DNSSEC Debugger - uniba.it

Domain Name:

Time: 2024-07-27 06:44:27 UTC

Analyzing DNSSEC problems for uniba.it

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to f.root-servers.net for ./DNSKEY
	Received 864 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 864 octets ;; HEADER SECTION ;; id = 22049 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAdSiy6sslYrcZSGcuMEK4DtE8DZZY1A08kAsviAD49tocYO5m37AvIOyzeiKBWuPuJ4m9u5H onCM/ntxklZKYFyMftv8XoRwbiXdpSjfdpNHiMYTTV2oDUNMjdLFnF6HYSY48xrPbevQOYbAFGHp xqcXAQT0+BaBiAx3Ls6lXBQ3/hSVOprvDWJCQiI2OT+9+saKLddSIX6DwTVy0S5T4YY4EGg5R3c/ eKUb2/8XgKWUzlOIZsVAZZUSTKW0tX54ccAALO7Grvsx/NW62jc1xv6wWAXocOEVgB7+4Lzb7q9p 5o30+sYoGpOsKgFvMSy4oCZTQMQx2Sjd/NG2bMMw6nM= ) ; Key ID = 20038`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240811000000 20240721000000 20326 . oHsHLvNMC6b1tY+OF7BG9etZbZMixRQiBD6gzpzdD32m4l0Vdh6yO0vA6ECQ3PMHihplvZGlYgZc aow5WFWod7FGAufSncGrrX+55sXKn4I/cZhBfPYh3WCCI+H7Ug29tV81VkeHSJgVd3q5LfUVYkun Czoysi01iU48KefmKZAGqzPINkOwRJT76+lyrOzSVQWvYStWsR5EGSvPQ1/tJQXOIzaEzuDDFp50 2fCJqX9CK9LcjCeleXpeDfdH+7Kk1TqRMrRHt3ehRsqh4yuR5buq+p+lCsHht28vdgjADBehrqmb hv6MGoBE3QK+rW5xuHqlu3jRV15JBY3/NnDSyQ== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=20038 is now in the chain-of-trust
	Query to b.root-servers.net for uniba.it/A
	Received 755 bytes from 170.247.170.2
	;; Response received from [170.247.170.2] 755 octets ;; HEADER SECTION ;; id = 29365 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . lizQcVm5yMbyOyjanDX0MygIX5N5Ywu7qwsLfonGgbI1w5DzTgeU5+flssoB+hWbHPoWb4Lt8HZb 5nDhgUQ66s1xYLLoHdociKJK3fhOCZ4WxzxQ5vvRDDOMK/DTc2ycCHtlqa7Hk3nhgmhHJRpL9mFQ ZEbyWOimX+9uO89PJ6Gv1CxyCF7Qg//G4Tkrb/UJv7XxYlQxQ0GE4/VSx1srP4KIejxd7xCv9uMu DFjModTVYEpI11grZqZhPV1KAoFUe0FI4eq1xaFrjbIZ+gfr6zjcksUpTXJejP+oOtJjwhk6gA+g 0i/u7e87bb/P/n0kXNL0BpqmBqBbZdEwWL0hiw== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN A 45.142.220.39 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN A 217.29.76.4 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN A 193.206.141.46 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN A 192.12.192.5 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN A 194.119.192.34 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; { "EDNS-VERSION": 0 }
	Query to e.root-servers.net for it/DNSKEY
	Received 749 bytes from 192.203.230.10
	;; Response received from [192.203.230.10] 749 octets ;; HEADER SECTION ;; id = 55066 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 13 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) it. 172800 IN NS a.dns.it. it. 172800 IN NS d.dns.it. it. 172800 IN NS m.dns.it. it. 172800 IN NS r.dns.it. it. 172800 IN NS dns.nic.it. it. 172800 IN NS nameserver.cnr.it. it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . lizQcVm5yMbyOyjanDX0MygIX5N5Ywu7qwsLfonGgbI1w5DzTgeU5+flssoB+hWbHPoWb4Lt8HZb 5nDhgUQ66s1xYLLoHdociKJK3fhOCZ4WxzxQ5vvRDDOMK/DTc2ycCHtlqa7Hk3nhgmhHJRpL9mFQ ZEbyWOimX+9uO89PJ6Gv1CxyCF7Qg//G4Tkrb/UJv7XxYlQxQ0GE4/VSx1srP4KIejxd7xCv9uMu DFjModTVYEpI11grZqZhPV1KAoFUe0FI4eq1xaFrjbIZ+gfr6zjcksUpTXJejP+oOtJjwhk6gA+g 0i/u7e87bb/P/n0kXNL0BpqmBqBbZdEwWL0hiw== ) ;; ADDITIONAL SECTION (13 records) a.dns.it. 172800 IN A 194.0.16.215 a.dns.it. 172800 IN AAAA 2001:678:12:0:194:0:16:215 d.dns.it. 172800 IN A 45.142.220.39 d.dns.it. 172800 IN AAAA 2a0e:dbc0::39 m.dns.it. 172800 IN A 217.29.76.4 m.dns.it. 172800 IN AAAA 2001:1ac0:0:200:0:a5d1:6004:2 r.dns.it. 172800 IN A 193.206.141.46 r.dns.it. 172800 IN AAAA 2001:760:ffff:ffff::ca dns.nic.it. 172800 IN A 192.12.192.5 dns.nic.it. 172800 IN AAAA 2a00:d40:1:1::5 nameserver.cnr.it. 172800 IN A 194.119.192.34 nameserver.cnr.it. 172800 IN AAAA 2a00:1620:c0:220:194:119:192:34 ;; { "EDNS-VERSION": 0 }
	Found child zone it

	Checking DS between . and it
	Query to j.root-servers.net for it/DS
	Received 366 bytes from 192.58.128.30
	;; Response received from [192.58.128.30] 366 octets ;; HEADER SECTION ;; id = 43154 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DS ;; ANSWER SECTION (2 records) it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 ) it. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . lizQcVm5yMbyOyjanDX0MygIX5N5Ywu7qwsLfonGgbI1w5DzTgeU5+flssoB+hWbHPoWb4Lt8HZb 5nDhgUQ66s1xYLLoHdociKJK3fhOCZ4WxzxQ5vvRDDOMK/DTc2ycCHtlqa7Hk3nhgmhHJRpL9mFQ ZEbyWOimX+9uO89PJ6Gv1CxyCF7Qg//G4Tkrb/UJv7XxYlQxQ0GE4/VSx1srP4KIejxd7xCv9uMu DFjModTVYEpI11grZqZhPV1KAoFUe0FI4eq1xaFrjbIZ+gfr6zjcksUpTXJejP+oOtJjwhk6gA+g 0i/u7e87bb/P/n0kXNL0BpqmBqBbZdEwWL0hiw== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for it in the . zone
	DS=41901/SHA-256 has algorithm RSASHA512
	Found 1 RRSIGs over DS RRset
	`it. 86400 IN RRSIG ( DS 8 1 86400 20240809050000 20240727040000 20038 . lizQcVm5yMbyOyjanDX0MygIX5N5Ywu7qwsLfonGgbI1w5DzTgeU5+flssoB+hWbHPoWb4Lt8HZb 5nDhgUQ66s1xYLLoHdociKJK3fhOCZ4WxzxQ5vvRDDOMK/DTc2ycCHtlqa7Hk3nhgmhHJRpL9mFQ ZEbyWOimX+9uO89PJ6Gv1CxyCF7Qg//G4Tkrb/UJv7XxYlQxQ0GE4/VSx1srP4KIejxd7xCv9uMu DFjModTVYEpI11grZqZhPV1KAoFUe0FI4eq1xaFrjbIZ+gfr6zjcksUpTXJejP+oOtJjwhk6gA+g 0i/u7e87bb/P/n0kXNL0BpqmBqBbZdEwWL0hiw== )`
	RRSIG=20038 and DNSKEY=20038 verifies the DS RRset
	DS=41901/SHA-256 is now in the chain-of-trust
	`it. 86400 IN DS ( 41901 10 2 47f7f7ba21e48591f6172eed13e35b66b93ad9f2880fc9bada64f68ce28ebb90 )`
	Query to nameserver.cnr.it for it/DNSKEY
	Received 1163 bytes from 194.119.192.34
	;; Response received from [194.119.192.34] 1163 octets ;; HEADER SECTION ;; id = 27479 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; it. IN DNSKEY ;; ANSWER SECTION (4 records) it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395 it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901 it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240826050414 20240727050414 18395 it. HJXNT7B4P3o/SjX6YNKp6N9XkXe+/gHkEdgDOJApWhTFV4oKMQWxyhmQaSZnEFEam2ftsdYqiC3W 1ln7KZKIBtyLKzt7qkjWeJDlDWP0vaNIP+7V6fN1CrhS0tVWWWyejRGFAX6yV4izksgzPyNiaYs7 oVd80lOBM2RqagJnRN7DsHLY/DlTW6Woh1E48tXBp2GJNR1USS3OAJg2av8Z8pUUWg/5NdBBL1P1 VSAY5+ePP20T0qFKW/vbxn38whbLS3G5tIwQHSQA+ojR+D/zqWfcpvWFTuQHENZ1de3uWukpA8Ws X+AN1e6vN44ykNsSbgpxXfmyW92XSueGIk9elg== ) it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240826050414 20240727050414 41901 it. QAZm1BacFRI8/4ygXyPqa7nFrBdWzLJn1sMRFCUAlaHCui16Wgk6Fg2ObbxjWrqa8pASJyFgoZDC 1xtrDg0dYPVmylvmBwUWndxU6OsOW6Rn+9f+lLuUDG5B235kW53bZvQJjKEBhToYKaUzK/pKlBCA xrkyHjMdBS6UY1ekcSEQBneYRJxA9m55abYTfdeqZImCtHRw8lTMM96UKGWxFYSV4S+NACF6Afca WJRyzKj+3XLxJfuganxPBlJxzV77azuBlVG1+tIqxdoQ0Ntcj0DSWiD3XnhXfDn+CJWORzK5AjIU qWTvy9qq3CLNa/DyQ7Ijg+Z/XmEts6UKRnEr8g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for it
	`it. 10800 IN DNSKEY ( 256 3 10 AwEAAbCBaRnTOVXDfC5ulw7mj4aT2Tr/vs1j6q97qKI+eWbyQUwpf9LVcrq7sKMSRoF6oiK9AaHD yCWogIbVADuYKAJfLU0ahJvB00sWQHiqOj5AJFMLnRtD7yylpPRNagRHmv6hFODR6uq0p67yTMzO c7MTixKTsRQQ1lyrr90uNrUaqnRVTc4TLBypvuWXfXP8SBfK4zfq5TPux6V8gU8kzJ17RoWMRetE arY2Q8T34YsT4484Bnns+IJjf8lPjEptfDL+E02+/K+zY4VGemQf/xyyHtu9rAjSLXJv74hXumTW MlUOKwUf7jz1+LMKMYS55czc47pf0BZZAraZjE3NgBk= ) ; Key ID = 18395`
	`it. 10800 IN DNSKEY ( 257 3 10 AwEAAay8sLBy644P9n/DUS3XakNteW7zvQTBVPGwXDknOSR/ywiIeKRR5aoroib5zkEhchqGxMqY xtnuemPsAW/II9pv/coNAJEx6PYjW7nTXfKvMR+JGgjCHn2o/pK7J+MO9MUp9Vt35qRczcrtc9Ya idh5ZBM2ju/S6X4L7vdNDiWc4iia1fG6p8b+J4mvl6ewzV9sggbBAZGaE//S3ed06FGYdSD9I/fC 8PNkBRXXVsv9tR3IlxyGtw0hINGkUKn6Ku+SZ4VtkU5+bvaAeFWwfAIdG+Jaj56gm5rMuRYlCfRz lqM5Q5Yv/LGo22E8SPO8NMAulo9ULP9chxg4mfyzDNU= ) ; Key ID = 41901`
	DNSKEY=41901/SEP is now in the chain-of-trust
	DS=41901/SHA-256 verifies DNSKEY=41901/SEP
	Found 2 RRSIGs over DNSKEY RRset
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240826050414 20240727050414 18395 it. HJXNT7B4P3o/SjX6YNKp6N9XkXe+/gHkEdgDOJApWhTFV4oKMQWxyhmQaSZnEFEam2ftsdYqiC3W 1ln7KZKIBtyLKzt7qkjWeJDlDWP0vaNIP+7V6fN1CrhS0tVWWWyejRGFAX6yV4izksgzPyNiaYs7 oVd80lOBM2RqagJnRN7DsHLY/DlTW6Woh1E48tXBp2GJNR1USS3OAJg2av8Z8pUUWg/5NdBBL1P1 VSAY5+ePP20T0qFKW/vbxn38whbLS3G5tIwQHSQA+ojR+D/zqWfcpvWFTuQHENZ1de3uWukpA8Ws X+AN1e6vN44ykNsSbgpxXfmyW92XSueGIk9elg== )`
	`it. 10800 IN RRSIG ( DNSKEY 10 1 10800 20240826050414 20240727050414 41901 it. QAZm1BacFRI8/4ygXyPqa7nFrBdWzLJn1sMRFCUAlaHCui16Wgk6Fg2ObbxjWrqa8pASJyFgoZDC 1xtrDg0dYPVmylvmBwUWndxU6OsOW6Rn+9f+lLuUDG5B235kW53bZvQJjKEBhToYKaUzK/pKlBCA xrkyHjMdBS6UY1ekcSEQBneYRJxA9m55abYTfdeqZImCtHRw8lTMM96UKGWxFYSV4S+NACF6Afca WJRyzKj+3XLxJfuganxPBlJxzV77azuBlVG1+tIqxdoQ0Ntcj0DSWiD3XnhXfDn+CJWORzK5AjIU qWTvy9qq3CLNa/DyQ7Ijg+Z/XmEts6UKRnEr8g== )`
	RRSIG=18395 and DNSKEY=18395 verifies the DNSKEY RRset
	RRSIG=41901 and DNSKEY=41901/SEP verifies the DNSKEY RRset
	DNSKEY=18395 is now in the chain-of-trust
	Query to m.dns.it for uniba.it/A
	Received 886 bytes from 217.29.76.4
	;; Response received from [217.29.76.4] 886 octets ;; HEADER SECTION ;; id = 58468 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uniba.it. 3600 IN NS gauss.uniba.it. uniba.it. 3600 IN NS sirio.csi.uniba.it. uniba.it. 3600 IN NS ns1.garr.net. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. VrqTS1YUVOhTpAceY8YnMstGDeMGC2pb36Bm3JrUbXyF8BekR+trGNon7o1bjQ6KgZl3KFLw6y2C ayON7Gw//jYnsSwr0oT233fuGrePcaL5VGQ4OW8/0rMIZgGIdhMJv2OaEWqYF+RpmmITWcalcGS3 jP/RehyBcQZnrASjYCtiLevMvesiwutwl9kVIDFNV+SHBSvGnRCDdc9HUguMnpWwX94iv582ROuW jgb0AJlNadEPB8A6Pw4bb5aSXy+TCX4CpQAkk444c9JjUMKq8TACXtWKzr1YuOrfeWzn6pIZhf3w O32jN7VcBEvKlw3dzdy6jxmKv/9tKMZBh5toDQ== ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN NSEC3 ( 1 1 0 - dihcb6l7ud6il5ngp40jan9h9om9pme6 NS DS RRSIG ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. i/Fqu5IDOoXBTUYoQnyhjvBGVvb/2RomaLHgIgz6HBN6TqOjTbPOyhOq1NqyuWgaT/yY8DXaQub9 GQZBJSj9lW64RxAGp/vYgh6J/tPehpqrlSPi6kWsJ9/5ZV151abDJkbKZMVkMo/g2WiY44qut2b4 PZnuTa1ebiKYB+9NuUsMHyn/7PjAfxj++bLlKFPxtllw3bXE10PEiClbNAewRXfMTMJyFn8sRv+s o47PlW3G+u0ywVRBgOueIhOOX8SCjBAVrBj06WMRIu0wT2GnzNWi5qnqNfpakt0g5ruNv1E0QhOO CfDwk04dlprH3KdCn54ann682iowrVaUgBmjnA== ) ;; ADDITIONAL SECTION (3 records) sirio.csi.uniba.it. 3600 IN A 193.204.176.140 gauss.uniba.it. 3600 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	Query to r.dns.it for uniba.it/DNSKEY
	Received 886 bytes from 193.206.141.46
	;; Response received from [193.206.141.46] 886 octets ;; HEADER SECTION ;; id = 21723 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 3 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) uniba.it. 3600 IN NS ns1.garr.net. uniba.it. 3600 IN NS sirio.csi.uniba.it. uniba.it. 3600 IN NS gauss.uniba.it. RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. VrqTS1YUVOhTpAceY8YnMstGDeMGC2pb36Bm3JrUbXyF8BekR+trGNon7o1bjQ6KgZl3KFLw6y2C ayON7Gw//jYnsSwr0oT233fuGrePcaL5VGQ4OW8/0rMIZgGIdhMJv2OaEWqYF+RpmmITWcalcGS3 jP/RehyBcQZnrASjYCtiLevMvesiwutwl9kVIDFNV+SHBSvGnRCDdc9HUguMnpWwX94iv582ROuW jgb0AJlNadEPB8A6Pw4bb5aSXy+TCX4CpQAkk444c9JjUMKq8TACXtWKzr1YuOrfeWzn6pIZhf3w O32jN7VcBEvKlw3dzdy6jxmKv/9tKMZBh5toDQ== ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN NSEC3 ( 1 1 0 - dihcb6l7ud6il5ngp40jan9h9om9pme6 NS DS RRSIG ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. i/Fqu5IDOoXBTUYoQnyhjvBGVvb/2RomaLHgIgz6HBN6TqOjTbPOyhOq1NqyuWgaT/yY8DXaQub9 GQZBJSj9lW64RxAGp/vYgh6J/tPehpqrlSPi6kWsJ9/5ZV151abDJkbKZMVkMo/g2WiY44qut2b4 PZnuTa1ebiKYB+9NuUsMHyn/7PjAfxj++bLlKFPxtllw3bXE10PEiClbNAewRXfMTMJyFn8sRv+s o47PlW3G+u0ywVRBgOueIhOOX8SCjBAVrBj06WMRIu0wT2GnzNWi5qnqNfpakt0g5ruNv1E0QhOO CfDwk04dlprH3KdCn54ann682iowrVaUgBmjnA== ) ;; ADDITIONAL SECTION (3 records) sirio.csi.uniba.it. 3600 IN A 193.204.176.140 gauss.uniba.it. 3600 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	Found child zone uniba.it

uniba.it

	Checking DS between it and uniba.it
	Query to dns.nic.it for uniba.it/DS
	Received 1123 bytes from 192.12.192.5
	;; Response received from [192.12.192.5] 1123 octets ;; HEADER SECTION ;; id = 34107 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN NSEC3 ( 1 1 0 - rs1pg43s35r5v1kf1v10ft5sp409iubv NS SOA RRSIG DNSKEY NSEC3PARAM ) RS1N3N7M54PDEM5EUNV9NPKH3B6CGPJC.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. VrqTS1YUVOhTpAceY8YnMstGDeMGC2pb36Bm3JrUbXyF8BekR+trGNon7o1bjQ6KgZl3KFLw6y2C ayON7Gw//jYnsSwr0oT233fuGrePcaL5VGQ4OW8/0rMIZgGIdhMJv2OaEWqYF+RpmmITWcalcGS3 jP/RehyBcQZnrASjYCtiLevMvesiwutwl9kVIDFNV+SHBSvGnRCDdc9HUguMnpWwX94iv582ROuW jgb0AJlNadEPB8A6Pw4bb5aSXy+TCX4CpQAkk444c9JjUMKq8TACXtWKzr1YuOrfeWzn6pIZhf3w O32jN7VcBEvKlw3dzdy6jxmKv/9tKMZBh5toDQ== ) it. 3600 IN SOA ( dns.nic.it. hostmaster.nic.it. 2024072708 ;serial 10800 ;refresh 900 ;retry 604800 ;expire 3600 ;minimum ) it. 3600 IN RRSIG ( SOA 10 1 86400 20240826050414 20240727050414 18395 it. XB0Mx0b+wUU1vPK86Mmms52vAVJD7HBOIAqyZT/jBHW7DtQISe2RC0zM+JML2Tx1fLYd6rVDAlvy gWANK1FWinkDW8cOhWLAjafqZ7SR1ftEwrtq7ewvhCkgaR3StEbA43nDb0q57Gh7fdHqKzrpWWzx 1kkUfiZsNDvjhKrzONZx/ivWTkr6qC/tZY+hDDKM9JGgB6ih4rsndQphpM6p0p5qFJgkNkq7hgtF MW5EsB6v8VN6zcA+hZFlZhsmT+VpRivL/pta+/+j4KoKxpQeJ4g/w9AeUjJorw9gZI2xpb/xpVVB ZrXxCl6lkQx6leQCxLM2BG7abajWk2Kjccsq5g== ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN NSEC3 ( 1 1 0 - dihcb6l7ud6il5ngp40jan9h9om9pme6 NS DS RRSIG ) DID0ON1LM890NGGTKSU0G8VOTUHS26EL.it. 3600 IN RRSIG ( NSEC3 10 2 3600 20240826050414 20240727050414 18395 it. i/Fqu5IDOoXBTUYoQnyhjvBGVvb/2RomaLHgIgz6HBN6TqOjTbPOyhOq1NqyuWgaT/yY8DXaQub9 GQZBJSj9lW64RxAGp/vYgh6J/tPehpqrlSPi6kWsJ9/5ZV151abDJkbKZMVkMo/g2WiY44qut2b4 PZnuTa1ebiKYB+9NuUsMHyn/7PjAfxj++bLlKFPxtllw3bXE10PEiClbNAewRXfMTMJyFn8sRv+s o47PlW3G+u0ywVRBgOueIhOOX8SCjBAVrBj06WMRIu0wT2GnzNWi5qnqNfpakt0g5ruNv1E0QhOO CfDwk04dlprH3KdCn54ann682iowrVaUgBmjnA== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for uniba.it in the it zone
	Query to gauss.uniba.it for uniba.it/DNSKEY
	Received 84 bytes from 193.204.176.40
	;; Response received from [193.204.176.40] 84 octets ;; HEADER SECTION ;; id = 16174 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) uniba.it. 86400 IN SOA ( gauss.uniba.it. root.gauss.uniba.it. 2024072402 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to gauss.uniba.it for uniba.it/A
	Received 147 bytes from 193.204.176.40
	;; Response received from [193.204.176.40] 147 octets ;; HEADER SECTION ;; id = 20161 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (3 records) uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS gauss.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	gauss.uniba.it is authoritative for uniba.it
	Query to sirio.csi.uniba.it for uniba.it/SOA
	Timeout querying sirio.csi.uniba.it/193.204.176.140 for uniba.it/SOA
	All Queries to sirio.csi.uniba.it for uniba.it/SOA timed out or failed
	Query to ns1.garr.net for uniba.it/SOA
	Received 172 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 172 octets ;; HEADER SECTION ;; id = 29847 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN SOA ;; ANSWER SECTION (1 record) uniba.it. 86400 IN SOA ( gauss.uniba.it. root.gauss.uniba.it. 2024072402 ;serial 3600 ;refresh 1800 ;retry 1209600 ;expire 86400 ;minimum ) ;; AUTHORITY SECTION (3 records) uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS gauss.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	Query to gauss.uniba.it for uniba.it/A
	Received 147 bytes from 193.204.176.40
	;; Response received from [193.204.176.40] 147 octets ;; HEADER SECTION ;; id = 53898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (3 records) uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS sirio.csi.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	uniba.it A RR has value 192.167.60.25
	No RRSIGs found

uniba.it

	Query to ns1.garr.net for uniba.it/A
	Received 147 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 147 octets ;; HEADER SECTION ;; id = 18221 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (3 records) uniba.it. 604800 IN NS ns1.garr.net. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS sirio.csi.uniba.it. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	ns1.garr.net is authoritative for uniba.it
	Query to ns1.garr.net for uniba.it/A
	Received 147 bytes from 193.206.141.38
	;; Response received from [193.206.141.38] 147 octets ;; HEADER SECTION ;; id = 12374 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 3 arcount = 2 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; uniba.it. IN A ;; ANSWER SECTION (1 record) uniba.it. 172800 IN A 192.167.60.25 ;; AUTHORITY SECTION (3 records) uniba.it. 604800 IN NS sirio.csi.uniba.it. uniba.it. 604800 IN NS gauss.uniba.it. uniba.it. 604800 IN NS ns1.garr.net. ;; ADDITIONAL SECTION (2 records) gauss.uniba.it. 172800 IN A 193.204.176.40 ;; { "EDNS-VERSION": 0 }
	uniba.it A RR has value 192.167.60.25
	No RRSIGs found

uniba.it

No response from uniba.it nameservers

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test uniba.it at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: