DNSSEC Analyzer - rowanet.cz

Domain Name:

Time: 2022-08-12 12:23:59 UTC, NTP stratum 16

Analyzing DNSSEC problems for rowanet.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (865 octets) ;; HEADER SECTION ;; id = 62936 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to g.root-servers.net for rowanet.cz/A
	Received 623 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (623 octets) ;; HEADER SECTION ;; id = 174 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . TC2yV97KKNMHMVvRLF6/mNfLXXq0VzLYJ3iePlRog+N1H7Q/jDDaE0SE8w1k6SscBT/zi+9wZUOE 0Bjw8tWSfUWWpHgtUyQLjl4AZrcN+/x1eIGST/iXQeQnL+zh9kFnvSf4JHT5gst32JtQaPi1htlO KlTVr1g0v1fY+2bgg5GoGqbuN5m2tsFuoSrCC2hRnsc/2cotM1uXHPlCpVhzJlUg8PdXP6y8FHhc JQv5xHTI+/Bz97g0mmW8LKobxZ0u0bw1p1yy4YZFya5a194uG/E2KcN5HmyeI4jgtcBobY7OlUrC qakJ8btXg7k9uV8lfzYA7NXARmwyrJsnhaGDAw== ) ;; ADDITIONAL SECTION (9 records) d.ns.nic.cz. 172800 IN A 193.29.206.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 a.ns.nic.cz. 172800 IN A 194.0.12.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to j.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (613 octets) ;; HEADER SECTION ;; id = 45703 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . TC2yV97KKNMHMVvRLF6/mNfLXXq0VzLYJ3iePlRog+N1H7Q/jDDaE0SE8w1k6SscBT/zi+9wZUOE 0Bjw8tWSfUWWpHgtUyQLjl4AZrcN+/x1eIGST/iXQeQnL+zh9kFnvSf4JHT5gst32JtQaPi1htlO KlTVr1g0v1fY+2bgg5GoGqbuN5m2tsFuoSrCC2hRnsc/2cotM1uXHPlCpVhzJlUg8PdXP6y8FHhc JQv5xHTI+/Bz97g0mmW8LKobxZ0u0bw1p1yy4YZFya5a194uG/E2KcN5HmyeI4jgtcBobY7OlUrC qakJ8btXg7k9uV8lfzYA7NXARmwyrJsnhaGDAw== ) ;; ADDITIONAL SECTION (9 records) b.ns.nic.cz. 172800 IN A 194.0.13.1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN A 194.0.14.1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN A 193.29.206.1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 a.ns.nic.cz. 172800 IN A 194.0.12.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to l.root-servers.net for cz/DS
	Received 366 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (366 octets) ;; HEADER SECTION ;; id = 20635 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . TC2yV97KKNMHMVvRLF6/mNfLXXq0VzLYJ3iePlRog+N1H7Q/jDDaE0SE8w1k6SscBT/zi+9wZUOE 0Bjw8tWSfUWWpHgtUyQLjl4AZrcN+/x1eIGST/iXQeQnL+zh9kFnvSf4JHT5gst32JtQaPi1htlO KlTVr1g0v1fY+2bgg5GoGqbuN5m2tsFuoSrCC2hRnsc/2cotM1uXHPlCpVhzJlUg8PdXP6y8FHhc JQv5xHTI+/Bz97g0mmW8LKobxZ0u0bw1p1yy4YZFya5a194uG/E2KcN5HmyeI4jgtcBobY7OlUrC qakJ8btXg7k9uV8lfzYA7NXARmwyrJsnhaGDAw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20220825050000 20220812040000 20826 . TC2yV97KKNMHMVvRLF6/mNfLXXq0VzLYJ3iePlRog+N1H7Q/jDDaE0SE8w1k6SscBT/zi+9wZUOE 0Bjw8tWSfUWWpHgtUyQLjl4AZrcN+/x1eIGST/iXQeQnL+zh9kFnvSf4JHT5gst32JtQaPi1htlO KlTVr1g0v1fY+2bgg5GoGqbuN5m2tsFuoSrCC2hRnsc/2cotM1uXHPlCpVhzJlUg8PdXP6y8FHhc JQv5xHTI+/Bz97g0mmW8LKobxZ0u0bw1p1yy4YZFya5a194uG/E2KcN5HmyeI4jgtcBobY7OlUrC qakJ8btXg7k9uV8lfzYA7NXARmwyrJsnhaGDAw== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to b.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (289 octets) ;; HEADER SECTION ;; id = 7229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 256 3 13 wm2SV8bKjDAb6dVKZD0Sk3v4Y20ieIoDDUg33QnErO5tqX8GRHt2N7YyhU4R1KBDSnk6OS+4ylSy rE1JqSDJdQ== ) ; Key ID = 8659 cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20220826102134 20220812085134 20237 cz. 721Nj6OUy6kla7ktoN9qVrpSa5wm0t/ayXdwjXwkN0NT8TUGPkpFf83hP7M3p7hu083MQf13261v X81G4kRTgw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 256 3 13 wm2SV8bKjDAb6dVKZD0Sk3v4Y20ieIoDDUg33QnErO5tqX8GRHt2N7YyhU4R1KBDSnk6OS+4ylSy rE1JqSDJdQ== ) ; Key ID = 8659`
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20220826102134 20220812085134 20237 cz. 721Nj6OUy6kla7ktoN9qVrpSa5wm0t/ayXdwjXwkN0NT8TUGPkpFf83hP7M3p7hu083MQf13261v X81G4kRTgw== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=8659 is now in the chain-of-trust
	Query to b.ns.nic.cz for rowanet.cz/A
	Received 306 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (306 octets) ;; HEADER SECTION ;; id = 20904 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20220826082134 20220812065134 8659 cz. mJNwYbfRsAqgtP8HQkwnoJLOslSq5hxf2jdZC4r9Lcg6Shs0q0xLs1HUqHMhH4BkzKITtxP0QOOo bjgJsvw1zQ== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for rowanet.cz/DNSKEY
	Received 308 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (308 octets) ;; HEADER SECTION ;; id = 37425 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20220826082134 20220812065134 8659 cz. mJNwYbfRsAqgtP8HQkwnoJLOslSq5hxf2jdZC4r9Lcg6Shs0q0xLs1HUqHMhH4BkzKITtxP0QOOo bjgJsvw1zQ== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone rowanet.cz

rowanet.cz

	Checking DS between cz and rowanet.cz
	Query to a.ns.nic.cz for rowanet.cz/DS
	Received 185 bytes from 194.0.12.1
	;; Response received from 194.0.12.1 (185 octets) ;; HEADER SECTION ;; id = 17111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DS ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20220826082134 20220812065134 8659 cz. mJNwYbfRsAqgtP8HQkwnoJLOslSq5hxf2jdZC4r9Lcg6Shs0q0xLs1HUqHMhH4BkzKITtxP0QOOo bjgJsvw1zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for rowanet.cz in the cz zone
	DS=16644/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20220826082134 20220812065134 8659 cz. mJNwYbfRsAqgtP8HQkwnoJLOslSq5hxf2jdZC4r9Lcg6Shs0q0xLs1HUqHMhH4BkzKITtxP0QOOo bjgJsvw1zQ== )`
	RRSIG=8659 and DNSKEY=8659 verifies the DS RRset
	DS=16644/SHA-256 is now in the chain-of-trust
	`rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 )`
	Query to ns.forpsi.cz for rowanet.cz/DNSKEY
	Received 761 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (761 octets) ;; HEADER SECTION ;; id = 56297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (3 records) rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAcLxk7p26YJ8ZLS2KnhyV76qwk5+JsrJQ+n9YwecYusphwQbngjcsnFOzMS8OaAjI6PyDd+a ozgXB6mKcZSoNOF47u8PFc9Fx3Tx9x42TiGqOx/ND4S7WeoT0umn20zByA3jV+R3ZXMzWedan1sU AGVVRTAkoF+CA9p+PM9KUmJZ ) ; Key ID = 33701 rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644 rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20220823100802 20220724083802 16644 rowanet.cz. QfREqT81+h0bOwNGWihk69c3Vm+VYt9e9oe41GTDEadO105/FUUs3PbwA/xJkaHtuEBSijLodfOK 4xUAM57WtnEf3+U+fDhiyZKqTxVAQnn2Ky2Ig5PD1W5vwefcQe6jYneMExSju28LpvS618ItWZlP He9ZVoGWy3brXyF6qffw4oXurXkDB/3SBBA538nQ20V8Zr6qWDaE6VcdFCxgmVr5RSf9onlyNVfr pBanY8/oV6Wz05DKBErTELqun7O4xgbM1i2Ps2gilP7DHnKT4Oyd0ezCrJOvAiN3SLb+FxSqnqdt Nk9Ulqupn/sUHts2vpaQB24quTXIT/EIPlXzqw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for rowanet.cz
	`rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAcLxk7p26YJ8ZLS2KnhyV76qwk5+JsrJQ+n9YwecYusphwQbngjcsnFOzMS8OaAjI6PyDd+a ozgXB6mKcZSoNOF47u8PFc9Fx3Tx9x42TiGqOx/ND4S7WeoT0umn20zByA3jV+R3ZXMzWedan1sU AGVVRTAkoF+CA9p+PM9KUmJZ ) ; Key ID = 33701`
	`rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644`
	DNSKEY=16644/SEP is now in the chain-of-trust
	DS=16644/SHA-256 verifies DNSKEY=16644/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20220823100802 20220724083802 16644 rowanet.cz. QfREqT81+h0bOwNGWihk69c3Vm+VYt9e9oe41GTDEadO105/FUUs3PbwA/xJkaHtuEBSijLodfOK 4xUAM57WtnEf3+U+fDhiyZKqTxVAQnn2Ky2Ig5PD1W5vwefcQe6jYneMExSju28LpvS618ItWZlP He9ZVoGWy3brXyF6qffw4oXurXkDB/3SBBA538nQ20V8Zr6qWDaE6VcdFCxgmVr5RSf9onlyNVfr pBanY8/oV6Wz05DKBErTELqun7O4xgbM1i2Ps2gilP7DHnKT4Oyd0ezCrJOvAiN3SLb+FxSqnqdt Nk9Ulqupn/sUHts2vpaQB24quTXIT/EIPlXzqw== )`
	RRSIG=16644 and DNSKEY=16644/SEP verifies the DNSKEY RRset
	DNSKEY=33701 is now in the chain-of-trust
	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Response received from 95.110.254.165 (225 octets) ;; HEADER SECTION ;; id = 56328 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.it is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.net for rowanet.cz/SOA
	Received 274 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (274 octets) ;; HEADER SECTION ;; id = 35641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2022072401 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20220823100802 20220724083802 33701 rowanet.cz. Nu4r4p99BaGfF8iQYxUDOWVbC3MENFj982gAtZs/Xf9bNCZdFEa6EbBkwQnH5wCot+6Y8U0oBb1j E5ida2wlSe2oB45Abpg932qcUOjmJT09qX9rP5bvg/ron6GRmMSQO6bOQfoGA8f0zII0aXhnMTNf fm44oSCyYmPUrQW0YbA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.cz for rowanet.cz/SOA
	Received 274 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (274 octets) ;; HEADER SECTION ;; id = 25375 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2022072401 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20220823100802 20220724083802 33701 rowanet.cz. Nu4r4p99BaGfF8iQYxUDOWVbC3MENFj982gAtZs/Xf9bNCZdFEa6EbBkwQnH5wCot+6Y8U0oBb1j E5ida2wlSe2oB45Abpg932qcUOjmJT09qX9rP5bvg/ron6GRmMSQO6bOQfoGA8f0zII0aXhnMTNf fm44oSCyYmPUrQW0YbA= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Response received from 95.110.254.165 (225 octets) ;; HEADER SECTION ;; id = 14792 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.93.216.140
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= )`
	RRSIG=33701 and DNSKEY=33701 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (225 octets) ;; HEADER SECTION ;; id = 58 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.cz is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (225 octets) ;; HEADER SECTION ;; id = 54017 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.93.216.140
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= )`
	RRSIG=33701 and DNSKEY=33701 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (225 octets) ;; HEADER SECTION ;; id = 43641 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.net is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (225 octets) ;; HEADER SECTION ;; id = 50217 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.93.216.140 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.93.216.140
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20220823100802 20220724083802 33701 rowanet.cz. uLI1XFAqQx6TnsnTNgwvI551gHZgtPfDdaeA+lj5dl14h7LtqmCsFz00U26K3xIe0I0Z4ZQuMRVD TxOUKlBdJEYgJpEa1BuEVR1DOVEfEYOlh02c3KOKjG6pgeY3IU+Ck/Ikv8nhKnquP/VOGiFUbYqG L6YLLZbkhNcUxR4FGs8= )`
	RRSIG=33701 and DNSKEY=33701 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rowanet.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: