DNSSEC Analyzer - scolasti.co

Domain Name:

Time: 2021-04-22 11:41:15 UTC, NTP stratum 4

Analyzing DNSSEC problems for scolasti.co

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to b.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.9.14.201
	;; Answer received from 199.9.14.201 (864 bytes) ;; HEADER SECTION ;; id = 1105 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210512000000 20210421000000 20326 . bx5MOQGiU0gAwVPCF6fPBYdApVZCvs4fZ3603lzlRdtiHNsNSk2j/mVU7UD6oZkA/q/AIucEPGMD Lua0HNNnfhW8QsYssPHURJpcOUhgt17GinADGwADQYSI6fH12kFnb5wIZ/jznJ58dCdJDr0E7tg6 GarIqeu190nLM+sp75CNlKEG3HrrdSIGLWY8CFU1wLcU43ZAXaCiO5D6XwV8j7WUOs0n8XB48JzO yq4nZ/9Pt6Nl1QWT1UMrGZPPpBBeBKFeggIiGmDuzCn/nrk8F5zuN8f8RvhCxJZi1Kf6rEB0l79X XZ+JnpyjIJrNSNsDxeTQkO5NgXOrols1Gxv/QA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to d.root-servers.net for scolasti.co/A
	Received 789 bytes from 199.7.91.13
	;; Answer received from 199.7.91.13 (789 bytes) ;; HEADER SECTION ;; id = 38755 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . UIYIKY5/ahBEC2pvVC9Nkv23SExp7WHFOfwmgPhb/YQ7qKyOwqKFVwFAgQfIQzzZpppHrnz/CH6K JP3gAtbw6Db47njI1HZ4Mt5wte72KFk8C54D5xSNx6Rg1oALwuo5ZDomDaNrN+GVjMlgURiuqqkS N1KcW3NVNwOtSVVAFxLg/bGnZIx7K/AjdD4WwT0CSkamdiy0HSmxODOE0Tk8YkZrKB+nOnkSUwxm XokIqAMTdM2YV4j06vzlRi+Ndz9jdxDZ91Mgy3qZXxVYa5SW8lR2f0fAPLsSabFeAHDWEpYR21w+ /+Ild4Idvij73t3lAP6OFqpqB1z92C+Qj7yupg== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns5.cctld.co. 172800 IN A 156.154.104.25 ns6.cctld.co. 172800 IN A 156.154.105.25 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to l.root-servers.net for co/DNSKEY
	Received 780 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (780 bytes) ;; HEADER SECTION ;; id = 7281 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) co. 172800 IN NS ns1.cctld.co. co. 172800 IN NS ns2.cctld.co. co. 172800 IN NS ns3.cctld.co. co. 172800 IN NS ns4.cctld.co. co. 172800 IN NS ns5.cctld.co. co. 172800 IN NS ns6.cctld.co. co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . UIYIKY5/ahBEC2pvVC9Nkv23SExp7WHFOfwmgPhb/YQ7qKyOwqKFVwFAgQfIQzzZpppHrnz/CH6K JP3gAtbw6Db47njI1HZ4Mt5wte72KFk8C54D5xSNx6Rg1oALwuo5ZDomDaNrN+GVjMlgURiuqqkS N1KcW3NVNwOtSVVAFxLg/bGnZIx7K/AjdD4WwT0CSkamdiy0HSmxODOE0Tk8YkZrKB+nOnkSUwxm XokIqAMTdM2YV4j06vzlRi+Ndz9jdxDZ91Mgy3qZXxVYa5SW8lR2f0fAPLsSabFeAHDWEpYR21w+ /+Ild4Idvij73t3lAP6OFqpqB1z92C+Qj7yupg== ) ;; ADDITIONAL SECTION (13 records) ns1.cctld.co. 172800 IN A 37.209.192.14 ns1.cctld.co. 172800 IN AAAA 2001:dcd:1::14 ns2.cctld.co. 172800 IN A 37.209.194.14 ns2.cctld.co. 172800 IN AAAA 2001:dcd:2::14 ns3.cctld.co. 172800 IN A 37.209.196.14 ns3.cctld.co. 172800 IN AAAA 2001:dcd:3::14 ns4.cctld.co. 172800 IN A 156.154.103.25 ns4.cctld.co. 172800 IN AAAA 2610:a1:1010::21 ns5.cctld.co. 172800 IN A 156.154.104.25 ns5.cctld.co. 172800 IN AAAA 2610:a1:1011::21 ns6.cctld.co. 172800 IN A 156.154.105.25 ns6.cctld.co. 172800 IN AAAA 2610:a1:1012::21 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone co

	Checking DS between . and co
	Query to j.root-servers.net for co/DS
	Received 402 bytes from 192.58.128.30
	;; Answer received from 192.58.128.30 (402 bytes) ;; HEADER SECTION ;; id = 33201 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DS ;; ANSWER SECTION (3 records) co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e ) co. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . UIYIKY5/ahBEC2pvVC9Nkv23SExp7WHFOfwmgPhb/YQ7qKyOwqKFVwFAgQfIQzzZpppHrnz/CH6K JP3gAtbw6Db47njI1HZ4Mt5wte72KFk8C54D5xSNx6Rg1oALwuo5ZDomDaNrN+GVjMlgURiuqqkS N1KcW3NVNwOtSVVAFxLg/bGnZIx7K/AjdD4WwT0CSkamdiy0HSmxODOE0Tk8YkZrKB+nOnkSUwxm XokIqAMTdM2YV4j06vzlRi+Ndz9jdxDZ91Mgy3qZXxVYa5SW8lR2f0fAPLsSabFeAHDWEpYR21w+ /+Ild4Idvij73t3lAP6OFqpqB1z92C+Qj7yupg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DS records for co in the . zone
	DS=43834/SHA-1 has algorithm RSASHA256
	DS=43834/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`co. 86400 IN RRSIG ( DS 8 1 86400 20210505050000 20210422040000 14631 . UIYIKY5/ahBEC2pvVC9Nkv23SExp7WHFOfwmgPhb/YQ7qKyOwqKFVwFAgQfIQzzZpppHrnz/CH6K JP3gAtbw6Db47njI1HZ4Mt5wte72KFk8C54D5xSNx6Rg1oALwuo5ZDomDaNrN+GVjMlgURiuqqkS N1KcW3NVNwOtSVVAFxLg/bGnZIx7K/AjdD4WwT0CSkamdiy0HSmxODOE0Tk8YkZrKB+nOnkSUwxm XokIqAMTdM2YV4j06vzlRi+Ndz9jdxDZ91Mgy3qZXxVYa5SW8lR2f0fAPLsSabFeAHDWEpYR21w+ /+Ild4Idvij73t3lAP6OFqpqB1z92C+Qj7yupg== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=43834/SHA-1 is now in the chain-of-trust
	`co. 86400 IN DS 43834 8 1 4957ca93e0d6029ac8bfdf039ad22e98ad721adb`
	`co. 86400 IN DS ( 43834 8 2 a68602ec30c4e5f5d33a624d35549a7f6a2c93939d4b210ba8fa484f3b0e084e )`
	Query to ns6.cctld.co for co/DNSKEY
	Received 971 bytes from 156.154.105.25
	;; Answer received from 156.154.105.25 (971 bytes) ;; HEADER SECTION ;; id = 20589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; co. IN DNSKEY ;; ANSWER SECTION (4 records) co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278 co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834 co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 43834 co. bcHwaWQ8GW9AgqLfW7+YgZkfFjehN4igVs1yFxj+s6CSGfxDN6H2pYsjJqcI76NtlaLVjJBKazB2 05b8llZnPdo/BTbWMtSrTh/G6CxNhYm0Fm9v3vyFUbYjKy8Sz9L7k1BxqdnlrPRBuRzIn55EQ/aD WNxpsPsMIu22fHTahtjtCAEOrSHe91/2ZGvTZFRLU14yyZfpLWrcaYYoN54UYtdW5L5VWAmnSyK9 KYm1KIZtODkw0z4pzZrtTUuvh66v0ULVu8fGTXnb2N279UZmPSwslCKnGqeBHs1M5xuFC9WgO2Fs zIKv6lHB6vYIknX7KBaRgRTuCsP6gehAtX3EHg== ) co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 64278 co. qvF/mIM/RXHmC93lJsmrWaxHhVOfu9wKVOdRaWp95UQYEaleRsIeeaG0V0r9pLcveXwDAe/QeV+n CTPDeyi1cAY4KTpAFw8AhBx9i5K1XJrvboX/9s0SZshPhuLC6WEfUpqfCAOgiWez1rP1UbRV2c3f WOX/AW8uPm8uZwGDKyVWCF8dyvCYyjYBbpxB+Sp1tKHydo4+2sKPeOf88r6Ujw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for co
	`co. 518400 IN DNSKEY ( 256 3 8 AwEAAbxxPtO3Bg2vT2A2UqADyz1MbIEZlilHLo4lUVlOT99bYmBgKTCdxF57q7AsO3Td3NYW4EHe cseAkrz7uB/QAUZWqmhl9cIubuWRgHSFVMbdzLt5s2B8fbJCDStcS4vXhwB9Qu2RE0GhzvUWhz6q h/WWx8HCk+V7AdrJhEzGH7gQNRFNoQB5hULByru8BxgeqA/G+9gUQBrJFxdsGjwsi0s= ) ; Key ID = 64278`
	`co. 518400 IN DNSKEY ( 257 3 8 AwEAAbgZtC7b31VmpqgC+Q2OVqulkW16ZWOSR1NiXrEHJgjDCiEPzwq/mFPhb6/oS67U9/nXPulW O0QRe3I9e0w4XqSeBvYSI4gve8IFFIUzaAaO1rfowksg9QGOLxYJa6Xda0Biv6ov1S4Vx12jmLUa O4tk54GGaONbSF2WDxsjfeZFA42wv7hT/I384KeG5cEdtNPt2tbjHUwv0/kABkE/ockpS5+O9qZV WzTxaE5TkfC6XumioCWyVALjzTmL94NGCWM74lLfZhOv1XXQWWSmPTP1GL2lfnpz2UEiA5e1j9gm 2+T00xz7QAYtIllk+WLshXqiswlxooT67OHNDQ3I1mM= ) ; Key ID = 43834`
	DNSKEY=43834/SEP is now in the chain-of-trust
	DS=43834/SHA-1 verifies DNSKEY=43834/SEP
	DS=43834/SHA-256 verifies DNSKEY=43834/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 43834 co. bcHwaWQ8GW9AgqLfW7+YgZkfFjehN4igVs1yFxj+s6CSGfxDN6H2pYsjJqcI76NtlaLVjJBKazB2 05b8llZnPdo/BTbWMtSrTh/G6CxNhYm0Fm9v3vyFUbYjKy8Sz9L7k1BxqdnlrPRBuRzIn55EQ/aD WNxpsPsMIu22fHTahtjtCAEOrSHe91/2ZGvTZFRLU14yyZfpLWrcaYYoN54UYtdW5L5VWAmnSyK9 KYm1KIZtODkw0z4pzZrtTUuvh66v0ULVu8fGTXnb2N279UZmPSwslCKnGqeBHs1M5xuFC9WgO2Fs zIKv6lHB6vYIknX7KBaRgRTuCsP6gehAtX3EHg== )`
	`co. 518400 IN RRSIG ( DNSKEY 8 1 518400 20210519010821 20210419010718 64278 co. qvF/mIM/RXHmC93lJsmrWaxHhVOfu9wKVOdRaWp95UQYEaleRsIeeaG0V0r9pLcveXwDAe/QeV+n CTPDeyi1cAY4KTpAFw8AhBx9i5K1XJrvboX/9s0SZshPhuLC6WEfUpqfCAOgiWez1rP1UbRV2c3f WOX/AW8uPm8uZwGDKyVWCF8dyvCYyjYBbpxB+Sp1tKHydo4+2sKPeOf88r6Ujw== )`
	RRSIG=43834 and DNSKEY=43834/SEP verifies the DNSKEY RRset
	RRSIG=64278 and DNSKEY=64278 verifies the DNSKEY RRset
	DNSKEY=64278 is now in the chain-of-trust
	Query to ns4.cctld.co for scolasti.co/A
	Received 339 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (339 bytes) ;; HEADER SECTION ;; id = 6421 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) scolasti.co. 3600 IN NS mimi.ns.cloudflare.com. scolasti.co. 3600 IN NS elliot.ns.cloudflare.com. scolasti.co. 3600 IN DS ( 2371 13 2 a97ef3825cd5677cc1d68740327fde86ddcab523bd1eee0363b60e7a755bf70a ) scolasti.co. 3600 IN RRSIG ( DS 8 2 3600 20210516032957 20210416031754 64278 co. n38p5Hwqsoc8KmPm0uXiYIoP2Sz2ZqhEj1zyo9Gz8GTFn9E+2od+dsCiz9jnYEc499UJ7Ax1gWcU F1LDkr57g4rCejn2218U1EhWvbW8GSON3kfDb1GvtTVJHhDw5mqWAhGrnkxR2R4hna26mFLPKDe+ w19hzvxgfSxfSv3hrcoQmYBXII8kJt/TM3xMnDCU/g8GI5AEvoOGx4jVIbdfuw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns4.cctld.co for scolasti.co/DNSKEY
	Received 339 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (339 bytes) ;; HEADER SECTION ;; id = 1698 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) scolasti.co. 3600 IN NS elliot.ns.cloudflare.com. scolasti.co. 3600 IN NS mimi.ns.cloudflare.com. scolasti.co. 3600 IN DS ( 2371 13 2 a97ef3825cd5677cc1d68740327fde86ddcab523bd1eee0363b60e7a755bf70a ) scolasti.co. 3600 IN RRSIG ( DS 8 2 3600 20210516032957 20210416031754 64278 co. n38p5Hwqsoc8KmPm0uXiYIoP2Sz2ZqhEj1zyo9Gz8GTFn9E+2od+dsCiz9jnYEc499UJ7Ax1gWcU F1LDkr57g4rCejn2218U1EhWvbW8GSON3kfDb1GvtTVJHhDw5mqWAhGrnkxR2R4hna26mFLPKDe+ w19hzvxgfSxfSv3hrcoQmYBXII8kJt/TM3xMnDCU/g8GI5AEvoOGx4jVIbdfuw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone scolasti.co

scolasti.co

	Checking DS between co and scolasti.co
	Query to ns4.cctld.co for scolasti.co/DS
	Received 282 bytes from 156.154.103.25
	;; Answer received from 156.154.103.25 (282 bytes) ;; HEADER SECTION ;; id = 58633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DS ;; ANSWER SECTION (2 records) scolasti.co. 3600 IN DS ( 2371 13 2 a97ef3825cd5677cc1d68740327fde86ddcab523bd1eee0363b60e7a755bf70a ) scolasti.co. 3600 IN RRSIG ( DS 8 2 3600 20210516032957 20210416031754 64278 co. n38p5Hwqsoc8KmPm0uXiYIoP2Sz2ZqhEj1zyo9Gz8GTFn9E+2od+dsCiz9jnYEc499UJ7Ax1gWcU F1LDkr57g4rCejn2218U1EhWvbW8GSON3kfDb1GvtTVJHhDw5mqWAhGrnkxR2R4hna26mFLPKDe+ w19hzvxgfSxfSv3hrcoQmYBXII8kJt/TM3xMnDCU/g8GI5AEvoOGx4jVIbdfuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for scolasti.co in the co zone
	DS=2371/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`scolasti.co. 3600 IN RRSIG ( DS 8 2 3600 20210516032957 20210416031754 64278 co. n38p5Hwqsoc8KmPm0uXiYIoP2Sz2ZqhEj1zyo9Gz8GTFn9E+2od+dsCiz9jnYEc499UJ7Ax1gWcU F1LDkr57g4rCejn2218U1EhWvbW8GSON3kfDb1GvtTVJHhDw5mqWAhGrnkxR2R4hna26mFLPKDe+ w19hzvxgfSxfSv3hrcoQmYBXII8kJt/TM3xMnDCU/g8GI5AEvoOGx4jVIbdfuw== )`
	RRSIG=64278 and DNSKEY=64278 verifies the DS RRset
	DS=2371/SHA-256 is now in the chain-of-trust
	`scolasti.co. 3600 IN DS ( 2371 13 2 a97ef3825cd5677cc1d68740327fde86ddcab523bd1eee0363b60e7a755bf70a )`
	Query to mimi.ns.cloudflare.com for scolasti.co/DNSKEY
	Received 307 bytes from 172.64.32.203
	;; Answer received from 172.64.32.203 (307 bytes) ;; HEADER SECTION ;; id = 23786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN DNSKEY ;; ANSWER SECTION (3 records) scolasti.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371 scolasti.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505 scolasti.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210511161416 20210312161416 2371 scolasti.co. AQ4WTccA37Y0BlkAwCm8613HY5CK9xPCekNFXvndh8ZrzbECn2QC9a+l3bTqG+9bwwv5+3elBNLB PWslE6GOSA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for scolasti.co
	`scolasti.co. 3600 IN DNSKEY ( 257 3 13 mdsswUyr3DPW132mOi8V9xESWE8jTo0dxCjjnopKl+GqJxpVXckHAeF+KkxLbxILfDLUT0rAK9iU zy1L53eKGQ== ) ; Key ID = 2371`
	`scolasti.co. 3600 IN DNSKEY ( 256 3 13 oJMRESz5E4gYzS/q6XDrvU1qMPYIjCWzJaOau8XNEZeqCYKD5ar0IRd8KqXXFJkqmVfRvMGPmM1x 8fGAa2XhSA== ) ; Key ID = 34505`
	DNSKEY=2371/SEP is now in the chain-of-trust
	DS=2371/SHA-256 verifies DNSKEY=2371/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`scolasti.co. 3600 IN RRSIG ( DNSKEY 13 2 3600 20210511161416 20210312161416 2371 scolasti.co. AQ4WTccA37Y0BlkAwCm8613HY5CK9xPCekNFXvndh8ZrzbECn2QC9a+l3bTqG+9bwwv5+3elBNLB PWslE6GOSA== )`
	RRSIG=2371 and DNSKEY=2371/SEP verifies the DNSKEY RRset
	DNSKEY=34505 is now in the chain-of-trust
	Query to elliot.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 108.162.193.162
	;; Answer received from 108.162.193.162 (179 bytes) ;; HEADER SECTION ;; id = 29274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 104.21.47.71 scolasti.co. 300 IN A 172.67.170.165 scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. A9sZU4+9HV5mnuaedIPOwHtvTy+SKiqnrx4menEEDiP5oMH3ybdPZP+4vkiGNWHN36BKtmLbGjsK Tya1141I6g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	elliot.ns.cloudflare.com is authoritative for scolasti.co
	Found RRSIG signed by scolasti.co zone
	Query to mimi.ns.cloudflare.com for scolasti.co/SOA
	Received 211 bytes from 108.162.192.203
	;; Answer received from 108.162.192.203 (211 bytes) ;; HEADER SECTION ;; id = 60589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN SOA ;; ANSWER SECTION (2 records) scolasti.co. 3600 IN SOA ( elliot.ns.cloudflare.com. dns.cloudflare.com. 2036982426 ;serial 10000 ;refresh 2400 ;retry 604800 ;expire 3600 ;minimum ) scolasti.co. 3600 IN RRSIG ( SOA 13 2 3600 20210423124115 20210421104115 34505 scolasti.co. hz7GmYEHcAVq+nmGns0YQBpqN/fhoJM+CmUcOAd5yJGfmuzdQ/NtChfHqhVIuoZhmHvbxCDUWfB0 UcpJQMXIMw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to elliot.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 173.245.59.162
	;; Answer received from 173.245.59.162 (179 bytes) ;; HEADER SECTION ;; id = 40190 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 172.67.170.165 scolasti.co. 300 IN A 104.21.47.71 scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. BZuymED1UcnkyePGZzeMH2vADBC/MmcMmqYPzlP+o8Tzl9MXfBDQASHqDuTtJH+7/BOmPxxRkiSO lzDw/XIRvA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	scolasti.co A RR has value 172.67.170.165
	scolasti.co A RR has value 104.21.47.71
	Found 1 RRSIGs over A RRset
	`scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. BZuymED1UcnkyePGZzeMH2vADBC/MmcMmqYPzlP+o8Tzl9MXfBDQASHqDuTtJH+7/BOmPxxRkiSO lzDw/XIRvA== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

scolasti.co

	Query to mimi.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 108.162.192.203
	;; Answer received from 108.162.192.203 (179 bytes) ;; HEADER SECTION ;; id = 50771 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 104.21.47.71 scolasti.co. 300 IN A 172.67.170.165 scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. mdZgajo6H8RmMnHjDeBaHE8eDhR6f0GS/BjQ+I4KCLlXrAki93/QKzgeNSG/mQ3G1W73Y7eAgmDA /vzSXNlwlg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	mimi.ns.cloudflare.com is authoritative for scolasti.co
	Found RRSIG signed by scolasti.co zone
	Query to mimi.ns.cloudflare.com for scolasti.co/A
	Received 179 bytes from 108.162.192.203
	;; Answer received from 108.162.192.203 (179 bytes) ;; HEADER SECTION ;; id = 43687 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; scolasti.co. IN A ;; ANSWER SECTION (3 records) scolasti.co. 300 IN A 104.21.47.71 scolasti.co. 300 IN A 172.67.170.165 scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. r+o8i/3pFjz8nrUdGlr0KOd9BARsCxeX5cvDo+pMp/HDwZBtNmsTQX1mdcpvebdDBS+YkQlI0lh1 yG1ZdId2rQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	scolasti.co A RR has value 104.21.47.71
	scolasti.co A RR has value 172.67.170.165
	Found 1 RRSIGs over A RRset
	`scolasti.co. 300 IN RRSIG ( A 13 2 300 20210423124115 20210421104115 34505 scolasti.co. r+o8i/3pFjz8nrUdGlr0KOd9BARsCxeX5cvDo+pMp/HDwZBtNmsTQX1mdcpvebdDBS+YkQlI0lh1 yG1ZdId2rQ== )`
	RRSIG=34505 and DNSKEY=34505 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test scolasti.co at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: