DNSSEC Analyzer - uni-muenchen.de

Domain Name:

Time: 2023-09-24 16:40:03 UTC, NTP stratum 4

Analyzing DNSSEC problems for uni-muenchen.de

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to g.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (1141 octets) ;; HEADER SECTION ;; id = 48215 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=11019 is now in the chain-of-trust
	DNSKEY=46780 is now in the chain-of-trust
	Query to d.root-servers.net for uni-muenchen.de/A
	Received 749 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (749 octets) ;; HEADER SECTION ;; id = 36179 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . v2Dm6Gr/Fn2zLXGH8pwhEH+uzhil/6TFSf8muC77JHqOIXq9iqpde1wL3ooL/n9Q1d+azz98BaPh LbydLqRgPs2Q/atf2agMOyDuI0IGu0yVMUots4Esqt/DPj9Dc2hQsQ8w8szEEDuLkwAya0/alhUD TRfvSlIO8zjvtjjZULs5BWeX1G0GWAM8uGuDZlPogiysCTSKLt7uFsKQUxsjvFiKXUYw0HjrgqEX yHJTwIVPFf0fQwf0uzC4rWBRlkG/R16MFkS2JP1TSVa70CDldMpk/lhKn0LW/dYH5nly51Hd9Zgw oOaz8NeHoGAkLxnMYnxhJRLeQU4SFeCyNV/tgA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to j.root-servers.net for de/DNSKEY
	Received 736 bytes from 192.58.128.30
	;; Response received from 192.58.128.30 (736 octets) ;; HEADER SECTION ;; id = 40060 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) de. 172800 IN NS a.nic.de. de. 172800 IN NS f.nic.de. de. 172800 IN NS l.de.net. de. 172800 IN NS n.de.net. de. 172800 IN NS s.de.net. de. 172800 IN NS z.nic.de. de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . v2Dm6Gr/Fn2zLXGH8pwhEH+uzhil/6TFSf8muC77JHqOIXq9iqpde1wL3ooL/n9Q1d+azz98BaPh LbydLqRgPs2Q/atf2agMOyDuI0IGu0yVMUots4Esqt/DPj9Dc2hQsQ8w8szEEDuLkwAya0/alhUD TRfvSlIO8zjvtjjZULs5BWeX1G0GWAM8uGuDZlPogiysCTSKLt7uFsKQUxsjvFiKXUYw0HjrgqEX yHJTwIVPFf0fQwf0uzC4rWBRlkG/R16MFkS2JP1TSVa70CDldMpk/lhKn0LW/dYH5nly51Hd9Zgw oOaz8NeHoGAkLxnMYnxhJRLeQU4SFeCyNV/tgA== ) ;; ADDITIONAL SECTION (13 records) a.nic.de. 172800 IN A 194.0.0.53 f.nic.de. 172800 IN A 81.91.164.5 l.de.net. 172800 IN A 77.67.63.105 n.de.net. 172800 IN A 194.146.107.6 s.de.net. 172800 IN A 195.243.137.26 z.nic.de. 172800 IN A 194.246.96.1 a.nic.de. 172800 IN AAAA 2001:678:2::53 f.nic.de. 172800 IN AAAA 2a02:568:0:2::53 l.de.net. 172800 IN AAAA 2001:668:1f:11::105 n.de.net. 172800 IN AAAA 2001:67c:1011:1::53 s.de.net. 172800 IN AAAA 2003:8:14::53 z.nic.de. 172800 IN AAAA 2a02:568:fe02::de ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone de

	Checking DS between . and de
	Query to a.root-servers.net for de/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (366 octets) ;; HEADER SECTION ;; id = 46077 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DS ;; ANSWER SECTION (2 records) de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d ) de. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . v2Dm6Gr/Fn2zLXGH8pwhEH+uzhil/6TFSf8muC77JHqOIXq9iqpde1wL3ooL/n9Q1d+azz98BaPh LbydLqRgPs2Q/atf2agMOyDuI0IGu0yVMUots4Esqt/DPj9Dc2hQsQ8w8szEEDuLkwAya0/alhUD TRfvSlIO8zjvtjjZULs5BWeX1G0GWAM8uGuDZlPogiysCTSKLt7uFsKQUxsjvFiKXUYw0HjrgqEX yHJTwIVPFf0fQwf0uzC4rWBRlkG/R16MFkS2JP1TSVa70CDldMpk/lhKn0LW/dYH5nly51Hd9Zgw oOaz8NeHoGAkLxnMYnxhJRLeQU4SFeCyNV/tgA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for de in the . zone
	DS=26755/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`de. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . v2Dm6Gr/Fn2zLXGH8pwhEH+uzhil/6TFSf8muC77JHqOIXq9iqpde1wL3ooL/n9Q1d+azz98BaPh LbydLqRgPs2Q/atf2agMOyDuI0IGu0yVMUots4Esqt/DPj9Dc2hQsQ8w8szEEDuLkwAya0/alhUD TRfvSlIO8zjvtjjZULs5BWeX1G0GWAM8uGuDZlPogiysCTSKLt7uFsKQUxsjvFiKXUYw0HjrgqEX yHJTwIVPFf0fQwf0uzC4rWBRlkG/R16MFkS2JP1TSVa70CDldMpk/lhKn0LW/dYH5nly51Hd9Zgw oOaz8NeHoGAkLxnMYnxhJRLeQU4SFeCyNV/tgA== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=26755/SHA-256 is now in the chain-of-trust
	`de. 86400 IN DS ( 26755 8 2 f341357809a5954311ccb82ade114c6c1d724a75c0395137aa3978035425e78d )`
	Query to s.de.net for de/DNSKEY
	Received 745 bytes from 195.243.137.26
	;; Response received from 195.243.137.26 (745 octets) ;; HEADER SECTION ;; id = 61112 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; de. IN DNSKEY ;; ANSWER SECTION (3 records) de. 86400 IN DNSKEY ( 256 3 8 AwEAAcGO4t07t4fu1Yjcf9dLvvh4xvBYRNOFsSBCn69v+kO7DqjZ1+tHSeGOfpefJSkrjkpZhtqu NDKU0rJFcUda0VzTNWBQqqPG6WkOhZnNiZVa24S1hzYLtQhWraBaX3u9zh46I+niqjol4mXJLu3l Wt8EdQh74RaD0hJJ9mci+WFn ) ; Key ID = 44886 de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755 de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231006224329 20230922211329 26755 de. nsgXJjHkFYrnLNjgUTCophXK2+ET8m7kameq2jTy4az3uClhlFtmIB+yAHOPaa9UNG6GYGgyM8I2 8fn34cZnFuTFMJe4HJtEQ6Ebf0Qj8+UHi4thAptYiiB5nr1c0YzkkpHTNZC0ZfXpidnYzLUSumKX KheNQ9FumFZPNl4lJyteh4+NGRk83m4Ft7SfzPqxtQIwnIz7Pv2pbU3V46DgD3G7jrwMjB7Po09E XNYCwMdStsIS200hYg1OlCvz5eq2Gu/xR7/x038XYYJcbdEaymJ3CTQ0V74isPuHhg6UZJd0W1FA k06EQsWiOgEXxz2zQGbAgfI3x2vw6JuK2aCMlQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found 2 DNSKEY records for de
	`de. 86400 IN DNSKEY ( 256 3 8 AwEAAcGO4t07t4fu1Yjcf9dLvvh4xvBYRNOFsSBCn69v+kO7DqjZ1+tHSeGOfpefJSkrjkpZhtqu NDKU0rJFcUda0VzTNWBQqqPG6WkOhZnNiZVa24S1hzYLtQhWraBaX3u9zh46I+niqjol4mXJLu3l Wt8EdQh74RaD0hJJ9mci+WFn ) ; Key ID = 44886`
	`de. 86400 IN DNSKEY ( 257 3 8 AwEAAbWUSd/QN9Ae543xzdiacY6qbjwtZ21QfmdgxRdm4Z7bjjHWy249uqxCyjjjoS4LDoRDKmj7 ElffMKvTWKE1qFKu0p8TUy4wyhX0M+m5FUjvQ3CiZMi+qY7GSHA5B+Zd73cidmnTeb3e8lso6jEs Xg05/VZ2AyAqWF6FexEIFxIqiwwLk4UP0BwZ17Ur3q1qx9VSbPMyHgQ9d6nHUN1EEJsTDA2v0vKu msUyp74ZanRZ/bB/6IzpaaZyr5BLF5pSCNdbRNjVmkwYD0993vm79LueyOeibsoHRc16jhALrIJo u1PFjdq7YQsYN0KtqRiJtaAfPprDBREpeamPuW/MnW0= ) ; Key ID = 26755`
	DNSKEY=26755/SEP is now in the chain-of-trust
	DS=26755/SHA-256 verifies DNSKEY=26755/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`de. 86400 IN RRSIG ( DNSKEY 8 1 86400 20231006224329 20230922211329 26755 de. nsgXJjHkFYrnLNjgUTCophXK2+ET8m7kameq2jTy4az3uClhlFtmIB+yAHOPaa9UNG6GYGgyM8I2 8fn34cZnFuTFMJe4HJtEQ6Ebf0Qj8+UHi4thAptYiiB5nr1c0YzkkpHTNZC0ZfXpidnYzLUSumKX KheNQ9FumFZPNl4lJyteh4+NGRk83m4Ft7SfzPqxtQIwnIz7Pv2pbU3V46DgD3G7jrwMjB7Po09E XNYCwMdStsIS200hYg1OlCvz5eq2Gu/xR7/x038XYYJcbdEaymJ3CTQ0V74isPuHhg6UZJd0W1FA k06EQsWiOgEXxz2zQGbAgfI3x2vw6JuK2aCMlQ== )`
	RRSIG=26755 and DNSKEY=26755/SEP verifies the DNSKEY RRset
	DNSKEY=44886 is now in the chain-of-trust
	Query to a.nic.de for uni-muenchen.de/A
	Received 377 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (377 octets) ;; HEADER SECTION ;; id = 48451 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20231008061536 20230924044536 44886 de. i/QicBiZcsabxcuoeSDKTHoMmhmuWKpqlmlH6FEu3mMC7lVkAGklwWyo8XjCynFyplgGp64nwsmy z9TR1S01h36YHLXdldHsDzAiUBRx/WCqqwvu8gEX30lkbPQ3X5aTtQOz1mklfXyTROkNJyP9HaoL rjk+62mGJFq1fc+8rL4= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Query to a.nic.de for uni-muenchen.de/DNSKEY
	Received 377 bytes from 194.0.0.53
	;; Response received from 194.0.0.53 (377 octets) ;; HEADER SECTION ;; id = 25548 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 5 arcount = 3 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (5 records) uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20231008061536 20230924044536 44886 de. i/QicBiZcsabxcuoeSDKTHoMmhmuWKpqlmlH6FEu3mMC7lVkAGklwWyo8XjCynFyplgGp64nwsmy z9TR1S01h36YHLXdldHsDzAiUBRx/WCqqwvu8gEX30lkbPQ3X5aTtQOz1mklfXyTROkNJyP9HaoL rjk+62mGJFq1fc+8rL4= ) ;; ADDITIONAL SECTION (3 records) dns1.lrz.de. 86400 IN A 129.187.19.183 dns1.lrz.de. 86400 IN AAAA 2001:4ca0:0:100:0:53:1:1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1452 ;; option:
	Found child zone uni-muenchen.de

uni-muenchen.de

	Checking DS between de and uni-muenchen.de
	Query to n.de.net for uni-muenchen.de/DS
	Received 254 bytes from 194.146.107.6
	;; Response received from 194.146.107.6 (254 octets) ;; HEADER SECTION ;; id = 22156 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DS ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 ) uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20231008061536 20230924044536 44886 de. i/QicBiZcsabxcuoeSDKTHoMmhmuWKpqlmlH6FEu3mMC7lVkAGklwWyo8XjCynFyplgGp64nwsmy z9TR1S01h36YHLXdldHsDzAiUBRx/WCqqwvu8gEX30lkbPQ3X5aTtQOz1mklfXyTROkNJyP9HaoL rjk+62mGJFq1fc+8rL4= ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for uni-muenchen.de in the de zone
	DS=27721/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`uni-muenchen.de. 86400 IN RRSIG ( DS 8 2 86400 20231008061536 20230924044536 44886 de. i/QicBiZcsabxcuoeSDKTHoMmhmuWKpqlmlH6FEu3mMC7lVkAGklwWyo8XjCynFyplgGp64nwsmy z9TR1S01h36YHLXdldHsDzAiUBRx/WCqqwvu8gEX30lkbPQ3X5aTtQOz1mklfXyTROkNJyP9HaoL rjk+62mGJFq1fc+8rL4= )`
	RRSIG=44886 and DNSKEY=44886 verifies the DS RRset
	DS=27721/SHA-256 is now in the chain-of-trust
	`uni-muenchen.de. 86400 IN DS ( 27721 8 2 9cc0233619f22ab9c161c998f43db6de9568b5d6d095ad4138386f2d6c2ad7c0 )`
	Query to dns1.lrz.de for uni-muenchen.de/DNSKEY
	Received 1202 bytes from 129.187.19.183
	;; Response received from 129.187.19.183 (1202 octets) ;; HEADER SECTION ;; id = 42466 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN DNSKEY ;; ANSWER SECTION (4 records) uni-muenchen.de. 86400 IN DNSKEY ( 256 3 8 AwEAAcMhqWygAt9pSxxwBVmG2/h2NN25MxbJcT1Z5uThEB+hKKRQya7M3RlLSQ1uBumlxiiu2PZk MG+SY5xmQpooijBQWaUNBlyUahqEOcmbqWQUSyzrtmIT5SEav12WvUbfwu0IVJSBWUlk77GuUkcX TvPUEP1iEikpM/Qr2c2CVvCkGdYQ1jVfAXT9GGeitwDueE5l+xfR+Kj50DzfKZrPu0bT6eLLc/BS zI4XCeuRhULjvpI3pG9TdPQ+fENZZapnriuv0kgrE4L+ZF4od9o3ryqIZfnKF7nr7xa2Tq8C5gA7 1hOhen6Tf1HVo6TNRwfxnvio84fRTmet5Mr5h4fzOv0= ) ; Key ID = 5649 uni-muenchen.de. 86400 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; Key ID = 27721 uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231217160957 20230924153801 5649 uni-muenchen.de. fA7oEh+Ma8bCElEvqPEeSeMt7IW+rEk3/MMtqhSdujjBabnWbFuEuheqiZG3JfOK+JAwHF/3EoCV RXwvED6mmrhctlG619gE8H42iL9Wzvu5EIU00sqrr/kvdUMNCggsO5cQPtdGcEs6RjApRRBxup79 BzAt8rHc1FyGXA7YEciudzrn2Qnjp7kBfMlqTDMPpzV9bBWYYcAZ19gFKOeHrCCIBrHTJMAQWqA4 dwZawVv0+CH6BdD+j/z7CzuFgmM6TgftjIM+Tzl34SmrGQuqpbe5JsWWbKC2tEPxOvBYmllAc0i3 Qbho5F8Wpj1UYNkhRZZnKME0mrVbPsWKmc4W7A== ) uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231217160957 20230924153801 27721 uni-muenchen.de. KDNVZXo+jRQdlwEpFrfNFmCr6esVuBsIU6djVlNF+OcIWHj+YXGO95BG3T67q9q4CNPPABCvnM79 AiURjEcJ3vMvAoR2gnwjQ41aZBNupzYDulCsaMQe90pVtutBoCIHK8vicoHWY3Dh2DxswRKYCu+X Z4eN+hd80Qd6SEey56M005RNx2+9lC55nLbKvdlsiFEoI8mj/IlN//2PcgoN4HcwZUnDCULiKrtg YxCL/Z7STwj1OW3fKwO72xBZ9DBvwM31oDcRuCu4TcxCzK8QxJigj2Ggzuy8jMI/BVL+34PnF5pz 6rFXxLkQr8qiwIg574MHctd0bhqBtc2rjPMxuw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for uni-muenchen.de
	`uni-muenchen.de. 86400 IN DNSKEY ( 256 3 8 AwEAAcMhqWygAt9pSxxwBVmG2/h2NN25MxbJcT1Z5uThEB+hKKRQya7M3RlLSQ1uBumlxiiu2PZk MG+SY5xmQpooijBQWaUNBlyUahqEOcmbqWQUSyzrtmIT5SEav12WvUbfwu0IVJSBWUlk77GuUkcX TvPUEP1iEikpM/Qr2c2CVvCkGdYQ1jVfAXT9GGeitwDueE5l+xfR+Kj50DzfKZrPu0bT6eLLc/BS zI4XCeuRhULjvpI3pG9TdPQ+fENZZapnriuv0kgrE4L+ZF4od9o3ryqIZfnKF7nr7xa2Tq8C5gA7 1hOhen6Tf1HVo6TNRwfxnvio84fRTmet5Mr5h4fzOv0= ) ; Key ID = 5649`
	`uni-muenchen.de. 86400 IN DNSKEY ( 257 3 8 AwEAAaN7tKS7sUh5QJvimW4ZAUQSrKdbYaa6pgHtH5AMqDV2XXkOPNadBg8f5i9zISuo1pHi0lD+ 2ekO5bluxOzxpp8HolG8OQtmhtJB2C7NcbOz+T4VnGg69ewjZixDlAWPg7lRx9o7RKO41NtM1LDn sZmyceP3ByJ5dZwipOySIKBQmq4BlJKAqIZvmAZcjleoYLW2v5Yu3hP2ph5/I98X2VbQeuG6DY4x gZ4eUoT4qrEryUJu73YFjJH36TI71omCn7wgRVZFtSL9nYSgxSssXzsXPYuZW4I3sQZ0NBvsfi6V 8Mpc+qVzvU0ZU+7Qna89nZFBxmfPXAw1gb4/FfQulJE= ) ; Key ID = 27721`
	DNSKEY=27721/SEP is now in the chain-of-trust
	DS=27721/SHA-256 verifies DNSKEY=27721/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231217160957 20230924153801 5649 uni-muenchen.de. fA7oEh+Ma8bCElEvqPEeSeMt7IW+rEk3/MMtqhSdujjBabnWbFuEuheqiZG3JfOK+JAwHF/3EoCV RXwvED6mmrhctlG619gE8H42iL9Wzvu5EIU00sqrr/kvdUMNCggsO5cQPtdGcEs6RjApRRBxup79 BzAt8rHc1FyGXA7YEciudzrn2Qnjp7kBfMlqTDMPpzV9bBWYYcAZ19gFKOeHrCCIBrHTJMAQWqA4 dwZawVv0+CH6BdD+j/z7CzuFgmM6TgftjIM+Tzl34SmrGQuqpbe5JsWWbKC2tEPxOvBYmllAc0i3 Qbho5F8Wpj1UYNkhRZZnKME0mrVbPsWKmc4W7A== )`
	`uni-muenchen.de. 86400 IN RRSIG ( DNSKEY 8 2 86400 20231217160957 20230924153801 27721 uni-muenchen.de. KDNVZXo+jRQdlwEpFrfNFmCr6esVuBsIU6djVlNF+OcIWHj+YXGO95BG3T67q9q4CNPPABCvnM79 AiURjEcJ3vMvAoR2gnwjQ41aZBNupzYDulCsaMQe90pVtutBoCIHK8vicoHWY3Dh2DxswRKYCu+X Z4eN+hd80Qd6SEey56M005RNx2+9lC55nLbKvdlsiFEoI8mj/IlN//2PcgoN4HcwZUnDCULiKrtg YxCL/Z7STwj1OW3fKwO72xBZ9DBvwM31oDcRuCu4TcxCzK8QxJigj2Ggzuy8jMI/BVL+34PnF5pz 6rFXxLkQr8qiwIg574MHctd0bhqBtc2rjPMxuw== )`
	RRSIG=5649 and DNSKEY=5649 verifies the DNSKEY RRset
	RRSIG=27721 and DNSKEY=27721/SEP verifies the DNSKEY RRset
	DNSKEY=5649 is now in the chain-of-trust
	Query to dns3.lrz.eu for uni-muenchen.de/A
	Received 812 bytes from 78.128.211.180
	;; Response received from 78.128.211.180 (812 octets) ;; HEADER SECTION ;; id = 5310 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	dns3.lrz.eu is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns2.lrz.bayern for uni-muenchen.de/SOA
	Received 776 bytes from 141.40.9.211
	;; Response received from 141.40.9.211 (776 octets) ;; HEADER SECTION ;; id = 37155 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. WeAdB7mN/5x8A3MTZxwvXrZwrtn23fX/MrYqEWz1BeKkPiZwv3mxG6cs1Puyte9O5RqV44X+BG99 CS1pa2USEoMqZAfAemg2CuiN4GkzSbp4PAk7lSTg0hKPSZ6gzRTQcvJDhh79Dn54Iv0KbRPJNGeS 4siM5ShrZisc3G2EDQgKOaDv9trnhOa2n7C9Sgtqq+u3K5vWEZRSwzlG4wnjxJjJ92huFM+bHjXU utzK/exNq5qhUAvfWCHS2Gr0RpyoaoTdylZYxMYwHrZ9QuTxbNVBwbPZ6e5Gze8r8Ul61eAPwfxj 7IsHWjbJMe2NbDcnS018EoM6xoZqYXRywl5dwg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to dns1.lrz.de for uni-muenchen.de/SOA
	Received 776 bytes from 129.187.19.183
	;; Response received from 129.187.19.183 (776 octets) ;; HEADER SECTION ;; id = 64633 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN SOA ;; ANSWER SECTION (2 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN NS dns3.lrz.eu. uni-muenchen.de. 86400 IN NS dns2.lrz.bayern. uni-muenchen.de. 86400 IN NS dns1.lrz.de. uni-muenchen.de. 86400 IN RRSIG ( NS 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. WeAdB7mN/5x8A3MTZxwvXrZwrtn23fX/MrYqEWz1BeKkPiZwv3mxG6cs1Puyte9O5RqV44X+BG99 CS1pa2USEoMqZAfAemg2CuiN4GkzSbp4PAk7lSTg0hKPSZ6gzRTQcvJDhh79Dn54Iv0KbRPJNGeS 4siM5ShrZisc3G2EDQgKOaDv9trnhOa2n7C9Sgtqq+u3K5vWEZRSwzlG4wnjxJjJ92huFM+bHjXU utzK/exNq5qhUAvfWCHS2Gr0RpyoaoTdylZYxMYwHrZ9QuTxbNVBwbPZ6e5Gze8r8Ul61eAPwfxj 7IsHWjbJMe2NbDcnS018EoM6xoZqYXRywl5dwg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to dns3.lrz.eu for uni-muenchen.de/A
	Received 812 bytes from 78.128.211.180
	;; Response received from 78.128.211.180 (812 octets) ;; HEADER SECTION ;; id = 21297 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== )`
	RRSIG=5649 and DNSKEY=5649 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== )`
	RRSIG=5649 and DNSKEY=5649 verifies the SOA RRset

uni-muenchen.de

	Query to dns1.lrz.de for uni-muenchen.de/A
	Received 814 bytes from 129.187.19.183
	;; Response received from 129.187.19.183 (814 octets) ;; HEADER SECTION ;; id = 20662 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dns1.lrz.de is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns1.lrz.de for uni-muenchen.de/A
	Received 814 bytes from 129.187.19.183
	;; Response received from 129.187.19.183 (814 octets) ;; HEADER SECTION ;; id = 54599 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== )`
	RRSIG=5649 and DNSKEY=5649 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== )`
	RRSIG=5649 and DNSKEY=5649 verifies the SOA RRset

uni-muenchen.de

	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Received 814 bytes from 141.40.9.211
	;; Response received from 141.40.9.211 (814 octets) ;; HEADER SECTION ;; id = 51799 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	dns2.lrz.bayern is authoritative for uni-muenchen.de
	Found RRSIG signed by uni-muenchen.de zone
	Query to dns2.lrz.bayern for uni-muenchen.de/A
	Received 814 bytes from 141.40.9.211
	;; Response received from 141.40.9.211 (814 octets) ;; HEADER SECTION ;; id = 45195 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 4 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uni-muenchen.de. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (4 records) uni-muenchen.de. 86400 IN SOA ( dns1.lrz.de. hostmaster.lrz.de. 2023092128 ;serial 21600 ;refresh 1800 ;retry 3600000 ;expire 86400 ;minimum ) uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== ) uni-muenchen.de. 86400 IN NSEC ( _4633af0f6b0f249db6870902671c7099.uni-muenchen.de. NS SOA MX TXT RRSIG NSEC DNSKEY TYPE65534 ) uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Checking NSEC records for a NODATA response
	Found 1 RRSIGs over NSEC RRset
	`uni-muenchen.de. 86400 IN RRSIG ( NSEC 8 2 86400 20231205123135 20230912120418 5649 uni-muenchen.de. efPt+22ceNrgRp4I8Q0ekwFqNDI8EtZ6Q+G7z2I21zFgBa5R75RheUhZ3hYqKoUqVzhQuj92dlaN 7yRJdrtAQnU+g8dYIEgrIvSZmzGGulsJPhW84TJYpZebO0lSx7eAMjd//aBGa/9XY3DQWdWn+yS7 yQJpduwnPjxZvK95a0SRbTfY3xqpuQM9MQ8xXK6P5KUwvNajkHBKlKPLkq9y7/LDdUaCJdEaj7Pa GRI6OXix/siRhO4fW6BucYN7j11baa2jT0spQoAsSHvwuQVEm5GSkkmcOzF3bXhEwKVt1G3eE/Gt E82qRO7r+Ud8iU9xde1JogWgEBgHcNLEJ6cbDw== )`
	RRSIG=5649 and DNSKEY=5649 verifies the NSEC RRset
	NSEC proves no records of type A exist for uni-muenchen.de
	Found 1 RRSIGs over SOA RRset
	`uni-muenchen.de. 86400 IN RRSIG ( SOA 8 2 86400 20231217163801 20230924153801 5649 uni-muenchen.de. DnHEtuT6LnJSUPBUcJzj/H8gcf0F6Q5JoDoRgQMz+ciMITxznLx8EMfYMPao19n8d5mkxHYwQ0nl Q2Z1XdaxD1VU0ueEOsQY3l0ORZnfye6Bhb8OtV4Oe8jLvpGYlFQuczC7FspN/H4FuZJ13JzPQ77C 9b1u9Lsd6oR2Asvy5/ZZcBxYlaHlwO7W5stSnucwOOElUzEcdkDUG2lpFr/0jW2veKRUcDw+lEnZ bC057rUHqc/FRyVGpFv2HkxqxVGxr/8hB8WzlIsP5df/FQ4u5f8luBY8z45EXH6ZEJkAUEL5fJgP 9UL5wcc/rLQNYyZWFVen3iVAMWl7pQp36dg7ZA== )`
	RRSIG=5649 and DNSKEY=5649 verifies the SOA RRset

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uni-muenchen.de at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: