DNSSEC Analyzer

Domain Name:

Time: 2023-09-24 17:19:43 UTC, NTP stratum 4

Analyzing DNSSEC problems for sns.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1139 octets) ;; HEADER SECTION ;; id = 30509 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to d.root-servers.net for sns.it/A
	Received 753 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (753 octets) ;; HEADER SECTION ;; id = 15473 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 d.dns.it. 172800 IN A 45.142.220.39 m.dns.it. 172800 IN A 217.29.76.4 r.dns.it. 172800 IN A 193.206.141.46 dns.nic.it. 172800 IN A 192.12.192.5 nameserver.cnr.it. 172800 IN A 194.119.192.34 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to e.root-servers.net for it/DNSKEY
	Received 749 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (749 octets) ;; HEADER SECTION ;; id = 18909 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 d.dns.it. 172800 IN A 45.142.220.39 m.dns.it. 172800 IN A 217.29.76.4 r.dns.it. 172800 IN A 193.206.141.46 dns.nic.it. 172800 IN A 192.12.192.5 nameserver.cnr.it. 172800 IN A 194.119.192.34 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone it

	Checking DS between . and it
	Query to f.root-servers.net for it/DS
	Received 366 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (366 octets) ;; HEADER SECTION ;; id = 52718 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to dns.nic.it for it/DNSKEY
	Received 1163 bytes from 192.12.192.5
	;; Response received from 192.12.192.5 (1163 octets) ;; HEADER SECTION ;; id = 55228 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (4 records) it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901 it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395 it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 18395 it. il73ykSefVfshLlOrt7FYbSLXiIHk+vhvhi0zJvI6GSxu6+jf2Es5G2NA3v6q4FpmpttOxcHVYCV ILZtPKZhsFMrSBNv4FqZnMbX/03IioqXZuiKmWhWn9Kiikwo+aqCOYE6/cmxsX5/4AMXK2NMXMII Z7r/U+GKADsr8WEjdaPJW4fNB7ZMLqE4J7W1L4C/E4lLlwv1qo+wkC51OKie72lMpUjq6ThfHv4J OQzuR7WuPZeZesWCLDuOuq4Pv1tmBBisFs2nX6yyNcXCcMqPJqS7N2g1gdQQAmQxY+47NyH1KABW TGXjnFZyDDiOn0+QwN8cOL4Bc+HMvg2P2Fqd4Q== ) it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 41901 it. e7ZGu3epiaSMJbOz0s/inStiAvY8J/smRt/YEELYBw3JVseK5pImnWZQUhw5FzllE972q5BCyPbN Zl0WUuyz7Y2Uvu5exZhl0YqhqD8xp4AFXDRj2fdHlK/83zmKRVOpY8xQKMyj5DiRaFh/iqOsJI6r OaAM2cXDTJ+qBu3ZVD1kiKmSuECYNtuzF3VbclG3ws4BXAbwUtYFmTO8GhA2A50eAHal4fUD7jj+ NCMhSPs6IQMlFcJdSwS3s48gBhnBFl8f1yBdgkYova04x3TwKpPLvck9Q0GKPmc4xehXFNIwXUGp 3K8rqXl0VSo6q9ZpnmVYX8ufs6I+L2Yr/lhGoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for it
	`it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901`
	`it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 18395 it. il73ykSefVfshLlOrt7FYbSLXiIHk+vhvhi0zJvI6GSxu6+jf2Es5G2NA3v6q4FpmpttOxcHVYCV ILZtPKZhsFMrSBNv4FqZnMbX/03IioqXZuiKmWhWn9Kiikwo+aqCOYE6/cmxsX5/4AMXK2NMXMII Z7r/U+GKADsr8WEjdaPJW4fNB7ZMLqE4J7W1L4C/E4lLlwv1qo+wkC51OKie72lMpUjq6ThfHv4J OQzuR7WuPZeZesWCLDuOuq4Pv1tmBBisFs2nX6yyNcXCcMqPJqS7N2g1gdQQAmQxY+47NyH1KABW TGXjnFZyDDiOn0+QwN8cOL4Bc+HMvg2P2Fqd4Q== )`
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 41901 it. e7ZGu3epiaSMJbOz0s/inStiAvY8J/smRt/YEELYBw3JVseK5pImnWZQUhw5FzllE972q5BCyPbN Zl0WUuyz7Y2Uvu5exZhl0YqhqD8xp4AFXDRj2fdHlK/83zmKRVOpY8xQKMyj5DiRaFh/iqOsJI6r OaAM2cXDTJ+qBu3ZVD1kiKmSuECYNtuzF3VbclG3ws4BXAbwUtYFmTO8GhA2A50eAHal4fUD7jj+ NCMhSPs6IQMlFcJdSwS3s48gBhnBFl8f1yBdgkYova04x3TwKpPLvck9Q0GKPmc4xehXFNIwXUGp 3K8rqXl0VSo6q9ZpnmVYX8ufs6I+L2Yr/lhGoQ== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DNSKEY RRset
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to m.dns.it for sns.it/A
	Received 974 bytes from 217.29.76.4
	;; Response received from 217.29.76.4 (974 octets) ;; HEADER SECTION ;; id = 22028 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) sns.it. 10800 IN NS ns1.garr.net. sns.it. 10800 IN NS ns2-08.azure-dns.net. sns.it. 10800 IN NS ns4-08.azure-dns.info. sns.it. 10800 IN NS ns3-08.azure-dns.org. sns.it. 10800 IN NS ns1-08.azure-dns.com. sns.it. 10800 IN NS ux1sns.sns.it. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN NSEC3 ( 1 1 0 - sqne1e9o4ijvopo0kacpnl52p8o02a0f NS DS RRSIG ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. RGOG2VyNletEFrM6W4DmSkgefgpg1GRWShQj0qZ6tTTx5EYfBhzOSD8mCkZVTYr6C5hmaKtl6MtW Yxq/gA7bhRyeggDIVWhJ43hcTNwxV5Meg/KQDus2KJ3wZ9Aik+LISjPBr8AH0ckO95N3gFQ0H9n2 1vaXjRt9sFFiB7MYjli85mCcRJ4GoOudQcKjlEroDvVI176faSKeV+VgfxtVA+3TNiT0ZjfcuyQ8 uATedbkFnJiBitJuQ7dyUm+tqTrhhkqXgGHR+hianAH32eW9IVrbKNF9L2tfY7evTJJtMFDgCOAP qFzxrieog069YO946Qg3Tf7T9mz9k3pvT2ViOQ== ) ;; ADDITIONAL SECTION (2 records) ux1sns.sns.it. 10800 IN A 192.84.155.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nameserver.cnr.it for sns.it/DNSKEY
	Received 974 bytes from 194.119.192.34
	;; Response received from 194.119.192.34 (974 octets) ;; HEADER SECTION ;; id = 7439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 10 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (10 records) sns.it. 10800 IN NS ns4-08.azure-dns.info. sns.it. 10800 IN NS ns1.garr.net. sns.it. 10800 IN NS ns2-08.azure-dns.net. sns.it. 10800 IN NS ns1-08.azure-dns.com. sns.it. 10800 IN NS ns3-08.azure-dns.org. sns.it. 10800 IN NS ux1sns.sns.it. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN NSEC3 ( 1 1 0 - sqne1e9o4ijvopo0kacpnl52p8o02a0f NS DS RRSIG ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. RGOG2VyNletEFrM6W4DmSkgefgpg1GRWShQj0qZ6tTTx5EYfBhzOSD8mCkZVTYr6C5hmaKtl6MtW Yxq/gA7bhRyeggDIVWhJ43hcTNwxV5Meg/KQDus2KJ3wZ9Aik+LISjPBr8AH0ckO95N3gFQ0H9n2 1vaXjRt9sFFiB7MYjli85mCcRJ4GoOudQcKjlEroDvVI176faSKeV+VgfxtVA+3TNiT0ZjfcuyQ8 uATedbkFnJiBitJuQ7dyUm+tqTrhhkqXgGHR+hianAH32eW9IVrbKNF9L2tfY7evTJJtMFDgCOAP qFzxrieog069YO946Qg3Tf7T9mz9k3pvT2ViOQ== ) ;; ADDITIONAL SECTION (2 records) ux1sns.sns.it. 10800 IN A 192.84.155.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone sns.it

sns.it

	Checking DS between it and sns.it
	Query to a.dns.it for sns.it/DS
	Received 1121 bytes from 194.0.16.215
	;; Response received from 194.0.16.215 (1121 octets) ;; HEADER SECTION ;; id = 4348 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) it. 3600 IN SOA ( dns.nic.it. hostmaster.nic.it. 2023092419 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) it. 3600 IN RRSIG ( SOA 10 1 86400 20231024160424 20230924160424 18395 it. ZFjxyhMf0iukCP0EuXi3IzXJc8hkjJgt25HtAOM1i7sidTBZfe0/cp9uhC/oPgYW5z/GbAWxG8FH MoSzcuhmZ3RDkivx/Mh64LPBZi2T3tabvcxD5eK6C/GyV3MrKLFZWmYBZ4ClrFyIJRMIfl7aXknm OoZzZ+8v8mkdlkjzn5Q4uN9eiqg9tPX6nCiAl0mi16dwbGfAV2UlY7vUoV0HgaSzB+DNi7QfT1M/ bXZaZ9UnjKljwGFI37s2gvW4H2L0BxDHgOfagopad9YC+AmM0I0b50sau1pxGIOoQrfOHhCXWdPV 4CgO/TU+cITs5SgNFJrcd/SU0OUr3eqKlrsDIA== ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN NSEC3 ( 1 1 0 - sqne1e9o4ijvopo0kacpnl52p8o02a0f NS DS RRSIG ) SQLS05L5TT4KT06BKF5I877D93CG7F1C.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. RGOG2VyNletEFrM6W4DmSkgefgpg1GRWShQj0qZ6tTTx5EYfBhzOSD8mCkZVTYr6C5hmaKtl6MtW Yxq/gA7bhRyeggDIVWhJ43hcTNwxV5Meg/KQDus2KJ3wZ9Aik+LISjPBr8AH0ckO95N3gFQ0H9n2 1vaXjRt9sFFiB7MYjli85mCcRJ4GoOudQcKjlEroDvVI176faSKeV+VgfxtVA+3TNiT0ZjfcuyQ8 uATedbkFnJiBitJuQ7dyUm+tqTrhhkqXgGHR+hianAH32eW9IVrbKNF9L2tfY7evTJJtMFDgCOAP qFzxrieog069YO946Qg3Tf7T9mz9k3pvT2ViOQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for sns.it in the it zone
	Query to ns1.garr.net for sns.it/DNSKEY
	Received 102 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (102 octets) ;; HEADER SECTION ;; id = 63042 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 86400 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns3-08.azure-dns.org for sns.it/A
	Received 121 bytes from 204.14.183.8
	;; Response received from 204.14.183.8 (121 octets) ;; HEADER SECTION ;; id = 29490 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns3-08.azure-dns.org is authoritative for sns.it
	Query to ux1sns.sns.it for sns.it/SOA
	Received 102 bytes from 192.84.155.2
	;; Response received from 192.84.155.2 (102 octets) ;; HEADER SECTION ;; id = 7167 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN SOA ;; ANSWER SECTION (1 record) sns.it. 432000 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1-08.azure-dns.com for sns.it/SOA
	Received 121 bytes from 13.107.236.8
	;; Response received from 13.107.236.8 (121 octets) ;; HEADER SECTION ;; id = 18600 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN SOA ;; ANSWER SECTION (1 record) sns.it. 3600 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1-08.azure-dns.com serial (1) differs from ux1sns.sns.it serial (2023090801)
	Query to ns1.garr.net for sns.it/SOA
	Received 282 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (282 octets) ;; HEADER SECTION ;; id = 31694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 6 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN SOA ;; ANSWER SECTION (1 record) sns.it. 432000 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (6 records) sns.it. 432000 IN NS ns4-08.azure-dns.info. sns.it. 432000 IN NS ns1-08.azure-dns.com. sns.it. 432000 IN NS ns1.garr.net. sns.it. 432000 IN NS ns2-08.azure-dns.net. sns.it. 432000 IN NS ns3-08.azure-dns.org. sns.it. 432000 IN NS ux1sns.sns.it. ;; ADDITIONAL SECTION (2 records) ux1sns.sns.it. 86400 IN A 192.84.155.2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4-08.azure-dns.info for sns.it/SOA
	Received 121 bytes from 208.84.5.8
	;; Response received from 208.84.5.8 (121 octets) ;; HEADER SECTION ;; id = 38039 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN SOA ;; ANSWER SECTION (1 record) sns.it. 3600 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4-08.azure-dns.info serial (1) differs from ux1sns.sns.it serial (2023090801)
	Query to ns2-08.azure-dns.net for sns.it/SOA
	Received 121 bytes from 150.171.21.8
	;; Response received from 150.171.21.8 (121 octets) ;; HEADER SECTION ;; id = 56332 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN SOA ;; ANSWER SECTION (1 record) sns.it. 3600 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2-08.azure-dns.net serial (1) differs from ux1sns.sns.it serial (2023090801)
	Query to ns3-08.azure-dns.org for sns.it/A
	Received 121 bytes from 204.14.183.8
	;; Response received from 204.14.183.8 (121 octets) ;; HEADER SECTION ;; id = 62994 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

sns.it

	Query to ux1sns.sns.it for sns.it/A
	Received 102 bytes from 192.84.155.2
	;; Response received from 192.84.155.2 (102 octets) ;; HEADER SECTION ;; id = 39821 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 86400 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ux1sns.sns.it is authoritative for sns.it
	Query to ux1sns.sns.it for sns.it/A
	Received 102 bytes from 192.84.155.2
	;; Response received from 192.84.155.2 (102 octets) ;; HEADER SECTION ;; id = 56663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 86400 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

sns.it

	Query to ns1.garr.net for sns.it/A
	Received 102 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (102 octets) ;; HEADER SECTION ;; id = 33103 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 86400 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.garr.net is authoritative for sns.it
	Query to ns1.garr.net for sns.it/A
	Received 102 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (102 octets) ;; HEADER SECTION ;; id = 10257 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 86400 IN SOA ( ns1-08.azure-dns.com. postmaster.sns.it. 2023090801 ;serial 1800 ;refresh 600 ;retry 3600000 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

sns.it

	Query to ns4-08.azure-dns.info for sns.it/A
	Received 121 bytes from 208.84.5.8
	;; Response received from 208.84.5.8 (121 octets) ;; HEADER SECTION ;; id = 13967 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns4-08.azure-dns.info is authoritative for sns.it
	Query to ns4-08.azure-dns.info for sns.it/A
	Received 121 bytes from 208.84.5.8
	;; Response received from 208.84.5.8 (121 octets) ;; HEADER SECTION ;; id = 22809 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

sns.it

	Query to ns1-08.azure-dns.com for sns.it/A
	Received 121 bytes from 13.107.236.8
	;; Response received from 13.107.236.8 (121 octets) ;; HEADER SECTION ;; id = 37608 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1-08.azure-dns.com is authoritative for sns.it
	Query to ns1-08.azure-dns.com for sns.it/A
	Received 121 bytes from 13.107.236.8
	;; Response received from 13.107.236.8 (121 octets) ;; HEADER SECTION ;; id = 18723 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

sns.it

	Query to ns2-08.azure-dns.net for sns.it/A
	Received 121 bytes from 150.171.21.8
	;; Response received from 150.171.21.8 (121 octets) ;; HEADER SECTION ;; id = 59841 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2-08.azure-dns.net is authoritative for sns.it
	Query to ns2-08.azure-dns.net for sns.it/A
	Received 121 bytes from 150.171.21.8
	;; Response received from 150.171.21.8 (121 octets) ;; HEADER SECTION ;; id = 15125 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 1 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 0 ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; sns.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) sns.it. 300 IN SOA ( ns1-08.azure-dns.com. azuredns-hostmaster.microsoft.com. 1 ;serial 3600 ;refresh 300 ;retry 2419200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 0000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test sns.it at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: