DNSSEC Analyzer - unibas.ch

Domain Name:

Time: 2023-09-24 17:23:15 UTC, NTP stratum 4

Analyzing DNSSEC problems for unibas.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 1141 bytes from 192.33.4.12
	;; Response received from 192.33.4.12 (1141 octets) ;; HEADER SECTION ;; id = 20957 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to d.root-servers.net for unibas.ch/A
	Received 677 bytes from 199.7.91.13
	;; Response received from 199.7.91.13 (677 octets) ;; HEADER SECTION ;; id = 46555 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1450 ;; option:
	Query to f.root-servers.net for ch/DNSKEY
	Received 670 bytes from 192.5.5.241
	;; Response received from 192.5.5.241 (670 octets) ;; HEADER SECTION ;; id = 24905 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN A 130.59.31.43 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN A 194.0.25.39 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN A 194.0.17.1 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN A 194.146.106.10 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1472 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to a.root-servers.net for ch/DS
	Received 366 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (366 octets) ;; HEADER SECTION ;; id = 61185 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 1 DS records for ch in the . zone
	DS=10/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=10/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 )`
	Query to a.nic.ch for ch/DNSKEY
	Received 369 bytes from 130.59.31.41
	;; Response received from 130.59.31.41 (369 octets) ;; HEADER SECTION ;; id = 888 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 UU94i1ijqgcysAFfdUj1iJMMmFW0Upw0a6peS5EITTLbUbDpi5IHqZEFQk0zz+CMM8+bwz6+Dk27 HdM4kKak1g== ) ; Key ID = 31525 ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10 ch. 86400 IN DNSKEY ( 256 3 13 m4K8TOET4LiEeeV5xKVUydoBJOuNKayUJ4sEMvv1FQriIdmsJnHX2NxGLEkSPfjepl9ePcRoF15h ZP/sxUxrYA== ) ; Key ID = 22171 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231012100909 20230827090909 10 ch. A18NYlGIwTH7p57n1P0K7Zb4t5JeeXO+3jjuOuPcC4ruz30QMnBcYmxKtD6xkwxt1IlY4EHp13y5 0UBb8QKsKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 UU94i1ijqgcysAFfdUj1iJMMmFW0Upw0a6peS5EITTLbUbDpi5IHqZEFQk0zz+CMM8+bwz6+Dk27 HdM4kKak1g== ) ; Key ID = 31525`
	`ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10`
	`ch. 86400 IN DNSKEY ( 256 3 13 m4K8TOET4LiEeeV5xKVUydoBJOuNKayUJ4sEMvv1FQriIdmsJnHX2NxGLEkSPfjepl9ePcRoF15h ZP/sxUxrYA== ) ; Key ID = 22171`
	DNSKEY=10/SEP is now in the chain-of-trust
	DS=10/SHA-256 verifies DNSKEY=10/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231012100909 20230827090909 10 ch. A18NYlGIwTH7p57n1P0K7Zb4t5JeeXO+3jjuOuPcC4ruz30QMnBcYmxKtD6xkwxt1IlY4EHp13y5 0UBb8QKsKQ== )`
	RRSIG=10 and DNSKEY=10/SEP verifies the DNSKEY RRset
	DNSKEY=31525 is now in the chain-of-trust
	DNSKEY=22171 is now in the chain-of-trust
	Query to b.nic.ch for unibas.ch/A
	Received 543 bytes from 130.59.31.43
	;; Response received from 130.59.31.43 (543 octets) ;; HEADER SECTION ;; id = 56404 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) unibas.ch. 3600 IN NS ns1-ext.unibas.ch. unibas.ch. 3600 IN NS ns2-ext.unibas.ch. unibas.ch. 3600 IN NS scsnms.switch.ch. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 82PJM7K7911RDDG33K4291S5ECEKUJGL.ch. 900 IN NSEC3 ( 1 1 0 - 82pkbl51cf5m6glvv3cd7lqcpudqt662 NS DS RRSIG ) 82PJM7K7911RDDG33K4291S5ECEKUJGL.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231019015858 20230920113002 31525 ch. HlNnqoqGqzLi7sO4m8vOiML34Z+SjcV87yuc5jUcMmvzLzQvWyp601HMRGvgvMheyAyFc8639zdp Yl/9RsquCQ== ) ;; ADDITIONAL SECTION (5 records) ns2-ext.unibas.ch. 3600 IN A 131.152.227.93 ns1-ext.unibas.ch. 3600 IN A 131.152.227.92 scsnms.switch.ch. 3600 IN A 130.59.31.26 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to e.nic.ch for unibas.ch/DNSKEY
	Received 543 bytes from 194.0.17.1
	;; Response received from 194.0.17.1 (543 octets) ;; HEADER SECTION ;; id = 712 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) unibas.ch. 3600 IN NS ns1-ext.unibas.ch. unibas.ch. 3600 IN NS scsnms.switch.ch. unibas.ch. 3600 IN NS ns2-ext.unibas.ch. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 82PJM7K7911RDDG33K4291S5ECEKUJGL.ch. 900 IN NSEC3 ( 1 1 0 - 82pkbl51cf5m6glvv3cd7lqcpudqt662 NS DS RRSIG ) 82PJM7K7911RDDG33K4291S5ECEKUJGL.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231019015858 20230920113002 31525 ch. HlNnqoqGqzLi7sO4m8vOiML34Z+SjcV87yuc5jUcMmvzLzQvWyp601HMRGvgvMheyAyFc8639zdp Yl/9RsquCQ== ) ;; ADDITIONAL SECTION (5 records) ns2-ext.unibas.ch. 3600 IN A 131.152.227.93 ns1-ext.unibas.ch. 3600 IN A 131.152.227.92 scsnms.switch.ch. 3600 IN A 130.59.31.26 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone unibas.ch

unibas.ch

	Checking DS between ch and unibas.ch
	Query to d.nic.ch for unibas.ch/DS
	Received 554 bytes from 194.0.25.39
	;; Response received from 194.0.25.39 (554 octets) ;; HEADER SECTION ;; id = 35299 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ch. 900 IN SOA ( a.nic.ch. dns-operation.switch.ch. 2023092419 ;serial 900 ;refresh 600 ;retry 1123200 ;expire 900 ;minimum ) ch. 900 IN RRSIG ( SOA 13 1 900 20231024164832 20230924160217 31525 ch. 6SBPO6z22OImeCKmtdm4lAqZm9mKLGfODojbj8BRJezIlDoGbwW25iZE17Jg7Q5Rg6xnySiN5kl3 phR2aj0mkQ== ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 82pjm7k7911rddg33k4291s5ecekujgl.ch. 900 IN NSEC3 ( 1 1 0 - 82pkbl51cf5m6glvv3cd7lqcpudqt662 NS DS RRSIG ) 82pjm7k7911rddg33k4291s5ecekujgl.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231019015858 20230920113002 31525 ch. HlNnqoqGqzLi7sO4m8vOiML34Z+SjcV87yuc5jUcMmvzLzQvWyp601HMRGvgvMheyAyFc8639zdp Yl/9RsquCQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	No DS records found for unibas.ch in the ch zone
	Query to scsnms.switch.ch for unibas.ch/DNSKEY
	Received 103 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (103 octets) ;; HEADER SECTION ;; id = 59802 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) unibas.ch. 900 IN SOA ( ns3-service.urz.unibas.ch. noc.unibas.ch. 2021116880 ;serial 1800 ;refresh 600 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	No DNSKEY records found
	Query to scsnms.switch.ch for unibas.ch/A
	Received 54 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (54 octets) ;; HEADER SECTION ;; id = 30061 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	scsnms.switch.ch is authoritative for unibas.ch
	Query to ns2-ext.unibas.ch for unibas.ch/SOA
	Received 94 bytes from 131.152.227.93
	;; Response received from 131.152.227.93 (94 octets) ;; HEADER SECTION ;; id = 58941 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN SOA ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN SOA ( ns3-service.urz.unibas.ch. noc.unibas.ch. 2021116880 ;serial 1800 ;refresh 600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to ns1-ext.unibas.ch for unibas.ch/SOA
	Received 94 bytes from 131.152.227.92
	;; Response received from 131.152.227.92 (94 octets) ;; HEADER SECTION ;; id = 48274 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN SOA ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN SOA ( ns3-service.urz.unibas.ch. noc.unibas.ch. 2021116880 ;serial 1800 ;refresh 600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to scsnms.switch.ch for unibas.ch/A
	Received 54 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (54 octets) ;; HEADER SECTION ;; id = 10281 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	unibas.ch A RR has value 131.152.215.57
	No RRSIGs found

unibas.ch

	Query to ns2-ext.unibas.ch for unibas.ch/A
	Received 54 bytes from 131.152.227.93
	;; Response received from 131.152.227.93 (54 octets) ;; HEADER SECTION ;; id = 708 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns2-ext.unibas.ch is authoritative for unibas.ch
	Query to ns2-ext.unibas.ch for unibas.ch/A
	Received 54 bytes from 131.152.227.93
	;; Response received from 131.152.227.93 (54 octets) ;; HEADER SECTION ;; id = 20721 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unibas.ch A RR has value 131.152.215.57
	No RRSIGs found

unibas.ch

	Query to ns1-ext.unibas.ch for unibas.ch/A
	Received 54 bytes from 131.152.227.92
	;; Response received from 131.152.227.92 (54 octets) ;; HEADER SECTION ;; id = 18268 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	ns1-ext.unibas.ch is authoritative for unibas.ch
	Query to ns1-ext.unibas.ch for unibas.ch/A
	Received 54 bytes from 131.152.227.92
	;; Response received from 131.152.227.92 (54 octets) ;; HEADER SECTION ;; id = 38665 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unibas.ch. IN A ;; ANSWER SECTION (1 record) unibas.ch. 1800 IN A 131.152.215.57 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unibas.ch A RR has value 131.152.215.57
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unibas.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: