DNSSEC Analyzer - schweter.eu

Domain Name:

Time: 2022-08-16 03:58:13 UTC, NTP stratum 16

Analyzing DNSSEC problems for schweter.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 22415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAaQVKIqdmeLCaF4lq+IoKpejId9qqoIbZJ6cjB5MfyJYX3KVFXYyJ9rt4jKOwf4m2BoDOY66 V1upRumF+eu502HXzdOdJlioRLA9YiRyLgvfjzyfUYrExYT4/TDTS4XfQX2UcJDN5C7SQ9UxebZk /VjQfPAUU+hZKOcjOVRFbAHom4tIi+Rin0laGlAi8ZY5WUZypYKR0xvprtG0eXeOBMjbUt1EnhmO 2Bs52zC8B0cMjq6fMiYFUqtziALccsQczGngIDR0dIvvL54ky1JNNp19Ldy9ir27s7eRCYGbYI1W zR05/d4/nCmDSHkQS2BiesYufuWZZwm+FsitupCciwE= ) ; Key ID = 20826`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20220831000000 20220810000000 20326 . FJNYHZUipwrjUsDOPlE6hwUza6fRp2vwI294cL6vn5P9B5V2NT4Uf/wWoJvJlUdKPYhLSu2mfTM+ 2ufpNU9sHB+0Z1YXBj2zK8qQlT9S/BW5v4trLo1sZzK8uvl0hXKOwBsoOiNWdvqqtfqBTpz+mzWO bVSoCnNSUyIJkDyydvbJ9W2zqP+EY448BC87+BOGn+rY0yYy9dp5NYbrAOTQDF0pudHp43LHYedc AfDtjwVREPVEWYkisVpJoT3EZbF31h1Gb/+P7v84UHi6Mykq5hgQ1fV0PIMczp53moxgJxfzr1Y8 TIQnMy3xxmDxIiLXbaeUtkyBU2iMA1JJfWExyg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20826 is now in the chain-of-trust
	Query to j.root-servers.net for schweter.eu/A
	Received 681 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (681 octets) ;; HEADER SECTION ;; id = 47511 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . hAf649bkE9hnoopvN9h3eRgPG02lu3k2uhjrbSyLbz7ffK36QL4FuwAyy1bIeppo/UQMU94MrMmR zS1jm3XsOKC8ymHXNg3kZXfMOGq6snCm2jtpScUPCRVhTgIeWU8Z6KhzA60BJBAFFfiH229G1cPf n5Hy1s2FC/arVOd9yLqujkm8gL0qHtjbRLL4ZIzuCnYxEB2r4shzqPsHLE6QenAVM1zCh5neuChj 3FWfkD2kgENeiZarwmSZ0k3DhtteJZUPuyuExG2k+K5GtlpiSb9FPDlCcXejnVGrFX7o/6zjsFxU 7wuYLCjwD131RD8mFXvrbrG66zzhVB2fK4cSvA== ) ;; ADDITIONAL SECTION (11 records) y.dns.eu. 172800 IN A 194.146.106.90 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 be.dns.eu. 172800 IN A 149.38.1.26 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 w.dns.eu. 172800 IN A 194.0.25.28 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN A 185.151.141.1 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 si.dns.eu. 172800 IN A 193.2.221.62 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to c.root-servers.net for eu/DNSKEY
	Received 674 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (674 octets) ;; HEADER SECTION ;; id = 49422 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS be.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . hAf649bkE9hnoopvN9h3eRgPG02lu3k2uhjrbSyLbz7ffK36QL4FuwAyy1bIeppo/UQMU94MrMmR zS1jm3XsOKC8ymHXNg3kZXfMOGq6snCm2jtpScUPCRVhTgIeWU8Z6KhzA60BJBAFFfiH229G1cPf n5Hy1s2FC/arVOd9yLqujkm8gL0qHtjbRLL4ZIzuCnYxEB2r4shzqPsHLE6QenAVM1zCh5neuChj 3FWfkD2kgENeiZarwmSZ0k3DhtteJZUPuyuExG2k+K5GtlpiSb9FPDlCcXejnVGrFX7o/6zjsFxU 7wuYLCjwD131RD8mFXvrbrG66zzhVB2fK4cSvA== ) ;; ADDITIONAL SECTION (11 records) si.dns.eu. 172800 IN A 193.2.221.62 be.dns.eu. 172800 IN A 149.38.1.26 y.dns.eu. 172800 IN A 194.146.106.90 x.dns.eu. 172800 IN A 185.151.141.1 w.dns.eu. 172800 IN A 194.0.25.28 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::62 be.dns.eu. 172800 IN AAAA 2001:978:2:1::93:2 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 w.dns.eu. 172800 IN AAAA 2001:678:20::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to i.root-servers.net for eu/DS
	Received 366 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (366 octets) ;; HEADER SECTION ;; id = 11763 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . hAf649bkE9hnoopvN9h3eRgPG02lu3k2uhjrbSyLbz7ffK36QL4FuwAyy1bIeppo/UQMU94MrMmR zS1jm3XsOKC8ymHXNg3kZXfMOGq6snCm2jtpScUPCRVhTgIeWU8Z6KhzA60BJBAFFfiH229G1cPf n5Hy1s2FC/arVOd9yLqujkm8gL0qHtjbRLL4ZIzuCnYxEB2r4shzqPsHLE6QenAVM1zCh5neuChj 3FWfkD2kgENeiZarwmSZ0k3DhtteJZUPuyuExG2k+K5GtlpiSb9FPDlCcXejnVGrFX7o/6zjsFxU 7wuYLCjwD131RD8mFXvrbrG66zzhVB2fK4cSvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20220828170000 20220815160000 20826 . hAf649bkE9hnoopvN9h3eRgPG02lu3k2uhjrbSyLbz7ffK36QL4FuwAyy1bIeppo/UQMU94MrMmR zS1jm3XsOKC8ymHXNg3kZXfMOGq6snCm2jtpScUPCRVhTgIeWU8Z6KhzA60BJBAFFfiH229G1cPf n5Hy1s2FC/arVOd9yLqujkm8gL0qHtjbRLL4ZIzuCnYxEB2r4shzqPsHLE6QenAVM1zCh5neuChj 3FWfkD2kgENeiZarwmSZ0k3DhtteJZUPuyuExG2k+K5GtlpiSb9FPDlCcXejnVGrFX7o/6zjsFxU 7wuYLCjwD131RD8mFXvrbrG66zzhVB2fK4cSvA== )`
	RRSIG=20826 and DNSKEY=20826 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to si.dns.eu for eu/DNSKEY
	Received 1055 bytes from 193.2.221.62
	;; Response received from 193.2.221.62 (1055 octets) ;; HEADER SECTION ;; id = 34084 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 5 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (5 records) eu. 86400 IN DNSKEY ( 256 3 8 AwEAAa/Nkdvim4Ctffodd0VDtlIjCUWV9QCPmPvbm7wwBqGI88FCJBnOWH3qmtV3BBP82yHaw3MC NWY+L/+okhxX9I5vrf6UpFhMKnqo+C73CZsZ+nX828FKenbdtg//c5cn+emLrYWJ9jKTnfVH/0aN VYikdv8Hyx0hOc1aVlOHCM+R ) ; Key ID = 14766 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAc0keRgXM8K2ju0VPkfx8itHB1i/ZQ6wi5BYWVUHky1nv56jzV0GzRT3EhmBomdUMrDPyYp8 OYQPvm3OUba8is7ns/qwOvV1xjBy6RCV5wLnZW886awYLV9GRgmGygn2ePCmlq1FFhwS+HQXm6PL N01SXeefOT0vyw6bYrO+2xCb ) ; Key ID = 16425 eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822090000 20220815080000 14766 eu. MULekXY0OrPNOkYeWoL27Pd4rdKHptS98t+ybQI9m//Muaeop1ufVJdBhn6dzooOaQCVHx+LGyRn SlXZ1kmY9UrDDDNPwoWWV8JRfrP0Q7Rkpre6JJ+I6Yw4avarDyeew/iUIK4VuaS2gzFZuETR6kpJ l8lcYjjQjsfFgELaWCU= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822090000 20220815080000 59479 eu. r1V0vdpKDznaDxeeHHy+9DISmoKCuXWHmSV8W0QHca/NSLo/jIZl9mckusTOQzb8g/SkX6cTWoy/ 3dHNokXqQqWjg85QvzbwJRGsb8VO4QxbOnbQlyZe3ECkpTWERczJAif9dgAd6PdH5Fbdr6PC3eFF p8BuaPiBNKy164iVWUeRv7ai44ILc7bvZ1fXZtnconbviCbqdIHLoeJAAYFOJ8luO3bAoouzZW6M /wbKFWmieeNnN2D4+SR4nzsra5j9AOIWQY9hwv676GNKZ9phINqMUd2G3HgMSp7uPwROWJgYGCPl rHv0fIb0UiM3NZFze9JLFtp3yQ49ETarHumdsg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAa/Nkdvim4Ctffodd0VDtlIjCUWV9QCPmPvbm7wwBqGI88FCJBnOWH3qmtV3BBP82yHaw3MC NWY+L/+okhxX9I5vrf6UpFhMKnqo+C73CZsZ+nX828FKenbdtg//c5cn+emLrYWJ9jKTnfVH/0aN VYikdv8Hyx0hOc1aVlOHCM+R ) ; Key ID = 14766`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAc0keRgXM8K2ju0VPkfx8itHB1i/ZQ6wi5BYWVUHky1nv56jzV0GzRT3EhmBomdUMrDPyYp8 OYQPvm3OUba8is7ns/qwOvV1xjBy6RCV5wLnZW886awYLV9GRgmGygn2ePCmlq1FFhwS+HQXm6PL N01SXeefOT0vyw6bYrO+2xCb ) ; Key ID = 16425`
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822090000 20220815080000 14766 eu. MULekXY0OrPNOkYeWoL27Pd4rdKHptS98t+ybQI9m//Muaeop1ufVJdBhn6dzooOaQCVHx+LGyRn SlXZ1kmY9UrDDDNPwoWWV8JRfrP0Q7Rkpre6JJ+I6Yw4avarDyeew/iUIK4VuaS2gzFZuETR6kpJ l8lcYjjQjsfFgELaWCU= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20220822090000 20220815080000 59479 eu. r1V0vdpKDznaDxeeHHy+9DISmoKCuXWHmSV8W0QHca/NSLo/jIZl9mckusTOQzb8g/SkX6cTWoy/ 3dHNokXqQqWjg85QvzbwJRGsb8VO4QxbOnbQlyZe3ECkpTWERczJAif9dgAd6PdH5Fbdr6PC3eFF p8BuaPiBNKy164iVWUeRv7ai44ILc7bvZ1fXZtnconbviCbqdIHLoeJAAYFOJ8luO3bAoouzZW6M /wbKFWmieeNnN2D4+SR4nzsra5j9AOIWQY9hwv676GNKZ9phINqMUd2G3HgMSp7uPwROWJgYGCPl rHv0fIb0UiM3NZFze9JLFtp3yQ49ETarHumdsg== )`
	RRSIG=14766 and DNSKEY=14766 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=14766 is now in the chain-of-trust
	DNSKEY=16425 is now in the chain-of-trust
	Query to w.dns.eu for schweter.eu/A
	Received 297 bytes from 194.0.25.28
	;; Response received from 194.0.25.28 (297 octets) ;; HEADER SECTION ;; id = 22958 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20220820204207 20220813202623 14766 eu. gGlKa2X0XrBac08kxynFChatuACtRn/2HyqHuY86/GvISDSwm2qXeTybpXJ5ZOh/RSmsOFhcxHtv 1+U7fSgBDhC49TntxagNpemfsRjiIi7boqAAoqy0flfkm6I4cFaymlyrwt4m2CfqSpIeVpe0EEki aE15YYpbNX/lcKY4Ph4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	Query to be.dns.eu for schweter.eu/DNSKEY
	Received 297 bytes from 149.38.1.26
	;; Response received from 149.38.1.26 (297 octets) ;; HEADER SECTION ;; id = 61195 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) schweter.eu. 86400 IN NS ns3.powerdns.de. schweter.eu. 86400 IN NS ns4.powerdns.de. schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20220820204207 20220813202623 14766 eu. gGlKa2X0XrBac08kxynFChatuACtRn/2HyqHuY86/GvISDSwm2qXeTybpXJ5ZOh/RSmsOFhcxHtv 1+U7fSgBDhC49TntxagNpemfsRjiIi7boqAAoqy0flfkm6I4cFaymlyrwt4m2CfqSpIeVpe0EEki aE15YYpbNX/lcKY4Ph4= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone schweter.eu

schweter.eu

	Checking DS between eu and schweter.eu
	Query to x.dns.eu for schweter.eu/DS
	Received 250 bytes from 185.151.141.1
	;; Response received from 185.151.141.1 (250 octets) ;; HEADER SECTION ;; id = 28945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DS ;; ANSWER SECTION (2 records) schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b ) schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20220820204207 20220813202623 14766 eu. gGlKa2X0XrBac08kxynFChatuACtRn/2HyqHuY86/GvISDSwm2qXeTybpXJ5ZOh/RSmsOFhcxHtv 1+U7fSgBDhC49TntxagNpemfsRjiIi7boqAAoqy0flfkm6I4cFaymlyrwt4m2CfqSpIeVpe0EEki aE15YYpbNX/lcKY4Ph4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 1 DS records for schweter.eu in the eu zone
	DS=27844/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`schweter.eu. 86400 IN RRSIG ( DS 8 2 86400 20220820204207 20220813202623 14766 eu. gGlKa2X0XrBac08kxynFChatuACtRn/2HyqHuY86/GvISDSwm2qXeTybpXJ5ZOh/RSmsOFhcxHtv 1+U7fSgBDhC49TntxagNpemfsRjiIi7boqAAoqy0flfkm6I4cFaymlyrwt4m2CfqSpIeVpe0EEki aE15YYpbNX/lcKY4Ph4= )`
	RRSIG=14766 and DNSKEY=14766 verifies the DS RRset
	DS=27844/SHA-256 is now in the chain-of-trust
	`schweter.eu. 86400 IN DS ( 27844 8 2 2e08801ef5cab6a57bbe793e45e7a40c243b1ccff7dbb8791279a1d81e40df8b )`
	Query to ns3.powerdns.de for schweter.eu/DNSKEY
	Received 763 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (763 octets) ;; HEADER SECTION ;; id = 19433 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN DNSKEY ;; ANSWER SECTION (3 records) schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844 schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825000000 20220804000000 27844 schweter.eu. TKb9XDRVDqnPyjNxmRLOdsqt901BFMFzmX/l1sor/Aqe2aYrcFGcBI9JpcgWFj2JmHY90v4l+rm8 lLY8Ph8ixMKKHvNah+9oXlZuFOnOCMr9PrF2gngL3YBAJfZvHtVLb5ERFlIxEPCaL/iufGc6QWVM jGCpRFkkoq/Jb+nOL4XwIcgTRbVEQWRWFu+rrsD9jN4hcY7uc9h6Bi9t0dBiMVkKOZO0lEKBdB3S up/qghBOEL9mQTbOl3gqHyRPD7w+Sue3/PJMwHtWH0W5FxccKJI1LfgwxsdPhwQpaya4/s22wue2 jfDD8OkE1cX8r4UHMouMCIvGYKYt7aFDLFnaFQ== ) schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for schweter.eu
	`schweter.eu. 3600 IN DNSKEY ( 257 3 8 AwEAAbU5gdvNdeKTWOl/mbiURAg7WYmf2byr43809QhO4wVVJB9eZIPzOu0C8Hlc880svy+SCxuO YxiNV69UYfiiCKUKSi1NIY7qUqBNRQ0SOSxRC6z0DJ5a2JWUgtT7XJL5Eo7BiVjMChqrQ9REsSIX mlYNqBh3dsem+VaJzjkCjKJNNoflhGOvR0Khcw7IUyWlQKNylq1p4nn9hYqoBgr5M6+paJdTVL64 ODNglbgllIiCNEKY7HZ+rtreht9yx9NVPnXir7naV9iRE1o5IHWGkK652NkCdvco0S6AyhM9hLNH uPjIaryINk1DsYj89Xh8qFF2RDmiaR+FAOHVVjJHVB0= ) ; Key ID = 27844`
	`schweter.eu. 3600 IN DNSKEY ( 256 3 8 AwEAAdSvzJKgfugc9yULRNLHmBw1FOo/54DnfobGcSbrSFU6pN8eriiKi5ZQbtli3ui7aFUfvcI5 2UP1GFUDmMwjCk06aMwy8gu6/LzLfxzLNGvv8kRl/+twfhLetBVhISPAJudqQSDPklGObVv+dH/j 2qLA/4O5yRd3g8ZqgAGHW1Jt ) ; Key ID = 63294`
	DNSKEY=27844/SEP is now in the chain-of-trust
	DS=27844/SHA-256 verifies DNSKEY=27844/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`schweter.eu. 3600 IN RRSIG ( DNSKEY 8 2 3600 20220825000000 20220804000000 27844 schweter.eu. TKb9XDRVDqnPyjNxmRLOdsqt901BFMFzmX/l1sor/Aqe2aYrcFGcBI9JpcgWFj2JmHY90v4l+rm8 lLY8Ph8ixMKKHvNah+9oXlZuFOnOCMr9PrF2gngL3YBAJfZvHtVLb5ERFlIxEPCaL/iufGc6QWVM jGCpRFkkoq/Jb+nOL4XwIcgTRbVEQWRWFu+rrsD9jN4hcY7uc9h6Bi9t0dBiMVkKOZO0lEKBdB3S up/qghBOEL9mQTbOl3gqHyRPD7w+Sue3/PJMwHtWH0W5FxccKJI1LfgwxsdPhwQpaya4/s22wue2 jfDD8OkE1cX8r4UHMouMCIvGYKYt7aFDLFnaFQ== )`
	RRSIG=27844 and DNSKEY=27844/SEP verifies the DNSKEY RRset
	DNSKEY=63294 is now in the chain-of-trust
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Response received from 116.203.122.234 (227 octets) ;; HEADER SECTION ;; id = 47128 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/SOA
	Received 278 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (278 octets) ;; HEADER SECTION ;; id = 31336 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN SOA ;; ANSWER SECTION (2 records) schweter.eu. 3600 IN SOA ( ns3.powerdns.de. technik.udmedia.de. 2017032550 ;serial 10800 ;refresh 3600 ;retry 1209600 ;expire 3600 ;minimum ) schweter.eu. 3600 IN RRSIG ( SOA 8 2 3600 20220825000000 20220804000000 63294 schweter.eu. MCF8J1iX5rlt/e+twysrIOzSWlBTgmSfbV7AtpuAQ5R3qJ+tqsTFhy9vXeLz+OBY+K+hzYjfOGy4 gftbVQjp4fc/lfX+St7aymfNZtjUqRl9Vcw/urJ7g23o/BUkcUgWkxwFYnKD4SOUk3NOO+MvC0uv FixUF9vYt0L4wE4pXbI= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.powerdns.de for schweter.eu/A
	Received 227 bytes from 116.203.122.234
	;; Response received from 116.203.122.234 (227 octets) ;; HEADER SECTION ;; id = 42476 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= ) schweter.eu. 60 IN A 138.201.173.173 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

schweter.eu

	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (227 octets) ;; HEADER SECTION ;; id = 40102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3.powerdns.de is authoritative for schweter.eu
	Found RRSIG signed by schweter.eu zone
	Query to ns3.powerdns.de for schweter.eu/A
	Received 227 bytes from 194.117.254.28
	;; Response received from 194.117.254.28 (227 octets) ;; HEADER SECTION ;; id = 7144 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; schweter.eu. IN A ;; ANSWER SECTION (2 records) schweter.eu. 60 IN A 138.201.173.173 schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	schweter.eu A RR has value 138.201.173.173
	Found 1 RRSIGs over A RRset
	`schweter.eu. 60 IN RRSIG ( A 8 2 60 20220825000000 20220804000000 63294 schweter.eu. mjBd4CDOUShHG1wES1DlU6KjnTPNAnRoSN2FjWOLeKr+8YvtVh3flJDzveppovEcuXfVlbzUp1gV qSNguTVkSqSz/n2Ec+9V0k4481V101qAEsauDdUSx3qFu62nL+x2z7bpHAXF5ldXAaMJm4ckrys6 pNOQJoZFeOWL2Dtg0dw= )`
	RRSIG=63294 and DNSKEY=63294 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test schweter.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: