DNSSEC Analyzer

Domain Name:

Time: 2023-06-08 16:09:00 UTC, NTP stratum 4

Analyzing DNSSEC problems for uab.cat

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to d.root-servers.net for ./DNSKEY
	Received 864 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (864 octets) ;; HEADER SECTION ;; id = 65373 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAbF1LAxEQPtClEQno48k6u7JjCOfVfwdENOxQUrX0JbpN5DnKGMAKIfdiWa5oDeKQ3OoQ58y CC8vjtaaGFDgpJxoLwqzhBYHPGFgins5HIERcCQPGAJKWu/ku4XLh+Fu7UyBubDCelxKTbnj26Ew bochltRqGIE8hbwSXEzRNo4g+NXkaRMq2FFbaBtEE82yTmZUgFRYAFUvfGTPWblyZGtkepVuHyNb 0w/u24dpsz+uyCZZR04cHfRrWOKvqD3lDOwC4+sqd6f7F841R0N2tqSh/WDUZzWdvPBaBOz0FWFL b9porIeZ3Jm08tAMHa+3SGRXfK4RAmxVCmIQQypGabE= ) ; Key ID = 60955`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20230621000000 20230531000000 20326 . bC9VON7LUBuG73L7Qqabp/zJnNzehkDqnd9LFtmz7zoMXKsxuZLh8a/78/MpcXsvjoSOZ55D+CA8 k8s+n3mKo7zWv79KiapARBRTQqDMavu/Pa9zrvzNp+sa3tZ/9GFyxj28xdwA9z7ziDPW+zst2UEs LHCquxuG83V89rPRq+U7UvO7CjEjjTyYSGitfrR9jA0tqsF1RLa8QSILegUTPBp5xv7hBHabdwzR rTHCOMFkCGlzhB0e3Hjaur2XxGSI/r5p/FLD4NB/0n7L2NHjMvYQOqDvyWNtuaZ+cmeTqV5FuJmx ls0+5us3MnTG/ZPWTZFa5iye45ohMBJ6sEFfgA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=60955 is now in the chain-of-trust
	Query to a.root-servers.net for uab.cat/A
	Received 778 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (778 octets) ;; HEADER SECTION ;; id = 1935 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS cat.pch.net. cat. 172800 IN NS switch.nic.cat. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS nsc.nic.de. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . OQnzNkGx2IroQUYGMtyzG0jXmFnm88pn4mOAMmZifBBon6IGdCMZO17q8p+z19earwGm8J1F5U8W wmhrf0jJfmwHWSkTMS5z8SQDwWt9VAoVpvQ6Y5VbZZTLXWqYxb4wiiLp6qBp15e8dEUZ0IBuK1WX d71+LZw3pJaf8R0IJCqn77V7HpU/3r4Hny3bHoJWbf0K5IMULCSZhQJnfutJ4p9QfCgE/eOGRB4J DQVv+iZsrMyHeOaTKCU3t2IGxJ2mdJXMjbturt8fZ5PJjLuLRywQSlUUADbmctOhjrGd1W84LvoK OTx300LWERFO54VIWlSlYdqmndFRNgfrcy4O/A== ) ;; ADDITIONAL SECTION (13 records) anyc1.irondns.net. 172800 IN A 195.253.64.4 anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 ns.nic.cat. 172800 IN A 84.88.0.162 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 cat.pch.net. 172800 IN A 204.61.216.20 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 switch.nic.cat. 172800 IN A 130.59.31.29 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f ns1.nic.es. 172800 IN A 194.69.254.1 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 nsc.nic.de. 172800 IN A 194.0.11.110 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to g.root-servers.net for cat/DNSKEY
	Received 780 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (780 octets) ;; HEADER SECTION ;; id = 4439 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) cat. 172800 IN NS anyc1.irondns.net. cat. 172800 IN NS switch.nic.cat. cat. 172800 IN NS ns1.nic.es. cat. 172800 IN NS ns.nic.cat. cat. 172800 IN NS nsc.nic.de. cat. 172800 IN NS cat.pch.net. cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . OQnzNkGx2IroQUYGMtyzG0jXmFnm88pn4mOAMmZifBBon6IGdCMZO17q8p+z19earwGm8J1F5U8W wmhrf0jJfmwHWSkTMS5z8SQDwWt9VAoVpvQ6Y5VbZZTLXWqYxb4wiiLp6qBp15e8dEUZ0IBuK1WX d71+LZw3pJaf8R0IJCqn77V7HpU/3r4Hny3bHoJWbf0K5IMULCSZhQJnfutJ4p9QfCgE/eOGRB4J DQVv+iZsrMyHeOaTKCU3t2IGxJ2mdJXMjbturt8fZ5PJjLuLRywQSlUUADbmctOhjrGd1W84LvoK OTx300LWERFO54VIWlSlYdqmndFRNgfrcy4O/A== ) ;; ADDITIONAL SECTION (13 records) switch.nic.cat. 172800 IN A 130.59.31.29 anyc1.irondns.net. 172800 IN A 195.253.64.4 nsc.nic.de. 172800 IN A 194.0.11.110 ns1.nic.es. 172800 IN A 194.69.254.1 cat.pch.net. 172800 IN A 204.61.216.20 ns.nic.cat. 172800 IN A 84.88.0.162 switch.nic.cat. 172800 IN AAAA 2001:620:0:ff::2f anyc1.irondns.net. 172800 IN AAAA 2a01:5b0:4::4 nsc.nic.de. 172800 IN AAAA 2001:678:e:110::53 ns1.nic.es. 172800 IN AAAA 2001:67c:21cc:2000::64:41 cat.pch.net. 172800 IN AAAA 2001:500:14:6020:ad::1 ns.nic.cat. 172800 IN AAAA 2001:40b0:1:3::2 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone cat

cat

	Checking DS between . and cat
	Query to i.root-servers.net for cat/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from 192.36.148.17 (367 octets) ;; HEADER SECTION ;; id = 48596 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DS ;; ANSWER SECTION (2 records) cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 ) cat. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . OQnzNkGx2IroQUYGMtyzG0jXmFnm88pn4mOAMmZifBBon6IGdCMZO17q8p+z19earwGm8J1F5U8W wmhrf0jJfmwHWSkTMS5z8SQDwWt9VAoVpvQ6Y5VbZZTLXWqYxb4wiiLp6qBp15e8dEUZ0IBuK1WX d71+LZw3pJaf8R0IJCqn77V7HpU/3r4Hny3bHoJWbf0K5IMULCSZhQJnfutJ4p9QfCgE/eOGRB4J DQVv+iZsrMyHeOaTKCU3t2IGxJ2mdJXMjbturt8fZ5PJjLuLRywQSlUUADbmctOhjrGd1W84LvoK OTx300LWERFO54VIWlSlYdqmndFRNgfrcy4O/A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for cat in the . zone
	DS=58737/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`cat. 86400 IN RRSIG ( DS 8 1 86400 20230621050000 20230608040000 60955 . OQnzNkGx2IroQUYGMtyzG0jXmFnm88pn4mOAMmZifBBon6IGdCMZO17q8p+z19earwGm8J1F5U8W wmhrf0jJfmwHWSkTMS5z8SQDwWt9VAoVpvQ6Y5VbZZTLXWqYxb4wiiLp6qBp15e8dEUZ0IBuK1WX d71+LZw3pJaf8R0IJCqn77V7HpU/3r4Hny3bHoJWbf0K5IMULCSZhQJnfutJ4p9QfCgE/eOGRB4J DQVv+iZsrMyHeOaTKCU3t2IGxJ2mdJXMjbturt8fZ5PJjLuLRywQSlUUADbmctOhjrGd1W84LvoK OTx300LWERFO54VIWlSlYdqmndFRNgfrcy4O/A== )`
	RRSIG=60955 and DNSKEY=60955 verifies the DS RRset
	DS=58737/SHA-256 is now in the chain-of-trust
	`cat. 86400 IN DS ( 58737 10 2 4dce567c12f637d51a755b9585c0c3c4036aba446261ac994f7f5e91eed4c365 )`
	Query to nsc.nic.de for cat/DNSKEY
	Received 779 bytes from 194.0.11.110
	;; Response received from 194.0.11.110 (779 octets) ;; HEADER SECTION ;; id = 31780 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; cat. IN DNSKEY ;; ANSWER SECTION (3 records) cat. 43200 IN DNSKEY ( 256 3 10 AwEAAZtPkB7COxVczJVhm7NnFDdEgBmdSv2hgbj59YZdsYvMsljwQnugMS4L6MpD7NQiMArH4GEn aBpu07UTDAsVbdgHlmcFvDAprICD9Wzpi+yrIIYJrSv483D7OPkpSFU9ywCi9JraSrNVoh+ruvP8 JyK9AnWuw2Z4WHvuQRCc5Ulf78M1DNVt4fXWSIuVIeN6WT16DGi1c3PwAGsWFtimBpk= ) ; Key ID = 18792 cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737 cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20230617075705 20230603075705 58737 cat. LLmyslhkG5XpsuGOW99UgwzAs/f4ALyxOZ3yW0FyDFtZHxhy1PAlRogWkOKt+2TCKQv8I+HdzCfI cKY3rTkE1E5piRvro1PxbbVLfw/5W/+JcSuFCROjkaUvLFUP9epUCOOxadgQYkTtK27i+g5yxhEm fiySSWWLY432qQmaZghLDgIv74jzY0m++enyEyqwHhqcRf2DyHEOT6lWtsZ77BTkaB54pErHAN8I rQJ5QBwzyMwq6QGFDVVDO/LW4svPW00t0yrC59EnDzn4EHA0+juaN4VPREc5uLIVaqsGvQmz+7WU 0JY9blCEJGaz7p1SfwNglfDzgIVWxYxTRI88Bw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found 2 DNSKEY records for cat
	`cat. 43200 IN DNSKEY ( 256 3 10 AwEAAZtPkB7COxVczJVhm7NnFDdEgBmdSv2hgbj59YZdsYvMsljwQnugMS4L6MpD7NQiMArH4GEn aBpu07UTDAsVbdgHlmcFvDAprICD9Wzpi+yrIIYJrSv483D7OPkpSFU9ywCi9JraSrNVoh+ruvP8 JyK9AnWuw2Z4WHvuQRCc5Ulf78M1DNVt4fXWSIuVIeN6WT16DGi1c3PwAGsWFtimBpk= ) ; Key ID = 18792`
	`cat. 43200 IN DNSKEY ( 257 3 10 AwEAAYA2JNjCp4vwA2YjEASi2AyxNSCB8RwAJveS44fCrcOsy3ejVzH4s1bVKolZdObVAcZcjFd1 uusnIZ6SRVpRxs2G9nflbYgCZ1oihfwPuuVEHExUDzu8nFEkivKTL4RBOT6EYNYgbVwG7JVRaCKU 8/g1YR+by1cfTAl60SgdyMGapN3JlBcYBq9P3bMX0beYWdxTa+NSasAauLemmp84RJwBWtX3YhAy F3LrCapSfLVkgakNb+kuUbQngnX1ABdioYD5BvFO3TjslwuFy+FUGH8HGaI2F4kwXfpIukUfjhGT nXihG1n1cI3Noy0wOL/twxy9SB66GbxTrNOnoXftnzk= ) ; Key ID = 58737`
	DNSKEY=58737/SEP is now in the chain-of-trust
	DS=58737/SHA-256 verifies DNSKEY=58737/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`cat. 43200 IN RRSIG ( DNSKEY 10 1 43200 20230617075705 20230603075705 58737 cat. LLmyslhkG5XpsuGOW99UgwzAs/f4ALyxOZ3yW0FyDFtZHxhy1PAlRogWkOKt+2TCKQv8I+HdzCfI cKY3rTkE1E5piRvro1PxbbVLfw/5W/+JcSuFCROjkaUvLFUP9epUCOOxadgQYkTtK27i+g5yxhEm fiySSWWLY432qQmaZghLDgIv74jzY0m++enyEyqwHhqcRf2DyHEOT6lWtsZ77BTkaB54pErHAN8I rQJ5QBwzyMwq6QGFDVVDO/LW4svPW00t0yrC59EnDzn4EHA0+juaN4VPREc5uLIVaqsGvQmz+7WU 0JY9blCEJGaz7p1SfwNglfDzgIVWxYxTRI88Bw== )`
	RRSIG=58737 and DNSKEY=58737/SEP verifies the DNSKEY RRset
	DNSKEY=18792 is now in the chain-of-trust
	Query to cat.pch.net for uab.cat/A
	Received 392 bytes from 204.61.216.20
	;; Response received from 204.61.216.20 (392 octets) ;; HEADER SECTION ;; id = 56018 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS dns1.uab.es. uab.cat. 86400 IN NS ns2.csuc.cat. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20230616075109 20230602075109 18792 cat. cTYCYKLmoIq35vJmU4I3P233WJVAVoSzCp1rLxVhZ7Wj7ojM1HcJa5tqROR724lZLCoumhqAnFvn Dqaw4c3NESP2azySNPjQ65eWKGDsBCXrgyZEn8dHOCOzn4BGc0VSmUUrvSNTC1+oMbJdohgRotVR lqjeOdZ/bmRV2SnochP+BdYesF5ykTU+jnvykg3kBp+k8Ibat1smrAEJvhqJKw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to cat.pch.net for uab.cat/DNSKEY
	Received 392 bytes from 204.61.216.20
	;; Response received from 204.61.216.20 (392 octets) ;; HEADER SECTION ;; id = 10598 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) uab.cat. 86400 IN NS ns1.csuc.cat. uab.cat. 86400 IN NS dns.uab.es. uab.cat. 86400 IN NS dns1.uab.es. uab.cat. 86400 IN NS ns2.csuc.cat. 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20230616075109 20230602075109 18792 cat. cTYCYKLmoIq35vJmU4I3P233WJVAVoSzCp1rLxVhZ7Wj7ojM1HcJa5tqROR724lZLCoumhqAnFvn Dqaw4c3NESP2azySNPjQ65eWKGDsBCXrgyZEn8dHOCOzn4BGc0VSmUUrvSNTC1+oMbJdohgRotVR lqjeOdZ/bmRV2SnochP+BdYesF5ykTU+jnvykg3kBp+k8Ibat1smrAEJvhqJKw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone uab.cat

uab.cat

	Checking DS between cat and uab.cat
	Query to ns1.nic.es for uab.cat/DS
	Received 567 bytes from 194.69.254.1
	;; Response received from 194.69.254.1 (567 octets) ;; HEADER SECTION ;; id = 42638 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) cat. 7200 IN SOA ( ns.nic.cat. dnsmaster.corenic.org. 2306081600 ;serial 900 ;refresh 300 ;retry 604800 ;expire 7200 ;minimum ) cat. 7200 IN RRSIG ( SOA 10 1 86400 20230622140056 20230608140056 18792 cat. S5A3nMXgcpsm6gu79O8iSUdA6EpFbub0NrpDFohYh2vvLM3E/gQdB+sh/Z4TlvuKjpqYAdExw42g 5gcXGK9ph1U993j48PMHr5/JZQWzdV9XbbPFNwzPNoJEfbgr2BF3HMJ8CK3h/ImytD+LYhL9VEgR 5mm75WK19B2wVOOn4pDBnEsln6r94SniA5N8sVFmDPxNEZO88Jya/qM13uCbfw== ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN NSEC3 ( 1 0 0 - 04s3tcr77ch804dp69sc641b97bmukeo NS ) 04s3k35e9cbpb75kolatujsnvrffrlap.cat. 43200 IN RRSIG ( NSEC3 10 2 43200 20230616075109 20230602075109 18792 cat. cTYCYKLmoIq35vJmU4I3P233WJVAVoSzCp1rLxVhZ7Wj7ojM1HcJa5tqROR724lZLCoumhqAnFvn Dqaw4c3NESP2azySNPjQ65eWKGDsBCXrgyZEn8dHOCOzn4BGc0VSmUUrvSNTC1+oMbJdohgRotVR lqjeOdZ/bmRV2SnochP+BdYesF5ykTU+jnvykg3kBp+k8Ibat1smrAEJvhqJKw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for uab.cat in the cat zone
	Query to dns1.uab.es for uab.cat/DNSKEY
	Received 94 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (94 octets) ;; HEADER SECTION ;; id = 61786 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2024864147 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to dns1.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (52 octets) ;; HEADER SECTION ;; id = 14155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns1.uab.es is authoritative for uab.cat
	Query to dns.uab.es for uab.cat/SOA
	Received 94 bytes from 158.109.0.1
	;; Response received from 158.109.0.1 (94 octets) ;; HEADER SECTION ;; id = 5854 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2024864147 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to ns1.csuc.cat for uab.cat/SOA
	Received 170 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (170 octets) ;; HEADER SECTION ;; id = 51566 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN SOA ;; ANSWER SECTION (1 record) uab.cat. 3600 IN SOA ( dns1.uab.es. empty.empty. 2024864147 ;serial 3600 ;refresh 600 ;retry 1209600 ;expire 3600 ;minimum ) ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS dns1.uab.es. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to ns2.csuc.cat for uab.cat/SOA
	Timeout querying ns2.csuc.cat/84.88.0.5 for uab.cat/SOA
	All Queries to ns2.csuc.cat for uab.cat/SOA timed out or failed
	Query to dns1.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.9
	;; Response received from 158.109.0.9 (52 octets) ;; HEADER SECTION ;; id = 3649 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

	Query to ns1.csuc.cat for uab.cat/A
	Received 139 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (139 octets) ;; HEADER SECTION ;; id = 48805 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS ns1.csuc.cat. uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS ns2.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	ns1.csuc.cat is authoritative for uab.cat
	Query to ns1.csuc.cat for uab.cat/A
	Received 139 bytes from 84.88.0.3
	;; Response received from 84.88.0.3 (139 octets) ;; HEADER SECTION ;; id = 7752 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (4 records) uab.cat. 172800 IN NS dns.uab.es. uab.cat. 172800 IN NS dns1.uab.es. uab.cat. 172800 IN NS ns2.csuc.cat. uab.cat. 172800 IN NS ns1.csuc.cat. ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

	Query to dns.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.1
	;; Response received from 158.109.0.1 (52 octets) ;; HEADER SECTION ;; id = 21593 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns.uab.es is authoritative for uab.cat
	Query to dns.uab.es for uab.cat/A
	Received 52 bytes from 158.109.0.1
	;; Response received from 158.109.0.1 (52 octets) ;; HEADER SECTION ;; id = 6800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uab.cat. IN A ;; ANSWER SECTION (1 record) uab.cat. 172800 IN A 138.3.241.85 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uab.cat A RR has value 138.3.241.85
	No RRSIGs found

uab.cat

No response from uab.cat nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uab.cat at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: