DNSSEC Analyzer - unige.ch

Domain Name:

Time: 2023-09-24 16:45:24 UTC, NTP stratum 4

Analyzing DNSSEC problems for unige.ch

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to a.root-servers.net for ./DNSKEY
	Received 1139 bytes from 198.41.0.4
	;; Response received from 198.41.0.4 (1139 octets) ;; HEADER SECTION ;; id = 58625 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (4 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780 . 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found 3 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAddS95RV5uUtkUCN7vyvpb0kDZgmtXwN5Sj/d08+X7ND2sgWBabKnFhftrOsSx9DUhKR3gpM PIxac84Nou8Wzkiu2A/sTzP1F6KpCL8epgemdlZVd1ATHEjpB0KHIQmDjSEO/frGgi8ijQ2vDF3A MSrUwH7qntL1E5ufPHGKRM+agGghcAYfJHJN1dw7Ki3Fo22RDB3VZBxU9yJ3vl/T4hngeL7zK84v gl62tlJJw1rK5S/3U4p/bZarjtMFOHDfh0DEj1ywtRpkpPnge03gmINoa2tz+Kff67kbQb0NhHJY zPRpViaMEWZI9pgGH9ZyuFdNrNRx68XSiO7sya7/i+c= ) ; Key ID = 46780`
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAcEtWatIO3exfN3A+WnZl7AVEBA3crRrrwKTfnmcdLt79C3DCOF1JX5zb4s84v0OxwlOVg+T R8VpkuYynMp3PQXLomLxe7j7PlxqEBo1LQaWfqyymCuF7rKebTLB5yZcr8/QUPwk/weLyguX6iVN DjIZOmeMqPkGJtDFp+EUfKgOa8AulKPLtsUL1W+1FT8sqroSxKXVXnhkEZN1O1zBxTG/z9xjwiPc d3//LSPUpEC9+rU2XIuCJq8nwAwJ7W6Rc49RxUT0Svc57HKqHjNuapvG0PCYh3bXCQzb7mb2pNwu erMFTzP5iEzXWZD7izLg9j3wEJ2Ia/WIEts/Tp9GIQM= ) ; Key ID = 11019`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20231010000000 20230919000000 20326 . Xx8gfV3qemuf4ffCr2jq6aUIn15oFbjiocYWvFF9GGoLqOqZEMrkiNHmCcAfnyEjltWTwx2YdnAM CmQO8KJ4+6hSbSsRbDWwVnBI+3lkqvdpEIMlgkVuKsK012s19eERCPqYV+eyrW8YR1IQhXljVgy7 zISHkomWGtf0AY8jXlGABCLbHQj0/x0kuNM2gOz/gSWqKVt3Nwbpu/0gh9mrjQPH29q/p0vVjlEV J4SQgYvBBuxQZMxwupvrn4a4hr3zbGbiUkR772gra0DfNUIVB9A+GEcCpFwazbjcV476xAtuUC8R 8g44qtKhL+vezd4Mnm/hOPGf1ZGinAPlsylkiA== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=46780 is now in the chain-of-trust
	DNSKEY=11019 is now in the chain-of-trust
	Query to l.root-servers.net for unige.ch/A
	Received 676 bytes from 199.7.83.42
	;; Response received from 199.7.83.42 (676 octets) ;; HEADER SECTION ;; id = 43205 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to h.root-servers.net for ch/DNSKEY
	Received 670 bytes from 198.97.190.53
	;; Response received from 198.97.190.53 (670 octets) ;; HEADER SECTION ;; id = 56029 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 11 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) ch. 172800 IN NS a.nic.ch. ch. 172800 IN NS b.nic.ch. ch. 172800 IN NS d.nic.ch. ch. 172800 IN NS e.nic.ch. ch. 172800 IN NS f.nic.ch. ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; ADDITIONAL SECTION (11 records) a.nic.ch. 172800 IN A 130.59.31.41 b.nic.ch. 172800 IN A 130.59.31.43 d.nic.ch. 172800 IN A 194.0.25.39 e.nic.ch. 172800 IN A 194.0.17.1 f.nic.ch. 172800 IN A 194.146.106.10 a.nic.ch. 172800 IN AAAA 2001:620:0:ff::56 b.nic.ch. 172800 IN AAAA 2001:620:0:ff::58 d.nic.ch. 172800 IN AAAA 2001:678:20::39 e.nic.ch. 172800 IN AAAA 2001:678:3::1 f.nic.ch. 172800 IN AAAA 2001:67c:1010:2::53 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found child zone ch

	Checking DS between . and ch
	Query to b.root-servers.net for ch/DS
	Received 366 bytes from 199.9.14.201
	;; Response received from 199.9.14.201 (366 octets) ;; HEADER SECTION ;; id = 45102 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DS ;; ANSWER SECTION (2 records) ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 ) ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 1 DS records for ch in the . zone
	DS=10/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`ch. 86400 IN RRSIG ( DS 8 1 86400 20231007050000 20230924040000 11019 . rLk677XMHJUKvB616nGiZoLj+NWl2RR55pdNLIEZGBvSyLNlHRDyJypM2PND8naexYd7yFxf8MGn 9sALjNMOGnxBnDU/F7/JXWh2W7xad2KKpQos87oPsdjPWjLXqWNbUamaSmH41ikVC8u5VAzTqH8P /27qEOZOL+z1SpUpZMmnP8eJUk+PVPm70FdbA2NkMBMPCFg+bx/BstmUHXnKn9dIVd8RDnl9++V4 P9BIAxBhhlVhohL78aE6CNUF7JRilG/RlprlB5zDousro1RuR2vVhkU8CtSSnQgWswdNwYSmPAM7 3s5JBsN5q8i76Igw90ekYunI+gMhABjZs4U4wA== )`
	RRSIG=11019 and DNSKEY=11019 verifies the DS RRset
	DS=10/SHA-256 is now in the chain-of-trust
	`ch. 86400 IN DS ( 10 13 2 0e175543a74d9083ea977bab2bee98a771995f80982fb796b2b0b9cc6413d1a6 )`
	Query to f.nic.ch for ch/DNSKEY
	Received 369 bytes from 194.146.106.10
	;; Response received from 194.146.106.10 (369 octets) ;; HEADER SECTION ;; id = 38085 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; ch. IN DNSKEY ;; ANSWER SECTION (4 records) ch. 86400 IN DNSKEY ( 256 3 13 UU94i1ijqgcysAFfdUj1iJMMmFW0Upw0a6peS5EITTLbUbDpi5IHqZEFQk0zz+CMM8+bwz6+Dk27 HdM4kKak1g== ) ; Key ID = 31525 ch. 86400 IN DNSKEY ( 256 3 13 m4K8TOET4LiEeeV5xKVUydoBJOuNKayUJ4sEMvv1FQriIdmsJnHX2NxGLEkSPfjepl9ePcRoF15h ZP/sxUxrYA== ) ; Key ID = 22171 ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10 ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231012100909 20230827090909 10 ch. A18NYlGIwTH7p57n1P0K7Zb4t5JeeXO+3jjuOuPcC4ruz30QMnBcYmxKtD6xkwxt1IlY4EHp13y5 0UBb8QKsKQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Found 3 DNSKEY records for ch
	`ch. 86400 IN DNSKEY ( 256 3 13 UU94i1ijqgcysAFfdUj1iJMMmFW0Upw0a6peS5EITTLbUbDpi5IHqZEFQk0zz+CMM8+bwz6+Dk27 HdM4kKak1g== ) ; Key ID = 31525`
	`ch. 86400 IN DNSKEY ( 256 3 13 m4K8TOET4LiEeeV5xKVUydoBJOuNKayUJ4sEMvv1FQriIdmsJnHX2NxGLEkSPfjepl9ePcRoF15h ZP/sxUxrYA== ) ; Key ID = 22171`
	`ch. 86400 IN DNSKEY ( 257 3 13 C9YRPNzK5s10/5ViPyG2R/I5yDCoI2FpTLSDp+/KVC8wZdH0imcF8lske2IepJ60val66rO69Tvy Km1kXg19fg== ) ; Key ID = 10`
	DNSKEY=10/SEP is now in the chain-of-trust
	DS=10/SHA-256 verifies DNSKEY=10/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`ch. 86400 IN RRSIG ( DNSKEY 13 1 86400 20231012100909 20230827090909 10 ch. A18NYlGIwTH7p57n1P0K7Zb4t5JeeXO+3jjuOuPcC4ruz30QMnBcYmxKtD6xkwxt1IlY4EHp13y5 0UBb8QKsKQ== )`
	RRSIG=10 and DNSKEY=10/SEP verifies the DNSKEY RRset
	DNSKEY=31525 is now in the chain-of-trust
	DNSKEY=22171 is now in the chain-of-trust
	Query to e.nic.ch for unige.ch/A
	Received 536 bytes from 194.0.17.1
	;; Response received from 194.0.17.1 (536 octets) ;; HEADER SECTION ;; id = 50356 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) unige.ch. 3600 IN NS nse1.unige.ch. unige.ch. 3600 IN NS scsnms.switch.ch. unige.ch. 3600 IN NS nse2.unige.ch. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 5AS5B3AMROG35JS3A8AUA6IKILK5UKQ9.ch. 900 IN NSEC3 ( 1 1 0 - 5as5jct8fetoav16sopp58euggusvk26 NS DS RRSIG ) 5AS5B3AMROG35JS3A8AUA6IKILK5UKQ9.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023201637 20230923200216 31525 ch. xPu5aWn8wP6rEKBAYBH8LOXiAzTMI2lp/6tjQ3cOgIlOMP2ME00PVLx7gTkNCcr04Vb3Kd3hLvEX 1E9seqdAMQ== ) ;; ADDITIONAL SECTION (5 records) scsnms.switch.ch. 3600 IN A 130.59.31.26 nse2.unige.ch. 3600 IN A 129.194.3.6 nse1.unige.ch. 3600 IN A 129.194.3.7 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Query to e.nic.ch for unige.ch/DNSKEY
	Received 536 bytes from 194.0.17.1
	;; Response received from 194.0.17.1 (536 octets) ;; HEADER SECTION ;; id = 45049 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 7 arcount = 5 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (7 records) unige.ch. 3600 IN NS nse1.unige.ch. unige.ch. 3600 IN NS scsnms.switch.ch. unige.ch. 3600 IN NS nse2.unige.ch. ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) ND3E0CGF5OGC08781SOJKFRIOOGBGC7E.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 5AS5B3AMROG35JS3A8AUA6IKILK5UKQ9.ch. 900 IN NSEC3 ( 1 1 0 - 5as5jct8fetoav16sopp58euggusvk26 NS DS RRSIG ) 5AS5B3AMROG35JS3A8AUA6IKILK5UKQ9.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023201637 20230923200216 31525 ch. xPu5aWn8wP6rEKBAYBH8LOXiAzTMI2lp/6tjQ3cOgIlOMP2ME00PVLx7gTkNCcr04Vb3Kd3hLvEX 1E9seqdAMQ== ) ;; ADDITIONAL SECTION (5 records) scsnms.switch.ch. 3600 IN A 130.59.31.26 nse2.unige.ch. 3600 IN A 129.194.3.6 nse1.unige.ch. 3600 IN A 129.194.3.7 scsnms.switch.ch. 3600 IN AAAA 2001:620:0:ff::a7 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 4096 ;; option:
	Found child zone unige.ch

unige.ch

	Checking DS between ch and unige.ch
	Query to d.nic.ch for unige.ch/DS
	Received 553 bytes from 194.0.25.39
	;; Response received from 194.0.25.39 (553 octets) ;; HEADER SECTION ;; id = 14122 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) ch. 900 IN SOA ( a.nic.ch. dns-operation.switch.ch. 2023092418 ;serial 900 ;refresh 600 ;retry 1123200 ;expire 900 ;minimum ) ch. 900 IN RRSIG ( SOA 13 1 900 20231024150511 20230924150216 31525 ch. pzd0rY1X4gxneXAxWxGutJ5ZdHf7dKsvDO1Kgqz8/0eHpW8qsQdbiSAdjvWKeIovevFiobfsyrl4 S05OPlL8Wg== ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN NSEC3 ( 1 1 0 - nd3fvij6p2hthsrmnp8blkrqo4274if6 NS SOA RRSIG DNSKEY NSEC3PARAM ) nd3e0cgf5ogc08781sojkfrioogbgc7e.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023075106 20230923070217 31525 ch. Gbf6RZyAozHjY0sqR67+fj1UR+FVcZUpjHvzI9l7ZHEiUpJ0S/hLEkHWOodGydok4y7Q76pKDrv3 ibjtPeTkHw== ) 5as5b3amrog35js3a8aua6ikilk5ukq9.ch. 900 IN NSEC3 ( 1 1 0 - 5as5jct8fetoav16sopp58euggusvk26 NS DS RRSIG ) 5as5b3amrog35js3a8aua6ikilk5ukq9.ch. 900 IN RRSIG ( NSEC3 13 2 900 20231023201637 20230923200216 31525 ch. xPu5aWn8wP6rEKBAYBH8LOXiAzTMI2lp/6tjQ3cOgIlOMP2ME00PVLx7gTkNCcr04Vb3Kd3hLvEX 1E9seqdAMQ== ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1400 ;; option:
	No DS records found for unige.ch in the ch zone
	Query to nse2.unige.ch for unige.ch/DNSKEY
	Received 85 bytes from 129.194.3.6
	;; Response received from 129.194.3.6 (85 octets) ;; HEADER SECTION ;; id = 48998 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) unige.ch. 900 IN SOA ( nse1.unige.ch. netops.unige.ch. 4133 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	No DNSKEY records found
	Query to nse2.unige.ch for unige.ch/A
	Received 53 bytes from 129.194.3.6
	;; Response received from 129.194.3.6 (53 octets) ;; HEADER SECTION ;; id = 55229 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nse2.unige.ch is authoritative for unige.ch
	Query to scsnms.switch.ch for unige.ch/SOA
	Received 85 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (85 octets) ;; HEADER SECTION ;; id = 49793 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN SOA ;; ANSWER SECTION (1 record) unige.ch. 28800 IN SOA ( nse1.unige.ch. netops.unige.ch. 4133 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	Query to nse1.unige.ch for unige.ch/SOA
	Received 85 bytes from 129.194.3.7
	;; Response received from 129.194.3.7 (85 octets) ;; HEADER SECTION ;; id = 23906 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN SOA ;; ANSWER SECTION (1 record) unige.ch. 28800 IN SOA ( nse1.unige.ch. netops.unige.ch. 4133 ;serial 10800 ;refresh 3600 ;retry 2592000 ;expire 900 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	Query to nse2.unige.ch for unige.ch/A
	Received 53 bytes from 129.194.3.6
	;; Response received from 129.194.3.6 (53 octets) ;; HEADER SECTION ;; id = 6745 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unige.ch A RR has value 129.194.6.50
	No RRSIGs found

unige.ch

	Query to nse1.unige.ch for unige.ch/A
	Received 53 bytes from 129.194.3.7
	;; Response received from 129.194.3.7 (53 octets) ;; HEADER SECTION ;; id = 49197 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	nse1.unige.ch is authoritative for unige.ch
	Query to nse1.unige.ch for unige.ch/A
	Received 53 bytes from 129.194.3.7
	;; Response received from 129.194.3.7 (53 octets) ;; HEADER SECTION ;; id = 20425 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1220 ;; option:
	unige.ch A RR has value 129.194.6.50
	No RRSIGs found

unige.ch

	Query to scsnms.switch.ch for unige.ch/A
	Received 53 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (53 octets) ;; HEADER SECTION ;; id = 53820 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	scsnms.switch.ch is authoritative for unige.ch
	Query to scsnms.switch.ch for unige.ch/A
	Received 53 bytes from 130.59.31.26
	;; Response received from 130.59.31.26 (53 octets) ;; HEADER SECTION ;; id = 31932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option: ;; QUESTION SECTION (1 record) ;; unige.ch. IN A ;; ANSWER SECTION (1 record) unige.ch. 28800 IN A 129.194.6.50 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; EDNS version 0 ;; flags: 8000 ;; rcode: NOERROR ;; size: 1232 ;; option:
	unige.ch A RR has value 129.194.6.50
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test unige.ch at dnsviz.net.

DNSSEC Analyzer

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: