DNSSEC Analyzer

Domain Name:

Time: 2023-10-02 20:17:46 UTC, NTP stratum 4

Analyzing DNSSEC problems for su.se

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to h.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (1139 octets) ;; HEADER SECTION ;; id = 22001 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231022000000 20231001000000 20326 . WQ+tzT8gKOYmaX8NLjusFmLz4zLVeeY3hAmZUKxl7/6LxY3lJh6qRIgLNBN7EkAhyTbjVVryUhEY ExIX/luU4fGmUCyxhYZwF+2bCv3uT4DaI8ssk3USVFFOR9wTkggzVYrtr2UH1PFmQ5hE//aiPfsy NEAisEXMZX3nUT/aCd5oZ6LlH53Nz9CZOa0vNHTu6erIg+mhAOzshcG9/BIfCrYJ1H5D5serTV1x t3Tvw2+KX6w3dG1Nb6vVNpe9Yj7Eb0B85FiqzoAM5jcwHiY+rovSbdVpmD3mIHXZ65wCiBGa6vQS nJQXwchjWQPnSDFLGuZh3dt89C65erw9grHteQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to e.root-servers.net for su.se/A
	Received 972 bytes from 192.203.230.10
	;; Response received from 192.203.230.10 (972 octets) ;; HEADER SECTION ;; id = 63243 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 b.ns.se. 172800 IN A 192.36.133.107 c.ns.se. 172800 IN A 192.36.135.107 f.ns.se. 172800 IN A 192.71.53.53 g.ns.se. 172800 IN A 130.239.5.114 i.ns.se. 172800 IN A 194.146.106.22 m.ns.se. 172800 IN A 194.0.11.112 x.ns.se. 172800 IN A 213.108.25.4 y.ns.se. 172800 IN A 185.159.197.150 z.ns.se. 172800 IN A 185.159.198.150 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for se/DNSKEY
	Received 969 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (969 octets) ;; HEADER SECTION ;; id = 15638 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 21 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) se. 172800 IN NS a.ns.se. se. 172800 IN NS b.ns.se. se. 172800 IN NS c.ns.se. se. 172800 IN NS f.ns.se. se. 172800 IN NS g.ns.se. se. 172800 IN NS i.ns.se. se. 172800 IN NS m.ns.se. se. 172800 IN NS x.ns.se. se. 172800 IN NS y.ns.se. se. 172800 IN NS z.ns.se. se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; ADDITIONAL SECTION (21 records) a.ns.se. 172800 IN A 192.36.144.107 a.ns.se. 172800 IN AAAA 2a01:3f0:0:301::53 b.ns.se. 172800 IN A 192.36.133.107 b.ns.se. 172800 IN AAAA 2001:67c:254c:301::53 c.ns.se. 172800 IN A 192.36.135.107 c.ns.se. 172800 IN AAAA 2001:67c:2554:301::53 f.ns.se. 172800 IN A 192.71.53.53 f.ns.se. 172800 IN AAAA 2a01:3f0:0:305::53 g.ns.se. 172800 IN A 130.239.5.114 g.ns.se. 172800 IN AAAA 2001:6b0:e:3::1 i.ns.se. 172800 IN A 194.146.106.22 i.ns.se. 172800 IN AAAA 2001:67c:1010:5::53 m.ns.se. 172800 IN A 194.0.11.112 m.ns.se. 172800 IN AAAA 2001:678:e:112::53 x.ns.se. 172800 IN A 213.108.25.4 x.ns.se. 172800 IN AAAA 2001:67c:124c:e000::4 y.ns.se. 172800 IN A 185.159.197.150 y.ns.se. 172800 IN AAAA 2620:10a:80aa::150 z.ns.se. 172800 IN A 185.159.198.150 z.ns.se. 172800 IN AAAA 2620:10a:80ab::150 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone se

	Checking DS between . and se
	Query to m.root-servers.net for se/DS
	Received 366 bytes from 202.12.27.33
	;; Response received from 202.12.27.33 (366 octets) ;; HEADER SECTION ;; id = 8776 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DS ;; ANSWER SECTION (2 records) se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 ) se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for se in the . zone
	DS=59407/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`se. 86400 IN RRSIG ( DS 8 1 86400 20231015170000 20231002160000 46780 . bzh2nfafTy5YHc/2WkC+6fS+49Ijh8P1iPQi0pLNEEZa/flyykZbDde2ZRzp+3tjsJ4XSQrB+zSc 6LgiC8qXGj3EHLKFAt53sWjsODjyvvE554xxc5dS+llGfeHmfMKxi05wZ8zBcQ5ysHvY/wBPZ0n3 KSbVUDzJl6fhHAHZQZR1kBJyeta4ClAlOy2haRk3CRJ4YmM1NtZq62RR4zVUCtj6aTv3JVSpjgGB TmcfAY41d5KZ4PVfb/z1dgzoXCMS0o09ysUlyS8041H2PmfAAA31bdPCoVp/c9lhwGL2rSVZPKL1 gQXE/JmOlLuSaKRWv/D5ha2y3/pv5kmYbb/LlQ== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=59407/SHA-256 is now in the chain-of-trust
	`se. 86400 IN DS ( 59407 8 2 67a8e06fcefdd9397f77f26c41ade4ec142f299bcfa1827f0ef8fd87f2f63022 )`
	Query to i.ns.se for se/DNSKEY
	Received 873 bytes from 194.146.106.22
	;; Response received from 194.146.106.22 (873 octets) ;; HEADER SECTION ;; id = 55676 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; se. IN DNSKEY ;; ANSWER SECTION (3 records) se. 3600 IN DNSKEY ( 256 3 8 AwEAAa1CCGgWPeOoYclpgyPGuauo2savH2qm6vOEp6nhVqA3ABZZelkAZBN1du3vFXLmvYILWfKD oiSwzQsylRiVk82RgCMfa5q0aF+0ZJhX658Kb6i0Z3HQ1dL8lb7mkDinsHRPPqXvOA63Rzcy9L42 jqOxUNAL1OjmO99tqjNectQqdxkmx2FDxSMlcDj4iGN6M0g6gKvB6/OYawyTlEkAWDxRn8opLYA7 4AfeET7nKmrBZscZWOAqhwAo2EjvW24y7nApfNTBYtdaA2nF6AvQB0v6ThJDuv9+xt/qhOmOnAlc ajWCzWgafPb1ket3uNhOl7sC7WKwq2IzqKTmzFJZTpk= ) ; Key ID = 7906 se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407 se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231016005838 20231002131100 59407 se. pcm0T7mr/fwAwWxFEDl8AWBYLuQ8TxblM9VnAVD4+qLnEEDvBmYB3DfOxU8l0MevbfYYRnyIxfGy cob2A7cqvG5XUco0hqSVqQHLSf9bkJEbgKwywSJuj0BSxlib0qMBo/IFf1ghvh41l/qb/rYal+50 ZXLnq+bftSmCHlE/IqlUljaxSIf+H+DRXN1/1TNbc31E++NffnyZ0YUrFD9+68wxaz1vs8lpSncK PPagxKIneXMxxpbwTNdJ/52sWCfr7oTNftIYOekI5MSnxxc7x7k+DVNxgFUAZRZ81P0nG8YKtAO/ JDF2VA4yMeSUxauer6zSPZR4n9ZqIbq9z7CP+Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for se
	`se. 3600 IN DNSKEY ( 256 3 8 AwEAAa1CCGgWPeOoYclpgyPGuauo2savH2qm6vOEp6nhVqA3ABZZelkAZBN1du3vFXLmvYILWfKD oiSwzQsylRiVk82RgCMfa5q0aF+0ZJhX658Kb6i0Z3HQ1dL8lb7mkDinsHRPPqXvOA63Rzcy9L42 jqOxUNAL1OjmO99tqjNectQqdxkmx2FDxSMlcDj4iGN6M0g6gKvB6/OYawyTlEkAWDxRn8opLYA7 4AfeET7nKmrBZscZWOAqhwAo2EjvW24y7nApfNTBYtdaA2nF6AvQB0v6ThJDuv9+xt/qhOmOnAlc ajWCzWgafPb1ket3uNhOl7sC7WKwq2IzqKTmzFJZTpk= ) ; Key ID = 7906`
	`se. 3600 IN DNSKEY ( 257 3 8 AwEAAccqQMsh1rhvB3IWXmWZpCrug9MEGCKGteLIvwppyHeHgeBBm3M0p5FV9ImquvxFCnBd6Eey 3Vf8SzoTodZ3YrGF9WFve7bmie2MIBhFDoCep16v9lon0ZsKrOvoCkPbTT0iFCdrbdyikYcCfvvh 303anvQeTCf3jy+bHOTleaqVaNRJiGv5NBsPKpfnnqBpqqKyZymSpwQXHtTeyv7iWwGl3cfP3U6s p711WvKkXy7Y2DJnC5T5owHWUy1ZPl4s+9DtuC2A9AWhOpDicguHYRfmyscjCbPOB8/tO5j+uECo 67i7JjsiLjQTRyHuigUUBRag3Z3FaTXZBg/myaoUL0U= ) ; Key ID = 59407`
	DNSKEY=59407/SEP is now in the chain-of-trust
	DS=59407/SHA-256 verifies DNSKEY=59407/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`se. 3600 IN RRSIG ( DNSKEY 8 1 3600 20231016005838 20231002131100 59407 se. pcm0T7mr/fwAwWxFEDl8AWBYLuQ8TxblM9VnAVD4+qLnEEDvBmYB3DfOxU8l0MevbfYYRnyIxfGy cob2A7cqvG5XUco0hqSVqQHLSf9bkJEbgKwywSJuj0BSxlib0qMBo/IFf1ghvh41l/qb/rYal+50 ZXLnq+bftSmCHlE/IqlUljaxSIf+H+DRXN1/1TNbc31E++NffnyZ0YUrFD9+68wxaz1vs8lpSncK PPagxKIneXMxxpbwTNdJ/52sWCfr7oTNftIYOekI5MSnxxc7x7k+DVNxgFUAZRZ81P0nG8YKtAO/ JDF2VA4yMeSUxauer6zSPZR4n9ZqIbq9z7CP+Q== )`
	RRSIG=59407 and DNSKEY=59407/SEP verifies the DNSKEY RRset
	DNSKEY=7906 is now in the chain-of-trust
	Query to f.ns.se for su.se/A
	Received 548 bytes from 192.71.53.53
	;; Response received from 192.71.53.53 (548 octets) ;; HEADER SECTION ;; id = 27637 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) su.se. 86400 IN NS ns1.su.se. su.se. 86400 IN NS ns2.su.se. su.se. 86400 IN NS ns3.su.se. su.se. 7200 IN NSEC su-egentligen.se. NS RRSIG NSEC su.se. 7200 IN RRSIG ( NSEC 8 2 7200 20231015100219 20231001201100 7906 se. KqSTB4QB6+6IS0fNydkoVxtKhk+qIZ+2goEREjdN6FVGpJT4fGEm8a+ysLIb5IYPpWJffHOodwfi HLoMaPHecrokz3MaWvfy4bl+VpqJ0yySRkh7VY5psHlkUNCxdn9YDtyZZpmCEggxdfRtFSLO1P9M eQH03cNSJVPhK/TaMDpXbmYUTaghl2BtXTTd1JweHXh36PEJRCZ5NDkLaQxWpJ9e9BqtmEsLQQ/h bocsEzJXilJCcZptqovAruM+VlhOxjh0QgWlxsjc50H2pb/gAk3qxwQ82ikX6sVnim7cDe9+2bWI GnbzxwA/pn1kI2rl+NbX2YocMnV2yuCUBE+BqQ== ) ;; ADDITIONAL SECTION (7 records) ns1.su.se. 86400 IN A 130.237.181.242 ns2.su.se. 86400 IN A 130.237.181.250 ns3.su.se. 86400 IN A 192.16.145.250 ns1.su.se. 86400 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 86400 IN AAAA 2001:6b0:5:1227::250 ns3.su.se. 86400 IN AAAA 2001:6b0:1:2003::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to x.ns.se for su.se/DNSKEY
	Received 548 bytes from 213.108.25.4
	;; Response received from 213.108.25.4 (548 octets) ;; HEADER SECTION ;; id = 40226 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) su.se. 86400 IN NS ns1.su.se. su.se. 86400 IN NS ns2.su.se. su.se. 86400 IN NS ns3.su.se. su.se. 7200 IN NSEC su-egentligen.se. NS RRSIG NSEC su.se. 7200 IN RRSIG ( NSEC 8 2 7200 20231015100219 20231001201100 7906 se. KqSTB4QB6+6IS0fNydkoVxtKhk+qIZ+2goEREjdN6FVGpJT4fGEm8a+ysLIb5IYPpWJffHOodwfi HLoMaPHecrokz3MaWvfy4bl+VpqJ0yySRkh7VY5psHlkUNCxdn9YDtyZZpmCEggxdfRtFSLO1P9M eQH03cNSJVPhK/TaMDpXbmYUTaghl2BtXTTd1JweHXh36PEJRCZ5NDkLaQxWpJ9e9BqtmEsLQQ/h bocsEzJXilJCcZptqovAruM+VlhOxjh0QgWlxsjc50H2pb/gAk3qxwQ82ikX6sVnim7cDe9+2bWI GnbzxwA/pn1kI2rl+NbX2YocMnV2yuCUBE+BqQ== ) ;; ADDITIONAL SECTION (7 records) ns1.su.se. 86400 IN A 130.237.181.242 ns1.su.se. 86400 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 86400 IN A 130.237.181.250 ns2.su.se. 86400 IN AAAA 2001:6b0:5:1227::250 ns3.su.se. 86400 IN A 192.16.145.250 ns3.su.se. 86400 IN AAAA 2001:6b0:1:2003::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone su.se

su.se

	Checking DS between se and su.se
	Query to b.ns.se for su.se/DS
	Received 730 bytes from 192.36.133.107
	;; Response received from 192.36.133.107 (730 octets) ;; HEADER SECTION ;; id = 16685 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) se. 7200 IN SOA ( catcher-in-the-rye.nic.se. registry-default.nic.se. 2023100221 ;serial 1800 ;refresh 1800 ;retry 864000 ;expire 7200 ;minimum ) se. 7200 IN RRSIG ( SOA 8 1 172800 20231015110721 20231002181059 7906 se. SUJrvcBjWh0f8QfrRQcltTZPCQQZfsnxu5SHDDVtl1pUxhoiUgfbu6MCF2rBIWQW9/UaiVg1c2pV S6ui/drkqO6hlrqOOoZy+dN2kmMoIFO0asWvpGMcVdP+uIW/0sK41yQh5MogkB1JfH9G/phKlFrq rNmhFxFaAk11eaeq1+qT9j9yrNdRpDT+DmLthRk1V6gp0/ryYiiVGcc7vuT2UtRedkwNi0qVS01a IOnc43Z2BBytD8g4XTtiLm4Q4UUtmhVwTJVEpnOUMuCM2t8Ta3mkliEGkTV4x6BAaSkfMus3dYhv cUIvO4QPRRLSAXGdRfwvUy+1OwYYS16c/VDe2g== ) su.se. 7200 IN NSEC su-egentligen.se. NS RRSIG NSEC su.se. 7200 IN RRSIG ( NSEC 8 2 7200 20231015100219 20231001201100 7906 se. KqSTB4QB6+6IS0fNydkoVxtKhk+qIZ+2goEREjdN6FVGpJT4fGEm8a+ysLIb5IYPpWJffHOodwfi HLoMaPHecrokz3MaWvfy4bl+VpqJ0yySRkh7VY5psHlkUNCxdn9YDtyZZpmCEggxdfRtFSLO1P9M eQH03cNSJVPhK/TaMDpXbmYUTaghl2BtXTTd1JweHXh36PEJRCZ5NDkLaQxWpJ9e9BqtmEsLQQ/h bocsEzJXilJCcZptqovAruM+VlhOxjh0QgWlxsjc50H2pb/gAk3qxwQ82ikX6sVnim7cDe9+2bWI GnbzxwA/pn1kI2rl+NbX2YocMnV2yuCUBE+BqQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for su.se in the se zone
	Query to ns3.su.se for su.se/DNSKEY
	Received 86 bytes from 192.16.145.250
	;; Response received from 192.16.145.250 (86 octets) ;; HEADER SECTION ;; id = 34713 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) su.se. 300 IN SOA ( ipam.su.se. hostmaster.su.se. 3050 ;serial 14400 ;refresh 3600 ;retry 1555200 ;expire 300 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	No DNSKEY records found
	Query to ns2.su.se for su.se/A
	Received 236 bytes from 130.237.181.250
	;; Response received from 130.237.181.250 (236 octets) ;; HEADER SECTION ;; id = 65449 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns1.su.se. su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns3.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2.su.se is authoritative for su.se
	Query to ns3.su.se for su.se/SOA
	Received 272 bytes from 192.16.145.250
	;; Response received from 192.16.145.250 (272 octets) ;; HEADER SECTION ;; id = 62455 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN SOA ;; ANSWER SECTION (1 record) su.se. 3600 IN SOA ( ipam.su.se. hostmaster.su.se. 3050 ;serial 14400 ;refresh 3600 ;retry 1555200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns3.su.se. su.se. 3600 IN NS ns1.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns1.su.se for su.se/SOA
	Received 272 bytes from 130.237.181.242
	;; Response received from 130.237.181.242 (272 octets) ;; HEADER SECTION ;; id = 2180 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN SOA ;; ANSWER SECTION (1 record) su.se. 3600 IN SOA ( ipam.su.se. hostmaster.su.se. 3050 ;serial 14400 ;refresh 3600 ;retry 1555200 ;expire 300 ;minimum ) ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns1.su.se. su.se. 3600 IN NS ns3.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns2.su.se for su.se/A
	Received 236 bytes from 130.237.181.250
	;; Response received from 130.237.181.250 (236 octets) ;; HEADER SECTION ;; id = 10423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns1.su.se. su.se. 3600 IN NS ns3.su.se. su.se. 3600 IN NS ns2.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	su.se A RR has value 193.11.30.171
	No RRSIGs found

su.se

	Query to ns3.su.se for su.se/A
	Received 236 bytes from 192.16.145.250
	;; Response received from 192.16.145.250 (236 octets) ;; HEADER SECTION ;; id = 41838 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns3.su.se. su.se. 3600 IN NS ns1.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns3.su.se is authoritative for su.se
	Query to ns3.su.se for su.se/A
	Received 236 bytes from 192.16.145.250
	;; Response received from 192.16.145.250 (236 octets) ;; HEADER SECTION ;; id = 28309 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns3.su.se. su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns1.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	su.se A RR has value 193.11.30.171
	No RRSIGs found

su.se

	Query to ns1.su.se for su.se/A
	Received 236 bytes from 130.237.181.242
	;; Response received from 130.237.181.242 (236 octets) ;; HEADER SECTION ;; id = 27254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns1.su.se. su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns3.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns1.su.se is authoritative for su.se
	Query to ns1.su.se for su.se/A
	Received 236 bytes from 130.237.181.242
	;; Response received from 130.237.181.242 (236 octets) ;; HEADER SECTION ;; id = 34856 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 7 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; su.se. IN A ;; ANSWER SECTION (1 record) su.se. 300 IN A 193.11.30.171 ;; AUTHORITY SECTION (3 records) su.se. 3600 IN NS ns2.su.se. su.se. 3600 IN NS ns1.su.se. su.se. 3600 IN NS ns3.su.se. ;; ADDITIONAL SECTION (7 records) ns3.su.se. 3600 IN A 192.16.145.250 ns1.su.se. 3600 IN A 130.237.181.242 ns2.su.se. 3600 IN A 130.237.181.250 ns3.su.se. 3600 IN AAAA 2001:6b0:1:2003::250 ns1.su.se. 3600 IN AAAA 2001:6b0:5:1226::242 ns2.su.se. 3600 IN AAAA 2001:6b0:5:1227::250 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	su.se A RR has value 193.11.30.171
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test su.se at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: