.forpsi.cz for rowanet.cz/DNSKEY
	Received 761 bytes from 81.2.209.185
	;; Answer received from 81.2.209.185 (761 bytes) ;; HEADER SECTION ;; id = 19795 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (3 records) rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAdeSUcQ88xH7VBOc7gZVA8ajOveLYvcnxwboFvauf8rm+fpWquYv5OcrLScvaD2EIGxtf3OE elXGlnpcJ7haRHQIMn1BRDv5oLHpfw3t2NmB9vi/rWwSvDI9zrTqLh/eRHuqXH3CbKumez++KQ9v uPn95O35naJxQzkLjzmBe5N7 ) ; Key ID = 251 rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644 rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20210426000303 20210326223303 16644 rowanet.cz. K5Pumlqz+iBr/s7FtUa/GfmbR3B9IB30FrBs/E7kIUbij94sg2sx60pQZKsYCuogcb+a3JEPLv1/ /XBfAWJrJOfWxBHNStykp5Ks1cs109q+HN+x3sew3OpZouHKTGK0TWiNr/ksCc1dEjVF6kxBbJKX UUAzwuoHa/HtfKH0R9WYqebu1Sa8dTI1VhbUiRfR8i0y6VkKaw6JShirHJkKup01J24n1F4ABhTz fuRYjCCYvINi2Xg5jbXuMOj7gsG4XY/2gEOp47LS6ECTKLHkuoyuz7h8k8JNDXhiECgL/2A/GW8c MEw5eUQkYJhyqJSqbZ3gRdEVVW0QfN2S3jTppw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for rowanet.cz
	`rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAdeSUcQ88xH7VBOc7gZVA8ajOveLYvcnxwboFvauf8rm+fpWquYv5OcrLScvaD2EIGxtf3OE elXGlnpcJ7haRHQIMn1BRDv5oLHpfw3t2NmB9vi/rWwSvDI9zrTqLh/eRHuqXH3CbKumez++KQ9v uPn95O35naJxQzkLjzmBe5N7 ) ; Key ID = 251`
	`rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644`
	DNSKEY=16644/SEP is now in the chain-of-trust
	DS=16644/SHA-256 verifies DNSKEY=16644/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20210426000303 20210326223303 16644 rowanet.cz. K5Pumlqz+iBr/s7FtUa/GfmbR3B9IB30FrBs/E7kIUbij94sg2sx60pQZKsYCuogcb+a3JEPLv1/ /XBfAWJrJOfWxBHNStykp5Ks1cs109q+HN+x3sew3OpZouHKTGK0TWiNr/ksCc1dEjVF6kxBbJKX UUAzwuoHa/HtfKH0R9WYqebu1Sa8dTI1VhbUiRfR8i0y6VkKaw6JShirHJkKup01J24n1F4ABhTz fuRYjCCYvINi2Xg5jbXuMOj7gsG4XY/2gEOp47LS6ECTKLHkuoyuz7h8k8JNDXhiECgL/2A/GW8c MEw5eUQkYJhyqJSqbZ3gRdEVVW0QfN2S3jTppw== )`
	RRSIG=16644 and DNSKEY=16644/SEP verifies the DNSKEY RRset
	DNSKEY=251 is now in the chain-of-trust
	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Answer received from 81.2.194.130 (225 bytes) ;; HEADER SECTION ;; id = 34025 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.net is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.it for rowanet.cz/SOA
	Received 274 bytes from 95.110.254.165
	;; Answer received from 95.110.254.165 (274 bytes) ;; HEADER SECTION ;; id = 18920 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2021032701 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20210426000303 20210326223303 251 rowanet.cz. CPYfAm7fVGRC4IiudHkIiAcqqrsNQb0E9k0Yx0R1g58n16CpVv9am67ewQLsgkvOFu5CLBxzYbf0 lphd4HXGSn3uulj8qk/UQgI7WzCMhh0QF01OQPEnVnygEhU2g2yTVhsens3hQk2R33chfNsQFzE4 Qr7H4b0pSUlgtIF/3o0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.cz for rowanet.cz/SOA
	Received 274 bytes from 81.2.209.185
	;; Answer received from 81.2.209.185 (274 bytes) ;; HEADER SECTION ;; id = 20456 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2021032701 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20210426000303 20210326223303 251 rowanet.cz. CPYfAm7fVGRC4IiudHkIiAcqqrsNQb0E9k0Yx0R1g58n16CpVv9am67ewQLsgkvOFu5CLBxzYbf0 lphd4HXGSn3uulj8qk/UQgI7WzCMhh0QF01OQPEnVnygEhU2g2yTVhsens3hQk2R33chfNsQFzE4 Qr7H4b0pSUlgtIF/3o0= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Answer received from 81.2.194.130 (225 bytes) ;; HEADER SECTION ;; id = 43208 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= )`
	RRSIG=251 and DNSKEY=251 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Answer received from 81.2.209.185 (225 bytes) ;; HEADER SECTION ;; id = 8182 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.cz is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Answer received from 81.2.209.185 (225 bytes) ;; HEADER SECTION ;; id = 57142 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= )`
	RRSIG=251 and DNSKEY=251 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Answer received from 95.110.254.165 (225 bytes) ;; HEADER SECTION ;; id = 15648 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.it is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Answer received from 95.110.254.165 (225 bytes) ;; HEADER SECTION ;; id = 11021 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210426000303 20210326223303 251 rowanet.cz. K/MH0Q6q+w4fYY/r/KwJMyhGX1FD080pR039AdI4UFSjQIXbH4cWX3BGF0P3II3pflnhjytN1ccC nEa3anx3OX+YZjpSAcmefyyQvQspKo4lT50d5Ka/89Z3QXCJx7TlkQGA+HDDQEuDQ/yrE92RiQtj SBHO5yyiN1IpVbU2OD4= )`
	RRSIG=251 and DNSKEY=251 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rowanet.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: