DNSSEC Analyzer - uniba.it

Domain Name:

Time: 2023-09-24 17:37:08 UTC, NTP stratum 4

Analyzing DNSSEC problems for uniba.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to k.root-servers.net for ./DNSKEY
	Received 1141 bytes from 193.0.14.129
	;; Response received from 193.0.14.129 (1141 octets) ;; HEADER SECTION ;; id = 56423 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to g.root-servers.net for uniba.it/A
	Received 761 bytes from 192.112.36.4
	;; Response received from 192.112.36.4 (761 octets) ;; HEADER SECTION ;; id = 9955 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS a.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS nameserver.cnr.it. it. 172800 IN NS d.dns.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; ADDITIONAL SECTION (13 records) nameserver.cnr.it. 172800 IN A 194.119.192.34 dns.nic.it. 172800 IN A 192.12.192.5 r.dns.it. 172800 IN A 193.206.141.46 m.dns.it. 172800 IN A 217.29.76.4 d.dns.it. 172800 IN A 45.142.220.39 a.dns.it. 172800 IN A 194.0.16.215 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to c.root-servers.net for it/DNSKEY
	Received 755 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (755 octets) ;; HEADER SECTION ;; id = 24496 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; ADDITIONAL SECTION (13 records) nameserver.cnr.it. 172800 IN A 194.119.192.34 dns.nic.it. 172800 IN A 192.12.192.5 r.dns.it. 172800 IN A 193.206.141.46 m.dns.it. 172800 IN A 217.29.76.4 d.dns.it. 172800 IN A 45.142.220.39 a.dns.it. 172800 IN A 194.0.16.215 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone it

	Checking DS between . and it
	Query to h.root-servers.net for it/DS
	Received 366 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (366 octets) ;; HEADER SECTION ;; id = 53033 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . lBInOs+jGJTACl1LF8Gq+4JmxaHcDZ1yvSsS2jJBQ5NACk62mT8ADysdAfS7EVNrNvCwhtvmzf4B oVIaK3pWhVsPzoOY4uZu9iPZ9gZvlqqH0baDf1bdxyXmOCk7l/Kd0p64IGxwbkFULYvCHTAQVZnA kv4r+/q1HWgsKFIFJJb6NNnQrdHGD5/zCboF/x79DYpjkSUFUEymVagWhofRtN819d8P4mjLOQRf 17g6DHB6PXhyp2LEGwDd6RN3eEJ4KjlS4s+66akwLpck4B16RfZdd42qLmAHTHY8wMi/wD+po1Ew X2KhOIragP3wPC2nkztNcZlp5ib03TuaBvih8A== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to a.dns.it for it/DNSKEY
	Received 1163 bytes from 194.0.16.215
	;; Response received from 194.0.16.215 (1163 octets) ;; HEADER SECTION ;; id = 18261 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (4 records) it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395 it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901 it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 18395 it. il73ykSefVfshLlOrt7FYbSLXiIHk+vhvhi0zJvI6GSxu6+jf2Es5G2NA3v6q4FpmpttOxcHVYCV ILZtPKZhsFMrSBNv4FqZnMbX/03IioqXZuiKmWhWn9Kiikwo+aqCOYE6/cmxsX5/4AMXK2NMXMII Z7r/U+GKADsr8WEjdaPJW4fNB7ZMLqE4J7W1L4C/E4lLlwv1qo+wkC51OKie72lMpUjq6ThfHv4J OQzuR7WuPZeZesWCLDuOuq4Pv1tmBBisFs2nX6yyNcXCcMqPJqS7N2g1gdQQAmQxY+47NyH1KABW TGXjnFZyDDiOn0+QwN8cOL4Bc+HMvg2P2Fqd4Q== ) it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 41901 it. e7ZGu3epiaSMJbOz0s/inStiAvY8J/smRt/YEELYBw3JVseK5pImnWZQUhw5FzllE972q5BCyPbN Zl0WUuyz7Y2Uvu5exZhl0YqhqD8xp4AFXDRj2fdHlK/83zmKRVOpY8xQKMyj5DiRaFh/iqOsJI6r OaAM2cXDTJ+qBu3ZVD1kiKmSuECYNtuzF3VbclG3ws4BXAbwUtYFmTO8GhA2A50eAHal4fUD7jj+ NCMhSPs6IQMlFcJdSwS3s48gBhnBFl8f1yBdgkYova04x3TwKpPLvck9Q0GKPmc4xehXFNIwXUGp 3K8rqXl0VSo6q9ZpnmVYX8ufs6I+L2Yr/lhGoQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 2 DNSKEY records for it
	`it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395`
	`it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 18395 it. il73ykSefVfshLlOrt7FYbSLXiIHk+vhvhi0zJvI6GSxu6+jf2Es5G2NA3v6q4FpmpttOxcHVYCV ILZtPKZhsFMrSBNv4FqZnMbX/03IioqXZuiKmWhWn9Kiikwo+aqCOYE6/cmxsX5/4AMXK2NMXMII Z7r/U+GKADsr8WEjdaPJW4fNB7ZMLqE4J7W1L4C/E4lLlwv1qo+wkC51OKie72lMpUjq6ThfHv4J OQzuR7WuPZeZesWCLDuOuq4Pv1tmBBisFs2nX6yyNcXCcMqPJqS7N2g1gdQQAmQxY+47NyH1KABW TGXjnFZyDDiOn0+QwN8cOL4Bc+HMvg2P2Fqd4Q== )`
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20231024160424 20230924160424 41901 it. e7ZGu3epiaSMJbOz0s/inStiAvY8J/smRt/YEELYBw3JVseK5pImnWZQUhw5FzllE972q5BCyPbN Zl0WUuyz7Y2Uvu5exZhl0YqhqD8xp4AFXDRj2fdHlK/83zmKRVOpY8xQKMyj5DiRaFh/iqOsJI6r OaAM2cXDTJ+qBu3ZVD1kiKmSuECYNtuzF3VbclG3ws4BXAbwUtYFmTO8GhA2A50eAHal4fUD7jj+ NCMhSPs6IQMlFcJdSwS3s48gBhnBFl8f1yBdgkYova04x3TwKpPLvck9Q0GKPmc4xehXFNIwXUGp 3K8rqXl0VSo6q9ZpnmVYX8ufs6I+L2Yr/lhGoQ== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DNSKEY RRset
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to r.dns.it for uniba.it/A
	Received 932 bytes from 193.206.141.46
	;; Response received from 193.206.141.46 (932 octets) ;; HEADER SECTION ;; id = 23690 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) uniba.it. 10800 IN NS sirio.csi.uniba.it. uniba.it. 10800 IN NS ns1.garr.net. uniba.it. 10800 IN NS gaia.di.uniba.it. uniba.it. 10800 IN NS gauss.uniba.it. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN NSEC3 ( 1 1 0 - die3jsi0ftse9eqd0sruikjmvcr103ef NS DS RRSIG ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. jEZAJfJP2eC8AiFmTKRAwF6Kp0bbpHgcE5tEdzMBCk53av6LWhTp8PzYjTX0LDilKajUgcAqnKeU Ov+DI0VwDDD99p9upW3sm+spLGPg32Yp3s/jNoTfqPt97IhL1SCz6/SzZ8LXchTQ8K1ubPxZ3Hvm 0XsndUq700jg+vv6Gq1+b+12JRBIqqSvF9hNvIzUjm2EfS4XsYYb9hVsxYBFsfCVlAwsEEnx0oGr bAn3z4N+G3tpFoYL4Luy+M6yohFAHQoZIjIR9cBKAoOdSMZYpjcWpwa2jUdUruEsyrTH9kiyPjRv WEwRu6JFyvbJOS+WzZ5qNXY2MwJPon7YsZkoxg== ) ;; ADDITIONAL SECTION (4 records) sirio.csi.uniba.it. 10800 IN A 193.204.176.140 gauss.uniba.it. 10800 IN A 193.204.176.40 gaia.di.uniba.it. 10800 IN A 193.204.187.131 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to d.dns.it for uniba.it/DNSKEY
	Received 924 bytes from 45.142.220.39
	;; Response received from 45.142.220.39 (924 octets) ;; HEADER SECTION ;; id = 65343 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) uniba.it. 10800 IN NS ns1.garr.net. uniba.it. 10800 IN NS gaia.di.uniba.it. uniba.it. 10800 IN NS gauss.uniba.it. uniba.it. 10800 IN NS sirio.csi.uniba.it. rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) did0on1lm890nggtksu0g8votuhs26el.it. 3600 IN NSEC3 ( 1 1 0 - die3jsi0ftse9eqd0sruikjmvcr103ef NS DS RRSIG ) rs1n3n7m54pdem5eunv9npkh3b6cgpjc.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) did0on1lm890nggtksu0g8votuhs26el.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. jEZAJfJP2eC8AiFmTKRAwF6Kp0bbpHgcE5tEdzMBCk53av6LWhTp8PzYjTX0LDilKajUgcAqnKeU Ov+DI0VwDDD99p9upW3sm+spLGPg32Yp3s/jNoTfqPt97IhL1SCz6/SzZ8LXchTQ8K1ubPxZ3Hvm 0XsndUq700jg+vv6Gq1+b+12JRBIqqSvF9hNvIzUjm2EfS4XsYYb9hVsxYBFsfCVlAwsEEnx0oGr bAn3z4N+G3tpFoYL4Luy+M6yohFAHQoZIjIR9cBKAoOdSMZYpjcWpwa2jUdUruEsyrTH9kiyPjRv WEwRu6JFyvbJOS+WzZ5qNXY2MwJPon7YsZkoxg== ) ;; ADDITIONAL SECTION (4 records) gaia.di.uniba.it. 10800 IN A 193.204.187.131 gauss.uniba.it. 10800 IN A 193.204.176.40 sirio.csi.uniba.it. 10800 IN A 193.204.176.140 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone uniba.it

uniba.it

	Checking DS between it and uniba.it
	Query to a.dns.it for uniba.it/DS
	Received 1123 bytes from 194.0.16.215
	;; Response received from 194.0.16.215 (1123 octets) ;; HEADER SECTION ;; id = 58712 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs45884srcl7kjjiep3cu8c925t3vlvn NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. lG239Jcfh0ruXTMAchCu7BzNf+aXH2ibgJ4fRvGLdMqfLJQPkwy0K2eBCADR0D9GmnJ2HNF3uAwz CkDL+ONg28ZbHHt7EAlElygMEzCFAwNR/+ms28gCEMYVhdGhb5jKHmlVSrQ+YTguBXWVlz+2Q36u iF76hBPBWJjiT7jdbWIkzWHZB+JDDLoswMgBo4TcDSVMOVPbUcqgauLh703V/H3Q6bAm6AvxTlp4 V9+3VB5X/7f3Di+SE+i7TsgbdR9hknV1msKr0oC+BlQwGegMmRDjfh3KPAJC73Z341n0oy8Ev+18 JgnPKP458+Jibyw9JUcNwg0Qr6TdDwxu+jpHOA== ) it. 3600 IN SOA ( dns.nic.it. hostmaster.nic.it. 2023092419 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) it. 3600 IN RRSIG ( SOA 10 1 86400 20231024160424 20230924160424 18395 it. ZFjxyhMf0iukCP0EuXi3IzXJc8hkjJgt25HtAOM1i7sidTBZfe0/cp9uhC/oPgYW5z/GbAWxG8FH MoSzcuhmZ3RDkivx/Mh64LPBZi2T3tabvcxD5eK6C/GyV3MrKLFZWmYBZ4ClrFyIJRMIfl7aXknm OoZzZ+8v8mkdlkjzn5Q4uN9eiqg9tPX6nCiAl0mi16dwbGfAV2UlY7vUoV0HgaSzB+DNi7QfT1M/ bXZaZ9UnjKljwGFI37s2gvW4H2L0BxDHgOfagopad9YC+AmM0I0b50sau1pxGIOoQrfOHhCXWdPV 4CgO/TU+cITs5SgNFJrcd/SU0OUr3eqKlrsDIA== ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN NSEC3 ( 1 1 0 - die3jsi0ftse9eqd0sruikjmvcr103ef NS DS RRSIG ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20231024160424 20230924160424 18395 it. jEZAJfJP2eC8AiFmTKRAwF6Kp0bbpHgcE5tEdzMBCk53av6LWhTp8PzYjTX0LDilKajUgcAqnKeU Ov+DI0VwDDD99p9upW3sm+spLGPg32Yp3s/jNoTfqPt97IhL1SCz6/SzZ8LXchTQ8K1ubPxZ3Hvm 0XsndUq700jg+vv6Gq1+b+12JRBIqqSvF9hNvIzUjm2EfS4XsYYb9hVsxYBFsfCVlAwsEEnx0oGr bAn3z4N+G3tpFoYL4Luy+M6yohFAHQoZIjIR9cBKAoOdSMZYpjcWpwa2jUdUruEsyrTH9kiyPjRv WEwRu6JFyvbJOS+WzZ5qNXY2MwJPon7YsZkoxg== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DS records found for uniba.it in the it zone
	Query to ns1.garr.net for uniba.it/DNSKEY
	Received 84 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (84 octets) ;; HEADER SECTION ;; id = 28772 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uniba.it. 86400 IN SOA ( gauss.uniba.it. root.gauss.uniba.it. 2023091802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	No DNSKEY records found
	Query to gauss.uniba.it for uniba.it/A
	Received 211 bytes from 193.204.176.40
	;; Response received from 193.204.176.40 (211 octets) ;; HEADER SECTION ;; id = 1924 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (5 records) uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS ns2.garr.net. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS gaia.di.uniba.it. ;; ADDITIONAL SECTION (4 records) gauss.uniba.it. 172800 IN A 193.204.176.40 sirio.csi.uniba.it. 172800 IN A 193.204.176.140 gaia.di.uniba.it. 86400 IN A 193.204.187.131 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	gauss.uniba.it is authoritative for uniba.it
	Query to gaia.di.uniba.it for uniba.it/SOA
	Timeout querying gaia.di.uniba.it/193.204.187.131 for uniba.it/SOA
	All Queries to gaia.di.uniba.it for uniba.it/SOA timed out or failed
	Query to ns2.garr.net for uniba.it/SOA
	ns2.garr.net returns REFUSED for uniba.it/SOA
	Query to sirio.csi.uniba.it for uniba.it/SOA
	Timeout querying sirio.csi.uniba.it/193.204.176.140 for uniba.it/SOA
	All Queries to sirio.csi.uniba.it for uniba.it/SOA timed out or failed
	Query to ns1.garr.net for uniba.it/SOA
	Received 220 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (220 octets) ;; HEADER SECTION ;; id = 9371 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN SOA ;; ANSWER SECTION (1 record) uniba.it. 86400 IN SOA ( gauss.uniba.it. root.gauss.uniba.it. 2023091802 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (5 records) uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS gaia.di.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS ns2.garr.net. uniba.it. 604800 IN NS gauss.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to gauss.uniba.it for uniba.it/A
	Received 211 bytes from 193.204.176.40
	;; Response received from 193.204.176.40 (211 octets) ;; HEADER SECTION ;; id = 49403 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 4 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (5 records) uniba.it. 604800 IN NS gaia.di.uniba.it. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS ns2.garr.net. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS sirio.csi.uniba.it. ;; ADDITIONAL SECTION (4 records) gauss.uniba.it. 172800 IN A 193.204.176.40 sirio.csi.uniba.it. 172800 IN A 193.204.176.140 gaia.di.uniba.it. 86400 IN A 193.204.187.131 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	uniba.it A RR has value 192.167.60.25
	No RRSIGs found

uniba.it

	Query to ns1.garr.net for uniba.it/A
	Received 195 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (195 octets) ;; HEADER SECTION ;; id = 881 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (5 records) uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS ns2.garr.net. uniba.it. 604800 IN NS gaia.di.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	ns1.garr.net is authoritative for uniba.it
	Query to ns1.garr.net for uniba.it/A
	Received 195 bytes from 193.206.141.38
	;; Response received from 193.206.141.38 (195 octets) ;; HEADER SECTION ;; id = 60346 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 5 arcount = 2 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (5 records) uniba.it. 604800 IN NS ns2.garr.net. uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS gaia.di.uniba.it. uniba.it. 604800 IN NS gauss.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	uniba.it A RR has value 192.167.60.25
	No RRSIGs found

uniba.it

No response from uniba.it nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uniba.it at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: