DNSSEC Analyzer - rowanet.cz

Domain Name:

Time: 2021-09-22 12:07:57 UTC, NTP stratum 16

Analyzing DNSSEC problems for rowanet.cz

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 1139 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (1139 octets) ;; HEADER SECTION ;; id = 9869 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbDEyqdwu2fqAwinPCFwALUCWfYYaLrNhnOrMxDorLBYMipEE1btlK1XnigTRMeb0YQ8/LCo pb3CN73hYDhCHFsNk+GtukBB+gWLcg+2FZXbhLXIheQm8x2VfOHy2yYQG+18wjx3HY9Mj/ZEhXbZ NrDMvpFKKVihWXa0/cHNg4ZcIHD9KkMlKzK+my1K/vz8fq5cFCFOu7wgM+kKbOikdcRBm7Uf/wRX ZItFg2uhUijUb56gEN8uCUgmuEw6wQ5ZBuR7UT/FLyyAUeAH87oxF4im2DXK6J+JA7IAs2UHJ16u TqvdserUU8NIosislaXIZCvz+NTDb3SJcxs6bvCikeU= ) ; Key ID = 26838`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211010000000 20210919000000 20326 . Sr5anUGJStj+Ve2zr83JMQrEmbkf88Ri52nFderay/sSIad8vWAxiPoxdaJ1iWkyhJSWeOR0Sw4l RsphPIj54s3yqpPfXUg8rPoIVeYYYkTFO5W5BF3gLsMfu2ZHaHLpNOsy6GCgPwXCxq49lJ/xcLyS 0tjGkSH8IW3sAT15sXDhLkMjMISJQ776Z2LSonXcNvNeGrkXuzCmcOwdduWnaSFsmKoPWQbb3a4k ANk0I0GRtDIp8XApb6WnNAmKTPRaH/VoX9M6b8CZyp5TuAbNPnW8nVFaCRMpnWCWYYOUhLm7jYEy NSr+V+/ygD+OUyrx4R/WzIGSHaiHGQB1KU4eyw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	DNSKEY=26838 is now in the chain-of-trust
	Query to d.root-servers.net for rowanet.cz/A
	Received 621 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (621 octets) ;; HEADER SECTION ;; id = 32260 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 172800 IN NS d.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . BLc/+vdYwnqFBcdac58AzIKtdgzXo+bBjT+1IUMX5/T4AzLQBHW6KNfx0iCx3SNGVU9X6o3f1TnL v8DRFNDtjDyPTs5zNCBuHPCth39arWX/k4u+wEwiA7yQvmPT22LsNJSANmM5EJMWKf4upQH0FPl0 TO1re0z5rLTYqfV5h9vwV+dIvHVOZjUuLO+lUJ0dT6UWQmLnokdvXeF5QfL1ik1PvMwTsEfdNgMl vlK5zLgF9uumaJK5mvkjDwXM4+0yjMjyeWEvESXSlz1UiToB926yewoyRDSfCHBxhiPMzp8+Vt7W vyivULWFqPnBp4OOcP1BEFi9RmhyZIhObDyOLw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to c.root-servers.net for cz/DNSKEY
	Received 613 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (613 octets) ;; HEADER SECTION ;; id = 63756 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) cz. 172800 IN NS d.ns.nic.cz. cz. 172800 IN NS b.ns.nic.cz. cz. 172800 IN NS a.ns.nic.cz. cz. 172800 IN NS c.ns.nic.cz. cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . BLc/+vdYwnqFBcdac58AzIKtdgzXo+bBjT+1IUMX5/T4AzLQBHW6KNfx0iCx3SNGVU9X6o3f1TnL v8DRFNDtjDyPTs5zNCBuHPCth39arWX/k4u+wEwiA7yQvmPT22LsNJSANmM5EJMWKf4upQH0FPl0 TO1re0z5rLTYqfV5h9vwV+dIvHVOZjUuLO+lUJ0dT6UWQmLnokdvXeF5QfL1ik1PvMwTsEfdNgMl vlK5zLgF9uumaJK5mvkjDwXM4+0yjMjyeWEvESXSlz1UiToB926yewoyRDSfCHBxhiPMzp8+Vt7W vyivULWFqPnBp4OOcP1BEFi9RmhyZIhObDyOLw== ) ;; ADDITIONAL SECTION (9 records) a.ns.nic.cz. 172800 IN A 194.0.12.1 b.ns.nic.cz. 172800 IN A 194.0.13.1 c.ns.nic.cz. 172800 IN A 194.0.14.1 d.ns.nic.cz. 172800 IN A 193.29.206.1 a.ns.nic.cz. 172800 IN AAAA 2001:678:f::1 b.ns.nic.cz. 172800 IN AAAA 2001:678:10::1 c.ns.nic.cz. 172800 IN AAAA 2001:678:11::1 d.ns.nic.cz. 172800 IN AAAA 2001:678:1::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cz

	Checking DS between . and cz
	Query to i.root-servers.net for cz/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (366 octets) ;; HEADER SECTION ;; id = 42480 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DS ;; ANSWER SECTION (2 records) cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 ) cz. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . BLc/+vdYwnqFBcdac58AzIKtdgzXo+bBjT+1IUMX5/T4AzLQBHW6KNfx0iCx3SNGVU9X6o3f1TnL v8DRFNDtjDyPTs5zNCBuHPCth39arWX/k4u+wEwiA7yQvmPT22LsNJSANmM5EJMWKf4upQH0FPl0 TO1re0z5rLTYqfV5h9vwV+dIvHVOZjUuLO+lUJ0dT6UWQmLnokdvXeF5QfL1ik1PvMwTsEfdNgMl vlK5zLgF9uumaJK5mvkjDwXM4+0yjMjyeWEvESXSlz1UiToB926yewoyRDSfCHBxhiPMzp8+Vt7W vyivULWFqPnBp4OOcP1BEFi9RmhyZIhObDyOLw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for cz in the . zone
	DS=20237/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`cz. 86400 IN RRSIG ( DS 8 1 86400 20211005050000 20210922040000 26838 . BLc/+vdYwnqFBcdac58AzIKtdgzXo+bBjT+1IUMX5/T4AzLQBHW6KNfx0iCx3SNGVU9X6o3f1TnL v8DRFNDtjDyPTs5zNCBuHPCth39arWX/k4u+wEwiA7yQvmPT22LsNJSANmM5EJMWKf4upQH0FPl0 TO1re0z5rLTYqfV5h9vwV+dIvHVOZjUuLO+lUJ0dT6UWQmLnokdvXeF5QfL1ik1PvMwTsEfdNgMl vlK5zLgF9uumaJK5mvkjDwXM4+0yjMjyeWEvESXSlz1UiToB926yewoyRDSfCHBxhiPMzp8+Vt7W vyivULWFqPnBp4OOcP1BEFi9RmhyZIhObDyOLw== )`
	RRSIG=26838 and DNSKEY=26838 verifies the DS RRset
	DS=20237/SHA-256 is now in the chain-of-trust
	`cz. 86400 IN DS ( 20237 13 2 cff0f3ecdbc529c1f0031ba1840bfb835853b9209ed1e508fff48451d7b778e2 )`
	Query to b.ns.nic.cz for cz/DNSKEY
	Received 289 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (289 octets) ;; HEADER SECTION ;; id = 17285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cz. IN DNSKEY ;; ANSWER SECTION (3 records) cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237 cz. 3600 IN DNSKEY ( 256 3 13 sdiyXqvmpGSxpcnM9dnFA3Z/4viXZKg2/VqdwY0pBKiMmICB+w/bv5ldbrR0EESkAhe5cDg3+ayH UFWbub50lQ== ) ; Key ID = 21054 cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20211005102134 20210921085134 20237 cz. ovpnJMFjRT6EAR1YLDfQdQAfv87PTTZ26keLvGE22gTILJCRSd1uGvbhhquVLN4o+eEwrz/nD/qS /EwfQhU5Og== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for cz
	`cz. 3600 IN DNSKEY ( 257 3 13 nqzH7xP1QU5UOVy/VvxFSlrB/XgX9JDJzj51PzIj35TXjZTyalTlAT/f7PAfaSD5mEG1N8Vk9NmI 2nxgQqhzDQ== ) ; Key ID = 20237`
	`cz. 3600 IN DNSKEY ( 256 3 13 sdiyXqvmpGSxpcnM9dnFA3Z/4viXZKg2/VqdwY0pBKiMmICB+w/bv5ldbrR0EESkAhe5cDg3+ayH UFWbub50lQ== ) ; Key ID = 21054`
	DNSKEY=20237/SEP is now in the chain-of-trust
	DS=20237/SHA-256 verifies DNSKEY=20237/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cz. 3600 IN RRSIG ( DNSKEY 13 1 3600 20211005102134 20210921085134 20237 cz. ovpnJMFjRT6EAR1YLDfQdQAfv87PTTZ26keLvGE22gTILJCRSd1uGvbhhquVLN4o+eEwrz/nD/qS /EwfQhU5Og== )`
	RRSIG=20237 and DNSKEY=20237/SEP verifies the DNSKEY RRset
	DNSKEY=21054 is now in the chain-of-trust
	Query to d.ns.nic.cz for rowanet.cz/A
	Received 306 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (306 octets) ;; HEADER SECTION ;; id = 49293 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20211005082134 20210921065134 21054 cz. 9PBvClgT3Sw0akd4dghCMv4BpKCua7CgX7xNclkWGJDB4lFvr8KZiEsRv5jXJeJXCY6qEpzf65K/ kp8AYAxmUw== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.ns.nic.cz for rowanet.cz/DNSKEY
	Received 306 bytes from 193.29.206.1
	;; Response received from 193.29.206.1 (306 octets) ;; HEADER SECTION ;; id = 18704 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) rowanet.cz. 3600 IN NS ns.forpsi.cz. rowanet.cz. 3600 IN NS ns.forpsi.it. rowanet.cz. 3600 IN NS ns.forpsi.net. rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20211005082134 20210921065134 21054 cz. 9PBvClgT3Sw0akd4dghCMv4BpKCua7CgX7xNclkWGJDB4lFvr8KZiEsRv5jXJeJXCY6qEpzf65K/ kp8AYAxmUw== ) ;; ADDITIONAL SECTION (3 records) ns.forpsi.cz. 3600 IN A 81.2.209.185 ns.forpsi.cz. 3600 IN AAAA 2001:15e8:201:1::d1b9 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone rowanet.cz

rowanet.cz

	Checking DS between cz and rowanet.cz
	Query to b.ns.nic.cz for rowanet.cz/DS
	Received 185 bytes from 194.0.13.1
	;; Response received from 194.0.13.1 (185 octets) ;; HEADER SECTION ;; id = 6852 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DS ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 ) rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20211005082134 20210921065134 21054 cz. 9PBvClgT3Sw0akd4dghCMv4BpKCua7CgX7xNclkWGJDB4lFvr8KZiEsRv5jXJeJXCY6qEpzf65K/ kp8AYAxmUw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for rowanet.cz in the cz zone
	DS=16644/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`rowanet.cz. 3600 IN RRSIG ( DS 13 2 3600 20211005082134 20210921065134 21054 cz. 9PBvClgT3Sw0akd4dghCMv4BpKCua7CgX7xNclkWGJDB4lFvr8KZiEsRv5jXJeJXCY6qEpzf65K/ kp8AYAxmUw== )`
	RRSIG=21054 and DNSKEY=21054 verifies the DS RRset
	DS=16644/SHA-256 is now in the chain-of-trust
	`rowanet.cz. 3600 IN DS ( 16644 10 2 d408e8831dc694ba0040ef711882e9c155a89a0b9553dbdb14e9998c90091ab0 )`
	Query to ns.forpsi.it for rowanet.cz/DNSKEY
	Received 761 bytes from 95.110.254.165
	;; Response received from 95.110.254.165 (761 octets) ;; HEADER SECTION ;; id = 4171 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN DNSKEY ;; ANSWER SECTION (3 records) rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAclEDfj7KI7U/6fsItqKG9ok+LHIDSzui6iKTiPJMNHfIPNpFE9F2Nhlt0uZzwMiaOy+JrJW Jm7tnAlFPvmTzutRGrWpRX1hL2kb+yGLeJbQJ2dT2Uhu0gd5gEoRdfl/HLekruPIVwAzGKRMGaw5 NOEmEwul7wvyIX68qhvGypuv ) ; Key ID = 6998 rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644 rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20210926025801 20210827012801 16644 rowanet.cz. Vgculfoct30RP3d6AfsnFppRDwCcW3d4mcLNGt3CjNS2vmV1ozZDt5UqMveombNnJxGRTCzkw6vJ +AAP1GOti6d/v0ybTwhkqpcLPGdugkDsGF03Cy5xXoPrGRZWXd8h9UHZcRq3MnKu79MyCPpZQUzM BYIgy/nFJPnwvp8Qi0PNXz1z4OxxUWKNo0EMtTrz3J+sJOlkHxJZOFmB23Z98Xdi/OpYPfGnU8X6 FoE4zw8kTqZms+Q5pw4zVOzdDH0MlnAYvmt9T0v34V85G0sUriauBKh5H38yZ4fDCDOSwx+74MEg FWVN8RHcH7Mnq7FF5W6V8duHwoaYnaUgUi69uQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for rowanet.cz
	`rowanet.cz. 3600 IN DNSKEY ( 256 3 10 AwEAAclEDfj7KI7U/6fsItqKG9ok+LHIDSzui6iKTiPJMNHfIPNpFE9F2Nhlt0uZzwMiaOy+JrJW Jm7tnAlFPvmTzutRGrWpRX1hL2kb+yGLeJbQJ2dT2Uhu0gd5gEoRdfl/HLekruPIVwAzGKRMGaw5 NOEmEwul7wvyIX68qhvGypuv ) ; Key ID = 6998`
	`rowanet.cz. 3600 IN DNSKEY ( 257 3 10 AwEAAbpzMetD+eE/SbiaSoxCS08qtFRK6KtSarKmP/38JjHF1hG6PqxdiGhKui4hqP7nzCaP6xnw XFB7zg/0/pleZHAT5I5m7Ie8rnAklsWXPBIPhww3GcTtDdVSidRyr7TAoGbB2uTEo3TS5ZIyO/Ve JVq3xnAk1mAwNKbIz9Yp3gDcTNI8jI2tWnN28/n9PC9oX2sI7e7WyzX9UXUq+lW1oQkWP+Uvyv9D gEsqz2r6qIBr0QulThXdvtr/RhP5lwW6pMY+4l/9d97ptUvYLI8xF6G0+FpSt8wo/IZYPS0VbWXs /HtF0o8hbrkbycs07Ek17PRp62hBo9ZOmvs9Z00jEC8= ) ; Key ID = 16644`
	DNSKEY=16644/SEP is now in the chain-of-trust
	DS=16644/SHA-256 verifies DNSKEY=16644/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`rowanet.cz. 3600 IN RRSIG ( DNSKEY 10 2 3600 20210926025801 20210827012801 16644 rowanet.cz. Vgculfoct30RP3d6AfsnFppRDwCcW3d4mcLNGt3CjNS2vmV1ozZDt5UqMveombNnJxGRTCzkw6vJ +AAP1GOti6d/v0ybTwhkqpcLPGdugkDsGF03Cy5xXoPrGRZWXd8h9UHZcRq3MnKu79MyCPpZQUzM BYIgy/nFJPnwvp8Qi0PNXz1z4OxxUWKNo0EMtTrz3J+sJOlkHxJZOFmB23Z98Xdi/OpYPfGnU8X6 FoE4zw8kTqZms+Q5pw4zVOzdDH0MlnAYvmt9T0v34V85G0sUriauBKh5H38yZ4fDCDOSwx+74MEg FWVN8RHcH7Mnq7FF5W6V8duHwoaYnaUgUi69uQ== )`
	RRSIG=16644 and DNSKEY=16644/SEP verifies the DNSKEY RRset
	DNSKEY=6998 is now in the chain-of-trust
	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Response received from 95.110.254.165 (225 octets) ;; HEADER SECTION ;; id = 25620 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.it is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.net for rowanet.cz/SOA
	Received 274 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (274 octets) ;; HEADER SECTION ;; id = 13140 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2021082701 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20210926025801 20210827012801 6998 rowanet.cz. JMGKGKJNM0ARXZn5O5+FKnwrTMgFMB56YgmcookOJb71cC59/XKYyNIY59KhFPeBftQ53J7h3LcN lFziGCN5Tj5/iJat/AoCJr97Jtwc6CAituZeDHnIGsdAc3azNAyVa4zE7bGfAfSuTr+Vw3L0Z5QP r4Qqok315lF9zewGKPI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.cz for rowanet.cz/SOA
	Received 274 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (274 octets) ;; HEADER SECTION ;; id = 30259 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN SOA ;; ANSWER SECTION (2 records) rowanet.cz. 3600 IN SOA ( ns.forpsi.net. admin.forpsi.com. 2021082701 ;serial 3600 ;refresh 1800 ;retry 2592000 ;expire 3600 ;minimum ) rowanet.cz. 3600 IN RRSIG ( SOA 10 2 3600 20210926025801 20210827012801 6998 rowanet.cz. JMGKGKJNM0ARXZn5O5+FKnwrTMgFMB56YgmcookOJb71cC59/XKYyNIY59KhFPeBftQ53J7h3LcN lFziGCN5Tj5/iJat/AoCJr97Jtwc6CAituZeDHnIGsdAc3azNAyVa4zE7bGfAfSuTr+Vw3L0Z5QP r4Qqok315lF9zewGKPI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns.forpsi.it for rowanet.cz/A
	Received 225 bytes from 95.110.254.165
	;; Response received from 95.110.254.165 (225 octets) ;; HEADER SECTION ;; id = 64525 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= )`
	RRSIG=6998 and DNSKEY=6998 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (225 octets) ;; HEADER SECTION ;; id = 45495 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.net is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.net for rowanet.cz/A
	Received 225 bytes from 81.2.194.130
	;; Response received from 81.2.194.130 (225 octets) ;; HEADER SECTION ;; id = 11151 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= )`
	RRSIG=6998 and DNSKEY=6998 verifies the A RRset

rowanet.cz

	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (225 octets) ;; HEADER SECTION ;; id = 29943 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns.forpsi.cz is authoritative for rowanet.cz
	Found RRSIG signed by rowanet.cz zone
	Query to ns.forpsi.cz for rowanet.cz/A
	Received 225 bytes from 81.2.209.185
	;; Response received from 81.2.209.185 (225 octets) ;; HEADER SECTION ;; id = 27043 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; rowanet.cz. IN A ;; ANSWER SECTION (2 records) rowanet.cz. 1800 IN A 195.113.207.58 rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	rowanet.cz A RR has value 195.113.207.58
	Found 1 RRSIGs over A RRset
	`rowanet.cz. 1800 IN RRSIG ( A 10 2 1800 20210926025801 20210827012801 6998 rowanet.cz. FOVwicuvsmU9enZNeEqrZx97i3swmfUPLAaHqy+1MKor0H4qfN24MmK4I4fUG0NPka30aev1ZLUZ ovJGb011coeR96PXlB5BylU/vueyQ9XYQVIqNY2XsdLgvjass3fc/62oTEmjHZi9W/kTTrmZVvwT l4UXK1fAynNkNrZFoZ8= )`
	RRSIG=6998 and DNSKEY=6998 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test rowanet.cz at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: