DNSSEC Analyzer - testa.eu

Domain Name:

Time: 2021-06-12 19:51:53 UTC, NTP stratum 4

Analyzing DNSSEC problems for testa.eu

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to l.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (864 bytes) ;; HEADER SECTION ;; id = 52319 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAa+HvD7XXjmL+1htThUQyZW7oWGnjzKHJASg3TSR5Bmu5LfnSVW7fxqZa2oAYo2ionIQWyqA j/loApzg8GNMhyIibftPJso54uWRQ2GaoMrwLD5SLu676kf7urJq6nqdjNC0aJM/C888li69lVH6 tiu2tZm1NH3cmgfnMUJpD60bsrDUqs7XwftmNkdkHa4ltQbM3UNPyfTaNBQYoH3wpOpSjdk3tyDR nreBO6Idrw+DGf/rve4sL3qiSaXfYIkcwAwozxR34iHU5dbCDs8S6FmZYhoSVKVgNSUkudxhd9/6 RrZkYRgvwRsQXl3UwsacU1DsXcORqIC+7NlQ6M2OJVU= ) ; Key ID = 14631`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20210701000000 20210610000000 20326 . BnlgUs78N3ckYFZHySrbdpmlrvI6d7lY5TNKs2J7miY5T03UuR2EJGcLwpoEL5trbTVqKL3/MCSD E+1E8N8kB6yskFAqloUMifyI+5sqApbuWtohUU7IcEYQ8cko/PLngbVwVMNJyipXd54A4pmWKSy4 qAa74sdsYTDmyPrsYibxTKwdmjLOrAxB1gOj435BgmV7z50feme761b06SwG3ChyQdVOXWOhbWtL IvrqIxiHvjSSgmCyicZSvbP+m+oan4BDhe/cH6/yhsQOtBC3enr/QP7mhhcoURGoF0bd/S0eoLMp e5PDeyKeyzV0R5O7CAb44lX37G2VOlSTH/1crQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14631 is now in the chain-of-trust
	Query to c.root-servers.net for testa.eu/A
	Received 650 bytes from 192.33.4.12
	;; Answer received from 192.33.4.12 (650 bytes) ;; HEADER SECTION ;; id = 49960 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 x.dns.eu. 172800 IN A 185.151.141.1 y.dns.eu. 172800 IN A 194.146.106.90 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to l.root-servers.net for eu/DNSKEY
	Received 644 bytes from 199.7.83.42
	;; Answer received from 199.7.83.42 (644 bytes) ;; HEADER SECTION ;; id = 27621 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 10 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) eu. 172800 IN NS w.dns.eu. eu. 172800 IN NS x.dns.eu. eu. 172800 IN NS y.dns.eu. eu. 172800 IN NS nl.dns.eu. eu. 172800 IN NS si.dns.eu. eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; ADDITIONAL SECTION (10 records) w.dns.eu. 172800 IN A 194.0.25.28 w.dns.eu. 172800 IN AAAA 2001:678:20::28 x.dns.eu. 172800 IN A 185.151.141.1 x.dns.eu. 172800 IN AAAA 2a02:568:fe00::6575 y.dns.eu. 172800 IN A 194.146.106.90 y.dns.eu. 172800 IN AAAA 2001:67c:1010:23::53 nl.dns.eu. 172800 IN A 91.200.16.100 si.dns.eu. 172800 IN A 193.2.221.60 si.dns.eu. 172800 IN AAAA 2001:1470:8000:100::1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone eu

	Checking DS between . and eu
	Query to g.root-servers.net for eu/DS
	Received 366 bytes from 192.112.36.4
	;; Answer received from 192.112.36.4 (366 bytes) ;; HEADER SECTION ;; id = 62452 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DS ;; ANSWER SECTION (2 records) eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 ) eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for eu in the . zone
	DS=59479/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`eu. 86400 IN RRSIG ( DS 8 1 86400 20210625170000 20210612160000 14631 . K+AXYTjfMuKQdBUrG89iZSYGZ8BSnB7bb41ZrFdAxHO1gqfiO0Dy4AGZv990bgOSvTerIHUWWHGT 6PvyPvflLbkSMgWodCuVLFaXY40mkfvKWYmbYc+Y186Z9mo+DPEccOqj7DkP0iHOdIPalQOZRxXl sl5Dsv/CtAbik+yLq9g0VLavNPrEUtBs9184C1oPCud8NwjYuXyX+fcHOweUCq6wVDWBD0vIAkm0 wkhR6iCGfwId9HQNtqQQYjDIPOm5IfKcL53JOj2ECiLRNZokBtpi6vywI2utDA2w/GKX9AV8ruLQ 1lj+qDwSdnPUQC+WcRrGEiKMVeIg+6m3EN66zQ== )`
	RRSIG=14631 and DNSKEY=14631 verifies the DS RRset
	DS=59479/SHA-256 is now in the chain-of-trust
	`eu. 86400 IN DS ( 59479 8 2 5dbaa81bc0befe921886d8da28498d9fd441b457fb0e3642a0b2f9811c8e15e0 )`
	Query to x.dns.eu for eu/DNSKEY
	Received 907 bytes from 185.151.141.1
	;; Answer received from 185.151.141.1 (907 bytes) ;; HEADER SECTION ;; id = 3350 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; eu. IN DNSKEY ;; ANSWER SECTION (4 records) eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479 eu. 86400 IN DNSKEY ( 256 3 8 AwEAAaoknOeo4ZBIhuJ14mSDJV/Xowio+OXgoVPVfGbcUccioZT/FYbqlIwgpHNsyhX0AAYyNHvv Y4WjVfVdAEwb5UQdjyBuUzXKtOWwCp8M1BPyLd1uMUZrTMHrzrnEIjIACdBsTPshh7M3++ixW6Ky +sA8J27ClxZ1zNH5jc8yWdcb ) ; Key ID = 40881 eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 40881 eu. VonS6ZDi96d+x/9iBSFp30nD7I2bFyYcEdYoqW/5WutojANaQP6AgL5VGa5h07S7oTomtr9vxOtQ Ya8KnTeSGYH3DgRKf6PW+wkzjgtslFrRW7M9x0akQeTKUVLxFzaw1l3fuE60jKmK/Kfy0kKJlONP WpTU4Xx6/YT8VpiRcUY= ) eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 59479 eu. ZGYKQkmq/LnLx4/ViA+dycQ3ikUpzzH/NS1f4uMbjfs3IhqpxAO1MTXKQmjNnx5mp56x0Iy983fO oLiHUe4hWJa1BVwxJcBm9Vpi9I0Q+YiIG7JaLsOYKSueskjmIDIYJ5CNOqOb31xFt+RAabEFRXjM 1NwkgpjPkoWR/+KMQdhstdkbfGaWC0yJabAY9mfrQuJcUVgWF8EqfKovO2rnLR/qzoyoKSafW4qt 3BzjhCxRi2aBdhJ2wFTcIi0Q/wqGAxofADqTgeCtN0/KuvurDJvz5A0yYMTU0VBvvfosnf63sBec roAHJabe5lD8/WdYNQ+lebM0FPN3QORW1sjZOA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for eu
	`eu. 86400 IN DNSKEY ( 257 3 8 AwEAActqJZ58qZ0PambXPbfieQHGr0T0ABSrjjWjwYf/IUuotuqrJUqLx77NOL/mRMeF0L7WBZFO WUFDoShwCgMeMI8Um4n2hBENyLh6Ctl7j3eX+5Z4FANCJgpIIr3lhQGV7ezHt9GoLZrWJKX7srX3 I+6uUTfPIVJW9pszlB/vUHP9orWCJWQLjoWPrShATWkUomHzkJNwMyCkPNSndhenMVQCTTve1MTC f99nqvmCjkG4/54ASPT4ReuQ2h6m9mMfqPtotFo98GXjVEyM76QJhgrYgCWCW0hh7a7v+jx3sRaL jSHVTTWTIfSRmr0RP44IwK62i/am7u+188MCt9zDQI8= ) ; Key ID = 59479`
	`eu. 86400 IN DNSKEY ( 256 3 8 AwEAAaoknOeo4ZBIhuJ14mSDJV/Xowio+OXgoVPVfGbcUccioZT/FYbqlIwgpHNsyhX0AAYyNHvv Y4WjVfVdAEwb5UQdjyBuUzXKtOWwCp8M1BPyLd1uMUZrTMHrzrnEIjIACdBsTPshh7M3++ixW6Ky +sA8J27ClxZ1zNH5jc8yWdcb ) ; Key ID = 40881`
	DNSKEY=59479/SEP is now in the chain-of-trust
	DS=59479/SHA-256 verifies DNSKEY=59479/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 40881 eu. VonS6ZDi96d+x/9iBSFp30nD7I2bFyYcEdYoqW/5WutojANaQP6AgL5VGa5h07S7oTomtr9vxOtQ Ya8KnTeSGYH3DgRKf6PW+wkzjgtslFrRW7M9x0akQeTKUVLxFzaw1l3fuE60jKmK/Kfy0kKJlONP WpTU4Xx6/YT8VpiRcUY= )`
	`eu. 86400 IN RRSIG ( DNSKEY 8 1 86400 20210619013635 20210612005551 59479 eu. ZGYKQkmq/LnLx4/ViA+dycQ3ikUpzzH/NS1f4uMbjfs3IhqpxAO1MTXKQmjNnx5mp56x0Iy983fO oLiHUe4hWJa1BVwxJcBm9Vpi9I0Q+YiIG7JaLsOYKSueskjmIDIYJ5CNOqOb31xFt+RAabEFRXjM 1NwkgpjPkoWR/+KMQdhstdkbfGaWC0yJabAY9mfrQuJcUVgWF8EqfKovO2rnLR/qzoyoKSafW4qt 3BzjhCxRi2aBdhJ2wFTcIi0Q/wqGAxofADqTgeCtN0/KuvurDJvz5A0yYMTU0VBvvfosnf63sBec roAHJabe5lD8/WdYNQ+lebM0FPN3QORW1sjZOA== )`
	RRSIG=40881 and DNSKEY=40881 verifies the DNSKEY RRset
	RRSIG=59479 and DNSKEY=59479/SEP verifies the DNSKEY RRset
	DNSKEY=40881 is now in the chain-of-trust
	Query to y.dns.eu for testa.eu/A
	Received 609 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (609 bytes) ;; HEADER SECTION ;; id = 4260 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) testa.eu. 86400 IN NS ns4.skynet.be. testa.eu. 86400 IN NS ns1.skynet.be. testa.eu. 86400 IN NS ns2.skynet.be. testa.eu. 86400 IN NS ns3.skynet.be. QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e qbq6ocgmt2jnij4jnf2ccrfi4ce4nue0 NS SOA RRSIG DNSKEY NSEC3PARAM ) QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210619030026 20210612025416 40881 eu. jbwiJ1DxpWu9ErZivgeYhU1Kf3T2JsyFhhi20J0aR0WzHwyYcrjIji8ivJoqkGWwPAAuJukOu3Rm DDUyeQubgp2Pcz2/54VIfsWBTWBAvmotS0VytZOcHhC8+DLiH6QXpAh4GjEiwdZSCmvxB+s+acGu wgL2L4k3toR9L+Xn52E= ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e glicp6jt25evqonvbck2l3uio479doha NS DS RRSIG ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210615204613 20210608201010 40881 eu. gWzoTjEFmmFADfv6CuCD7GCyUO9EZth2nrhUD4psdZvVDJrnyekYDTTEpUivBkegQNprICufXjei BPFLYdPeU2Rnbgu9rdXfXtEkM33CCUyGkP3c4lX5Tl9be0graS4uGQ0d3u7WckustoGXkLGItokJ keYJsOB4qC94OgxcH4c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to y.dns.eu for testa.eu/DNSKEY
	Received 609 bytes from 194.146.106.90
	;; Answer received from 194.146.106.90 (609 bytes) ;; HEADER SECTION ;; id = 37074 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) testa.eu. 86400 IN NS ns2.skynet.be. testa.eu. 86400 IN NS ns1.skynet.be. testa.eu. 86400 IN NS ns4.skynet.be. testa.eu. 86400 IN NS ns3.skynet.be. QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e qbq6ocgmt2jnij4jnf2ccrfi4ce4nue0 NS SOA RRSIG DNSKEY NSEC3PARAM ) QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210619030026 20210612025416 40881 eu. jbwiJ1DxpWu9ErZivgeYhU1Kf3T2JsyFhhi20J0aR0WzHwyYcrjIji8ivJoqkGWwPAAuJukOu3Rm DDUyeQubgp2Pcz2/54VIfsWBTWBAvmotS0VytZOcHhC8+DLiH6QXpAh4GjEiwdZSCmvxB+s+acGu wgL2L4k3toR9L+Xn52E= ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e glicp6jt25evqonvbck2l3uio479doha NS DS RRSIG ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210615204613 20210608201010 40881 eu. gWzoTjEFmmFADfv6CuCD7GCyUO9EZth2nrhUD4psdZvVDJrnyekYDTTEpUivBkegQNprICufXjei BPFLYdPeU2Rnbgu9rdXfXtEkM33CCUyGkP3c4lX5Tl9be0graS4uGQ0d3u7WckustoGXkLGItokJ keYJsOB4qC94OgxcH4c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone testa.eu

testa.eu

	Checking DS between eu and testa.eu
	Query to nl.dns.eu for testa.eu/DS
	Received 744 bytes from 91.200.16.100
	;; Answer received from 91.200.16.100 (744 bytes) ;; HEADER SECTION ;; id = 63415 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e qbq6ocgmt2jnij4jnf2ccrfi4ce4nue0 NS SOA RRSIG DNSKEY NSEC3PARAM ) QBQ65Q6097OCPPR0EUCQNSC1FHE073UA.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210619030026 20210612025416 40881 eu. jbwiJ1DxpWu9ErZivgeYhU1Kf3T2JsyFhhi20J0aR0WzHwyYcrjIji8ivJoqkGWwPAAuJukOu3Rm DDUyeQubgp2Pcz2/54VIfsWBTWBAvmotS0VytZOcHhC8+DLiH6QXpAh4GjEiwdZSCmvxB+s+acGu wgL2L4k3toR9L+Xn52E= ) eu. 600 IN SOA ( nl.dns.eu. tech.eurid.eu. 1072285500 ;serial 3600 ;refresh 1800 ;retry 3600000 ;expire 600 ;minimum ) eu. 600 IN RRSIG ( SOA 8 1 86400 20210619195148 20210612185148 40881 eu. ClnvXbQ84+7QdCre4+qs9zQbfvr3ZZ/RmtUYBMcni5o5uG20IiPtN0PriJpcls1O6nFOj2YnrX4M yma4fRZ56aNga6xZFmTj8dw7fjq+waAeiXkfdSvwE9weTop1tFs3UYxH+6SwFQz+IrKXGf2YE6Rd Uw4+pZ9RW/Dhc1QkDbM= ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN NSEC3 ( 1 1 1 5ca1ab1e glicp6jt25evqonvbck2l3uio479doha NS DS RRSIG ) GLIBHU0LF7IH1TGCCS68E3R5508AKBFR.eu. 600 IN RRSIG ( NSEC3 8 2 600 20210615204613 20210608201010 40881 eu. gWzoTjEFmmFADfv6CuCD7GCyUO9EZth2nrhUD4psdZvVDJrnyekYDTTEpUivBkegQNprICufXjei BPFLYdPeU2Rnbgu9rdXfXtEkM33CCUyGkP3c4lX5Tl9be0graS4uGQ0d3u7WckustoGXkLGItokJ keYJsOB4qC94OgxcH4c= ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for testa.eu in the eu zone
	Query to ns2.skynet.be for testa.eu/DNSKEY
	Received 96 bytes from 195.238.3.18
	;; Answer received from 195.238.3.18 (96 bytes) ;; HEADER SECTION ;; id = 41468 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to ns2.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.3.18
	;; Answer received from 195.238.3.18 (96 bytes) ;; HEADER SECTION ;; id = 13849 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns2.skynet.be is authoritative for testa.eu
	Query to ns3.skynet.be for testa.eu/SOA
	Received 228 bytes from 195.238.25.138
	;; Answer received from 195.238.25.138 (228 bytes) ;; HEADER SECTION ;; id = 10254 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN SOA ;; ANSWER SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) testa.eu. 3600 IN NS ns4.skynet.be. testa.eu. 3600 IN NS ns3.skynet.be. testa.eu. 3600 IN NS ns2.skynet.be. testa.eu. 3600 IN NS ns1.skynet.be. ;; ADDITIONAL SECTION (5 records) ns1.skynet.be. 21600 IN A 195.238.3.17 ns2.skynet.be. 21600 IN A 195.238.3.18 ns3.skynet.be. 21600 IN A 195.238.25.138 ns4.skynet.be. 21600 IN A 195.238.25.139 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.skynet.be for testa.eu/SOA
	Received 228 bytes from 195.238.3.17
	;; Answer received from 195.238.3.17 (228 bytes) ;; HEADER SECTION ;; id = 31671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN SOA ;; ANSWER SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) testa.eu. 3600 IN NS ns3.skynet.be. testa.eu. 3600 IN NS ns2.skynet.be. testa.eu. 3600 IN NS ns1.skynet.be. testa.eu. 3600 IN NS ns4.skynet.be. ;; ADDITIONAL SECTION (5 records) ns1.skynet.be. 21600 IN A 195.238.3.17 ns2.skynet.be. 21600 IN A 195.238.3.18 ns3.skynet.be. 21600 IN A 195.238.25.138 ns4.skynet.be. 21600 IN A 195.238.25.139 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns4.skynet.be for testa.eu/SOA
	Received 228 bytes from 195.238.25.139
	;; Answer received from 195.238.25.139 (228 bytes) ;; HEADER SECTION ;; id = 60285 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN SOA ;; ANSWER SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) testa.eu. 3600 IN NS ns2.skynet.be. testa.eu. 3600 IN NS ns3.skynet.be. testa.eu. 3600 IN NS ns1.skynet.be. testa.eu. 3600 IN NS ns4.skynet.be. ;; ADDITIONAL SECTION (5 records) ns1.skynet.be. 21600 IN A 195.238.3.17 ns2.skynet.be. 21600 IN A 195.238.3.18 ns3.skynet.be. 21600 IN A 195.238.25.138 ns4.skynet.be. 21600 IN A 195.238.25.139 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.3.18
	;; Answer received from 195.238.3.18 (96 bytes) ;; HEADER SECTION ;; id = 47589 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

testa.eu

	Query to ns3.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.25.138
	;; Answer received from 195.238.25.138 (96 bytes) ;; HEADER SECTION ;; id = 43682 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns3.skynet.be is authoritative for testa.eu
	Query to ns3.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.25.138
	;; Answer received from 195.238.25.138 (96 bytes) ;; HEADER SECTION ;; id = 19049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

testa.eu

	Query to ns4.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.25.139
	;; Answer received from 195.238.25.139 (96 bytes) ;; HEADER SECTION ;; id = 39279 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns4.skynet.be is authoritative for testa.eu
	Query to ns4.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.25.139
	;; Answer received from 195.238.25.139 (96 bytes) ;; HEADER SECTION ;; id = 9610 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

testa.eu

	Query to ns1.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.3.17
	;; Answer received from 195.238.3.17 (96 bytes) ;; HEADER SECTION ;; id = 16050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.skynet.be is authoritative for testa.eu
	Query to ns1.skynet.be for testa.eu/A
	Received 96 bytes from 195.238.3.17
	;; Answer received from 195.238.3.17 (96 bytes) ;; HEADER SECTION ;; id = 36239 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; testa.eu. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) testa.eu. 3600 IN SOA ( ns1.skynet.be. dnsmaster.skynet.be. 49 ;serial 10800 ;refresh 3600 ;retry 3600000 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No NSEC records in response
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test testa.eu at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: