DNSSEC Debugger - soverin.net

Domain Name:

Time: 2024-11-12 20:32:42 UTC

Analyzing DNSSEC problems for soverin.net

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to i.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 865 octets ;; HEADER SECTION ;; id = 37868 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20241201000000 20241110000000 20326 . qt8zpbIcJohyfnFxwgMO9lDmZb7FucLDQ02WBcxZLZ2RCyL0JFy4lR8cE4bCEHfMmIVnST+bBTOg KGnXb0gUVMaLeks19V2zpOLQW091g3gzkEGNIPfFepjnOpR6HUsZG856e4vJqT8OPXTT0V+E3b7N 9ulzkOr5KesT02hAIA0dAMNLfeFzlM38L/GUAao9REcaaYfn8TwG7fET/eQSAUk2Z8aI+xkxbjYd RGjHblc8aJKOo5oHQCh1PY693pjJkBf/SzzMmU91tg4nrWHPoJrc45FBi5bqQ1/LvAB7B+/HDQPK IakHxxWmZ+hSmDp0Yn6e3B9ppWAffdaCkJj7gg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAc0SunbHdS0KFEyZbYII/+tzsrNzIwurKxmJA+0fhAYlTPA/5LrMGkGEqvvufzM0w/CaVtdm 5eWkZYQcsoSKT5bycx0C4jxnLEb3ZiZUQSqu1rWcKGF1fj/GyDWLkOu7a5h3el+gPmglj/4l4V31 ugNYfqYq84vCB+3D6Sodrd+85KyonnzWJ8cS7aZ57x0d0sGqsAKA+6tRnIXjVNVe7Ro5xJuz8IR7 rOxdzfuRLriN+Z00EL3U5E7s9SISU/hDh7Q7N70W1mLMc1o2+tCRGjEWrw4wmCWMzc1kegbLES/d UOWFvPjJz0+AEeWDhd2GqtXk02BzAhdfeIAEIv68FTs= ) ; Key ID = 61050`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20241201000000 20241110000000 20326 . qt8zpbIcJohyfnFxwgMO9lDmZb7FucLDQ02WBcxZLZ2RCyL0JFy4lR8cE4bCEHfMmIVnST+bBTOg KGnXb0gUVMaLeks19V2zpOLQW091g3gzkEGNIPfFepjnOpR6HUsZG856e4vJqT8OPXTT0V+E3b7N 9ulzkOr5KesT02hAIA0dAMNLfeFzlM38L/GUAao9REcaaYfn8TwG7fET/eQSAUk2Z8aI+xkxbjYd RGjHblc8aJKOo5oHQCh1PY693pjJkBf/SzzMmU91tg4nrWHPoJrc45FBi5bqQ1/LvAB7B+/HDQPK IakHxxWmZ+hSmDp0Yn6e3B9ppWAffdaCkJj7gg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=61050 is now in the chain-of-trust
	Query to m.root-servers.net for soverin.net/A
	Received 1171 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1171 octets ;; HEADER SECTION ;; id = 60170 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241125170000 20241112160000 61050 . o18GyvP3/i/WwM5tnNmz+xsu0nKQLdMbRQ22Iy6+tsnHCFCNiEFA3KybBgY4PjWe+xtEfzEWzENr 60HvSMbw8dhIw1AbVv4KfoiVvy0NJaFkYlxKCh0Jm/q93BcVDpnkfYiBN6+jk1kBsDWL6Jz2CZbM dB0ifrnaVeNISLTR92EpHQpkk96I/XWjK9E0EHc4xpOpMGD7RfgYKmjfiyYbABGrQb1ZBOcyne2y Tj+VS+w4wQU+/ZatPWmXVL7oKuiHBGr3box0diphu7WffNGLRoYtrVWrHXh4fhsvK5C4sa9+81aU PzbIY85uUtQuO/epgg5KKdbLFIDc+JI20LBWyQ== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 1160 octets ;; HEADER SECTION ;; id = 47392 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241125170000 20241112160000 61050 . o18GyvP3/i/WwM5tnNmz+xsu0nKQLdMbRQ22Iy6+tsnHCFCNiEFA3KybBgY4PjWe+xtEfzEWzENr 60HvSMbw8dhIw1AbVv4KfoiVvy0NJaFkYlxKCh0Jm/q93BcVDpnkfYiBN6+jk1kBsDWL6Jz2CZbM dB0ifrnaVeNISLTR92EpHQpkk96I/XWjK9E0EHc4xpOpMGD7RfgYKmjfiyYbABGrQb1ZBOcyne2y Tj+VS+w4wQU+/ZatPWmXVL7oKuiHBGr3box0diphu7WffNGLRoYtrVWrHXh4fhsvK5C4sa9+81aU PzbIY85uUtQuO/epgg5KKdbLFIDc+JI20LBWyQ== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to l.root-servers.net for net/DS
	Received 367 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 367 octets ;; HEADER SECTION ;; id = 10111 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20241125170000 20241112160000 61050 . o18GyvP3/i/WwM5tnNmz+xsu0nKQLdMbRQ22Iy6+tsnHCFCNiEFA3KybBgY4PjWe+xtEfzEWzENr 60HvSMbw8dhIw1AbVv4KfoiVvy0NJaFkYlxKCh0Jm/q93BcVDpnkfYiBN6+jk1kBsDWL6Jz2CZbM dB0ifrnaVeNISLTR92EpHQpkk96I/XWjK9E0EHc4xpOpMGD7RfgYKmjfiyYbABGrQb1ZBOcyne2y Tj+VS+w4wQU+/ZatPWmXVL7oKuiHBGr3box0diphu7WffNGLRoYtrVWrHXh4fhsvK5C4sa9+81aU PzbIY85uUtQuO/epgg5KKdbLFIDc+JI20LBWyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20241125170000 20241112160000 61050 . o18GyvP3/i/WwM5tnNmz+xsu0nKQLdMbRQ22Iy6+tsnHCFCNiEFA3KybBgY4PjWe+xtEfzEWzENr 60HvSMbw8dhIw1AbVv4KfoiVvy0NJaFkYlxKCh0Jm/q93BcVDpnkfYiBN6+jk1kBsDWL6Jz2CZbM dB0ifrnaVeNISLTR92EpHQpkk96I/XWjK9E0EHc4xpOpMGD7RfgYKmjfiyYbABGrQb1ZBOcyne2y Tj+VS+w4wQU+/ZatPWmXVL7oKuiHBGr3box0diphu7WffNGLRoYtrVWrHXh4fhsvK5C4sa9+81aU PzbIY85uUtQuO/epgg5KKdbLFIDc+JI20LBWyQ== )`
	RRSIG=61050 and DNSKEY=61050 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to j.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 291 octets ;; HEADER SECTION ;; id = 30323 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 VY9Y6PDr+3Q+22421GwKhVdc4tyN9JOhXUpKngdGE6V2s/Yq+1a0Bg9pzGzaA4N6fFH+aOznZCKT +wsxB4tnug== ) ; Key ID = 31059 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20241118151035 20241103150535 37331 net. 5r5Xvv0bsJfVGuhGNk7O43PYMR5JEAwUpL/SniM3UoEN334+qxpDCx/8RQdvPssTUzQvhcnPRclO +XUICBpV+w== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 VY9Y6PDr+3Q+22421GwKhVdc4tyN9JOhXUpKngdGE6V2s/Yq+1a0Bg9pzGzaA4N6fFH+aOznZCKT +wsxB4tnug== ) ; Key ID = 31059`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20241118151035 20241103150535 37331 net. 5r5Xvv0bsJfVGuhGNk7O43PYMR5JEAwUpL/SniM3UoEN334+qxpDCx/8RQdvPssTUzQvhcnPRclO +XUICBpV+w== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=31059 is now in the chain-of-trust
	Query to j.gtld-servers.net for soverin.net/A
	Received 313 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 313 octets ;; HEADER SECTION ;; id = 24891 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) soverin.net. 172800 IN NS ns1.transip.nl. soverin.net. 172800 IN NS ns0.transip.net. soverin.net. 172800 IN NS ns2.transip.eu. soverin.net. 86400 IN DS ( 9897 13 2 e16984bf790791091a4d011be8e58e6ac3410fd034895b9c394f8cb8b6febbf2 ) soverin.net. 86400 IN RRSIG ( DS 13 2 86400 20241117025254 20241110014254 31059 net. mc5ZMeMOEayY/0pVIZv5zZoSn2HFroF3OYHL1wc3dLlg1tjiOf+xw+QK0NOMLlr+7x7mM94oiAhu wzuOlneMwQ== ) ;; ADDITIONAL SECTION (3 records) ns0.transip.net. 172800 IN A 195.135.195.195 ns0.transip.net. 172800 IN AAAA 2a01:7c8:dddd:195::195 ;; { "EDNS-VERSION": 0 }
	Query to c.gtld-servers.net for soverin.net/DNSKEY
	Received 313 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 313 octets ;; HEADER SECTION ;; id = 1999 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) soverin.net. 172800 IN NS ns1.transip.nl. soverin.net. 172800 IN NS ns0.transip.net. soverin.net. 172800 IN NS ns2.transip.eu. soverin.net. 86400 IN DS ( 9897 13 2 e16984bf790791091a4d011be8e58e6ac3410fd034895b9c394f8cb8b6febbf2 ) soverin.net. 86400 IN RRSIG ( DS 13 2 86400 20241117025254 20241110014254 31059 net. mc5ZMeMOEayY/0pVIZv5zZoSn2HFroF3OYHL1wc3dLlg1tjiOf+xw+QK0NOMLlr+7x7mM94oiAhu wzuOlneMwQ== ) ;; ADDITIONAL SECTION (3 records) ns0.transip.net. 172800 IN A 195.135.195.195 ns0.transip.net. 172800 IN AAAA 2a01:7c8:dddd:195::195 ;; { "EDNS-VERSION": 0 }
	Found child zone soverin.net

soverin.net

	Checking DS between net and soverin.net
	Query to e.gtld-servers.net for soverin.net/DS
	Received 1079 bytes from 192.12.94.30
	;; Response received from [192.12.94.30] 1079 octets ;; HEADER SECTION ;; id = 8533 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 14 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN DS ;; ANSWER SECTION (2 records) soverin.net. 86400 IN DS ( 9897 13 2 e16984bf790791091a4d011be8e58e6ac3410fd034895b9c394f8cb8b6febbf2 ) soverin.net. 86400 IN RRSIG ( DS 13 2 86400 20241117025254 20241110014254 31059 net. mc5ZMeMOEayY/0pVIZv5zZoSn2HFroF3OYHL1wc3dLlg1tjiOf+xw+QK0NOMLlr+7x7mM94oiAhu wzuOlneMwQ== ) ;; AUTHORITY SECTION (14 records) net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN RRSIG ( NS 13 1 172800 20241118025801 20241111014801 31059 net. xH//WUeo8M9IL1NFFUF36O/iN3yDUkuOnhzGdvNchmZiJVbjfT4msvL/pGYZI+N4evpPj1+jvcTh GIYQPIsY2g== ) ;; ADDITIONAL SECTION (27 records) c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for soverin.net in the net zone
	DS=9897/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`soverin.net. 86400 IN RRSIG ( DS 13 2 86400 20241117025254 20241110014254 31059 net. mc5ZMeMOEayY/0pVIZv5zZoSn2HFroF3OYHL1wc3dLlg1tjiOf+xw+QK0NOMLlr+7x7mM94oiAhu wzuOlneMwQ== )`
	RRSIG=31059 and DNSKEY=31059 verifies the DS RRset
	DS=9897/SHA-256 is now in the chain-of-trust
	`soverin.net. 86400 IN DS ( 9897 13 2 e16984bf790791091a4d011be8e58e6ac3410fd034895b9c394f8cb8b6febbf2 )`
	Query to ns2.transip.eu for soverin.net/DNSKEY
	Received 307 bytes from 37.97.199.195
	;; Response received from [37.97.199.195] 307 octets ;; HEADER SECTION ;; id = 25940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN DNSKEY ;; ANSWER SECTION (3 records) soverin.net. 300 IN RRSIG ( DNSKEY 13 2 300 20241121000000 20241031000000 9897 soverin.net. f/Fa1QMoo9++18xJooGJ9ABrSsWD6OPgb3GG90bgevQlAwscv2ZF+PNho/dXu9PMpuED/crpJvcB BCm+hDDQEw== ) soverin.net. 300 IN DNSKEY ( 256 3 13 BsQXXfkwvDkl3PCHHnjA84ienHRS+0YnUD1uDFF0iF+/wkoQcCT7EyuEGu4VVXZphS7AqbafPKWd CjE/7QCIHg== ) ; Key ID = 59262 soverin.net. 300 IN DNSKEY ( 257 3 13 pMmgf7h6G463hWuphXnd0l6p7hYe9MltZ8aCFNjGPDt9V8KC0bfwbPq037gU4CYmh9H8ZXl+Z8Cz 6JXPUok1ow== ) ; Key ID = 9897 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for soverin.net
	`soverin.net. 300 IN DNSKEY ( 256 3 13 BsQXXfkwvDkl3PCHHnjA84ienHRS+0YnUD1uDFF0iF+/wkoQcCT7EyuEGu4VVXZphS7AqbafPKWd CjE/7QCIHg== ) ; Key ID = 59262`
	`soverin.net. 300 IN DNSKEY ( 257 3 13 pMmgf7h6G463hWuphXnd0l6p7hYe9MltZ8aCFNjGPDt9V8KC0bfwbPq037gU4CYmh9H8ZXl+Z8Cz 6JXPUok1ow== ) ; Key ID = 9897`
	DNSKEY=9897/SEP is now in the chain-of-trust
	DS=9897/SHA-256 verifies DNSKEY=9897/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`soverin.net. 300 IN RRSIG ( DNSKEY 13 2 300 20241121000000 20241031000000 9897 soverin.net. f/Fa1QMoo9++18xJooGJ9ABrSsWD6OPgb3GG90bgevQlAwscv2ZF+PNho/dXu9PMpuED/crpJvcB BCm+hDDQEw== )`
	RRSIG=9897 and DNSKEY=9897/SEP verifies the DNSKEY RRset
	DNSKEY=59262 is now in the chain-of-trust
	Query to ns1.transip.nl for soverin.net/A
	Received 179 bytes from 195.8.195.195
	;; Response received from [195.8.195.195] 179 octets ;; HEADER SECTION ;; id = 24273 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN A 185.233.34.144 soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) soverin.net. 300 IN A 185.233.34.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.transip.nl is authoritative for soverin.net
	Found RRSIG signed by soverin.net zone
	Query to ns2.transip.eu for soverin.net/SOA
	Received 216 bytes from 37.97.199.195
	;; Response received from [37.97.199.195] 216 octets ;; HEADER SECTION ;; id = 33923 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN SOA ;; ANSWER SECTION (2 records) soverin.net. 3600 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2024110300 ;serial 86400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) soverin.net. 3600 IN RRSIG ( SOA 13 2 3600 20241121000000 20241031000000 59262 soverin.net. 3utBBi6CGbaxPWMPndLLd9QAwSiLQJGYrflpPMguaaLiRIvkq0RkKY1uuh6wrs4FYp+LvmgELj8Q NX00vw2VqQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns0.transip.net for soverin.net/SOA
	Received 216 bytes from 195.135.195.195
	;; Response received from [195.135.195.195] 216 octets ;; HEADER SECTION ;; id = 56653 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN SOA ;; ANSWER SECTION (2 records) soverin.net. 3600 IN RRSIG ( SOA 13 2 3600 20241121000000 20241031000000 59262 soverin.net. 3utBBi6CGbaxPWMPndLLd9QAwSiLQJGYrflpPMguaaLiRIvkq0RkKY1uuh6wrs4FYp+LvmgELj8Q NX00vw2VqQ== ) soverin.net. 3600 IN SOA ( ns0.transip.net. hostmaster.transip.nl. 2024110300 ;serial 86400 ;refresh 1800 ;retry 2419200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to ns1.transip.nl for soverin.net/A
	Received 179 bytes from 195.8.195.195
	;; Response received from [195.8.195.195] 179 octets ;; HEADER SECTION ;; id = 1435 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) soverin.net. 300 IN A 185.233.34.14 soverin.net. 300 IN A 185.233.34.144 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	soverin.net A RR has value 185.233.34.14
	soverin.net A RR has value 185.233.34.144
	Found 1 RRSIGs over A RRset
	`soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== )`
	RRSIG=59262 and DNSKEY=59262 verifies the A RRset

soverin.net

	Query to ns2.transip.eu for soverin.net/A
	Received 179 bytes from 37.97.199.195
	;; Response received from [37.97.199.195] 179 octets ;; HEADER SECTION ;; id = 20663 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN A 185.233.34.144 soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) soverin.net. 300 IN A 185.233.34.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.transip.eu is authoritative for soverin.net
	Found RRSIG signed by soverin.net zone
	Query to ns2.transip.eu for soverin.net/A
	Received 179 bytes from 37.97.199.195
	;; Response received from [37.97.199.195] 179 octets ;; HEADER SECTION ;; id = 34716 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN A 185.233.34.144 soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) soverin.net. 300 IN A 185.233.34.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	soverin.net A RR has value 185.233.34.144
	soverin.net A RR has value 185.233.34.14
	Found 1 RRSIGs over A RRset
	`soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== )`
	RRSIG=59262 and DNSKEY=59262 verifies the A RRset

soverin.net

	Query to ns0.transip.net for soverin.net/A
	Received 179 bytes from 195.135.195.195
	;; Response received from [195.135.195.195] 179 octets ;; HEADER SECTION ;; id = 38675 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) soverin.net. 300 IN A 185.233.34.144 soverin.net. 300 IN A 185.233.34.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns0.transip.net is authoritative for soverin.net
	Found RRSIG signed by soverin.net zone
	Query to ns0.transip.net for soverin.net/A
	Received 179 bytes from 195.135.195.195
	;; Response received from [195.135.195.195] 179 octets ;; HEADER SECTION ;; id = 4867 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; soverin.net. IN A ;; ANSWER SECTION (3 records) soverin.net. 300 IN A 185.233.34.14 soverin.net. 300 IN A 185.233.34.144 soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	soverin.net A RR has value 185.233.34.14
	soverin.net A RR has value 185.233.34.144
	Found 1 RRSIGs over A RRset
	`soverin.net. 300 IN RRSIG ( A 13 2 300 20241121000000 20241031000000 59262 soverin.net. IVR40CpVZPPG5LvdHtLeTwN0OmvTg8rrBRDtSAGsFrzQFnsviBr9E10W68cOW8LE3L8ejdMCOxkJ c3A/LsU5ZA== )`
	RRSIG=59262 and DNSKEY=59262 verifies the A RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test soverin.net at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: