DNSSEC Analyzer

Domain Name:

Time: 2023-12-04 04:10:05 UTC, NTP stratum 16

Analyzing DNSSEC problems for uab.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to j.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (864 octets) ;; HEADER SECTION ;; id = 58796 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231221000000 20231130000000 20326 . Vq+Z0sYiDdI6V+KCvfoTAYNxmsKiv703Lxyy4OREQPew0qYrrUySU54Jn+NiOlkHLm+o83YW7ZZ0 eyikQKrt42dD2Hdigy7YiOeML1W3wqkZYDg/DoHo5i8zP+B6461Z/yVrjkcTSgM6C8FZuOaDqj5X PMghMfDo0fQy0spEL6rtLzGNXDZ+j5D+hcoQPYtZu9svhm9AHqZoXLu5id7whpsVJhON4BM1pQRF 7JSlTIi0cn7SGhFpfypnj/2E5hUvJ1bRRkr+wItfi7B4+b19lDNgtLZiDs3opRMmStbaF3HEFgTh UZ+HcCRzQASdyuZ4Y8xr1SUX/MpSlct5EBFshg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	Query to a.root-servers.net for uab.cat/A
	Received 778 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (778 octets) ;; HEADER SECTION ;; id = 42341 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS switch.nic.cat. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . L7IRpUfaPADzSP6P8xjeCaR22E8gQIdiMMWPqZrdB4+4YNvM1EpG0Eonllja9S8mZ51uQUIq+3qw DxxV3g7WHrlMEffmtbS2i2Z1UFwyU131CmC+0F96yWNySElGcqJppkOV/5neyIiOrEVkVUbkdunt 3YGsO27pzLcC1uN0ZsT1l+h7fRIbJ8BER3D2vBAEgkw4LrJ8VXMb42lk6d4XpXdJQ5e8OTRz9Nt5 W4y7c9c3Ch00axuveWV3Nw8vy04hrKApFmrmsCTEMiBO5gTV6eHDXOSl8bxUp5yjHtlP6TBfBhw2 KoUwcG8IxXlct6RMk1ILINM501YfeRTAUr2iMA== ) ;; ADDITIONAL SECTION (13 records) anyc1.irondns.net. 172800 IN A 195.253.64.4 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 ns.nic.cat. 172800 IN A 84.88.0.162 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN A 204.61.216.20 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 switch.nic.cat. 172800 IN A 130.59.31.29 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ns1.nic.es. 172800 IN A 194.69.254.1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN A 194.0.11.110 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for cat/DNSKEY
	Received 774 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (774 octets) ;; HEADER SECTION ;; id = 305 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . L7IRpUfaPADzSP6P8xjeCaR22E8gQIdiMMWPqZrdB4+4YNvM1EpG0Eonllja9S8mZ51uQUIq+3qw DxxV3g7WHrlMEffmtbS2i2Z1UFwyU131CmC+0F96yWNySElGcqJppkOV/5neyIiOrEVkVUbkdunt 3YGsO27pzLcC1uN0ZsT1l+h7fRIbJ8BER3D2vBAEgkw4LrJ8VXMb42lk6d4XpXdJQ5e8OTRz9Nt5 W4y7c9c3Ch00axuveWV3Nw8vy04hrKApFmrmsCTEMiBO5gTV6eHDXOSl8bxUp5yjHtlP6TBfBhw2 KoUwcG8IxXlct6RMk1ILINM501YfeRTAUr2iMA== ) ;; ADDITIONAL SECTION (13 records) ns.nic.cat. 172800 IN A 84.88.0.162 cat.pch.net. 172800 IN A 204.61.216.20 ns1.nic.es. 172800 IN A 194.69.254.1 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cat

cat

	Checking DS between . and cat
	Query to c.root-servers.net for cat/DS
	Received 367 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (367 octets) ;; HEADER SECTION ;; id = 11673 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . L7IRpUfaPADzSP6P8xjeCaR22E8gQIdiMMWPqZrdB4+4YNvM1EpG0Eonllja9S8mZ51uQUIq+3qw DxxV3g7WHrlMEffmtbS2i2Z1UFwyU131CmC+0F96yWNySElGcqJppkOV/5neyIiOrEVkVUbkdunt 3YGsO27pzLcC1uN0ZsT1l+h7fRIbJ8BER3D2vBAEgkw4LrJ8VXMb42lk6d4XpXdJQ5e8OTRz9Nt5 W4y7c9c3Ch00axuveWV3Nw8vy04hrKApFmrmsCTEMiBO5gTV6eHDXOSl8bxUp5yjHtlP6TBfBhw2 KoUwcG8IxXlct6RMk1ILINM501YfeRTAUr2iMA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20231216170000 20231203160000 46780 . L7IRpUfaPADzSP6P8xjeCaR22E8gQIdiMMWPqZrdB4+4YNvM1EpG0Eonllja9S8mZ51uQUIq+3qw DxxV3g7WHrlMEffmtbS2i2Z1UFwyU131CmC+0F96yWNySElGcqJppkOV/5neyIiOrEVkVUbkdunt 3YGsO27pzLcC1uN0ZsT1l+h7fRIbJ8BER3D2vBAEgkw4LrJ8VXMb42lk6d4XpXdJQ5e8OTRz9Nt5 W4y7c9c3Ch00axuveWV3Nw8vy04hrKApFmrmsCTEMiBO5gTV6eHDXOSl8bxUp5yjHtlP6TBfBhw2 KoUwcG8IxXlct6RMk1ILINM501YfeRTAUr2iMA== )`
	RRSIG=46780 and DNSKEY=46780 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to nsc.nic.de for cat/DNSKEY
	Received 779 bytes from 194.0.11.110
	;; Response received from 194.0.11.110 (779 octets) ;; HEADER SECTION ;; id = 60630 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAYU1cG1npVe2vwVEsygePUBMENjNqwRUjR9ixZ0jc5Lp61zmrONT2vglWIkX+BQwBuPQyt/M xB18K53houXKZyJnyASYj6JC9LxoYu+FfO/z4ZFzApVqaTIYI2x0KuwGAryJp6b44Jr/oi7s3xcr bf5091NGooUuH414Ue3LJzS+jW+VPKv6hiSMMjkxPxUuR7mKGdsJzXDxzflsV2Kh6d8= ) ; Key ID = 64607 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20231214080139 20231130080139 58737 cat. KnXgE1JR4e0r6Unw+Lqui5h8C1+zr19BFvJEPpGb3SXWrKBjXblPHLQTimrwptfw/NpNKZfAJ+2c p4fPsABo2lP7Y7Ax1S7PPa/+t7uUoMn2g2d6o6H0o4BE5gXAeVsGiem/758Nkq78aUpO4obTyv6Y T0SRcTOcvBkFl+TYS+GkYk5CqoF29ueOiGsdY3BjOX0IB3jVcIPxzEALXI17r1HQ8OV8LJ45sJE1 yL0gNnA0LRC+gCfW9DyMxeDEpYJ8w8eQbnhGpJreB64ObYX0njmZ2EjUUv5HHzKh/ifSFmnjOLgA 760fMVf9DT9NvIlPiEzO+JImvzQtPwH7cQrVCQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAYU1cG1npVe2vwVEsygePUBMENjNqwRUjR9ixZ0jc5Lp61zmrONT2vglWIkX+BQwBuPQyt/M xB18K53houXKZyJnyASYj6JC9LxoYu+FfO/z4ZFzApVqaTIYI2x0KuwGAryJp6b44Jr/oi7s3xcr bf5091NGooUuH414Ue3LJzS+jW+VPKv6hiSMMjkxPxUuR7mKGdsJzXDxzflsV2Kh6d8= ) ; Key ID = 64607`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20231214080139 20231130080139 58737 cat. KnXgE1JR4e0r6Unw+Lqui5h8C1+zr19BFvJEPpGb3SXWrKBjXblPHLQTimrwptfw/NpNKZfAJ+2c p4fPsABo2lP7Y7Ax1S7PPa/+t7uUoMn2g2d6o6H0o4BE5gXAeVsGiem/758Nkq78aUpO4obTyv6Y T0SRcTOcvBkFl+TYS+GkYk5CqoF29ueOiGsdY3BjOX0IB3jVcIPxzEALXI17r1HQ8OV8LJ45sJE1 yL0gNnA0LRC+gCfW9DyMxeDEpYJ8w8eQbnhGpJreB64ObYX0njmZ2EjUUv5HHzKh/ifSFmnjOLgA 760fMVf9DT9NvIlPiEzO+JImvzQtPwH7cQrVCQ== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=64607 is now in the chain-of-trust
	Query to ns1.nic.es for uab.cat/A
	Received 392 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (392 octets) ;; HEADER SECTION ;; id = 65508 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS dns1.uab.es. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS ns2.csuc.cat. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231213075101 20231129075101 64607 cat. I0yBhdcwLLNZBKU9Ys+tB2QF8OAHCPbCQ3Aze1BRpmabXEpev63t94mmRzCLq0A1/6ZUUDbJAHqW CqYpgHWr5LnwD7tcW/1AI+b2h7hPp+BPoPLknyMGGkSwmzk7PptjpTW8OEHDzyXQfKj72s6TCvRd yfeubDRFL3NIC4RQ2feRjAJpnt1gmvcAP47y+gJyiTA1lCx4nSEp95QT2IzTIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to cat.pch.net for uab.cat/DNSKEY
	Received 392 bytes from 204.61.216.20
	;; Response received from 204.61.216.20 (392 octets) ;; HEADER SECTION ;; id = 36683 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS ns2.csuc.cat. uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS dns1.uab.es. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231213075101 20231129075101 64607 cat. I0yBhdcwLLNZBKU9Ys+tB2QF8OAHCPbCQ3Aze1BRpmabXEpev63t94mmRzCLq0A1/6ZUUDbJAHqW CqYpgHWr5LnwD7tcW/1AI+b2h7hPp+BPoPLknyMGGkSwmzk7PptjpTW8OEHDzyXQfKj72s6TCvRd yfeubDRFL3NIC4RQ2feRjAJpnt1gmvcAP47y+gJyiTA1lCx4nSEp95QT2IzTIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone uab.cat

uab.cat

	Checking DS between cat and uab.cat
	Query to ns1.nic.es for uab.cat/DS
	Received 567 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (567 octets) ;; HEADER SECTION ;; id = 8357 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( ns.nic.cat. dnsmaster.corenic.org. 2312040402 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20231218020236 20231204020236 64607 cat. cozoZVrHbcbwurGTHP6/2u8LsDtc4xWraBmuq/niGrDKVuqPsOWDqWeUD0fa8vsx8y9+bSKiJVkV tM1wZiwiITup4ir0GUCxiC80thuAQW/ooLp20ZhVQVF0S7RVNWJfXFEDWdtQyuq1x/uSPHDOT9jQ M7WTm6HRdLoydaJqfm7K6AWXuGDOWAC+5K0UBBJrLYfEGZuCh2EFYWrxXF/vsg== ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20231213075101 20231129075101 64607 cat. I0yBhdcwLLNZBKU9Ys+tB2QF8OAHCPbCQ3Aze1BRpmabXEpev63t94mmRzCLq0A1/6ZUUDbJAHqW CqYpgHWr5LnwD7tcW/1AI+b2h7hPp+BPoPLknyMGGkSwmzk7PptjpTW8OEHDzyXQfKj72s6TCvRd yfeubDRFL3NIC4RQ2feRjAJpnt1gmvcAP47y+gJyiTA1lCx4nSEp95QT2IzTIg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for uab.cat in the cat zone
	Query to dns1.uab.es for uab.cat/DNSKEY
	Received 94 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (94 octets) ;; HEADER SECTION ;; id = 57494 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2025965735 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to dns.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.1
	;; Response received from 158.109.0.1 (52 octets) ;; HEADER SECTION ;; id = 15523 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns.uab.es is authoritative for uab.cat
	Query to ns1.csuc.cat for uab.cat/SOA
	Received 176 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (176 octets) ;; HEADER SECTION ;; id = 17292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2025965736 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS ns2.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	Query to dns1.uab.es for uab.cat/SOA
	Received 94 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (94 octets) ;; HEADER SECTION ;; id = 52044 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2025965736 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns2.csuc.cat for uab.cat/SOA
	Received 170 bytes from 84.88.0.5
	;; Response received from 84.88.0.5 (170 octets) ;; HEADER SECTION ;; id = 5779 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2025965689 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS ns2.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.csuc.cat serial (2025965689) differs from ns1.csuc.cat serial (2025965736)
	Query to dns.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.1
	;; Response received from 158.109.0.1 (52 octets) ;; HEADER SECTION ;; id = 44124 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

	Query to ns2.csuc.cat for uab.cat/A
	Received 139 bytes from 84.88.0.5
	;; Response received from 84.88.0.5 (139 octets) ;; HEADER SECTION ;; id = 28534 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns1.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns2.csuc.cat is authoritative for uab.cat
	Query to ns2.csuc.cat for uab.cat/A
	Received 139 bytes from 84.88.0.5
	;; Response received from 84.88.0.5 (139 octets) ;; HEADER SECTION ;; id = 32666 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

	Query to dns1.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (52 octets) ;; HEADER SECTION ;; id = 9312 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.uab.es is authoritative for uab.cat
	Query to dns1.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (52 octets) ;; HEADER SECTION ;; id = 41677 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

	Query to ns1.csuc.cat for uab.cat/A
	Received 145 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (145 octets) ;; HEADER SECTION ;; id = 34864 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	ns1.csuc.cat is authoritative for uab.cat
	Query to ns1.csuc.cat for uab.cat/A
	Received 145 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (145 octets) ;; HEADER SECTION ;; id = 28485 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => ) ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns1.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: EXTENDED-ERROR => ( INFO-CODE => 18, EXTRA-TEXT => )
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uab.cat at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: