DNSSEC Analyzer - schweter.eu

Domain Name:

Time: 2021-04-22 11:20:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for schweter.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Answer received from 192.36.148.17 (865 bytes) ;; HEADER SECTION ;; id = 30805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to k.root-servers.net for schweter.eu/A
	Received 655 bytes from 193.0.14.129
	;; Answer received from 193.0.14.129 (655 bytes) ;; HEADER SECTION ;; id = 2866 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . Po71MQVZ7SgB64nkUQApD1gW5w5/4GXXVkP7u1lQaifRQkMr3K3LOox18vzQebcCHSRz3CUPyUgD mkA6HwSI05xpMulPusf3gOUIYEd5KjtDvZRnGhq9U0IYjzlQiw10VcAJEEreFi96A070kV6qJisa gh+CBu+vcOoS7d2lsOW7r6E1huEL+X+RZjGDxb8EbH5Mf4ki7oWOHUGK7MXJf7zzgeO3NWDww23s 1sq1sRMAiF6II2mVxUlEYgjVc4q1mSnpinqtAIHhqvg23VAHNY4vc/pae+ZubUam2W1yOdbvTpis yb28Tp94OHgqS3uTJQkGXRUjqpTKbx7BJorTNA== ) ;; ADDITIONAL SECTION (10 records) si.dns.eu. 172800 IN A 193.2.221.60 nl.dns.eu. 172800 IN A 91.200.16.100 y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 w.dns.eu. 172800 IN A 194.0.25.28 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 w.dns.eu. 172800 IN AAAA 2001:678:20::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to m.root-servers.net for eu/DNSKEY
	Received 644 bytes from 202.12.27.33
	;; Answer received from 202.12.27.33 (644 bytes) ;; HEADER SECTION ;; id = 55636 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . Po71MQVZ7SgB64nkUQApD1gW5w5/4GXXVkP7u1lQaifRQkMr3K3LOox18vzQebcCHSRz3CUPyUgD mkA6HwSI05xpMulPusf3gOUIYEd5KjtDvZRnGhq9U0IYjzlQiw10VcAJEEreFi96A070kV6qJisa gh+CBu+vcOoS7d2lsOW7r6E1huEL+X+RZjGDxb8EbH5Mf4ki7oWOHUGK7MXJf7zzgeO3NWDww23s 1sq1sRMAiF6II2mVxUlEYgjVc4q1mSnpinqtAIHhqvg23VAHNY4vc/pae+ZubUam2W1yOdbvTpis yb28Tp94OHgqS3uTJQkGXRUjqpTKbx7BJorTNA== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to c.root-servers.net for eu/DS
	Received 366 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (366 bytes) ;; HEADER SECTION ;; id = 4483 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . Po71MQVZ7SgB64nkUQApD1gW5w5/4GXXVkP7u1lQaifRQkMr3K3LOox18vzQebcCHSRz3CUPyUgD mkA6HwSI05xpMulPusf3gOUIYEd5KjtDvZRnGhq9U0IYjzlQiw10VcAJEEreFi96A070kV6qJisa gh+CBu+vcOoS7d2lsOW7r6E1huEL+X+RZjGDxb8EbH5Mf4ki7oWOHUGK7MXJf7zzgeO3NWDww23s 1sq1sRMAiF6II2mVxUlEYgjVc4q1mSnpinqtAIHhqvg23VAHNY4vc/pae+ZubUam2W1yOdbvTpis yb28Tp94OHgqS3uTJQkGXRUjqpTKbx7BJorTNA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . Po71MQVZ7SgB64nkUQApD1gW5w5/4GXXVkP7u1lQaifRQkMr3K3LOox18vzQebcCHSRz3CUPyUgD mkA6HwSI05xpMulPusf3gOUIYEd5KjtDvZRnGhq9U0IYjzlQiw10VcAJEEreFi96A070kV6qJisa gh+CBu+vcOoS7d2lsOW7r6E1huEL+X+RZjGDxb8EbH5Mf4ki7oWOHUGK7MXJf7zzgeO3NWDww23s 1sq1sRMAiF6II2mVxUlEYgjVc4q1mSnpinqtAIHhqvg23VAHNY4vc/pae+ZubUam2W1yOdbvTpis yb28Tp94OHgqS3uTJQkGXRUjqpTKbx7BJorTNA== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to nl.dns.eu for eu/DNSKEY
	Received 1055 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (1055 bytes) ;; HEADER SECTION ;; id = 30378 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (5 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcV6ZZ/puVHgJP4PJOrE0dfIySYu85K16LCGwypS6s/vwGwfwlbOCBwK70b7pcQ8levqyFg1 QT5Rqd1uaD1MuYcpsJP9NYqkxJoOMUyyaDjbWjp3Agin7yiJi3nXjeXxdSwf13o4Ps5+oX+GQZPA oq1vUXjCQRteNd4Q94hxl3ER ) ; Key ID = 31326 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbm2DeERSCqorpBq69PhNv/9LWu8Cs64JaaFb1vSs3YqDx65ohmcvBUv9LTH+vBFZxIB0vgB I82YxQ94TfjHm9Wt103FlCOBlN7qIOW0mmh2AA08YHh5dFkhuCGWSZ2KeN/A+PuSok3MoIc0b3cJ wWq8aSw/5vPSKHW6BS6d4J+L ) ; Key ID = 37455 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210428090000 20210421080000 37455 eu. Dod5/mj/ByC2mrC/edqKKiG0Pa7uqio2/8SbgDivRpb6eAQq/CWUFI2ydqVpMP545v/GDs07/AqH tWEVreHgMobNeOXuhoZgqsta0bLChy1SkIDFf0XklASKQz+uxJrWqvXolCI6zS3hLb34PbR4+TL0 ey6fICzHloZD0cq1T8U= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210428090000 20210421080000 59479 eu. yGjbLFmpNFXMPST3XPWGC3I0XuYHO+1Vjj+eV8Y/NGnQxfgVf8IsQdLRMWOkpp8b6ZHiu5KCZAmN 5R3H5n7ahju0KLg6sPDpP5P/RKq2BCfzkghunDQkpQRDJEFMhhf/klmJvRsarYDaJXubptzYHFcG Tsm3WvDbwQoiWpHXmEHghbPTNFerZfHhPNjh5RMKG62lwkffslmo5IiWQwZbtBt7NV2P1+NXeYmI nn+vEAQQRWaySUmsBOy55ATqGOCROMHpLcZFFWi5ZkKAV63slnMzotfnFi+BqW5Kx2nYe/efa3Wi ZdZhn/wu/ZTEpAvHkJ6gW66+8iffNAxRgnuayA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcV6ZZ/puVHgJP4PJOrE0dfIySYu85K16LCGwypS6s/vwGwfwlbOCBwK70b7pcQ8levqyFg1 QT5Rqd1uaD1MuYcpsJP9NYqkxJoOMUyyaDjbWjp3Agin7yiJi3nXjeXxdSwf13o4Ps5+oX+GQZPA oq1vUXjCQRteNd4Q94hxl3ER ) ; Key ID = 31326`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAbm2DeERSCqorpBq69PhNv/9LWu8Cs64JaaFb1vSs3YqDx65ohmcvBUv9LTH+vBFZxIB0vgB I82YxQ94TfjHm9Wt103FlCOBlN7qIOW0mmh2AA08YHh5dFkhuCGWSZ2KeN/A+PuSok3MoIc0b3cJ wWq8aSw/5vPSKHW6BS6d4J+L ) ; Key ID = 37455`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210428090000 20210421080000 37455 eu. Dod5/mj/ByC2mrC/edqKKiG0Pa7uqio2/8SbgDivRpb6eAQq/CWUFI2ydqVpMP545v/GDs07/AqH tWEVreHgMobNeOXuhoZgqsta0bLChy1SkIDFf0XklASKQz+uxJrWqvXolCI6zS3hLb34PbR4+TL0 ey6fICzHloZD0cq1T8U= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210428090000 20210421080000 59479 eu. yGjbLFmpNFXMPST3XPWGC3I0XuYHO+1Vjj+eV8Y/NGnQxfgVf8IsQdLRMWOkpp8b6ZHiu5KCZAmN 5R3H5n7ahju0KLg6sPDpP5P/RKq2BCfzkghunDQkpQRDJEFMhhf/klmJvRsarYDaJXubptzYHFcG Tsm3WvDbwQoiWpHXmEHghbPTNFerZfHhPNjh5RMKG62lwkffslmo5IiWQwZbtBt7NV2P1+NXeYmI nn+vEAQQRWaySUmsBOy55ATqGOCROMHpLcZFFWi5ZkKAV63slnMzotfnFi+BqW5Kx2nYe/efa3Wi ZdZhn/wu/ZTEpAvHkJ6gW66+8iffNAxRgnuayA== )`
	RRSIG=37455 and DNSKEY=37455 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=31326 is now in the chain-of-trust
	DNSKEY=37455 is now in the chain-of-trust
	Query to w.dns.eu for schweter.eu/A
	Received 297 bytes from 194.0.25.28
	;; Answer received from 194.0.25.28 (297 bytes) ;; HEADER SECTION ;; id = 45399 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210426154602 20210419153430 31326 eu. OX2a8x+1C3ZPnaONlC40D8up3J0txtTIwBlsTRgH2Hy/qO2fPRBjE10CWe2SROa09melS0wxhkr2 cgUwCsNIhusR9sWrk68dbxb5XH5N2J0pj5Es07lKlem16ZG+Jz8BjcdOJufKETSB/it0E12t7wfL P2Jt2i2ZW1tGq31b38Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to nl.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (297 bytes) ;; HEADER SECTION ;; id = 10387 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210426154602 20210419153430 31326 eu. OX2a8x+1C3ZPnaONlC40D8up3J0txtTIwBlsTRgH2Hy/qO2fPRBjE10CWe2SROa09melS0wxhkr2 cgUwCsNIhusR9sWrk68dbxb5XH5N2J0pj5Es07lKlem16ZG+Jz8BjcdOJufKETSB/it0E12t7wfL P2Jt2i2ZW1tGq31b38Q= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to y.dns.eu for schweter.eu/DS
	Received 250 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (250 bytes) ;; HEADER SECTION ;; id = 51162 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210426154602 20210419153430 31326 eu. OX2a8x+1C3ZPnaONlC40D8up3J0txtTIwBlsTRgH2Hy/qO2fPRBjE10CWe2SROa09melS0wxhkr2 cgUwCsNIhusR9sWrk68dbxb5XH5N2J0pj5Es07lKlem16ZG+Jz8BjcdOJufKETSB/it0E12t7wfL P2Jt2i2ZW1tGq31b38Q= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20210426154602 20210419153430 31326 eu. OX2a8x+1C3ZPnaONlC40D8up3J0txtTIwBlsTRgH2Hy/qO2fPRBjE10CWe2SROa09melS0wxhkr2 cgUwCsNIhusR9sWrk68dbxb5XH5N2J0pj5Es07lKlem16ZG+Jz8BjcdOJufKETSB/it0E12t7wfL P2Jt2i2ZW1tGq31b38Q= )`
	RRSIG=31326 and DNSKEY=31326 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns4.powerdns.de for schweter.eu/DNSKEY
	Received 763 bytes from 116.203.122.234
	;; Answer received from 116.203.122.234 (763 bytes) ;; HEADER SECTION ;; id = 49574 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210506000000 20210415000000 27844 schweter.eu. ZEFMHkHWd45MiFeAe/MaPbzlOv5TdHZNS+hmAPSRCtEBDOEGZphSw0nj+adtTOhIcWMHMuLD1C1O eFQ4FCl0bzsjx9xcFEN7XtEINl+xBZIjbAzgR+cBH+oZYHMcZ2wwmtwA8pFh9nvTfW7PUJwPtvsw DV/Ib8afoXJb5vYIX61Ccgcl1ymQtoW0QuyMANTZrXtew/2nkwiSXfwQirwW2sYWMosLUOLdOPi7 Vxd/eq+jUae1jxWZ2Yc9yjAjfrNjsKz/otA/EjXMgBPrHBtBSS711RTmOC85WogEH5XkX7tIQMts Vb8Db4P9gu7ip0ywrL3ph66KlFZmrDu4nzrkrw== ) schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20210506000000 20210415000000 27844 schweter.eu. ZEFMHkHWd45MiFeAe/MaPbzlOv5TdHZNS+hmAPSRCtEBDOEGZphSw0nj+adtTOhIcWMHMuLD1C1O eFQ4FCl0bzsjx9xcFEN7XtEINl+xBZIjbAzgR+cBH+oZYHMcZ2wwmtwA8pFh9nvTfW7PUJwPtvsw DV/Ib8afoXJb5vYIX61Ccgcl1ymQtoW0QuyMANTZrXtew/2nkwiSXfwQirwW2sYWMosLUOLdOPi7 Vxd/eq+jUae1jxWZ2Yc9yjAjfrNjsKz/otA/EjXMgBPrHBtBSS711RTmOC85WogEH5XkX7tIQMts Vb8Db4P9gu7ip0ywrL3ph66KlFZmrDu4nzrkrw== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Answer received from 116.203.122.234 (227 bytes) ;; HEADER SECTION ;; id = 7575 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Received 278 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (278 bytes) ;; HEADER SECTION ;; id = 34245 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20210506000000 20210415000000 63294 schweter.eu. wyb7xolslOMyfzCIm+40S7mOqhSB1ZQb4YSF1mD2u+F0cQ8jkyJ2Q6HStxz2CUWR/+fqYxvHBs5N 4MWgb5ScIo83vynO6kkw8PML8lO2dOh7XwXwff/K5QuQuJEV+CJirHDGrZVkHySsOx5oZuWcVN4W +1wy7MZDsuB6X4frC+g= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Answer received from 116.203.122.234 (227 bytes) ;; HEADER SECTION ;; id = 13015 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

schweter.eu

	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 24201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Answer received from 194.117.254.28 (227 bytes) ;; HEADER SECTION ;; id = 10853 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20210506000000 20210415000000 63294 schweter.eu. aUNc3k8aoUsmWFjadvSVFqnNw34GxAs4XiIHxu5WrqB+LvaFCBd0okuQDHJL8XJCLFJ+x4ede5lh EFFZD+6XxNjxEZ2L8BU6V12+BymDR7OqcRaA1WTZvDRkr+tqeXO5ALYZp56yBO2Wt1yBQC7IKDAk q0zQz2o5hM+c9d3P1Oo= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: