DNSSEC Analyzer - schweter.eu

Domain Name:

Time: 2022-11-28 18:21:16 UTC, NTP stratum 16

Analyzing DNSSEC problems for schweter.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to e.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (864 octets) ;; HEADER SECTION ;; id = 1758 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAeB54o2xvW6vY4qQZ0krDsEZCe6MsRWCqsXd4+cNJZMePnlV/xwDrIbbeH1SJzv742rOHzgA KM1/3SQHHSkoEIPx8XQdHAZBxfhaXl3e8c5WrE3aGXS5AeTWAkt85ccqWgKyitxjFmJEOol0BqS2 xueltaDwgWcC10nPUY+y5l/kTOYyptYQS4gg1uJNXIob/R1XIEJ10ZCurkYqZxgqyHc7tZv09N23 o9rnGdjnYiArH7FjlXD8Rvjde8YWkmfdbCEWnchrnxDK8KV2/ZvBpG/WYnRKXYPUceGCw59OJdJ5 M7utkm547RB3eEd8CVVhbXopZlsKq3GCrBwaIVe9ci0= ) ; Key ID = 18733`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20221211000000 20221120000000 20326 . Y8Or1olHbjYMKfZxcKA8mP9+GWhl66Cu6Mrjh9NzLuBZ+14JZodwSJ5JaXzJxRzgHxTd/TWvnI4b AM/DQ8NYyRX/QezQdGU4ZE5RcrZLanxuX/FQR/qIMlLttCsoPtlM677HA3CecqLljbrcayIDSKMg hh5iKV1iOoW1BP1KZwgH4Y87fiWbevk+AmN5xbJCPk1iCis+kMulacxTFC+g0jyLv1V0C2hneqZ5 8os/QvW7XNBWLd9OC1LbMVVkfgUsVYqfwLjcieQ5YVRshfy2Iazv2sLo87sGvBnLmSUx8F4hiotE K6UjTNNun1tKe0VTBVkXQyaIzfUOkPgoMoWojg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=18733 is now in the chain-of-trust
	Query to g.root-servers.net for schweter.eu/A
	Received 683 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (683 octets) ;; HEADER SECTION ;; id = 55914 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . CfAFd519CyFoW0kaBxOoU2fNwI8Q71jvw6SKsMzWVeSzY3ed+hgm6a0rmPBQcOzxPc4IcGbf53HO BblNSL6khexe7R3Dcsq4HnwR2Pptg7c/BxBe60aQqOfi4aTog4vdeZWp2EiMCAnewm1sRGCZHSHc Go3VWAlk1QuJBBHxChgUJUM8og65XamgcbqXXjcwJBGXTFjkP4nZ0Pyphtuue34sMUTqbG42k/0q c1RrrJeCeDRahvFBbuyImXM5bllLoKOYcCe+F01bgfM5JJIGfP3jima4PzCTxWU4uHfSgczIVTQ+ rdrWen+56YdLsVsPD3IEz7HCaKNIoODv48CqeQ== ) ;; ADDITIONAL SECTION (11 records) si.dns.eu. 172800 IN A 193.2.221.62 be.dns.eu. 172800 IN A 149.38.1.26 y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 w.dns.eu. 172800 IN A 194.0.25.28 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 w.dns.eu. 172800 IN AAAA 2001:678:20::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.root-servers.net for eu/DNSKEY
	Received 674 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (674 octets) ;; HEADER SECTION ;; id = 12048 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . CfAFd519CyFoW0kaBxOoU2fNwI8Q71jvw6SKsMzWVeSzY3ed+hgm6a0rmPBQcOzxPc4IcGbf53HO BblNSL6khexe7R3Dcsq4HnwR2Pptg7c/BxBe60aQqOfi4aTog4vdeZWp2EiMCAnewm1sRGCZHSHc Go3VWAlk1QuJBBHxChgUJUM8og65XamgcbqXXjcwJBGXTFjkP4nZ0Pyphtuue34sMUTqbG42k/0q c1RrrJeCeDRahvFBbuyImXM5bllLoKOYcCe+F01bgfM5JJIGfP3jima4PzCTxWU4uHfSgczIVTQ+ rdrWen+56YdLsVsPD3IEz7HCaKNIoODv48CqeQ== ) ;; ADDITIONAL SECTION (11 records) si.dns.eu. 172800 IN A 193.2.221.62 be.dns.eu. 172800 IN A 149.38.1.26 y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 w.dns.eu. 172800 IN A 194.0.25.28 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 w.dns.eu. 172800 IN AAAA 2001:678:20::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to c.root-servers.net for eu/DS
	Received 366 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (366 octets) ;; HEADER SECTION ;; id = 59465 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c ) eu. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . CfAFd519CyFoW0kaBxOoU2fNwI8Q71jvw6SKsMzWVeSzY3ed+hgm6a0rmPBQcOzxPc4IcGbf53HO BblNSL6khexe7R3Dcsq4HnwR2Pptg7c/BxBe60aQqOfi4aTog4vdeZWp2EiMCAnewm1sRGCZHSHc Go3VWAlk1QuJBBHxChgUJUM8og65XamgcbqXXjcwJBGXTFjkP4nZ0Pyphtuue34sMUTqbG42k/0q c1RrrJeCeDRahvFBbuyImXM5bllLoKOYcCe+F01bgfM5JJIGfP3jima4PzCTxWU4uHfSgczIVTQ+ rdrWen+56YdLsVsPD3IEz7HCaKNIoODv48CqeQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for eu in the . zone
	DS=35926/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20221211050000 20221128040000 18733 . CfAFd519CyFoW0kaBxOoU2fNwI8Q71jvw6SKsMzWVeSzY3ed+hgm6a0rmPBQcOzxPc4IcGbf53HO BblNSL6khexe7R3Dcsq4HnwR2Pptg7c/BxBe60aQqOfi4aTog4vdeZWp2EiMCAnewm1sRGCZHSHc Go3VWAlk1QuJBBHxChgUJUM8og65XamgcbqXXjcwJBGXTFjkP4nZ0Pyphtuue34sMUTqbG42k/0q c1RrrJeCeDRahvFBbuyImXM5bllLoKOYcCe+F01bgfM5JJIGfP3jima4PzCTxWU4uHfSgczIVTQ+ rdrWen+56YdLsVsPD3IEz7HCaKNIoODv48CqeQ== )`
	RRSIG=18733 and DNSKEY=18733 verifies the DS RRset
	DS=35926/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 35926 8 2 89b9ef0445904e7c6074b5bece823c3e264fbd91c103d10bde603412343ce70c )`
	Query to be.dns.eu for eu/DNSKEY
	Received 907 bytes from 149.38.1.26
	;; Response received from 149.38.1.26 (907 octets) ;; HEADER SECTION ;; id = 17638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcW1A2l2ZeYFtk0VwljXdmfQTjdivq63SkWAJvmslYso9hE6q180v0xgpvbgCUDDA+MML0jO mmW8F4KDe65pBm+Vhh6C3mROdDtUp3EG8ADRUmIIkHov9C8qcxYAvNewVhZDUeomLAMjbt8eZCL9 sz4VSqzvhz8zlXV/svqWVe6z ) ; Key ID = 21819 eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; Key ID = 35926 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221201090000 20221124080000 21819 eu. Gtmy5Nwjbi1pbyB6MOfZ28k1NrEVzOneVeY6DASrj3qfQfg+ox4Mel5b+1Ljr1gHB+vW/mW7g8RA WZhp7PHNLVxWJTempuWi9h9Nztz1XCrCiWTddZ+u9sx+8246mlq200V/AZmeOz310awIWHkUYLJg Q9Fl6LyJEHekiPbgCOo= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221201090000 20221124080000 35926 eu. f+cfzUogrx5GXV7kFrtQ38cpR9GFGPlAUEhNzIZwLbB5NjDrgZnBnNXq5ZV2weyHkR3Wx6YYIh3L fWxkTXYimMKaaGDZB5ExXQhzOBaHh+885aKyd6sDD+HWbxrhp12fqhdvk0SzWn+AkiaqZFk29g4y yty35rMEPgdEZeWNjVmY7O8aAFo1FftuN744kDOgQe2bjTaDeceSxbQqxpq8duuHglTx+H6pii1E t9u6TEcrWy+rCkyJrgI8cbhRM0udZmHEcqUQc/hOzb4AtQP/tMKBjbtg5E6SDd4qX+5vykDFQXoY lwQQwY5wOVXpnSFIIa7bHUAdzO29TSSQ2nyg6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAcW1A2l2ZeYFtk0VwljXdmfQTjdivq63SkWAJvmslYso9hE6q180v0xgpvbgCUDDA+MML0jO mmW8F4KDe65pBm+Vhh6C3mROdDtUp3EG8ADRUmIIkHov9C8qcxYAvNewVhZDUeomLAMjbt8eZCL9 sz4VSqzvhz8zlXV/svqWVe6z ) ; Key ID = 21819`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAAbJ8TS+AT4YcbvV3qs9Nib4d043W6piSjCaa2MtH8X8KRrZ/kwQ84Vq/OOHy4igWALloUiYC dzE2EA6ve9I6PmbuoovV7s/pA0rSrOn30ZeB9c6PNWNqQINi0UJXXpUIhqeowjvDX4iICyyRM+at ttW4/BoptctOT73lDgYXlLigMNhoqYV77H/MyA3ogdOyQZOOBzD61qF5IooNNQy6QcH6nDLFCSha rM9aLuJ3alYDYlq6+TXNsUL9GSjKqEa8ToxRuEXlm7qwDYuJYooWBU3q7faKA1/DTLGu4v/FXkuY Dv7xO9m8DstBACwsJdEboAt6EKcG8Xqk8LD127keoQk= ) ; Key ID = 35926`
	DNSKEY=35926/SEP is now in the chain-of-trust
	DS=35926/SHA-256 verifies DNSKEY=35926/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221201090000 20221124080000 21819 eu. Gtmy5Nwjbi1pbyB6MOfZ28k1NrEVzOneVeY6DASrj3qfQfg+ox4Mel5b+1Ljr1gHB+vW/mW7g8RA WZhp7PHNLVxWJTempuWi9h9Nztz1XCrCiWTddZ+u9sx+8246mlq200V/AZmeOz310awIWHkUYLJg Q9Fl6LyJEHekiPbgCOo= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20221201090000 20221124080000 35926 eu. f+cfzUogrx5GXV7kFrtQ38cpR9GFGPlAUEhNzIZwLbB5NjDrgZnBnNXq5ZV2weyHkR3Wx6YYIh3L fWxkTXYimMKaaGDZB5ExXQhzOBaHh+885aKyd6sDD+HWbxrhp12fqhdvk0SzWn+AkiaqZFk29g4y yty35rMEPgdEZeWNjVmY7O8aAFo1FftuN744kDOgQe2bjTaDeceSxbQqxpq8duuHglTx+H6pii1E t9u6TEcrWy+rCkyJrgI8cbhRM0udZmHEcqUQc/hOzb4AtQP/tMKBjbtg5E6SDd4qX+5vykDFQXoY lwQQwY5wOVXpnSFIIa7bHUAdzO29TSSQ2nyg6g== )`
	RRSIG=21819 and DNSKEY=21819 verifies the DNSKEY RRset
	RRSIG=35926 and DNSKEY=35926/SEP verifies the DNSKEY RRset
	DNSKEY=21819 is now in the chain-of-trust
	Query to be.dns.eu for schweter.eu/A
	Received 297 bytes from 149.38.1.26
	;; Response received from 149.38.1.26 (297 octets) ;; HEADER SECTION ;; id = 15688 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20221203103209 20221126101921 21819 eu. mTKrGsTVvcJn3uN1tuPexr4Rb3dhRgUtsmfTPwPwXljJ4gzudzjkQdRfxDH4KeqVjkQQI1QuUcwj QDBybJG4CgIl5n+fyxoY5JHnRipi/7dagVBK3eV1bVVHKjDrMbA/vTSS/bYYwt2nFosw7AeWa+qD fzzx8nC6twgCdL04MoE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to w.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 194.0.25.28
	;; Response received from 194.0.25.28 (297 octets) ;; HEADER SECTION ;; id = 32068 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20221203103209 20221126101921 21819 eu. mTKrGsTVvcJn3uN1tuPexr4Rb3dhRgUtsmfTPwPwXljJ4gzudzjkQdRfxDH4KeqVjkQQI1QuUcwj QDBybJG4CgIl5n+fyxoY5JHnRipi/7dagVBK3eV1bVVHKjDrMbA/vTSS/bYYwt2nFosw7AeWa+qD fzzx8nC6twgCdL04MoE= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to x.dns.eu for schweter.eu/DS
	Received 250 bytes from 185.151.141.1
	;; Response received from 185.151.141.1 (250 octets) ;; HEADER SECTION ;; id = 10305 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20221203103209 20221126101921 21819 eu. mTKrGsTVvcJn3uN1tuPexr4Rb3dhRgUtsmfTPwPwXljJ4gzudzjkQdRfxDH4KeqVjkQQI1QuUcwj QDBybJG4CgIl5n+fyxoY5JHnRipi/7dagVBK3eV1bVVHKjDrMbA/vTSS/bYYwt2nFosw7AeWa+qD fzzx8nC6twgCdL04MoE= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20221203103209 20221126101921 21819 eu. mTKrGsTVvcJn3uN1tuPexr4Rb3dhRgUtsmfTPwPwXljJ4gzudzjkQdRfxDH4KeqVjkQQI1QuUcwj QDBybJG4CgIl5n+fyxoY5JHnRipi/7dagVBK3eV1bVVHKjDrMbA/vTSS/bYYwt2nFosw7AeWa+qD fzzx8nC6twgCdL04MoE= )`
	RRSIG=21819 and DNSKEY=21819 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns3.powerdns.de for schweter.eu/DNSKEY
	Received 763 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (763 octets) ;; HEADER SECTION ;; id = 54805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221208000000 20221117000000 27844 schweter.eu. dz9JY6AYSzlf/T6kM+4xCMrrorwSPdzHFCdgy4iM+k79OM1uOyGkFs5HJ6BnkM5GiZzb5inkbAS5 4wGd0XJMInrDYn7QKF691Rwfu0veFqMec+myzzaZ1T+yqHipxIeg1HKZ3YMhGupWqH05sDzxHjUx KHwEF802vNCYVxP1aJ4swEE59jRx299vLW19t2yBL9j9YKk3NYmcE63jK4HISkaglKdu4c9jibWz 9YxLa/DNpOX64IKLSaIXgRZWzfwXF/TGlI6ziJxVKQxixKOnEWHU9/njOUypF2Jd+jt1+JqQIb0o 4bfJuMtgThONjml6HFZqOJ16R/DZ2q3GKmMVig== ) schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20221208000000 20221117000000 27844 schweter.eu. dz9JY6AYSzlf/T6kM+4xCMrrorwSPdzHFCdgy4iM+k79OM1uOyGkFs5HJ6BnkM5GiZzb5inkbAS5 4wGd0XJMInrDYn7QKF691Rwfu0veFqMec+myzzaZ1T+yqHipxIeg1HKZ3YMhGupWqH05sDzxHjUx KHwEF802vNCYVxP1aJ4swEE59jRx299vLW19t2yBL9j9YKk3NYmcE63jK4HISkaglKdu4c9jibWz 9YxLa/DNpOX64IKLSaIXgRZWzfwXF/TGlI6ziJxVKQxixKOnEWHU9/njOUypF2Jd+jt1+JqQIb0o 4bfJuMtgThONjml6HFZqOJ16R/DZ2q3GKmMVig== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (227 octets) ;; HEADER SECTION ;; id = 4922 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns4.powerdns.de for schweter.eu/SOA
	Received 278 bytes from 116.203.122.234
	;; Response received from 116.203.122.234 (278 octets) ;; HEADER SECTION ;; id = 65454 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20221208000000 20221117000000 63294 schweter.eu. rY7/PA8CK2xi1jp73uhvf1SJw/abOUe6hBOcvQR0JiNZ/Dpkj7bfzzRE1z3eO4XWftFUjH8jVdPY 4vKAFxPfv8NeUrKno9fjWXyDQ/3uAlgPyJOVyXGYnqtdmR4ck2YIfQY9KLgZqyF7x16ocBz3goOs FIelvnC0fSnkcm7pyLo= ) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (227 octets) ;; HEADER SECTION ;; id = 62433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

schweter.eu

	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Response received from 116.203.122.234 (227 octets) ;; HEADER SECTION ;; id = 25426 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Response received from 116.203.122.234 (227 octets) ;; HEADER SECTION ;; id = 25079 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20221208000000 20221117000000 63294 schweter.eu. gxhbJtF2LnI7a2a3OaIGqvkTXDmslI61rO0/0wiY1EH93AY8d1HddIRpffXyPnk2SfN6db7hybdP r99/dO/jJ9iSqCLCxFV8iUXgFdwapXvQM2d4uL/rC0L7xQjnBvqCeopKyWUlETeemzcFj0Gf5GiE Q7Sf/lj5/djRcT3uYis= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: