DNSSEC Debugger

Back to Verisign Labs Tools

Domain Name:

Detail: more(+) / less(-)

Time: 2026-04-17 09:51:54 UTC

Analyzing DNSSEC problems for uab.cat

DS=20326/SHA-256 is now in the chain-of-trust

DS=38696/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	`. IN DS ( 38696 8 2 683d2d0acb8c9b712a1948b27f741219298d0a450d612c483af444a4c0fb2b16 )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 1141 octets ;; HEADER SECTION ;; id = 19196 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 4 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326 . 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696 . 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; keytag 20326`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAa96jeuknZlaeSrvyAJj6ZHv28hhOKkx3rLGXVaC6rXTsDc449/cidltpkyGwCJNnOAlFNKF 2jBosZBU5eeHspaQWOmOElZsjICMQMC3aeHbGiShvZsx4wMYSjH8e7Vrhbu6irwCzVBApESjbUdp WWmEnhathWu1jo+siFUiRAAxm9qyJNg/wOZqqzL/dL/q8PkcRU5oUKEpUge71M3ej2/7CPqpdVwu MoTvoB+ZOT4YeGyxMvHmbrxlFzGOHOijtzN+u1TQNatX2XBuzZNQ1K+s2CXkPIZo7s6JgZyvaBev YtxPvYLw4z9mR7K2vaF18UYH9Z9GNUUeayffKC73PYc= ) ; keytag 38696`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAb5dDYffpgAJ8VUGLwQtWXPlQWsjIFJtCM00/XaKU+8ln+ofah3q2KxEIjvzQg+nqdxRj+8e mtPne1mtYcbFWP4Q9E+DniOJLK09R05FuzvGbrG7DDdRDUX/cedFdV7O8pFEAYpJqYNR9BCTIAV9 73DO2biauKSA31b7I2lK/woxoR1tf5cqJ4SMbJUviuHicAEoUi2ATswloZNWd5T5thmEFZnxFx7D 5UgKCY7oflS7+GU7dNJwEtmFnWYVETHN0kHXVz6aguouaAZp706YXNIoR/iTgQhmsR7XX+wL0Z8Q M2LxQIyU6vRZ06IyuJMGRMiwkSuGElbumyBt12JZbrU= ) ; keytag 54393`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	DNSKEY=38696/SEP is now in the chain-of-trust
	DS=38696/SHA-256 verifies DNSKEY=38696/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20260502000000 20260411000000 20326 . ldfPZ7Q9Ca8GfxnsJcPAMMy9Dt1qfL2guvByLtN9kRcMMn8g3ukazjrv5Bj/KOLEXV++Zp8g8UpL /80NUKP4ZA1Yq3gmEE2hyEG7M964fUrTaB9w9leATi8UK176zklnB7trP81yL6TIZmaCImUMWVkU n8uGeIJUaVz2XpboM5PGo2gEQH2mVAavFammRoDbj4gnMJvXgOMIZtLIIGcOaxuY5sFQo1MDQnoQ OYMAHVqdUu4Ld+Jq29ktutAXUK6hobUBss0me2y+xlu3fmZ5JiKSJOPDiBQBqjUAhueBKEZpamt/ gr8NtHLe0QLKs2h3XhsGNHE7Ksr3WwiCCFHP0A== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=54393 is now in the chain-of-trust
	Query to d.root-servers.net for uab.cat/A
	Received 720 bytes from 199.7.91.13
	;; Response received from [199.7.91.13] 720 octets ;; HEADER SECTION ;; id = 26283 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1450, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cat. 172800 IN NS cat.ns.nic.es. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . MnKuY0ff2f3NfHjmX+euWoU3awy9fyrb5+iet4xXG+WU7rVhcLYf7mcKk14/fsMt+ICET/p0cEzC SDVlELwDmMwCSPoDOp4mhYsT9In6IfpSx0QTdGKCU6uOok/kBiahmxJoo6rZF2lGqg+04HXnAFk6 p88K+4ZMd45s9ZV3tQKQqoYhY3wTQ/BXD3xfaAjJqeUvM9FrF5FOgqvVvSC/391mmOJ8blAyt1IE N2hgRc9kTQ+KJzLayPtACG+OpA+C1xBrGbIsbZnJEgPSzKk59ZQJiMJT/QIdiv6tKszVWR44LZiy BMwqlAh0qLdFQndKWB2RN7Jz+8JP6Kel8JqnHg== ) ;; ADDITIONAL SECTION (11 records) cat.ns.nic.es. 172800 IN A 194.69.254.15 cat.pch.net. 172800 IN A 204.61.216.20 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 cat.ns.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:47 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; { "EDNS-VERSION": 0 }
	Query to h.root-servers.net for cat/DNSKEY
	Received 716 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 716 octets ;; HEADER SECTION ;; id = 60423 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 7 arcount = 11 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) cat. 172800 IN NS cat.ns.nic.es. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . MnKuY0ff2f3NfHjmX+euWoU3awy9fyrb5+iet4xXG+WU7rVhcLYf7mcKk14/fsMt+ICET/p0cEzC SDVlELwDmMwCSPoDOp4mhYsT9In6IfpSx0QTdGKCU6uOok/kBiahmxJoo6rZF2lGqg+04HXnAFk6 p88K+4ZMd45s9ZV3tQKQqoYhY3wTQ/BXD3xfaAjJqeUvM9FrF5FOgqvVvSC/391mmOJ8blAyt1IE N2hgRc9kTQ+KJzLayPtACG+OpA+C1xBrGbIsbZnJEgPSzKk59ZQJiMJT/QIdiv6tKszVWR44LZiy BMwqlAh0qLdFQndKWB2RN7Jz+8JP6Kel8JqnHg== ) ;; ADDITIONAL SECTION (11 records) cat.ns.nic.es. 172800 IN A 194.69.254.15 cat.pch.net. 172800 IN A 204.61.216.20 nsc.nic.de. 172800 IN A 194.0.11.110 anyc1.irondns.net. 172800 IN A 195.253.64.4 switch.nic.cat. 172800 IN A 130.59.31.29 cat.ns.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:47 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ;; { "EDNS-VERSION": 0 }
	Found child zone cat

cat

	Checking DS between . and cat
	Query to k.root-servers.net for cat/DS
	Received 367 bytes from 193.0.14.129
	;; Response received from [193.0.14.129] 367 octets ;; HEADER SECTION ;; id = 57399 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 2 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . MnKuY0ff2f3NfHjmX+euWoU3awy9fyrb5+iet4xXG+WU7rVhcLYf7mcKk14/fsMt+ICET/p0cEzC SDVlELwDmMwCSPoDOp4mhYsT9In6IfpSx0QTdGKCU6uOok/kBiahmxJoo6rZF2lGqg+04HXnAFk6 p88K+4ZMd45s9ZV3tQKQqoYhY3wTQ/BXD3xfaAjJqeUvM9FrF5FOgqvVvSC/391mmOJ8blAyt1IE N2hgRc9kTQ+KJzLayPtACG+OpA+C1xBrGbIsbZnJEgPSzKk59ZQJiMJT/QIdiv6tKszVWR44LZiy BMwqlAh0qLdFQndKWB2RN7Jz+8JP6Kel8JqnHg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20260430050000 20260417040000 54393 . MnKuY0ff2f3NfHjmX+euWoU3awy9fyrb5+iet4xXG+WU7rVhcLYf7mcKk14/fsMt+ICET/p0cEzC SDVlELwDmMwCSPoDOp4mhYsT9In6IfpSx0QTdGKCU6uOok/kBiahmxJoo6rZF2lGqg+04HXnAFk6 p88K+4ZMd45s9ZV3tQKQqoYhY3wTQ/BXD3xfaAjJqeUvM9FrF5FOgqvVvSC/391mmOJ8blAyt1IE N2hgRc9kTQ+KJzLayPtACG+OpA+C1xBrGbIsbZnJEgPSzKk59ZQJiMJT/QIdiv6tKszVWR44LZiy BMwqlAh0qLdFQndKWB2RN7Jz+8JP6Kel8JqnHg== )`
	RRSIG=54393 and DNSKEY=54393 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to nsc.nic.de for cat/DNSKEY
	Received 779 bytes from 194.0.11.110
	;; Response received from [194.0.11.110] 779 octets ;; HEADER SECTION ;; id = 22524 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 3 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAYCvT7m1AQpJ9d1AkDVhcpMG5Lhatmn87BlO2/K+rTDbXT4oJsA0sC7ZKCQjk1344tZf58+r oxlLWNLfaJuznTvCgNG8OeHZwaODmIRmFJwBXIC7KBGu/r1pmHjxxL7D6jJSjaXm1ChBcRnTsRWU ykR9vcRv1jEMerquvRygxx8CP1mOMD/W4v7dKrK8JxEVe/UxPcOHDa+SUpbwHfTvyDM= ) ; keytag 12231 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; keytag 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20260423095403 20260409095403 58737 cat. Rv56WSZr4IXapiwoTj0EBTir41snwP9izjLzOq362VV7YE02SWCewhKkIvcYe7NUwy/F8slYEiUp gplBfygb23D/EnGXQljnZYPTkgB/39Wd6m0nGchxAq4jB+RO6zxKid+fzMPTyHHFHKpwAul077DF pmO2seyVBtI8JjXgpF7doQnQCsZFibtHZ6CvyqreWfRQq/o28D8TmIZ2gMhSBR1V5NhHAGesfTEN P5mZDzGiW0tvPAr/b1jK1U4bTGK1XHN5pjcNqR3MMakCzs9TYLWtEW3bmJC0kZW+BNQcOS3741qk ZWaBhe1tLB2AZXkH2jm220ZGx4Hfvox0/tb3lA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAYCvT7m1AQpJ9d1AkDVhcpMG5Lhatmn87BlO2/K+rTDbXT4oJsA0sC7ZKCQjk1344tZf58+r oxlLWNLfaJuznTvCgNG8OeHZwaODmIRmFJwBXIC7KBGu/r1pmHjxxL7D6jJSjaXm1ChBcRnTsRWU ykR9vcRv1jEMerquvRygxx8CP1mOMD/W4v7dKrK8JxEVe/UxPcOHDa+SUpbwHfTvyDM= ) ; keytag 12231`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; keytag 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20260423095403 20260409095403 58737 cat. Rv56WSZr4IXapiwoTj0EBTir41snwP9izjLzOq362VV7YE02SWCewhKkIvcYe7NUwy/F8slYEiUp gplBfygb23D/EnGXQljnZYPTkgB/39Wd6m0nGchxAq4jB+RO6zxKid+fzMPTyHHFHKpwAul077DF pmO2seyVBtI8JjXgpF7doQnQCsZFibtHZ6CvyqreWfRQq/o28D8TmIZ2gMhSBR1V5NhHAGesfTEN P5mZDzGiW0tvPAr/b1jK1U4bTGK1XHN5pjcNqR3MMakCzs9TYLWtEW3bmJC0kZW+BNQcOS3741qk ZWaBhe1tLB2AZXkH2jm220ZGx4Hfvox0/tb3lA== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=12231 is now in the chain-of-trust
	Query to anyc1.irondns.net for uab.cat/A
	Received 389 bytes from 195.253.64.4
	;; Response received from [195.253.64.4] 389 octets ;; HEADER SECTION ;; id = 25927 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS ns2.csuc.cat. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS dns1.uab.es. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s4dq8tqqq2rne3pgsrikdgj01okt7h NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20260422215131 20260408215131 12231 cat. IWe576GkvqRg1q6QqLHGA74atz5e+Q8M4t68/kfU3lDwd8AvIbs26Q3u1djeI4dEW5ibgVepQaj9 6B3tVN8+Z0QRj7k9cFsbAzSysfqWXCyK6/tmZ8BSKlgFEyiavRyN/Nb5CKlviJIHKfQIj1dV8Ghq VSZ9Uix8LvPiGsoOi5uqYX6FFggjjbUyJI2/lZn/PqaxOeEVbMWYroCZFA8Pbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to nsc.nic.de for uab.cat/DNSKEY
	Received 392 bytes from 194.0.11.110
	;; Response received from [194.0.11.110] 392 octets ;; HEADER SECTION ;; id = 4075 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 6 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1452, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS dns1.uab.es. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS ns2.csuc.cat. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s4dq8tqqq2rne3pgsrikdgj01okt7h NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20260422215131 20260408215131 12231 cat. IWe576GkvqRg1q6QqLHGA74atz5e+Q8M4t68/kfU3lDwd8AvIbs26Q3u1djeI4dEW5ibgVepQaj9 6B3tVN8+Z0QRj7k9cFsbAzSysfqWXCyK6/tmZ8BSKlgFEyiavRyN/Nb5CKlviJIHKfQIj1dV8Ghq VSZ9Uix8LvPiGsoOi5uqYX6FFggjjbUyJI2/lZn/PqaxOeEVbMWYroCZFA8Pbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone uab.cat

uab.cat

	Checking DS between cat and uab.cat
	Query to cat.ns.nic.es for uab.cat/DS
	Received 574 bytes from 194.69.254.15
	;; Response received from [194.69.254.15] 574 octets ;; HEADER SECTION ;; id = 38703 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 900 IN SOA ( anyc1.irondns.net. dnsmaster.corenic.org. 2604170946 ;serial 900 ;refresh 300 ;retry 604800 ;expire 900 ;minimum ) cat. 900 IN RRSIG ( SOA 10 1 900 20260501074600 20260417074600 12231 cat. A6dFlONmKriOqVRQYKxkDwCq5o6agz+6JMvFGUmNLZa9+lq1itjIG7n5gboYX6vDVX/gEx3oSn3b iJDMkr5PhzkwFQ2xalD0HKW8fyyNCv6n2uEQMQQV83q/MJNuuXiaUe8XFm+uA1N0ha2qNEnLPu16 JitH60Fwn29TSI81hPs76MwLyX2vzDf4mVTGYBgRnWZhssNcqkllmTxypW0uxg== ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s4dq8tqqq2rne3pgsrikdgj01okt7h NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20260422215131 20260408215131 12231 cat. IWe576GkvqRg1q6QqLHGA74atz5e+Q8M4t68/kfU3lDwd8AvIbs26Q3u1djeI4dEW5ibgVepQaj9 6B3tVN8+Z0QRj7k9cFsbAzSysfqWXCyK6/tmZ8BSKlgFEyiavRyN/Nb5CKlviJIHKfQIj1dV8Ghq VSZ9Uix8LvPiGsoOi5uqYX6FFggjjbUyJI2/lZn/PqaxOeEVbMWYroCZFA8Pbg== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for uab.cat in the cat zone
	Query to ns2.csuc.cat for uab.cat/DNSKEY
	Received 94 bytes from 84.88.0.5
	;; Response received from [84.88.0.5] 94 octets ;; HEADER SECTION ;; id = 3789 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 0 ;; nscount = 1 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uab.cat. 10800 IN SOA ( dns1.uab.es. empty.empty. 2030628598 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 10800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1.csuc.cat for uab.cat/A
	Received 145 bytes from 84.88.0.3
	;; Response received from [84.88.0.3] 145 octets ;; HEADER SECTION ;; id = 45609 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 86400 IN A 158.109.120.133 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns1.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns1.csuc.cat is authoritative for uab.cat
	Query to ns2.csuc.cat for uab.cat/SOA
	Received 176 bytes from 84.88.0.5
	;; Response received from [84.88.0.5] 176 octets ;; HEADER SECTION ;; id = 65041 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 172800 IN SOA ( dns1.uab.es. empty.empty. 2030628598 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS dns.uab.es. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to dns1.uab.es for uab.cat/SOA
	Received 94 bytes from 158.109.0.9
	;; Response received from [158.109.0.9] 94 octets ;; HEADER SECTION ;; id = 24672 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 172800 IN SOA ( dns1.uab.es. empty.empty. 2030628616 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.uab.es serial (2030628616) differs from ns2.csuc.cat serial (2030628598)
	Query to dns.uab.es for uab.cat/SOA
	Received 94 bytes from 158.109.0.1
	;; Response received from [158.109.0.1] 94 octets ;; HEADER SECTION ;; id = 10135 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 172800 IN SOA ( dns1.uab.es. empty.empty. 2030628616 ;serial 43200 ;refresh 7200 ;retry 1209600 ;expire 10800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.uab.es serial (2030628616) differs from ns2.csuc.cat serial (2030628598)
	Query to ns1.csuc.cat for uab.cat/A
	uab.cat A RR has value 158.109.120.133
	No RRSIGs found

uab.cat

	Query to dns.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.1
	;; Response received from [158.109.0.1] 52 octets ;; HEADER SECTION ;; id = 29288 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 86400 IN A 158.109.120.133 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns.uab.es is authoritative for uab.cat
	Query to dns.uab.es for uab.cat/A
	uab.cat A RR has value 158.109.120.133
	No RRSIGs found

uab.cat

	Query to ns2.csuc.cat for uab.cat/A
	Received 145 bytes from 84.88.0.5
	;; Response received from [84.88.0.5] 145 octets ;; HEADER SECTION ;; id = 60286 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 4 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ;; {"EXTENDED-ERROR": {"ERROR": "Prohibited", "EXTRA-TEXT": "", "INFO-CODE": 18}} ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 86400 IN A 158.109.120.133 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	ns2.csuc.cat is authoritative for uab.cat
	Query to ns2.csuc.cat for uab.cat/A
	uab.cat A RR has value 158.109.120.133
	No RRSIGs found

uab.cat

	Query to dns1.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.9
	;; Response received from [158.109.0.9] 52 octets ;; HEADER SECTION ;; id = 7686 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; do = 1 co = 0 ;; qdcount = 1 ancount = 1 ;; nscount = 0 arcount = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 86400 IN A 158.109.120.133 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	dns1.uab.es is authoritative for uab.cat
	Query to dns1.uab.es for uab.cat/A
	uab.cat A RR has value 158.109.120.133
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uab.cat at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: