DNSSEC Analyzer - theenglishnook.ch

Domain Name:

Time: 2021-10-16 13:00:00 UTC, NTP stratum 16

Analyzing DNSSEC problems for theenglishnook.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (864 octets) ;; HEADER SECTION ;; id = 20963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAY+oUaY0b7Z45vRD1ef/GykZqgHJtfdzRcnQNvGVQAqlH22QChtG+n1EMugw7T/6uDBAGlRI kXASdtHXhxStb9lPpyQe5/JIuMIlg+NhxKxEJ5e3J9SSPCavvDhH/BPrBCJwn8b68QAWRjVW6Rgd x63pUm7lfsimiWGMfplHNvcZWgVbKA9OI2o2lU8rT8n7zuwtlZPNpDLSI5GzrJgIiKR2Id16fmAg TJBOw14Xye/t4/BxTdxeMiiVFwA4KUV2VeqspHKSHFOz+lUIIqBRknEmYpSvnxnyi0n1n4tGnGP8 z6ZwRACi1Rw0nCu7BGOU9M6LpInRoW/W4KXLODr6xqU= ) ; Key ID = 14748`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20211101000000 20211011000000 20326 . Vgp/qDkJ+iPavrz3Y8x60J2QTkY2ohOdsNcbTYrzBeWPzrdEGMbIovAJ41Khp+0yRFfqYRc8LQqG 7NT+4Fnzsg3LAFhqpZ99NEWSHwvC/6veJRbmH9u9D4VbO90IpEoUTBd7xGU1I3Vr3RNaHGqsrVRo dgEMKlh85CJJUZAhoH+BiDQIPNPBSMGy6F+78qJb+JccBlIWD/rZulBqqc6QsSDlHNMWNmVF4Y3S 280Co5AIx+W3ATkIXyGzW78lpe/1xJyCuMsQZwAT7j5RMAwmlV2WVoe9rMaezCIzTiaiEMTOaJcc MpbdykfOLpxJDbgqzABEfK6Qg2NcOa5P1LOPTw== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=14748 is now in the chain-of-trust
	Query to j.root-servers.net for theenglishnook.ch/A
	Received 805 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (805 octets) ;; HEADER SECTION ;; id = 26190 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS a.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . PEXbuLYOfk+7TWr2G5U93Px29Hbla+1qFRT5SiJbg+Q+Ba5iIR2daxkI50bCbOgUYko8TJzBNOEP Hr2tDaO22GmMjXpLhnRSrB3Pycf0GTTIxAxHCvCcuwQ/fZoF1SnCsqjclwDOha0o/ZYXpnsnbroi kAzRFsfbRRpGztjZ1OZP0RFo+QdoMtcVj0V22P56KaG1DcH+7rCGb6VqpIttFif5xUs4kIogkYFS D+acZHdF+VPXiBu3OWXXNLnobs4b16lNCzFt5VXHWnCeUBiBbbywePCtz732xQ0897hxSdyHnhyo qT2cBtF2Pnm/pG/nEaaE+u1iQLdzY81/zU2cwQ== ) ;; ADDITIONAL SECTION (15 records) b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 g.nic.ch. 172800 IN A 194.0.1.40 g.nic.ch. 172800 IN AAAA 2001:678:4::28 c.nic.ch. 172800 IN A 74.116.178.40 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 d.nic.ch. 172800 IN A 194.0.25.39 d.nic.ch. 172800 IN AAAA 2001:678:20::39 a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to l.root-servers.net for ch/DNSKEY
	Received 790 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (790 octets) ;; HEADER SECTION ;; id = 14464 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 9 arcount = 15 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (9 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS c.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 172800 IN NS g.nic.ch. ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . PEXbuLYOfk+7TWr2G5U93Px29Hbla+1qFRT5SiJbg+Q+Ba5iIR2daxkI50bCbOgUYko8TJzBNOEP Hr2tDaO22GmMjXpLhnRSrB3Pycf0GTTIxAxHCvCcuwQ/fZoF1SnCsqjclwDOha0o/ZYXpnsnbroi kAzRFsfbRRpGztjZ1OZP0RFo+QdoMtcVj0V22P56KaG1DcH+7rCGb6VqpIttFif5xUs4kIogkYFS D+acZHdF+VPXiBu3OWXXNLnobs4b16lNCzFt5VXHWnCeUBiBbbywePCtz732xQ0897hxSdyHnhyo qT2cBtF2Pnm/pG/nEaaE+u1iQLdzY81/zU2cwQ== ) ;; ADDITIONAL SECTION (15 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 c.nic.ch. 172800 IN A 74.116.178.40 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 g.nic.ch. 172800 IN A 194.0.1.40 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 c.nic.ch. 172800 IN AAAA 2620:7d:e000::28 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 g.nic.ch. 172800 IN AAAA 2001:678:4::28 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to k.root-servers.net for ch/DS
	Received 366 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (366 octets) ;; HEADER SECTION ;; id = 17112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . PEXbuLYOfk+7TWr2G5U93Px29Hbla+1qFRT5SiJbg+Q+Ba5iIR2daxkI50bCbOgUYko8TJzBNOEP Hr2tDaO22GmMjXpLhnRSrB3Pycf0GTTIxAxHCvCcuwQ/fZoF1SnCsqjclwDOha0o/ZYXpnsnbroi kAzRFsfbRRpGztjZ1OZP0RFo+QdoMtcVj0V22P56KaG1DcH+7rCGb6VqpIttFif5xUs4kIogkYFS D+acZHdF+VPXiBu3OWXXNLnobs4b16lNCzFt5VXHWnCeUBiBbbywePCtz732xQ0897hxSdyHnhyo qT2cBtF2Pnm/pG/nEaaE+u1iQLdzY81/zU2cwQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ch in the . zone
	DS=1053/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20211029050000 20211016040000 14748 . PEXbuLYOfk+7TWr2G5U93Px29Hbla+1qFRT5SiJbg+Q+Ba5iIR2daxkI50bCbOgUYko8TJzBNOEP Hr2tDaO22GmMjXpLhnRSrB3Pycf0GTTIxAxHCvCcuwQ/fZoF1SnCsqjclwDOha0o/ZYXpnsnbroi kAzRFsfbRRpGztjZ1OZP0RFo+QdoMtcVj0V22P56KaG1DcH+7rCGb6VqpIttFif5xUs4kIogkYFS D+acZHdF+VPXiBu3OWXXNLnobs4b16lNCzFt5VXHWnCeUBiBbbywePCtz732xQ0897hxSdyHnhyo qT2cBtF2Pnm/pG/nEaaE+u1iQLdzY81/zU2cwQ== )`
	RRSIG=14748 and DNSKEY=14748 verifies the DS RRset
	DS=1053/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 1053 13 2 94d834bef7536bfe6ecb4682e1151bdd4882ca12c6db2c1aa64cb0e9d4da5222 )`
	Query to b.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.43
	;; Response received from 130.59.31.43 (369 octets) ;; HEADER SECTION ;; id = 53294 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 iLNPGWZK1HoUsEzs+w6LKseg9jUHcfw50nIuERti2BFT4X11WW8DXNQmedJlkiqnH3XMlb6MIsa6 VUh2AMJ6Ew== ) ; Key ID = 2883 ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053 ch. 86400 IN DNSKEY ( 256 3 13 NdZYyKOlb4oIDMVBZv53vFk964dhl74pCTQmnASkish+i3/9DRD+vFFM74suxsDgyrEI2dW8oPJ9 nPgSTZzyVQ== ) ; Key ID = 45144 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20211121100909 20211006090909 1053 ch. NqnKw5+Um96KoRczj/9ZIM0lSLqYNINUg63vdPxfAFdXGfIHqPT9af1h+vwYOr0JtHLsboBFpxah 6tmeqYk52Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 iLNPGWZK1HoUsEzs+w6LKseg9jUHcfw50nIuERti2BFT4X11WW8DXNQmedJlkiqnH3XMlb6MIsa6 VUh2AMJ6Ew== ) ; Key ID = 2883`
	`ch. 86400 IN DNSKEY ( 257 3 13 kr4o4HQBltkJbi/uQ03HU9DY4eKY9gVHyHJk/Qw1ZRYeCb/QMQ8hx0gN5o0lTBEqO/H5DwCWxM33 aUwBBZostw== ) ; Key ID = 1053`
	`ch. 86400 IN DNSKEY ( 256 3 13 NdZYyKOlb4oIDMVBZv53vFk964dhl74pCTQmnASkish+i3/9DRD+vFFM74suxsDgyrEI2dW8oPJ9 nPgSTZzyVQ== ) ; Key ID = 45144`
	DNSKEY=1053/SEP is now in the chain-of-trust
	DS=1053/SHA-256 verifies DNSKEY=1053/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20211121100909 20211006090909 1053 ch. NqnKw5+Um96KoRczj/9ZIM0lSLqYNINUg63vdPxfAFdXGfIHqPT9af1h+vwYOr0JtHLsboBFpxah 6tmeqYk52Q== )`
	RRSIG=1053 and DNSKEY=1053/SEP verifies the DNSKEY RRset
	DNSKEY=2883 is now in the chain-of-trust
	DNSKEY=45144 is now in the chain-of-trust
	Query to a.nic.ch for theenglishnook.ch/A
	Received 456 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (456 octets) ;; HEADER SECTION ;; id = 48766 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3gngrcv1ne79n0bdlvalr7r20490p4 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211113115023 20211014110221 45144 ch. dv2VFasQDnk8tYvhhUqOtuIqO/dipDCe5DbcnZem938IpOKmNoW/OTYUiBhFdxBQ5s9keN5RnCOA AnIojpW2LA== ) 27PE6FL9DQ31KONKG9A6T1CDS8FGQUPC.ch. 900 IN NSEC3 ( 1 1 0 - 27pj7mm8lhp23rh2hius0sh39hfj6gii NS DS RRSIG ) 27PE6FL9DQ31KONKG9A6T1CDS8FGQUPC.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211105123051 20211006120221 45144 ch. nKwYR1GD1+99Ecks5wrWa/KuyLx4yS5R4pLBfCM901qC3syhDy3rlBSmj018QdmiAy5m/AQJPsvy oOCIqTeylQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to g.nic.ch for theenglishnook.ch/DNSKEY
	Received 477 bytes from 194.0.1.40
	;; Response received from 194.0.1.40 (477 octets) ;; HEADER SECTION ;; id = 6416 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN NSEC3 ( 1 1 0 - nd3gngrcv1ne79n0bdlvalr7r20490p4 NS SOA RRSIG DNSKEY NSEC3PARAM ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211113115023 20211014110221 45144 ch. dv2VFasQDnk8tYvhhUqOtuIqO/dipDCe5DbcnZem938IpOKmNoW/OTYUiBhFdxBQ5s9keN5RnCOA AnIojpW2LA== ) 27pe6fl9dq31konkg9a6t1cds8fgqupc.ch. 900 IN NSEC3 ( 1 1 0 - 27pj7mm8lhp23rh2hius0sh39hfj6gii NS DS RRSIG ) 27pe6fl9dq31konkg9a6t1cds8fgqupc.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211105123051 20211006120221 45144 ch. nKwYR1GD1+99Ecks5wrWa/KuyLx4yS5R4pLBfCM901qC3syhDy3rlBSmj018QdmiAy5m/AQJPsvy oOCIqTeylQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone theenglishnook.ch

theenglishnook.ch

	Checking DS between ch and theenglishnook.ch
	Query to c.nic.ch for theenglishnook.ch/DS
	Received 574 bytes from 74.116.178.40
	;; Response received from 74.116.178.40 (574 octets) ;; HEADER SECTION ;; id = 60530 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ch. 900 IN SOA ( a.nic.ch. dns-operation.switch.ch. 2021101614 ;serial 900 ;refresh 600 ;retry 1123200 ;expire 900 ;minimum ) ch. 900 IN RRSIG ( SOA 13 1 900 20211115114636 20211016110222 45144 ch. I3QeqFEXNhulwCXyJvAnYCReN6XKoq58aDRC+Fc9XaYQsK6DFISevsw63xfmrqZbLNSHqrn56QK4 rgR4qziV/A== ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN NSEC3 ( 1 1 0 - nd3gngrcv1ne79n0bdlvalr7r20490p4 NS SOA RRSIG DNSKEY NSEC3PARAM ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211113115023 20211014110221 45144 ch. dv2VFasQDnk8tYvhhUqOtuIqO/dipDCe5DbcnZem938IpOKmNoW/OTYUiBhFdxBQ5s9keN5RnCOA AnIojpW2LA== ) 27pe6fl9dq31konkg9a6t1cds8fgqupc.ch. 900 IN NSEC3 ( 1 1 0 - 27pj7mm8lhp23rh2hius0sh39hfj6gii NS DS RRSIG ) 27pe6fl9dq31konkg9a6t1cds8fgqupc.ch. 900 IN RRSIG ( NSEC3 13 2 900 20211105123051 20211006120221 45144 ch. nKwYR1GD1+99Ecks5wrWa/KuyLx4yS5R4pLBfCM901qC3syhDy3rlBSmj018QdmiAy5m/AQJPsvy oOCIqTeylQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DS records found for theenglishnook.ch in the ch zone
	Query to ns69.domaincontrol.com for theenglishnook.ch/DNSKEY
	Received 117 bytes from 97.74.104.45
	;; Response received from 97.74.104.45 (117 octets) ;; HEADER SECTION ;; id = 28545 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) theenglishnook.ch. 600 IN SOA ( ns69.domaincontrol.com. dns.jomax.net. 2021092200 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	No DNSKEY records found
	Query to ns70.domaincontrol.com for theenglishnook.ch/A
	Received 165 bytes from 173.201.72.45
	;; Response received from 173.201.72.45 (165 octets) ;; HEADER SECTION ;; id = 17189 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (4 records) theenglishnook.ch. 3600 IN A 185.199.108.153 theenglishnook.ch. 3600 IN A 185.199.110.153 theenglishnook.ch. 3600 IN A 185.199.111.153 theenglishnook.ch. 3600 IN A 185.199.109.153 ;; AUTHORITY SECTION (2 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	ns70.domaincontrol.com is authoritative for theenglishnook.ch
	Query to ns69.domaincontrol.com for theenglishnook.ch/SOA
	Received 150 bytes from 97.74.104.45
	;; Response received from 97.74.104.45 (150 octets) ;; HEADER SECTION ;; id = 44870 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN SOA ;; ANSWER SECTION (1 record) theenglishnook.ch. 3600 IN SOA ( ns69.domaincontrol.com. dns.jomax.net. 2021092200 ;serial 28800 ;refresh 7200 ;retry 604800 ;expire 600 ;minimum ) ;; AUTHORITY SECTION (2 records) theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	Query to ns70.domaincontrol.com for theenglishnook.ch/A
	Received 165 bytes from 173.201.72.45
	;; Response received from 173.201.72.45 (165 octets) ;; HEADER SECTION ;; id = 30367 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (4 records) theenglishnook.ch. 3600 IN A 185.199.108.153 theenglishnook.ch. 3600 IN A 185.199.110.153 theenglishnook.ch. 3600 IN A 185.199.111.153 theenglishnook.ch. 3600 IN A 185.199.109.153 ;; AUTHORITY SECTION (2 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	theenglishnook.ch A RR has value 185.199.108.153
	theenglishnook.ch A RR has value 185.199.110.153
	theenglishnook.ch A RR has value 185.199.111.153
	theenglishnook.ch A RR has value 185.199.109.153
	No RRSIGs found

theenglishnook.ch

	Query to ns69.domaincontrol.com for theenglishnook.ch/A
	Received 165 bytes from 97.74.104.45
	;; Response received from 97.74.104.45 (165 octets) ;; HEADER SECTION ;; id = 6339 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (4 records) theenglishnook.ch. 3600 IN A 185.199.108.153 theenglishnook.ch. 3600 IN A 185.199.110.153 theenglishnook.ch. 3600 IN A 185.199.111.153 theenglishnook.ch. 3600 IN A 185.199.109.153 ;; AUTHORITY SECTION (2 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	ns69.domaincontrol.com is authoritative for theenglishnook.ch
	Query to ns69.domaincontrol.com for theenglishnook.ch/A
	Received 165 bytes from 97.74.104.45
	;; Response received from 97.74.104.45 (165 octets) ;; HEADER SECTION ;; id = 37761 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 2 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option: ;; QUESTION SECTION (1 record) ;; theenglishnook.ch. IN A ;; ANSWER SECTION (4 records) theenglishnook.ch. 3600 IN A 185.199.108.153 theenglishnook.ch. 3600 IN A 185.199.110.153 theenglishnook.ch. 3600 IN A 185.199.111.153 theenglishnook.ch. 3600 IN A 185.199.109.153 ;; AUTHORITY SECTION (2 records) theenglishnook.ch. 3600 IN NS ns69.domaincontrol.com. theenglishnook.ch. 3600 IN NS ns70.domaincontrol.com. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1200 ;; option:
	theenglishnook.ch A RR has value 185.199.108.153
	theenglishnook.ch A RR has value 185.199.110.153
	theenglishnook.ch A RR has value 185.199.111.153
	theenglishnook.ch A RR has value 185.199.109.153
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test theenglishnook.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: